This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/p4Qr1o_GUP493TOzGiHvqAvpKvw.roa File: p4Qr1o_GUP493TOzGiHvqAvpKvw.roa (raw, json) Hash identifier: c+UryGANglbxgDwdQW/A1l8yeFJXbMxh9x0ZlreWqlc= Subject key identifier: A7:84:2B:D6:8F:C6:50:FE:3D:DD:33:B3:1A:21:EF:A8:0B:E9:2A:FC Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c Certificate serial: 019BA2A8DE0BB98ED6059B0C1F8D39A41560 Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/p4Qr1o_GUP493TOzGiHvqAvpKvw.roa Signing time: Fri 09 Jan 2026 12:08:54 +0000 ROA not before: Fri 09 Jan 2026 12:08:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 91.220.122.0/24 maxlen: 24 185.99.176.0/22 maxlen: 24 185.241.220.0/22 maxlen: 24 2a00:8e80::/29 maxlen: 32 2a0c:b180::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a8:de:0b:b9:8e:d6:05:9b:0c:1f:8d:39:a4:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c Validity Not Before: Jan 9 12:08:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7842bd68fc650fe3ddd33b31a21efa80be92afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:bd:ca:90:8f:17:7c:f9:86:5a:3f:ed:3d: 5d:2c:43:e5:d0:c2:5b:eb:4b:fc:47:56:15:90:23: 61:de:16:46:b7:a7:d4:87:36:e7:f6:c1:e1:5b:18: 37:4b:9f:45:3b:f5:46:9f:58:74:f6:ba:5b:15:58: 2a:f9:74:90:05:62:f6:7a:2c:de:98:8d:c2:2c:e1: 82:55:d8:f6:63:29:88:9e:8a:8b:12:8f:c2:e5:8c: 09:a7:92:3b:f7:85:14:a2:8c:a4:35:72:ea:57:99: e0:92:85:d4:ca:37:f0:1f:0c:23:6c:02:2d:55:5d: cd:12:e1:96:1a:6f:30:4a:04:23:e6:21:7b:a9:3b: f7:b7:17:27:75:d9:da:6e:36:d2:2b:16:3b:98:84: 80:8c:62:8d:e8:12:13:ed:05:42:a1:20:dc:ff:4f: ef:a3:83:87:c3:87:e0:65:44:dd:e4:70:77:11:ad: 0b:26:84:57:9a:f9:d7:e5:dc:d8:f0:00:d6:77:25: ca:a0:d9:7d:2a:6a:e2:ce:2d:b6:d2:8a:f2:0a:46: 33:18:09:5f:14:c4:90:34:5a:53:42:cf:18:5c:1a: 47:ff:88:91:df:07:0d:2b:b5:7d:19:cc:dc:74:e3: 77:05:09:9e:b0:48:d9:6d:8a:fd:88:81:44:be:87: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:84:2B:D6:8F:C6:50:FE:3D:DD:33:B3:1A:21:EF:A8:0B:E9:2A:FC X509v3 Authority Key Identifier: keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/p4Qr1o_GUP493TOzGiHvqAvpKvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.122.0/24 185.99.176.0/22 185.241.220.0/22 IPv6: 2a00:8e80::/29 2a0c:b180::/29 Signature Algorithm: sha256WithRSAEncryption 13:e4:d7:8e:35:66:c2:82:39:ae:36:aa:57:fc:0f:5e:d0:38: ea:ac:98:81:4c:81:3e:fa:bf:e4:48:f2:8e:cb:1c:d9:cc:6a: b3:67:d9:de:ef:00:ad:c8:7e:03:f4:60:52:40:26:bb:2d:3a: 88:f0:a6:09:46:f0:52:a3:9b:4e:e4:dc:77:c2:d2:a0:61:28: 9c:17:3d:bd:5a:0d:2b:96:90:3e:0c:6a:98:cf:4b:89:2f:a4: c5:d5:8c:77:8c:25:c7:3b:eb:62:a8:de:c2:f5:cb:f7:b1:a3: 7b:ec:32:7e:2e:c5:9e:b6:10:64:cf:b7:e1:5b:b4:03:67:bd: 35:33:eb:cb:5b:50:68:98:04:9e:dc:b8:5b:cd:61:47:bc:22: bd:51:dc:de:23:f0:c0:14:e7:f1:cc:a4:23:af:c4:db:89:d7: 2e:c7:0b:6d:4a:7c:62:c3:83:39:b2:fd:fe:ed:ac:a5:de:7c: 1e:32:46:9a:54:e9:f4:98:bf:dd:66:19:0e:57:4d:f8:d0:44: ed:27:d0:a7:b5:27:b6:5c:f3:d4:8b:c2:52:ff:d8:5d:e3:e7: 40:45:25:98:ac:f3:24:c7:8e:bf:fa:60:d5:2f:49:a7:c6:23: 0a:55:5c:88:63:c8:db:54:5f:2e:ae:54:12:2c:98:58:01:60: fc:60:62:d3 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZuiqN4LuY7WBZsMH405pBVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWIxMWFmOTM1NWRhOWEyYjVkZjczZWNkZDdmZDA5Njdh NGI1OGMwHhcNMjYwMTA5MTIwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzg0MmJkNjhmYzY1MGZlM2RkZDMzYjMxYTIxZWZhODBiZTkyYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDO9ypCPF3z5hlo/7T1dLEPl0MJb 60v8R1YVkCNh3hZGt6fUhzbn9sHhWxg3S59FO/VGn1h09rpbFVgq+XSQBWL2eize mI3CLOGCVdj2YymInoqLEo/C5YwJp5I794UUooykNXLqV5ngkoXUyjfwHwwjbAIt VV3NEuGWGm8wSgQj5iF7qTv3txcnddnabjbSKxY7mISAjGKN6BIT7QVCoSDc/0/v o4OHw4fgZUTd5HB3Ea0LJoRXmvnX5dzY8ADWdyXKoNl9Kmrizi220oryCkYzGAlf FMSQNFpTQs8YXBpH/4iR3wcNK7V9GczcdON3BQmesEjZbYr9iIFEvoek+QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFKeEK9aPxlD+Pd0zsxoh76gL6Sr8MB8GA1UdIwQY MBaAFEbrEa+TVdqaK133Ps3X/QlnpLWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUt NDVmNDk2ZjJmZTc1LzEvcDRRcjFvX0dVUDQ5M1RPekdpSHZxQXZwS3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUtNDVmNDk2ZjJmZTc1 LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQAW9x6AwQC uWOwAwQCufHcMBQEAgACMA4DBQMqAI6AAwUDKgyxgDANBgkqhkiG9w0BAQsFAAOC AQEAE+TXjjVmwoI5rjaqV/wPXtA46qyYgUyBPvq/5Ejyjssc2cxqs2fZ3u8Arch+ A/RgUkAmuy06iPCmCUbwUqObTuTcd8LSoGEonBc9vVoNK5aQPgxqmM9LiS+kxdWM d4wlxzvrYqjewvXL97Gje+wyfi7FnrYQZM+34Vu0A2e9NTPry1tQaJgEnty4W81h R7wivVHc3iPwwBTn8cykI6/E24nXLscLbUp8YsODObL9/u2spd58HjJGmlTp9Ji/ 3WYZDldN+NBE7SfQp7Untlzz1IvCUv/YXePnQEUlmKzzJMeOv/pg1S9Jp8YjClVc iGPI21RfLq5UEiyYWAFg/GBi0w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:02 2026 by rpki-client