This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4Mc9iZGeNYze42lB9mUPRb2tFJ0.roa File: 4Mc9iZGeNYze42lB9mUPRb2tFJ0.roa (raw, json) Hash identifier: 3fTl55tJpG4LpnSeJsrbJMV15AmMph+ODPUgDCaU6Uk= Subject key identifier: E0:C7:3D:89:91:9E:35:8C:DE:E3:69:41:F6:65:0F:45:BD:AD:14:9D Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B2199DB0FF783AB0E22624A5E191F7D3A Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4Mc9iZGeNYze42lB9mUPRb2tFJ0.roa Signing time: Mon 15 Dec 2025 10:41:29 +0000 ROA not before: Mon 15 Dec 2025 10:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211484 IP address blocks: 172.110.219.0/24 maxlen: 24 194.76.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:99:db:0f:f7:83:ab:0e:22:62:4a:5e:19:1f:7d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Dec 15 10:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0c73d89919e358cdee36941f6650f45bdad149d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:1d:07:cf:13:89:e9:ce:95:d7:ee:c5:f4: 84:4c:dc:7e:0f:61:14:f2:21:72:2a:d4:cc:01:30: 25:a4:59:2f:84:71:63:65:c7:b3:83:af:7f:77:88: 23:0f:c3:33:6f:76:49:65:66:8b:47:c8:16:d0:b5: 4b:80:a7:62:91:17:a1:de:79:23:f3:a4:a0:66:df: 3a:b0:74:43:97:36:af:5e:ad:41:e0:98:74:c5:12: bb:58:6c:45:d0:4a:ae:ee:5c:94:d3:0d:53:83:97: eb:18:ad:ad:4c:bf:c1:6f:05:fc:bd:e3:8c:08:65: 42:b7:f9:dd:f8:06:13:05:ab:66:1f:e4:3b:bd:88: dc:40:93:ec:24:5a:64:39:77:6c:36:6f:77:00:8c: ec:b5:5e:85:8b:05:5e:27:da:8b:56:d1:b6:a3:4e: 48:cb:91:34:b8:87:3a:a1:df:f6:b4:fb:01:eb:c8: ad:e6:9c:69:ce:3f:5f:fc:36:1a:78:46:ca:0e:3c: a3:ab:2d:9b:57:35:2c:0a:e8:13:00:2a:f1:5d:d4: 6e:21:40:d9:6f:e2:d4:5f:ee:06:f2:71:96:fa:7e: ed:70:2c:cd:78:d6:c5:a5:ca:a9:de:a7:54:1f:86: da:ab:a3:d7:2b:f9:92:2b:35:4e:e8:b3:71:81:11: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:3D:89:91:9E:35:8C:DE:E3:69:41:F6:65:0F:45:BD:AD:14:9D X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4Mc9iZGeNYze42lB9mUPRb2tFJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.110.219.0/24 194.76.0.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:a1:60:af:5c:ae:af:44:26:57:4b:24:3f:41:d8:f8:2d:5d: d3:4f:78:84:d5:7a:cb:1d:a4:05:cf:86:76:08:8e:47:84:00: 1e:2f:78:0b:07:f3:03:42:cd:fa:ff:9d:15:4b:a8:ba:66:be: 9c:23:48:a9:a1:1d:9f:d9:0b:33:fa:3d:94:18:43:72:4b:79: 1f:60:c4:ad:c8:26:e4:57:3f:cd:7f:c0:a3:8e:1d:c7:37:80: 7b:13:06:37:11:3a:97:f2:ff:57:6f:a0:d6:ef:5f:65:56:52: 44:58:72:bb:fe:f8:0e:7b:60:9a:7a:fc:06:7e:9f:57:2e:6e: bf:80:2d:d5:58:69:ea:9e:40:f2:00:cc:4b:a0:df:06:c5:41: 8e:06:f4:c3:25:b1:7d:8a:75:d0:02:64:74:c8:01:62:00:4c: 45:dc:88:b3:78:b3:1c:2c:4f:26:62:35:10:2a:73:07:20:9b: b2:ea:f1:f7:8e:0d:5a:5e:13:c2:dc:45:32:f5:7d:60:1f:c7: a0:c0:38:38:53:9b:32:6b:88:a3:a0:47:2f:c8:18:4a:f5:ea: bb:e0:24:fa:f1:af:9e:fb:24:6a:b8:78:ee:32:86:48:5d:cf: 78:41:22:92:8e:5a:59:60:54:b5:74:0d:05:09:2c:bd:50:dd: c6:d3:80:27 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZshmdsP94OrDiJiSl4ZH306MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMjE1MTA0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM3M2Q4OTkxOWUzNThjZGVlMzY5NDFmNjY1MGY0NWJkYWQxNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK0dB88TienOldfuxfSETNx+D2EU 8iFyKtTMATAlpFkvhHFjZcezg69/d4gjD8Mzb3ZJZWaLR8gW0LVLgKdikReh3nkj 86SgZt86sHRDlzavXq1B4Jh0xRK7WGxF0Equ7lyU0w1Tg5frGK2tTL/BbwX8veOM CGVCt/nd+AYTBatmH+Q7vYjcQJPsJFpkOXdsNm93AIzstV6FiwVeJ9qLVtG2o05I y5E0uIc6od/2tPsB68it5pxpzj9f/DYaeEbKDjyjqy2bVzUsCugTACrxXdRuIUDZ b+LUX+4G8nGW+n7tcCzNeNbFpcqp3qdUH4baq6PXK/mSKzVO6LNxgRFFMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFODHPYmRnjWM3uNpQfZlD0W9rRSdMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvNE1jOWlaR2VOWXplNDJsQjltVVBSYjJ0RkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG7bAwQA wkwAMA0GCSqGSIb3DQEBCwUAA4IBAQBfoWCvXK6vRCZXSyQ/Qdj4LV3TT3iE1XrL HaQFz4Z2CI5HhAAeL3gLB/MDQs36/50VS6i6Zr6cI0ipoR2f2Qsz+j2UGENyS3kf YMStyCbkVz/Nf8Cjjh3HN4B7EwY3ETqX8v9Xb6DW719lVlJEWHK7/vgOe2CaevwG fp9XLm6/gC3VWGnqnkDyAMxLoN8GxUGOBvTDJbF9inXQAmR0yAFiAExF3IizeLMc LE8mYjUQKnMHIJuy6vH3jg1aXhPC3EUy9X1gH8egwDg4U5sya4ijoEcvyBhK9eq7 4CT68a+e+yRquHjuMoZIXc94QSKSjlpZYFS1dA0FCSy9UN3G04An -----END CERTIFICATE-----Generated at Wed Dec 17 20:11:04 2025 by rpki-client