This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/4Kg9NytT8R4x9Vd_vEEuFc15xYk.roa File: 4Kg9NytT8R4x9Vd_vEEuFc15xYk.roa (raw, json) Hash identifier: M2LCXYLEX3b9grh9Bx0Bx9T8hoNsI8LqiGlWoxzR18A= Subject key identifier: E0:A8:3D:37:2B:53:F1:1E:31:F5:57:7F:BC:41:2E:15:CD:79:C5:89 Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953 Certificate serial: 019B79EC19F2C26FB46D89526D7101A512F8 Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/4Kg9NytT8R4x9Vd_vEEuFc15xYk.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15550 IP address blocks: 193.25.224.0/20 maxlen: 24 2001:678:9fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:19:f2:c2:6f:b4:6d:89:52:6d:71:01:a5:12:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a83d372b53f11e31f5577fbc412e15cd79c589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:a0:eb:a4:9a:f9:20:f1:d0:a5:49:a0:61: 8a:74:5f:d7:20:94:ec:63:f2:e1:21:59:42:05:f5: 3f:1e:59:9b:3f:cf:73:2b:c8:b9:28:dc:2b:77:ac: f2:b1:9b:36:08:d4:2c:df:7b:a7:7d:4d:2d:99:26: b2:73:75:c6:5c:1f:32:fe:37:82:54:f5:1e:7c:86: a6:df:23:9f:e3:76:20:1d:78:f2:52:05:65:57:c7: 84:82:4b:2c:29:f4:fa:34:d9:20:f2:1d:34:77:98: 4b:ac:ec:f9:03:d5:d7:df:bb:d2:cb:43:08:7b:24: c3:3f:32:ac:7a:bc:f9:c9:5e:bf:13:12:26:3b:d2: 44:e3:64:b8:55:71:36:19:ce:4e:7c:a5:de:fc:1b: 66:f7:47:b6:df:fe:37:7a:5f:c1:93:d4:90:8c:6d: 85:57:c4:ae:e9:fb:63:02:19:3f:37:41:52:bf:5a: 8f:8a:68:ca:6c:02:ab:9e:06:a9:8c:03:ca:3c:18: 52:7c:da:ff:97:9c:25:fb:35:69:58:a3:5c:22:cd: c0:01:31:e3:e0:f7:6c:2a:33:e3:8b:f0:c2:e6:99: 70:aa:f6:44:d8:6e:e0:ba:79:6c:75:9f:77:57:0a: b9:f4:56:78:c8:0c:5f:d0:96:52:90:71:de:7b:3f: 7c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A8:3D:37:2B:53:F1:1E:31:F5:57:7F:BC:41:2E:15:CD:79:C5:89 X509v3 Authority Key Identifier: keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/4Kg9NytT8R4x9Vd_vEEuFc15xYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.224.0/20 IPv6: 2001:678:9fc::/48 Signature Algorithm: sha256WithRSAEncryption 62:0d:55:df:c5:f1:c5:42:b3:bd:9a:82:29:f3:c0:16:6c:71: 1e:1f:e5:bb:e1:67:47:fd:40:d9:fe:d7:75:db:0d:bb:1f:eb: c3:36:d5:33:11:88:c9:43:d5:d1:61:41:28:8d:fd:c6:52:b9: 44:f3:81:32:56:76:96:a6:86:0c:2c:3c:15:16:57:fd:43:58: 8a:09:4e:63:25:d6:ce:4e:58:49:34:46:17:db:d5:cb:a8:db: da:34:f9:bf:cd:cd:32:84:3c:37:b2:f4:9a:35:72:c6:8f:e2: 8c:82:25:10:78:13:4a:57:a5:c6:00:44:73:44:b0:89:3d:65: 04:45:9a:bb:05:ad:1a:d4:3c:7d:e1:3d:07:a2:be:e3:2d:18: ff:de:35:9b:3e:dc:f1:4a:1a:a1:27:b9:ca:a0:80:69:36:f0: 00:fd:f6:ad:50:42:40:a7:6b:00:a6:3d:6d:af:89:e2:a7:dd: 70:2b:a5:b9:6f:51:f3:76:d6:03:b3:56:f0:9b:58:ae:da:c7: 1c:ed:90:7f:53:16:6e:a9:a0:6d:44:2f:96:d9:3e:01:4f:ad: f6:6a:cb:20:1b:36:cc:83:b1:2a:66:7a:96:da:c8:a4:89:2f: d7:67:58:5c:8c:b0:7e:25:cf:5e:e1:84:8f:cb:08:0d:15:98: f7:8d:66:13 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57Bnywm+0bYlSbXEBpRL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVhMGMyYWMzYjE2Nzk0OTlhOTZiZTMxZTQzYmU4NWNm MDk5NTMwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGE4M2QzNzJiNTNmMTFlMzFmNTU3N2ZiYzQxMmUxNWNkNzljNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6+g66Sa+SDx0KVJoGGKdF/XIJTs Y/LhIVlCBfU/HlmbP89zK8i5KNwrd6zysZs2CNQs33unfU0tmSayc3XGXB8y/jeC VPUefIam3yOf43YgHXjyUgVlV8eEgkssKfT6NNkg8h00d5hLrOz5A9XX37vSy0MI eyTDPzKserz5yV6/ExImO9JE42S4VXE2Gc5OfKXe/Btm90e23/43el/Bk9SQjG2F V8Su6ftjAhk/N0FSv1qPimjKbAKrngapjAPKPBhSfNr/l5wl+zVpWKNcIs3AATHj 4PdsKjPji/DC5plwqvZE2G7gunlsdZ93Vwq59FZ4yAxf0JZSkHHeez98QwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOCoPTcrU/EeMfVXf7xBLhXNecWJMB8GA1UdIwQY MBaAFCLFoMKsOxZ5SZqWvjHkO+hc8JlTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNXZ3dxdzdGbmxKbXBhLU1lUTc2Rnp3bVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZWVkZjYtNTJjMS00YTAxLTkwOTct YTZjZjE2Yzg1Y2U0LzEvNEtnOU55dFQ4UjR4OVZkX3ZFRXVGYzE1eFlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lZWVkZjYtNTJjMS00YTAxLTkwOTctYTZjZjE2Yzg1Y2U0 LzEvSXNXZ3dxdzdGbmxKbXBhLU1lUTc2Rnp3bVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwRngMA8E AgACMAkDBwAgAQZ4CfwwDQYJKoZIhvcNAQELBQADggEBAGINVd/F8cVCs72aginz wBZscR4f5bvhZ0f9QNn+13XbDbsf68M21TMRiMlD1dFhQSiN/cZSuUTzgTJWdpam hgwsPBUWV/1DWIoJTmMl1s5OWEk0Rhfb1cuo29o0+b/NzTKEPDey9Jo1csaP4oyC JRB4E0pXpcYARHNEsIk9ZQRFmrsFrRrUPH3hPQeivuMtGP/eNZs+3PFKGqEnucqg gGk28AD99q1QQkCnawCmPW2vieKn3XArpblvUfN21gOzVvCbWK7axxztkH9TFm6p oG1EL5bZPgFPrfZqyyAbNsyDsSpmepbayKSJL9dnWFyMsH4lz17hhI/LCA0VmPeN ZhM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:00 2026 by rpki-client