This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/4xLNM1gfFHioLqXsNxKtGlvCRlw.roa File: 4xLNM1gfFHioLqXsNxKtGlvCRlw.roa (raw, json) Hash identifier: uhrmuI7oCSVyONxL+SSY9ejEzbrz6KWmcurexFcyOu4= Subject key identifier: E3:12:CD:33:58:1F:14:78:A8:2E:A5:EC:37:12:AD:1A:5B:C2:46:5C Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b Certificate serial: 019B7C7FB6FBC002CB837229A587BC854234 Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/4xLNM1gfFHioLqXsNxKtGlvCRlw.roa Signing time: Fri 02 Jan 2026 02:18:23 +0000 ROA not before: Fri 02 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210423 IP address blocks: 79.108.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b6:fb:c0:02:cb:83:72:29:a5:87:bc:85:42:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b Validity Not Before: Jan 2 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e312cd33581f1478a82ea5ec3712ad1a5bc2465c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:28:4e:c7:b3:b0:bf:1a:ce:67:d7:4b:34: 69:3f:f9:2c:6e:df:03:c2:b7:d7:a6:f3:12:03:d9: 4c:1b:52:a3:09:54:bc:cb:98:24:6d:25:53:bf:1b: 88:d9:1c:32:f2:f1:b3:80:da:86:74:67:b4:b4:81: 92:1b:5a:dd:91:58:2e:c3:bb:1f:a1:32:63:66:e1: dd:d8:a2:3d:11:5b:1e:6e:59:12:10:2b:5c:2b:cc: 41:30:05:00:ff:02:7f:ba:00:88:19:2b:90:44:a1: 07:fe:90:a4:09:32:7b:83:65:c1:35:27:81:7b:46: 17:5f:86:2c:1c:8a:f1:b7:3b:96:c6:15:cc:af:af: 9c:ee:83:82:88:2d:f2:d5:c4:f4:5e:88:0a:1c:4f: 21:8d:83:c3:e0:50:61:ae:9e:21:82:7d:dd:9f:41: b3:4d:7c:6a:b3:56:bc:d2:cb:32:49:00:92:98:c0: 8e:10:51:a5:d9:80:20:71:4e:05:30:5f:04:80:aa: 68:20:5d:35:57:7b:6e:3c:a5:26:a3:67:8d:a6:ea: 15:fd:55:ab:a4:d7:15:52:1f:c6:f5:f9:0d:0f:5f: e4:40:41:54:85:1b:47:8f:20:b6:13:38:6c:4f:7d: 35:44:93:21:59:29:8e:3c:e4:bd:79:28:13:4c:4f: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:12:CD:33:58:1F:14:78:A8:2E:A5:EC:37:12:AD:1A:5B:C2:46:5C X509v3 Authority Key Identifier: keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/4xLNM1gfFHioLqXsNxKtGlvCRlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.108.232.0/21 Signature Algorithm: sha256WithRSAEncryption 68:57:28:53:cf:d3:21:5b:23:79:72:af:45:e4:fc:01:b4:9e: 5e:63:99:c5:15:22:39:ab:bc:fc:bc:3e:7b:59:3b:ef:01:d0: c5:ee:95:4a:61:d4:9a:47:e8:6b:20:f0:1f:0e:08:0d:11:d6: 95:03:57:34:3f:31:70:b1:3e:ad:f3:a1:bf:9a:43:e1:9c:b6: b3:23:28:7b:48:38:ae:83:9d:11:f8:ce:3f:08:e9:d7:fc:1a: 20:fc:f2:a4:2b:39:3d:ef:80:41:9b:8f:5b:1e:63:df:bc:25: 26:80:e4:99:c4:c5:78:a5:36:e9:ae:67:a7:0a:b8:6c:91:93: f0:ad:72:4b:d2:16:9a:27:00:52:b3:5e:5b:ab:4f:0f:75:57: 54:c6:53:f3:ff:84:9d:8e:ec:a3:cb:be:39:99:49:ac:d7:7d: c0:d9:e7:78:94:e8:57:ed:cb:7a:25:13:6f:ab:3c:cb:cf:70: 5f:da:4b:19:2c:eb:3c:9d:44:35:34:33:3e:7a:12:89:67:e7: 8f:61:90:4b:26:7a:81:b4:f5:48:d5:ef:8c:e5:12:61:f1:9f: b7:cb:c7:38:fc:22:22:6f:5d:cb:7e:3d:7d:f4:44:7c:98:84: 34:bf:c8:ff:fa:c2:2a:99:87:03:fb:9e:63:c3:2f:35:63:55: 26:e8:a6:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7b7wALLg3IppYe8hUI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5 ZmUwN2IwHhcNMjYwMTAyMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzEyY2QzMzU4MWYxNDc4YTgyZWE1ZWMzNzEyYWQxYTViYzI0NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fwoTsezsL8azmfXSzRpP/ksbt8D wrfXpvMSA9lMG1KjCVS8y5gkbSVTvxuI2Rwy8vGzgNqGdGe0tIGSG1rdkVguw7sf oTJjZuHd2KI9EVseblkSECtcK8xBMAUA/wJ/ugCIGSuQRKEH/pCkCTJ7g2XBNSeB e0YXX4YsHIrxtzuWxhXMr6+c7oOCiC3y1cT0XogKHE8hjYPD4FBhrp4hgn3dn0Gz TXxqs1a80ssySQCSmMCOEFGl2YAgcU4FMF8EgKpoIF01V3tuPKUmo2eNpuoV/VWr pNcVUh/G9fkND1/kQEFUhRtHjyC2EzhsT301RJMhWSmOPOS9eSgTTE9mYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMSzTNYHxR4qC6l7DcSrRpbwkZcMB8GA1UdIwQY MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt MDIzOTk1OTA2YzQ2LzEvNHhMTk0xZ2ZGSGlvTHFYc054S3RHbHZDUmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2 LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT2zoMA0G CSqGSIb3DQEBCwUAA4IBAQBoVyhTz9MhWyN5cq9F5PwBtJ5eY5nFFSI5q7z8vD57 WTvvAdDF7pVKYdSaR+hrIPAfDggNEdaVA1c0PzFwsT6t86G/mkPhnLazIyh7SDiu g50R+M4/COnX/Bog/PKkKzk974BBm49bHmPfvCUmgOSZxMV4pTbprmenCrhskZPw rXJL0haaJwBSs15bq08PdVdUxlPz/4Sdjuyjy745mUms133A2ed4lOhX7ct6JRNv qzzLz3Bf2ksZLOs8nUQ1NDM+ehKJZ+ePYZBLJnqBtPVI1e+M5RJh8Z+3y8c4/CIi b13Lfj199ER8mIQ0v8j/+sIqmYcD+55jwy81Y1Um6KYu -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:10 2026 by rpki-client