This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa File: B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa (raw, json) Hash identifier: OOJx9FQsYUEok6ZK1kN2i3wjiOZNjN0fy2SYUeHp9n4= Subject key identifier: 07:84:00:FD:2F:64:ED:29:55:A5:1E:CC:75:68:A2:59:47:08:0B:E2 Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf Certificate serial: 019B7A5B7985038E8300FE61876225B07E35 Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44431 IP address blocks: 92.43.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:85:03:8e:83:00:fe:61:87:62:25:b0:7e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078400fd2f64ed2955a51ecc7568a25947080be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:b4:e3:1e:19:b9:e6:29:c1:56:48:5e:6e: 45:e2:b7:41:80:e5:9d:52:7e:83:90:4f:42:e2:a0: 76:f4:52:06:83:19:d8:d6:92:77:51:71:9d:6f:07: 21:b8:e5:4d:29:16:4a:a6:2e:83:8c:7f:eb:0f:62: 9d:9c:03:55:09:39:33:5f:05:36:51:99:a5:4e:98: 8b:47:2d:ed:63:70:fc:4b:92:70:b1:a5:c4:3d:05: e6:af:00:fc:22:ff:21:75:ee:10:6c:3a:ec:6f:40: da:31:2b:02:6b:e2:66:db:50:57:31:9c:c4:10:c5: 37:78:da:e4:c6:30:ce:84:fa:65:b4:2f:e1:c7:10: f0:bc:43:bb:1e:bf:d1:91:91:52:57:57:83:bf:18: ae:2f:36:fb:ad:e0:c2:25:56:ab:2d:f0:3f:2b:37: 6b:c7:58:2d:05:c7:ec:67:78:bf:bd:f2:1a:90:42: 64:98:91:8d:44:62:9b:43:18:74:ba:ce:6a:76:f4: 8a:8d:fa:27:df:ee:ad:7e:a8:f2:49:16:ba:5a:8d: 8d:22:37:ff:31:ee:8b:05:cf:5d:7e:63:d9:6f:7e: 68:0b:b9:89:44:b2:f4:d3:4d:81:c4:3b:49:34:44: 15:76:ac:f2:6a:f5:34:ce:3b:50:b6:f7:ea:52:66: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:84:00:FD:2F:64:ED:29:55:A5:1E:CC:75:68:A2:59:47:08:0B:E2 X509v3 Authority Key Identifier: keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.224.0/21 Signature Algorithm: sha256WithRSAEncryption b7:c1:b2:ad:3d:7f:7c:37:fa:5d:82:13:a6:f6:d0:a0:c8:31: 09:e4:b6:11:7d:49:79:81:ef:6d:0c:1e:4b:75:74:b6:55:6c: da:5b:24:94:8c:d3:2b:41:dc:8e:c8:50:8d:f2:0e:cc:f6:ba: 07:db:36:ee:7c:d0:ea:3b:be:e3:f0:a6:bd:be:77:85:22:c1: 02:e9:c6:45:64:5d:6d:0b:25:d2:63:85:03:a3:0c:2d:48:7e: 27:d6:4d:94:a6:ef:b1:c5:c2:cd:bb:5b:80:d4:dc:bf:c7:40: fa:a5:9b:36:b3:c5:3f:17:f9:0e:90:2b:35:28:7f:de:12:3b: 39:63:0b:cc:ca:71:bc:ca:60:2d:e2:16:1b:37:02:73:0e:f9: 3e:3a:7e:06:45:3a:0b:25:f6:51:68:53:e9:1a:7b:d9:21:05: c8:bc:5b:40:5d:f7:50:04:c4:51:b9:bc:8a:7e:cc:5e:ab:6a: 0b:52:74:56:eb:a7:54:f0:a1:38:4d:cc:d1:f8:a7:4f:24:e1: 00:35:b5:16:9d:4f:ae:ee:ab:25:87:88:73:76:b8:14:03:d5: cf:14:13:9d:97:9e:cd:aa:47:64:d9:7f:72:f5:af:c0:ff:a2: e8:de:f1:53:85:9e:ed:54:ac:2e:a8:a3:2a:a2:6b:db:18:5d: 0f:e8:80:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3mFA46DAP5hh2IlsH41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi NDllYWYwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzg0MDBmZDJmNjRlZDI5NTVhNTFlY2M3NTY4YTI1OTQ3MDgwYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDi04x4ZueYpwVZIXm5F4rdBgOWd Un6DkE9C4qB29FIGgxnY1pJ3UXGdbwchuOVNKRZKpi6DjH/rD2KdnANVCTkzXwU2 UZmlTpiLRy3tY3D8S5JwsaXEPQXmrwD8Iv8hde4QbDrsb0DaMSsCa+Jm21BXMZzE EMU3eNrkxjDOhPpltC/hxxDwvEO7Hr/RkZFSV1eDvxiuLzb7reDCJVarLfA/Kzdr x1gtBcfsZ3i/vfIakEJkmJGNRGKbQxh0us5qdvSKjfon3+6tfqjySRa6Wo2NIjf/ Me6LBc9dfmPZb35oC7mJRLL0002BxDtJNEQVdqzyavU0zjtQtvfqUmYMGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeEAP0vZO0pVaUezHVoollHCAviMB8GA1UdIwQY MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt NmNiZDU4MWQzMTdjLzEvQjRRQV9TOWs3U2xWcFI3TWRXaWlXVWNJQy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCvgMA0G CSqGSIb3DQEBCwUAA4IBAQC3wbKtPX98N/pdghOm9tCgyDEJ5LYRfUl5ge9tDB5L dXS2VWzaWySUjNMrQdyOyFCN8g7M9roH2zbufNDqO77j8Ka9vneFIsEC6cZFZF1t CyXSY4UDowwtSH4n1k2Upu+xxcLNu1uA1Ny/x0D6pZs2s8U/F/kOkCs1KH/eEjs5 YwvMynG8ymAt4hYbNwJzDvk+On4GRToLJfZRaFPpGnvZIQXIvFtAXfdQBMRRubyK fsxeq2oLUnRW66dU8KE4TczR+KdPJOEANbUWnU+u7qslh4hzdrgUA9XPFBOdl57N qkdk2X9y9a/A/6Lo3vFThZ7tVKwuqKMqomvbGF0P6IDT -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:48 2026 by rpki-client