This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/4vyc44IoKKHchhCxJ7O1jQ8abqA.roa File: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (raw, json) Hash identifier: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM= Subject key identifier: E2:FC:9C:E3:82:28:28:A1:DC:86:10:B1:27:B3:B5:8D:0F:1A:6E:A0 Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019B7F1513004CCF92A52AB397042A6B74B0 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/4vyc44IoKKHchhCxJ7O1jQ8abqA.roa Signing time: Fri 02 Jan 2026 14:20:46 +0000 ROA not before: Fri 02 Jan 2026 14:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206059 IP address blocks: 89.234.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:13:00:4c:cf:92:a5:2a:b3:97:04:2a:6b:74:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jan 2 14:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2fc9ce3822828a1dc8610b127b3b58d0f1a6ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:3f:c1:69:5f:3d:32:28:a7:ed:d1:ae:fa: 93:8d:99:8f:58:eb:67:c4:81:d9:ba:55:84:b6:41: 9c:70:8f:5d:c7:4b:66:12:7a:c8:62:51:2f:3b:bf: 73:3d:d6:34:6b:40:b2:be:62:ca:e4:ec:10:ce:1b: b1:e6:b3:98:bc:8c:4a:34:e5:6e:4f:aa:f2:45:a7: 9b:64:07:b9:5b:91:a1:28:cc:49:7d:18:8e:38:60: bb:94:ed:34:0d:39:0d:64:50:81:09:66:a8:40:63: 74:35:48:dd:75:a7:93:b8:75:49:f9:64:e0:dc:ba: 0a:80:01:93:42:07:a1:50:00:40:9f:36:a6:79:b8: 98:56:b3:95:55:c3:d6:d6:7f:1c:45:be:c2:a7:6d: 14:21:49:8b:f6:76:91:67:23:1b:76:8b:03:b3:ce: 27:2f:41:b1:69:9d:61:ba:df:4e:a8:ff:5a:a8:30: 07:a9:d9:7f:55:30:49:23:a6:1d:4e:1b:f8:43:d6: 50:df:1a:f8:62:ef:0e:70:79:79:cd:db:db:d8:4a: 61:e8:89:2d:66:64:91:7b:8a:4c:70:33:20:0d:3b: ed:8f:68:4c:3d:51:c7:df:a1:2a:02:c0:f5:f2:86: cf:60:76:84:a5:8e:96:7b:1f:b1:c9:0d:d1:e1:a3: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FC:9C:E3:82:28:28:A1:DC:86:10:B1:27:B3:B5:8D:0F:1A:6E:A0 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/4vyc44IoKKHchhCxJ7O1jQ8abqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.234.188.0/24 Signature Algorithm: sha256WithRSAEncryption 56:8b:95:a5:ea:7f:12:77:b3:65:0a:61:16:45:12:13:66:37: 69:c1:b1:33:16:37:9f:63:1e:05:ea:64:78:62:61:dc:5d:a4: 3f:de:e3:9c:9e:44:ea:78:ce:d7:23:8c:fb:f4:0e:b1:2b:32: 3d:72:21:f2:d0:49:f3:ad:ff:3e:da:c5:df:e8:e4:b5:2d:34: d1:8d:79:ed:5e:45:a3:82:54:e5:f3:25:84:61:c2:ca:d4:00: 0f:f6:77:28:19:52:20:d6:bb:e0:18:b5:d4:b2:14:57:9b:46: 0b:05:b7:79:30:c9:e2:65:7c:d9:7b:c2:f3:3f:3a:28:87:32: 52:09:f6:f5:af:3a:b1:4c:7d:46:48:8a:7a:09:fc:0d:55:3b: 35:14:25:09:0e:47:dc:e2:a6:85:37:e2:d3:40:a6:9c:36:2b: d8:e9:bb:df:08:c6:e1:ca:bf:df:56:3b:5c:3e:11:6b:0e:68: fc:7a:32:70:5e:22:8c:59:91:61:12:d7:87:ff:54:4e:09:40: 1d:fb:3c:1b:b6:8a:ad:0c:0c:ac:09:75:64:16:35:71:c4:5d: da:34:d7:d1:5e:81:bd:76:ab:cb:20:58:40:04:df:e3:33:0c: 89:f0:94:80:ce:ee:92:8e:82:f1:75:5c:a9:cc:26:fd:be:de: 2a:d1:7b:2b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/FRMATM+SpSqzlwQqa3SwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwMTAyMTQyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZjOWNlMzgyMjgyOGExZGM4NjEwYjEyN2IzYjU4ZDBmMWE2ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Mc/wWlfPTIop+3RrvqTjZmPWOtn xIHZulWEtkGccI9dx0tmEnrIYlEvO79zPdY0a0CyvmLK5OwQzhux5rOYvIxKNOVu T6ryRaebZAe5W5GhKMxJfRiOOGC7lO00DTkNZFCBCWaoQGN0NUjddaeTuHVJ+WTg 3LoKgAGTQgehUABAnzamebiYVrOVVcPW1n8cRb7Cp20UIUmL9naRZyMbdosDs84n L0GxaZ1hut9OqP9aqDAHqdl/VTBJI6YdThv4Q9ZQ3xr4Yu8OcHl5zdvb2Eph6Ikt ZmSRe4pMcDMgDTvtj2hMPVHH36EqAsD18obPYHaEpY6Wex+xyQ3R4aPJJQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOL8nOOCKCih3IYQsSeztY0PGm6gMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzR2eWM0NElvS0tIY2hoQ3hKN08xalE4YWJxQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNmLTk2NWQ2ZDYwM2Jm YS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZ6rww DQYJKoZIhvcNAQELBQADggEBAFaLlaXqfxJ3s2UKYRZFEhNmN2nBsTMWN59jHgXq ZHhiYdxdpD/e45yeROp4ztcjjPv0DrErMj1yIfLQSfOt/z7axd/o5LUtNNGNee1e RaOCVOXzJYRhwsrUAA/2dygZUiDWu+AYtdSyFFebRgsFt3kwyeJlfNl7wvM/OiiH MlIJ9vWvOrFMfUZIinoJ/A1VOzUUJQkOR9zipoU34tNAppw2K9jpu98IxuHKv99W O1w+EWsOaPx6MnBeIoxZkWES14f/VE4JQB37PBu2iq0MDKwJdWQWNXHEXdo019Fe gb12q8sgWEAE3+MzDInwlIDO7pKOgvF1XKnMJv2+3irReys= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:45 2026 by rpki-client