This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4ti_BsGuOczeZfy0JTAwhM89ku8.roa File: 4ti_BsGuOczeZfy0JTAwhM89ku8.roa (raw, json) Hash identifier: F/FIDL6IQyGQZU0ynH10rsxr4Lh4/lqbKrwCKxOVIa4= Subject key identifier: E2:D8:BF:06:C1:AE:39:CC:DE:65:FC:B4:25:30:30:84:CF:3D:92:EF Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B79ECD1CB11055B4DF5D211F04906B407 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4ti_BsGuOczeZfy0JTAwhM89ku8.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53730 IP address blocks: 45.145.55.0/24 maxlen: 24 194.34.245.0/24 maxlen: 24 194.34.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d1:cb:11:05:5b:4d:f5:d2:11:f0:49:06:b4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d8bf06c1ae39ccde65fcb425303084cf3d92ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:b8:44:19:ee:29:7d:59:db:b2:4e:58:41: 08:0f:9a:0a:1c:ed:31:35:98:d3:6f:62:51:02:27: 34:81:98:85:e9:3e:1a:4c:4f:5e:17:03:20:88:62: f6:80:bb:3b:e5:24:70:cf:59:a4:f8:70:13:66:62: 12:16:d0:3e:15:b7:80:ac:ac:a5:cd:0d:f2:16:84: d4:2a:ff:ce:54:2f:2e:d3:2f:f7:e0:4e:eb:da:6f: ae:03:2f:a8:aa:6c:e4:fa:68:53:55:d8:e6:3f:95: cd:08:b4:b0:74:1a:a9:f6:eb:9a:52:ad:73:c9:f0: 17:8c:57:92:8d:13:72:87:52:ff:7d:cb:38:b3:13: 69:ae:42:61:92:95:31:b1:85:b0:85:19:85:98:ce: 37:0a:60:38:7f:89:ab:e6:65:da:ec:6a:55:5b:5d: 92:9f:92:75:82:21:eb:b5:4f:c9:03:be:62:41:59: 73:a0:62:cf:6f:8d:eb:13:d2:17:3a:60:13:19:0e: a1:38:69:05:22:41:3d:fd:87:88:6c:c9:92:c7:0e: b2:a1:e9:87:56:85:6b:54:be:e8:34:40:1a:b4:9e: 33:f7:d6:8e:de:92:10:aa:88:5e:e0:96:27:4a:e5: 0e:5d:9b:6c:e5:f3:2d:e2:f7:78:e4:f6:0f:bf:d0: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:BF:06:C1:AE:39:CC:DE:65:FC:B4:25:30:30:84:CF:3D:92:EF X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4ti_BsGuOczeZfy0JTAwhM89ku8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.55.0/24 194.34.245.0/24 194.34.247.0/24 Signature Algorithm: sha256WithRSAEncryption 03:61:76:9d:5f:5d:46:32:e4:3d:9b:32:4b:de:e6:21:2f:d8: 16:35:60:a2:59:1d:6d:1c:0d:87:c9:66:7f:dc:35:13:03:ce: 2e:3d:43:18:b1:04:b1:b7:89:c4:6a:dc:f7:84:29:e3:33:cf: 46:3f:ea:f4:e5:21:e8:93:e0:b6:f9:8f:62:b4:dc:68:f9:5f: 94:78:62:7c:22:2b:c3:49:dd:93:ee:c2:67:89:72:a7:9a:89: df:44:70:1c:e7:3a:15:5a:19:fe:37:02:ff:73:15:b6:35:59: 9a:0d:2a:de:9c:7b:c0:e4:42:5a:03:52:7f:35:52:25:30:49: 41:15:af:45:a4:81:41:76:03:6c:bc:29:23:f1:2f:9f:a2:84: 54:07:08:96:d5:b2:ad:2f:86:f3:3c:8e:a1:a8:20:81:10:ae: 61:55:3f:e1:b6:77:c0:bc:0e:f4:9c:b1:2b:43:0c:17:13:4e: 63:ba:1a:fd:ef:e9:70:54:2b:90:e4:e2:ca:e5:aa:d9:7f:12: af:68:f7:81:58:aa:4c:93:bd:76:e4:52:b6:61:95:58:8d:4d: 43:49:f1:ae:4c:99:de:45:5b:ed:f0:45:71:e3:52:71:16:d4: 6f:43:41:72:f3:f0:2a:65:ca:44:1f:83:d6:2b:ca:3c:a5:37: 3d:54:28:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57NHLEQVbTfXSEfBJBrQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQ4YmYwNmMxYWUzOWNjZGU2NWZjYjQyNTMwMzA4NGNmM2Q5MmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00e4RBnuKX1Z27JOWEEID5oKHO0x NZjTb2JRAic0gZiF6T4aTE9eFwMgiGL2gLs75SRwz1mk+HATZmISFtA+FbeArKyl zQ3yFoTUKv/OVC8u0y/34E7r2m+uAy+oqmzk+mhTVdjmP5XNCLSwdBqp9uuaUq1z yfAXjFeSjRNyh1L/fcs4sxNprkJhkpUxsYWwhRmFmM43CmA4f4mr5mXa7GpVW12S n5J1giHrtU/JA75iQVlzoGLPb43rE9IXOmATGQ6hOGkFIkE9/YeIbMmSxw6yoemH VoVrVL7oNEAatJ4z99aO3pIQqohe4JYnSuUOXZts5fMt4vd45PYPv9DixQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOLYvwbBrjnM3mX8tCUwMITPPZLvMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvNHRpX0JzR3VPY3plWmZ5MEpUQXdoTTg5a3U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZE3AwQA wiL1AwQAwiL3MA0GCSqGSIb3DQEBCwUAA4IBAQADYXadX11GMuQ9mzJL3uYhL9gW NWCiWR1tHA2HyWZ/3DUTA84uPUMYsQSxt4nEatz3hCnjM89GP+r05SHok+C2+Y9i tNxo+V+UeGJ8IivDSd2T7sJniXKnmonfRHAc5zoVWhn+NwL/cxW2NVmaDSrenHvA 5EJaA1J/NVIlMElBFa9FpIFBdgNsvCkj8S+fooRUBwiW1bKtL4bzPI6hqCCBEK5h VT/htnfAvA70nLErQwwXE05juhr97+lwVCuQ5OLK5arZfxKvaPeBWKpMk7125FK2 YZVYjU1DSfGuTJneRVvt8EVx41JxFtRvQ0Fy8/AqZcpEH4PWK8o8pTc9VCja -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:37 2026 by rpki-client