This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/4gWTFBdbX28RmU-vZWa7w0Na-oY.roa File: 4gWTFBdbX28RmU-vZWa7w0Na-oY.roa (raw, json) Hash identifier: qVoPT+hSYJGFIxsu7hxtF38NHWCrB7G+eA7b60ig6oM= Subject key identifier: E2:05:93:14:17:5B:5F:6F:11:99:4F:AF:65:66:BB:C3:43:5A:FA:86 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B982066E7DCD2406B7CA73388AE325DC3 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/4gWTFBdbX28RmU-vZWa7w0Na-oY.roa Signing time: Wed 07 Jan 2026 11:03:38 +0000 ROA not before: Wed 07 Jan 2026 11:03:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202971 IP address blocks: 193.164.134.0/23 maxlen: 23 193.164.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:20:66:e7:dc:d2:40:6b:7c:a7:33:88:ae:32:5d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 7 11:03:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2059314175b5f6f11994faf6566bbc3435afa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:92:0f:77:6e:e9:fd:be:c6:2e:c2:29:75: 67:32:41:9e:12:ec:83:eb:c6:f7:11:6c:dc:c8:aa: 15:8b:37:bf:94:d3:70:aa:06:5c:4d:5f:14:9b:2d: 0a:c3:43:2b:6f:4d:0a:2a:75:51:23:94:d0:9d:2f: 12:48:d2:d3:0a:ea:51:e8:d0:df:fa:cf:10:87:5c: 4c:40:28:40:d5:7a:6d:39:98:6a:98:e2:a3:51:9c: fe:9f:2a:73:77:c3:c3:e0:cd:4e:0a:16:03:39:12: a0:8e:3b:6a:65:4b:07:81:fa:c2:fd:3f:ca:65:d5: 44:2c:93:b6:f6:3c:53:b2:c3:1f:b5:bd:a0:ad:a9: 9f:e3:e8:10:b0:1e:88:61:0d:13:96:c4:c6:13:d6: 4f:e9:db:a5:06:b5:2c:59:43:75:ee:bd:55:f2:ab: 57:e4:ee:6d:f2:4d:98:15:63:4b:c3:7e:6c:d1:51: 91:7a:85:44:d4:ee:b3:ae:08:29:66:87:15:61:42: c9:66:87:da:11:18:e3:c4:b6:de:0b:92:11:c5:32: c0:37:9b:1d:1a:40:88:e5:4c:89:1a:29:f7:68:0a: 2d:cf:a8:66:24:60:a0:db:a9:34:44:fa:d2:d2:cc: d8:51:e8:51:20:c4:27:4e:af:9d:73:6a:cc:1e:f2: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:93:14:17:5B:5F:6F:11:99:4F:AF:65:66:BB:C3:43:5A:FA:86 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/4gWTFBdbX28RmU-vZWa7w0Na-oY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.134.0/23 193.164.209.0/24 Signature Algorithm: sha256WithRSAEncryption 65:cb:ce:ed:57:4d:2a:33:4f:d9:22:4e:d9:9b:e8:d8:cc:d9: 32:e7:4f:ce:f0:81:07:bb:46:dc:37:b1:5a:17:e1:e0:29:2d: 50:e9:53:15:8c:39:62:76:97:b4:22:1c:ed:1b:a9:d4:5c:93: d5:7a:3a:9c:63:fb:84:22:d2:0c:0f:48:cc:a9:12:5c:e9:4e: 4e:0e:77:3b:41:fc:5b:60:39:31:e5:7c:41:a5:2d:60:8c:b1: 75:ae:1d:4d:79:32:2f:f1:ea:c3:a7:b8:59:1e:87:ba:c8:73: 84:88:e0:cf:22:f5:58:09:20:a7:f5:df:ea:67:b5:87:d6:24: b2:23:ca:17:90:75:f1:0b:aa:04:dd:cf:b8:5b:e4:2e:3c:7c: f3:82:11:84:96:6a:54:6e:cb:b0:06:ce:a1:a1:88:c7:b6:47: 2d:92:5d:e6:57:01:1e:86:10:19:b0:64:f1:16:d4:9e:30:d6: b6:4d:6c:6c:c6:1e:2f:89:8a:d0:f6:61:2d:7d:03:df:76:b6: 17:65:9e:6d:ab:eb:ff:87:1b:26:ee:e3:9e:b9:9c:84:31:42: ca:4e:3c:28:c9:0d:36:9c:33:53:7c:16:42:5a:33:2e:2b:be: 1f:57:c2:0c:04:e9:4a:31:48:0a:8b:c2:23:ce:8f:1b:c6:c0: a8:eb:50:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuYIGbn3NJAa3ynM4iuMl3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTA3MTEwMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjA1OTMxNDE3NWI1ZjZmMTE5OTRmYWY2NTY2YmJjMzQzNWFmYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH6SD3du6f2+xi7CKXVnMkGeEuyD 68b3EWzcyKoVize/lNNwqgZcTV8Umy0Kw0Mrb00KKnVRI5TQnS8SSNLTCupR6NDf +s8Qh1xMQChA1XptOZhqmOKjUZz+nypzd8PD4M1OChYDORKgjjtqZUsHgfrC/T/K ZdVELJO29jxTssMftb2gramf4+gQsB6IYQ0TlsTGE9ZP6dulBrUsWUN17r1V8qtX 5O5t8k2YFWNLw35s0VGReoVE1O6zrggpZocVYULJZofaERjjxLbeC5IRxTLAN5sd GkCI5UyJGin3aAotz6hmJGCg26k0RPrS0szYUehRIMQnTq+dc2rMHvLBzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOIFkxQXW19vEZlPr2Vmu8NDWvqGMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvNGdXVEZCZGJYMjhSbVUtdlpXYTd3ME5hLW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwaSGAwQA waTRMA0GCSqGSIb3DQEBCwUAA4IBAQBly87tV00qM0/ZIk7Zm+jYzNky50/O8IEH u0bcN7FaF+HgKS1Q6VMVjDlidpe0IhztG6nUXJPVejqcY/uEItIMD0jMqRJc6U5O Dnc7QfxbYDkx5XxBpS1gjLF1rh1NeTIv8erDp7hZHoe6yHOEiODPIvVYCSCn9d/q Z7WH1iSyI8oXkHXxC6oE3c+4W+QuPHzzghGElmpUbsuwBs6hoYjHtkctkl3mVwEe hhAZsGTxFtSeMNa2TWxsxh4viYrQ9mEtfQPfdrYXZZ5tq+v/hxsm7uOeuZyEMULK TjwoyQ02nDNTfBZCWjMuK74fV8IMBOlKMUgKi8Ijzo8bxsCo61Ad -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:15 2026 by rpki-client