This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa File: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (raw, json) Hash identifier: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY= Subject key identifier: E1:D2:51:C5:CC:EE:C8:D3:7D:14:D2:45:E2:FF:D1:C7:8C:48:31:45 Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019B797DD4EF45B33891BDDF24CDC39FBC03 Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa Signing time: Thu 01 Jan 2026 12:17:28 +0000 ROA not before: Thu 01 Jan 2026 12:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34026 IP address blocks: 80.93.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d4:ef:45:b3:38:91:bd:df:24:cd:c3:9f:bc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d251c5cceec8d37d14d245e2ffd1c78c483145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:1c:cb:0c:22:f1:0a:dc:4f:f8:53:30:ed: ac:70:13:8f:72:42:9e:62:f1:14:d9:24:d4:6d:ac: 79:67:8e:c2:09:89:c0:b9:91:75:7f:48:f7:ff:53: b8:5f:5a:5e:53:26:51:b1:01:01:a3:5a:43:e5:e7: 49:39:a4:fc:fc:59:f7:72:b2:ba:ba:5e:26:9a:e3: 8e:d8:aa:83:a0:23:10:4e:b1:4f:65:54:33:e3:cd: 95:7c:2f:34:c6:8b:a1:77:4b:3b:b9:dd:1f:a0:a9: 84:6d:36:6e:c7:45:e8:c6:a6:04:80:94:6a:71:2c: be:f8:ce:f1:1b:7a:34:1a:f6:aa:1e:8e:fa:5c:b7: 9b:db:c3:0f:93:ec:73:43:27:2e:10:97:99:aa:8f: 96:85:65:89:84:a5:de:35:6f:ec:4e:a9:53:a2:4e: 13:ef:71:ad:05:6c:a2:28:0e:27:7f:73:b3:fe:cc: c6:a5:af:14:f1:62:e4:b2:0d:a0:07:34:8a:a0:55: 14:26:35:d2:3a:9a:b1:0e:8d:f6:22:2d:46:32:e5: 83:10:2d:3d:77:62:40:8b:c0:b3:f5:e7:5e:04:68: c9:27:44:bc:26:a3:c5:f3:40:a0:02:65:1d:7e:72: 02:cd:a1:42:36:91:5f:f8:0f:6b:7d:89:dc:eb:19: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D2:51:C5:CC:EE:C8:D3:7D:14:D2:45:E2:FF:D1:C7:8C:48:31:45 X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.170.0/24 Signature Algorithm: sha256WithRSAEncryption 14:92:8a:25:4b:39:15:15:c2:d2:39:3d:a6:19:15:0d:c7:ec: ed:7d:70:53:04:7f:05:f4:ab:c2:89:76:66:9f:ee:6c:2b:1b: 0b:27:a9:32:bd:c3:90:83:66:40:e3:9f:4f:d6:ac:76:70:f8: e3:30:40:e7:dc:f9:21:cf:1b:19:45:dd:19:a1:3f:f7:6f:55: 8e:32:b8:b2:58:69:1c:fb:1b:4c:5d:c4:0b:d0:1e:7d:1a:4b: 8e:76:96:8f:78:b0:f3:a4:a4:99:7e:48:e2:f2:7c:8c:61:7a: 83:79:d5:06:21:9d:19:9d:8e:a3:75:9b:7e:24:77:c5:48:00: 10:56:ce:31:aa:1c:5b:77:17:89:6c:be:3e:35:b6:22:13:38: b9:67:e3:a9:25:78:da:80:3f:76:2d:f8:90:76:c5:57:b3:d2: 53:49:7a:59:e6:95:82:0b:a9:25:27:81:eb:c0:5c:8e:fb:b2: 1d:35:b5:a5:15:95:f9:fb:35:e7:7b:66:68:02:ef:03:04:2e: 66:a8:0c:63:e6:64:60:c7:06:ca:f1:0c:ed:9a:a2:ab:13:8f: 3c:27:11:44:96:36:dd:29:23:38:38:a9:3d:1b:8d:2c:69:1e: 92:d3:47:01:4e:00:30:2d:6f:3e:c2:a2:38:0f:a5:32:8c:58: 9d:af:ca:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fdTvRbM4kb3fJM3Dn7wDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQyNTFjNWNjZWVjOGQzN2QxNGQyNDVlMmZmZDFjNzhjNDgzMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9gcywwi8QrcT/hTMO2scBOPckKe YvEU2STUbax5Z47CCYnAuZF1f0j3/1O4X1peUyZRsQEBo1pD5edJOaT8/Fn3crK6 ul4mmuOO2KqDoCMQTrFPZVQz482VfC80xouhd0s7ud0foKmEbTZux0XoxqYEgJRq cSy++M7xG3o0GvaqHo76XLeb28MPk+xzQycuEJeZqo+WhWWJhKXeNW/sTqlTok4T 73GtBWyiKA4nf3Oz/szGpa8U8WLksg2gBzSKoFUUJjXSOpqxDo32Ii1GMuWDEC09 d2JAi8Cz9edeBGjJJ0S8JqPF80CgAmUdfnICzaFCNpFf+A9rfYnc6xmPuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHSUcXM7sjTfRTSReL/0ceMSDFFMB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvNGRKUnhjenV5Tk45Rk5KRjR2X1J4NHhJTVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF2qMA0G CSqGSIb3DQEBCwUAA4IBAQAUkoolSzkVFcLSOT2mGRUNx+ztfXBTBH8F9KvCiXZm n+5sKxsLJ6kyvcOQg2ZA459P1qx2cPjjMEDn3PkhzxsZRd0ZoT/3b1WOMriyWGkc +xtMXcQL0B59GkuOdpaPeLDzpKSZfkji8nyMYXqDedUGIZ0ZnY6jdZt+JHfFSAAQ Vs4xqhxbdxeJbL4+NbYiEzi5Z+OpJXjagD92LfiQdsVXs9JTSXpZ5pWCC6klJ4Hr wFyO+7IdNbWlFZX5+zXne2ZoAu8DBC5mqAxj5mRgxwbK8QztmqKrE488JxFEljbd KSM4OKk9G40saR6S00cBTgAwLW8+wqI4D6UyjFidr8rn -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:53 2026 by rpki-client