This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4wJwuv8ksy9YWXWZ8eHzyszHVXE.roa File: 4wJwuv8ksy9YWXWZ8eHzyszHVXE.roa (raw, json) Hash identifier: La2ao5FOUDNf3LiTLqARy79qrIw9c3ZsqquxiI5Kb9A= Subject key identifier: E3:02:70:BA:FF:24:B3:2F:58:59:75:99:F1:E1:F3:CA:CC:C7:55:71 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE4B1A05E7FE5F816B588F23591B52 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4wJwuv8ksy9YWXWZ8eHzyszHVXE.roa Signing time: Fri 02 Jan 2026 04:19:10 +0000 ROA not before: Fri 02 Jan 2026 04:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 79.172.226.0/24 maxlen: 24 79.172.230.0/23 maxlen: 23 87.229.20.0/23 maxlen: 23 95.138.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4b:1a:05:e7:fe:5f:81:6b:58:8f:23:59:1b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e30270baff24b32f58597599f1e1f3caccc75571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:6c:fa:16:0e:61:84:3d:a0:4b:3d:11:6a: 55:55:2e:40:7c:17:65:08:86:0d:71:8f:e7:2f:cf: 97:8c:b2:0d:64:fc:00:82:9f:bb:52:3e:20:56:cd: 5f:c5:2b:bd:66:b1:ad:48:97:0e:15:6f:9c:83:a0: 8d:9b:d9:b9:19:66:82:f8:8b:86:d6:4a:76:76:99: 6d:f1:8b:8a:fa:be:3d:54:8c:f2:5c:1c:4d:4a:2d: 59:2f:90:55:11:9f:e9:bf:e5:fc:6a:e3:70:fd:e8: cf:22:2f:c6:ab:1b:10:74:50:3e:0d:b5:38:c5:0e: ba:11:92:f3:52:e1:60:87:be:d5:95:3b:f3:73:fc: f1:a1:83:d6:2a:9b:14:b9:cb:3f:8d:b2:2a:4a:49: b7:c5:e6:a7:b8:a0:ea:7a:50:df:62:33:fc:df:2d: 86:a3:c3:0f:34:44:f8:5d:f0:8a:a9:39:74:22:ad: 81:e2:98:2e:78:4e:82:70:dc:43:4b:f8:d0:92:71: e7:24:33:7b:ff:79:c5:b1:8a:f5:3e:eb:5c:f8:fd: 4c:5c:73:5e:9c:d1:cb:6f:e0:1f:6c:1a:7b:b7:73: 41:60:51:38:5c:8c:cc:62:57:34:9e:b0:2a:09:cc: b7:f7:58:32:b2:89:8b:c0:24:33:2d:00:9f:80:2d: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:02:70:BA:FF:24:B3:2F:58:59:75:99:F1:E1:F3:CA:CC:C7:55:71 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/4wJwuv8ksy9YWXWZ8eHzyszHVXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.226.0/24 79.172.230.0/23 87.229.20.0/23 95.138.198.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:25:95:96:49:07:9b:50:47:48:c9:3b:ab:5b:f9:77:54:e8: 22:20:27:d9:f5:57:a3:1a:6d:46:49:ab:67:c0:58:a0:5e:da: 91:6a:28:b5:70:95:7b:fa:00:22:b8:0a:92:7b:7b:1e:03:9f: 55:74:d1:dd:de:6b:6e:32:32:a7:b8:23:83:0e:90:fd:0e:a4: be:f6:f9:b7:31:6e:d3:72:71:9d:98:62:4d:bc:71:48:cf:28: a4:0a:9c:7a:64:38:8e:b9:a9:45:ef:12:82:74:06:90:ef:1a: 32:93:86:b3:c6:f3:e8:cd:41:a8:87:68:61:c3:bd:fc:cd:7a: 17:ca:21:8e:8c:63:ac:9b:60:52:d7:09:79:88:2c:37:05:f5: 2c:b3:65:44:6d:0b:ce:4c:b2:a9:dd:b4:ca:06:f6:69:fb:97: a3:5e:78:a7:3f:c9:17:40:36:c5:f6:e0:f8:59:93:08:c0:58: 52:6f:ce:37:79:be:d3:8a:fc:92:ce:94:f7:a5:88:3d:7a:fb: 1a:9a:ea:61:ec:52:54:b1:09:9d:ad:2d:be:8c:a6:ae:66:f1: 43:f8:03:1e:22:76:ba:e0:a2:79:e6:fe:c7:0f:04:8f:21:ef: e1:3a:dc:ef:75:59:6b:fa:58:0a:f6:fb:cf:60:90:16:24:96: 5d:a2:18:68 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87ksaBef+X4FrWI8jWRtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzAyNzBiYWZmMjRiMzJmNTg1OTc1OTlmMWUxZjNjYWNjYzc1NTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K5s+hYOYYQ9oEs9EWpVVS5AfBdl CIYNcY/nL8+XjLINZPwAgp+7Uj4gVs1fxSu9ZrGtSJcOFW+cg6CNm9m5GWaC+IuG 1kp2dplt8YuK+r49VIzyXBxNSi1ZL5BVEZ/pv+X8auNw/ejPIi/GqxsQdFA+DbU4 xQ66EZLzUuFgh77VlTvzc/zxoYPWKpsUucs/jbIqSkm3xeanuKDqelDfYjP83y2G o8MPNET4XfCKqTl0Iq2B4pgueE6CcNxDS/jQknHnJDN7/3nFsYr1Putc+P1MXHNe nNHLb+AfbBp7t3NBYFE4XIzMYlc0nrAqCcy391gysomLwCQzLQCfgC2XYwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOMCcLr/JLMvWFl1mfHh88rMx1VxMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvNHdKd3V2OGtzeTlZV1hXWjhlSHp5c3pIVlhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6ziAwQB T6zmAwQBV+UUAwQAX4rGMA0GCSqGSIb3DQEBCwUAA4IBAQBeJZWWSQebUEdIyTur W/l3VOgiICfZ9VejGm1GSatnwFigXtqRaii1cJV7+gAiuAqSe3seA59VdNHd3mtu MjKnuCODDpD9DqS+9vm3MW7TcnGdmGJNvHFIzyikCpx6ZDiOualF7xKCdAaQ7xoy k4azxvPozUGoh2hhw738zXoXyiGOjGOsm2BS1wl5iCw3BfUss2VEbQvOTLKp3bTK BvZp+5ejXninP8kXQDbF9uD4WZMIwFhSb843eb7TivySzpT3pYg9evsamuph7FJU sQmdrS2+jKauZvFD+AMeIna64KJ55v7HDwSPIe/hOtzvdVlr+lgK9vvPYJAWJJZd ohho -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:19 2026 by rpki-client