This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4ISob1MRyOWLUJW5R2zMaUuj1Jg.roa File: 4ISob1MRyOWLUJW5R2zMaUuj1Jg.roa (raw, json) Hash identifier: vtDbNMjvr4/6S6iAcsgfemSiq8AiKKjGetqOOjRWYWU= Subject key identifier: E0:84:A8:6F:53:11:C8:E5:8B:50:95:B9:47:6C:CC:69:4B:A3:D4:98 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BDD15F88EF7EC2424ED75421E102 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4ISob1MRyOWLUJW5R2zMaUuj1Jg.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50516 IP address blocks: 146.158.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bd:d1:5f:88:ef:7e:c2:42:4e:d7:54:21:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e084a86f5311c8e58b5095b9476ccc694ba3d498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:b3:dc:68:d9:cc:00:7d:f6:07:db:e5:e3: c7:77:01:41:1d:14:3b:db:98:15:19:53:6d:13:e1: 7f:b4:cf:19:b0:43:01:6a:8b:4d:69:51:e1:4c:1c: 5d:7c:a8:e8:94:6f:6d:e1:ec:a7:4f:e2:52:60:da: 42:87:0c:5a:73:a3:91:bf:61:ac:61:c1:2f:1d:fc: 3d:af:6e:40:c9:71:7a:e5:3f:fd:0e:c1:af:8f:59: 4a:03:95:76:b6:cf:ba:48:70:6d:49:b7:d3:ee:d1: b7:c7:00:d8:6e:9a:da:01:c8:cc:d3:b3:f5:f8:d8: 2f:83:ef:1c:58:bf:62:23:ff:2e:b8:76:8c:96:f2: 79:8f:0a:5e:f4:bf:22:e2:cc:ad:48:88:85:9a:9b: 65:78:46:d7:f0:7b:39:df:4a:a9:9f:ee:60:15:01: 9d:48:14:ec:51:15:cf:56:f6:f0:31:c8:89:9b:eb: f0:6e:9b:9e:8b:22:fd:9b:eb:66:be:a3:70:36:84: ef:37:42:56:d4:ee:a3:fa:1a:d0:f3:d2:85:e2:d3: e1:9d:67:0d:9f:cd:3c:6c:bf:3b:ea:7c:ff:44:a4: 8a:63:70:5d:95:e7:67:6f:57:fd:7c:3e:0c:8c:20: c0:50:ca:b8:df:c7:71:37:fa:35:a1:f0:f8:a8:56: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:84:A8:6F:53:11:C8:E5:8B:50:95:B9:47:6C:CC:69:4B:A3:D4:98 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4ISob1MRyOWLUJW5R2zMaUuj1Jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.158.12.0/23 Signature Algorithm: sha256WithRSAEncryption 04:8b:a1:49:7f:8b:14:eb:5b:1c:64:db:40:dc:25:fa:59:3a: d8:7e:ae:79:10:2b:d6:6c:df:da:3f:ea:7c:b5:21:6f:1a:fe: 98:36:22:35:91:2d:19:23:fc:bd:7c:fd:97:f6:c3:6a:a6:2d: d8:5e:34:67:9e:f2:a7:b0:d5:81:34:b9:04:4c:32:82:71:b0: c8:c0:26:4b:59:33:53:64:94:3c:c9:6f:4a:35:a7:21:04:5c: 23:5b:57:12:5a:d5:9b:1a:cc:f1:d4:a0:12:b7:01:7e:20:4e: 1f:62:1e:8b:ff:25:1f:b7:51:6a:42:77:f8:b4:bc:e7:4e:1c: 51:4c:a3:a2:24:e4:f8:e1:ef:27:60:68:a3:23:86:60:db:fe: 2e:50:c7:1c:f6:ff:4c:a6:8b:47:14:eb:c6:58:52:b4:2b:84: ac:42:1e:9e:6c:73:21:3c:13:a7:af:b3:50:08:00:e5:77:9b: 98:3b:13:7a:7d:c7:96:87:c2:f6:ab:ab:8f:28:fa:de:6c:b5: 5f:0f:bd:8c:f8:8c:41:89:01:09:fb:c9:5b:f2:3b:8c:98:a3: 00:ad:2f:53:46:46:5a:b0:17:bf:e1:28:69:30:fd:ff:6c:dc: 8c:7f:46:4a:f0:0d:c3:88:4c:ed:b3:82:05:d1:23:4d:22:f1: a5:14:11:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hL3RX4jvfsJCTtdUIeECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDg0YTg2ZjUzMTFjOGU1OGI1MDk1Yjk0NzZjY2M2OTRiYTNkNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBWz3GjZzAB99gfb5ePHdwFBHRQ7 25gVGVNtE+F/tM8ZsEMBaotNaVHhTBxdfKjolG9t4eynT+JSYNpChwxac6ORv2Gs YcEvHfw9r25AyXF65T/9DsGvj1lKA5V2ts+6SHBtSbfT7tG3xwDYbpraAcjM07P1 +Ngvg+8cWL9iI/8uuHaMlvJ5jwpe9L8i4sytSIiFmptleEbX8Hs530qpn+5gFQGd SBTsURXPVvbwMciJm+vwbpueiyL9m+tmvqNwNoTvN0JW1O6j+hrQ89KF4tPhnWcN n808bL876nz/RKSKY3Bdlednb1f9fD4MjCDAUMq438dxN/o1ofD4qFb1hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCEqG9TEcjli1CVuUdszGlLo9SYMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvNElTb2IxTVJ5T1dMVUpXNVIyek1hVXVqMUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkp4MMA0G CSqGSIb3DQEBCwUAA4IBAQAEi6FJf4sU61scZNtA3CX6WTrYfq55ECvWbN/aP+p8 tSFvGv6YNiI1kS0ZI/y9fP2X9sNqpi3YXjRnnvKnsNWBNLkETDKCcbDIwCZLWTNT ZJQ8yW9KNachBFwjW1cSWtWbGszx1KAStwF+IE4fYh6L/yUft1FqQnf4tLznThxR TKOiJOT44e8nYGijI4Zg2/4uUMcc9v9MpotHFOvGWFK0K4SsQh6ebHMhPBOnr7NQ CADld5uYOxN6fceWh8L2q6uPKPrebLVfD72M+IxBiQEJ+8lb8juMmKMArS9TRkZa sBe/4ShpMP3/bNyMf0ZK8A3DiEzts4IF0SNNIvGlFBEM -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:53 2026 by rpki-client