This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa File: 4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa (raw, json) Hash identifier: OFGALUWYGYQUhuMA4C2j6MOHRafPxWdeZlAg1HAW/jw= Subject key identifier: E1:0B:AE:3A:30:34:BA:83:D8:4E:CE:C1:67:3E:64:74:EE:2C:41:BE Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED1C3DDD170BAF5B174D965C657E89 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35392 IP address blocks: 94.188.142.0/24 maxlen: 24 94.188.198.0/24 maxlen: 24 94.188.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:3d:dd:17:0b:af:5b:17:4d:96:5c:65:7e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10bae3a3034ba83d84ecec1673e6474ee2c41be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:17:e2:b4:64:c7:1f:aa:17:d7:dc:51:dd: 26:3b:7f:5d:5c:61:a5:b7:5b:ff:23:b4:0c:93:ce: 51:0a:40:5c:1e:a7:07:fe:78:70:59:08:18:38:53: 4b:a8:38:21:5e:e4:1d:99:73:d9:61:28:77:c8:81: e5:fa:c6:0a:14:ec:27:35:cb:42:cc:b3:7c:e8:20: ba:eb:ba:a2:e8:00:73:80:63:16:55:ed:f7:82:f4: 26:22:21:31:ed:64:3d:c9:8d:ed:3c:d8:0f:3b:8d: c4:3c:ef:75:04:1b:37:29:80:21:59:a9:f7:29:9a: e7:10:9a:26:a5:7f:4d:bf:6e:9e:b4:18:34:e1:2c: 89:d7:0c:a9:3e:c8:9d:85:a6:b1:72:0f:f5:40:0f: a5:01:6b:3c:40:af:5f:c0:2e:a1:52:99:3a:74:b7: 18:99:41:fc:3f:42:c4:a4:f6:29:5f:f8:75:d4:94: 7b:ff:8a:51:1b:2e:92:be:e3:e6:ae:51:63:8b:26: 67:73:6f:36:fc:13:d3:da:e7:e7:09:48:57:6b:14: bf:bd:66:95:7c:48:39:47:b1:60:3b:a0:38:44:aa: cc:bf:43:b5:1f:f1:a6:d3:c9:cc:be:99:f3:25:7d: 92:e1:3b:aa:a0:90:d4:5e:7e:08:e1:14:8e:da:ba: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:AE:3A:30:34:BA:83:D8:4E:CE:C1:67:3E:64:74:EE:2C:41:BE X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4QuuOjA0uoPYTs7BZz5kdO4sQb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.142.0/24 94.188.198.0/24 94.188.220.0/24 Signature Algorithm: sha256WithRSAEncryption 42:07:25:81:ef:5e:bb:36:00:a0:43:2a:ec:25:99:68:25:a5: 30:e6:ef:2e:aa:f9:1c:6c:7c:c1:67:7e:18:c9:75:ba:2a:70: 90:05:4a:4d:2e:18:9b:ad:08:0b:a1:2d:97:9c:3b:a7:89:2c: 85:b1:e4:2c:a1:ac:76:71:95:79:d9:ab:9e:25:e2:a3:a9:1a: 50:96:d7:25:dd:c8:c8:e9:9b:e9:c1:f3:00:ea:93:ca:c3:30: a5:c8:66:d7:00:eb:1a:84:43:3a:bf:6d:f9:16:0c:b8:04:5c: a3:6c:50:7e:c5:96:07:76:20:ec:18:6b:7f:eb:ff:b2:c7:99: 75:0f:f3:e5:a6:27:39:94:77:b2:46:e4:ee:ac:e4:7c:02:f0: d7:63:9a:c3:07:d3:56:59:6d:1c:f0:9f:c0:84:ad:bf:fa:90: bf:56:6e:e8:71:54:c0:ad:b1:e6:1f:a8:3d:9c:a8:40:20:83: 72:71:01:eb:ec:54:78:39:da:7a:33:db:b7:5c:dc:fd:4d:00: c4:85:a5:03:2e:72:ea:7e:dd:2a:c4:16:c9:bd:0f:aa:f0:58: 49:0a:c2:81:4f:55:6f:af:b7:2e:85:be:0b:ad:2d:2d:3a:6d: c6:da:22:18:7e:da:c6:f6:a9:15:51:8f:6f:b9:c8:94:83:08: 35:11:07:22 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57Rw93RcLr1sXTZZcZX6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBiYWUzYTMwMzRiYTgzZDg0ZWNlYzE2NzNlNjQ3NGVlMmM0MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtcX4rRkxx+qF9fcUd0mO39dXGGl t1v/I7QMk85RCkBcHqcH/nhwWQgYOFNLqDghXuQdmXPZYSh3yIHl+sYKFOwnNctC zLN86CC667qi6ABzgGMWVe33gvQmIiEx7WQ9yY3tPNgPO43EPO91BBs3KYAhWan3 KZrnEJompX9Nv26etBg04SyJ1wypPsidhaaxcg/1QA+lAWs8QK9fwC6hUpk6dLcY mUH8P0LEpPYpX/h11JR7/4pRGy6SvuPmrlFjiyZnc282/BPT2ufnCUhXaxS/vWaV fEg5R7FgO6A4RKrMv0O1H/Gm08nMvpnzJX2S4TuqoJDUXn4I4RSO2rpA6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOELrjowNLqD2E7OwWc+ZHTuLEG+MB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNFF1dU9qQTB1b1BZVHM3Qlp6NWtkTzRzUWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXryOAwQA XrzGAwQAXrzcMA0GCSqGSIb3DQEBCwUAA4IBAQBCByWB7167NgCgQyrsJZloJaUw 5u8uqvkcbHzBZ34YyXW6KnCQBUpNLhibrQgLoS2XnDuniSyFseQsoax2cZV52aue JeKjqRpQltcl3cjI6ZvpwfMA6pPKwzClyGbXAOsahEM6v235Fgy4BFyjbFB+xZYH diDsGGt/6/+yx5l1D/Plpic5lHeyRuTurOR8AvDXY5rDB9NWWW0c8J/AhK2/+pC/ Vm7ocVTArbHmH6g9nKhAIINycQHr7FR4Odp6M9u3XNz9TQDEhaUDLnLqft0qxBbJ vQ+q8FhJCsKBT1Vvr7cuhb4LrS0tOm3G2iIYftrG9qkVUY9vuciUgwg1EQci -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:29 2026 by rpki-client