This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_4LS-1wzUngu_2zDwIV5Ef0mLp4.roa File: _4LS-1wzUngu_2zDwIV5Ef0mLp4.roa (raw, json) Hash identifier: J1wqHj4MeRhis5ONbisQTRB0edYSdC8/SKILZiJLZ/A= Subject key identifier: FF:82:D2:FB:5C:33:52:78:2E:FF:6C:C3:C0:85:79:11:FD:26:2E:9E Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69C0C30F86A0B323544FA9789686E Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_4LS-1wzUngu_2zDwIV5Ef0mLp4.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44834 IP address blocks: 109.248.255.0/24 maxlen: 24 188.130.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9c:0c:30:f8:6a:0b:32:35:44:fa:97:89:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff82d2fb5c3352782eff6cc3c0857911fd262e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:2c:99:cc:86:50:97:07:39:fa:da:b6:cc: c3:38:de:d5:a8:fd:bd:d6:74:96:f6:2e:af:6f:76: 27:0f:c4:a1:24:a9:7b:11:41:f1:a3:b8:89:e7:1b: 78:86:d4:36:4f:16:84:64:24:62:d8:8d:2b:f4:f9: 98:f1:a9:c8:84:b2:e0:76:41:76:3a:97:71:29:bb: e4:68:a2:71:de:9f:9a:54:5b:b4:ad:20:23:20:a1: aa:0b:79:2e:3d:1a:59:b7:82:ef:4b:66:45:55:36: 8e:05:20:34:94:d6:c3:30:1d:7e:ef:da:e4:87:cb: 07:ff:f8:49:b9:dc:3a:ea:11:ad:a6:0f:ca:82:15: b7:9f:ce:a7:f2:c7:24:c1:cd:f5:45:cf:f5:d2:9b: 47:c2:3d:7a:fa:ab:e4:3e:a5:f4:c5:97:64:40:59: 66:af:b9:ef:4f:95:6d:40:e3:5c:f0:c0:e8:76:e3: db:80:2f:81:c6:fc:89:81:2b:f0:24:a0:6d:38:6e: 67:58:34:bf:53:e0:0f:38:ca:71:50:28:39:83:54: a7:96:77:47:23:f1:57:2b:91:14:74:51:7a:46:fd: 30:d4:86:81:58:2c:33:26:08:15:8e:7c:84:ce:ed: 1a:fd:3f:81:c5:53:52:22:6d:39:94:6f:9d:31:8c: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:D2:FB:5C:33:52:78:2E:FF:6C:C3:C0:85:79:11:FD:26:2E:9E X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_4LS-1wzUngu_2zDwIV5Ef0mLp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.248.255.0/24 188.130.236.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:c8:60:94:4c:ed:b8:c2:80:e1:4f:c1:41:d2:80:5b:22:39: 61:30:5b:41:9b:c4:43:75:f7:e9:76:22:a4:ab:5a:32:21:38: 81:a5:1c:64:4f:04:37:b3:93:ed:3a:46:e6:c8:8d:ee:88:33: 0c:aa:4c:41:56:f6:7e:f8:3c:b8:cd:1a:a0:6c:5d:ab:36:04: 68:9c:77:d3:f2:02:65:d1:f6:30:3d:3b:7a:30:d7:dc:1b:74: 3c:17:eb:d5:e0:78:1a:7b:7f:ab:ac:37:ee:7c:26:6c:cd:77: f6:ce:9c:98:ec:3b:37:52:28:41:16:45:06:69:66:a1:b6:bb: 4b:0c:ab:20:0d:2b:06:d6:68:15:16:26:c0:55:98:17:ba:48: 5e:c9:0f:60:74:b7:ec:9e:e4:82:47:37:99:59:66:11:b2:90: df:52:9a:93:45:68:bc:ff:3c:eb:12:74:50:da:5e:da:a3:56: 16:ef:6b:74:5c:18:04:7f:a4:e5:a8:94:07:14:10:4b:ba:90: 7d:83:ec:17:f8:32:43:7b:67:c7:18:13:ce:ca:d2:e2:34:1c: fb:c3:a1:c7:22:75:14:cd:9c:86:2a:aa:d2:54:d3:0d:df:48: 90:65:d1:3b:49:6c:80:c4:f9:da:72:4e:aa:5c:31:86:8e:42: 83:e4:9d:0b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpwMMPhqCzI1RPqXiWhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjgyZDJmYjVjMzM1Mjc4MmVmZjZjYzNjMDg1NzkxMWZkMjYyZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWcsmcyGUJcHOfratszDON7VqP29 1nSW9i6vb3YnD8ShJKl7EUHxo7iJ5xt4htQ2TxaEZCRi2I0r9PmY8anIhLLgdkF2 OpdxKbvkaKJx3p+aVFu0rSAjIKGqC3kuPRpZt4LvS2ZFVTaOBSA0lNbDMB1+79rk h8sH//hJudw66hGtpg/KghW3n86n8sckwc31Rc/10ptHwj16+qvkPqX0xZdkQFlm r7nvT5VtQONc8MDoduPbgC+BxvyJgSvwJKBtOG5nWDS/U+APOMpxUCg5g1SnlndH I/FXK5EUdFF6Rv0w1IaBWCwzJggVjnyEzu0a/T+BxVNSIm05lG+dMYw6/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP+C0vtcM1J4Lv9sw8CFeRH9Ji6eMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvXzRMUy0xd3pVbmd1XzJ6RHdJVjVFZjBtTHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbfj/AwQB vILsMA0GCSqGSIb3DQEBCwUAA4IBAQCcyGCUTO24woDhT8FB0oBbIjlhMFtBm8RD dffpdiKkq1oyITiBpRxkTwQ3s5PtOkbmyI3uiDMMqkxBVvZ++Dy4zRqgbF2rNgRo nHfT8gJl0fYwPTt6MNfcG3Q8F+vV4Hgae3+rrDfufCZszXf2zpyY7Ds3UihBFkUG aWahtrtLDKsgDSsG1mgVFibAVZgXukheyQ9gdLfsnuSCRzeZWWYRspDfUpqTRWi8 /zzrEnRQ2l7ao1YW72t0XBgEf6TlqJQHFBBLupB9g+wX+DJDe2fHGBPOytLiNBz7 w6HHInUUzZyGKqrSVNMN30iQZdE7SWyAxPnack6qXDGGjkKD5J0L -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:36 2026 by rpki-client