This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/s4x1_vx7m-H0gfyL0StEAy6YzRs.roa File: s4x1_vx7m-H0gfyL0StEAy6YzRs.roa (raw, json) Hash identifier: 3Vpwv83J2qwYJmzsrHAZik6LWctiQDR1zt3cBg+KO5U= Subject key identifier: B3:8C:75:FE:FC:7B:9B:E1:F4:81:FC:8B:D1:2B:44:03:2E:98:CD:1B Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C79B04C08CCD9C439D297A72F9261A Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/s4x1_vx7m-H0gfyL0StEAy6YzRs.roa Signing time: Thu 01 Jan 2026 04:18:48 +0000 ROA not before: Thu 01 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215903 IP address blocks: 195.136.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:9b:04:c0:8c:cd:9c:43:9d:29:7a:72:f9:26:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38c75fefc7b9be1f481fc8bd12b44032e98cd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3a:bc:46:c5:87:21:50:fe:ef:c1:0b:c0:80: 83:29:1b:fc:c4:eb:b2:9b:a1:8f:ff:65:73:d9:c8: cf:4e:6c:d4:8c:d8:07:41:60:50:98:d7:0b:90:57: 52:4a:25:90:b6:7a:b0:f6:fa:10:1c:9b:fc:73:5f: 54:c1:12:64:98:48:0b:4b:ef:19:29:34:a6:f3:e8: b4:97:f0:65:ff:a4:c1:d5:68:7b:82:15:ee:6b:cd: dd:55:1e:ea:ba:43:d3:71:f9:67:e6:89:7f:40:ff: 19:c1:58:41:48:8f:3c:d6:fe:4d:c0:e1:96:1c:b0: bb:75:e5:04:b7:75:1f:c7:19:32:76:bb:54:59:2a: e0:b9:a7:0e:fb:39:05:9d:65:60:41:ab:6c:1e:b7: f4:b1:d6:a4:47:6d:e0:50:4f:b6:54:79:2d:57:3c: cb:c7:64:e4:f7:33:4d:3f:63:38:64:65:a7:a3:59: d8:c1:0f:1f:0a:30:8e:67:8b:d4:90:c5:9e:43:39: ee:ba:b2:fd:5f:65:38:bb:3f:05:86:d5:2c:ed:e7: a5:a4:e4:2c:e1:17:52:6b:7b:a0:3b:b9:d6:60:9e: 45:cd:e6:d2:5f:af:0d:7b:23:8f:a4:b1:80:91:f5: 8a:0b:f6:1d:a9:62:91:f0:0d:65:b8:98:26:5f:6d: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8C:75:FE:FC:7B:9B:E1:F4:81:FC:8B:D1:2B:44:03:2E:98:CD:1B X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/s4x1_vx7m-H0gfyL0StEAy6YzRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.108.0/24 Signature Algorithm: sha256WithRSAEncryption 00:dc:f8:66:d5:e1:c5:cd:62:58:4c:5d:b3:89:a1:b8:a9:3a: 1d:d5:95:77:19:e4:41:da:29:e9:c1:79:be:33:c4:82:1b:61: 63:c0:ec:56:75:d6:59:0d:94:dc:f5:08:6f:18:70:67:a0:bc: 27:cb:64:e3:19:41:da:da:ea:6a:fe:a4:39:7d:2f:89:7b:eb: c6:c5:08:18:89:c9:cf:b4:49:e7:13:e5:11:36:a3:23:fa:b1: 8c:67:c8:3d:9a:49:62:f8:36:d4:6d:b8:c3:f8:e8:35:b1:f3: ae:20:4a:d9:6f:41:de:66:39:32:80:0a:5a:04:b2:10:45:1b: 85:2d:b3:88:98:e7:4b:86:c1:87:20:db:3c:05:eb:bd:9a:ab: ba:f8:22:0d:d5:00:e5:74:ff:eb:29:e2:b5:c0:07:6b:5c:5a: 6d:44:4b:03:e9:0c:12:83:9d:df:5c:41:78:51:7b:44:f9:f5: d3:fc:b5:32:59:ba:cd:1e:a8:39:5f:ca:b0:7e:d6:dd:48:d2: 6d:3b:35:f1:3d:53:76:ce:6f:5b:c7:17:61:32:6f:29:53:0e: ad:48:45:f7:45:d5:1f:2d:82:f4:b0:94:18:53:f7:c0:70:43: 34:d5:68:55:b2:3b:47:34:ac:0d:6c:c8:92:44:2e:38:82:fb: 3e:ed:32:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x5sEwIzNnEOdKXpy+SYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzhjNzVmZWZjN2I5YmUxZjQ4MWZjOGJkMTJiNDQwMzJlOThjZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zq8RsWHIVD+78ELwICDKRv8xOuy m6GP/2Vz2cjPTmzUjNgHQWBQmNcLkFdSSiWQtnqw9voQHJv8c19UwRJkmEgLS+8Z KTSm8+i0l/Bl/6TB1Wh7ghXua83dVR7qukPTcfln5ol/QP8ZwVhBSI881v5NwOGW HLC7deUEt3UfxxkydrtUWSrguacO+zkFnWVgQatsHrf0sdakR23gUE+2VHktVzzL x2Tk9zNNP2M4ZGWno1nYwQ8fCjCOZ4vUkMWeQznuurL9X2U4uz8FhtUs7eelpOQs 4RdSa3ugO7nWYJ5FzebSX68NeyOPpLGAkfWKC/YdqWKR8A1luJgmX22hEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOMdf78e5vh9IH8i9ErRAMumM0bMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvczR4MV92eDdtLUgwZ2Z5TDBTdEVBeTZZelJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4hsMA0G CSqGSIb3DQEBCwUAA4IBAQAA3Phm1eHFzWJYTF2ziaG4qTod1ZV3GeRB2inpwXm+ M8SCG2FjwOxWddZZDZTc9QhvGHBnoLwny2TjGUHa2upq/qQ5fS+Je+vGxQgYicnP tEnnE+URNqMj+rGMZ8g9mkli+DbUbbjD+Og1sfOuIErZb0HeZjkygApaBLIQRRuF LbOImOdLhsGHINs8Beu9mqu6+CIN1QDldP/rKeK1wAdrXFptREsD6QwSg53fXEF4 UXtE+fXT/LUyWbrNHqg5X8qwftbdSNJtOzXxPVN2zm9bxxdhMm8pUw6tSEX3RdUf LYL0sJQYU/fAcEM01WhVsjtHNKwNbMiSRC44gvs+7TJt -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:38 2026 by rpki-client