This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/4Kqssfz45wqKl4Y5usAP2cryF-s.roa File: 4Kqssfz45wqKl4Y5usAP2cryF-s.roa (raw, json) Hash identifier: VtsQh8EBUySqJ+8n7XXtvvG+r8GbNYVy0DLEl3LAFic= Subject key identifier: E0:AA:AC:B1:FC:F8:E7:0A:8A:97:86:39:BA:C0:0F:D9:CA:F2:17:EB Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019B7FF1AD3AF29960DF5CB19175F1C7B07A Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/4Kqssfz45wqKl4Y5usAP2cryF-s.roa Signing time: Fri 02 Jan 2026 18:21:43 +0000 ROA not before: Fri 02 Jan 2026 18:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 176.103.62.0/23 maxlen: 23 2a13:f580:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ad:3a:f2:99:60:df:5c:b1:91:75:f1:c7:b0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Jan 2 18:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0aaacb1fcf8e70a8a978639bac00fd9caf217eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:88:25:80:06:c7:33:4b:23:ef:bc:ec:66: f3:5c:1e:51:c9:36:45:21:21:02:ff:a9:99:22:6c: 7b:54:16:79:ee:11:f3:24:08:f7:99:ac:e2:2b:08: a4:3d:8e:4e:17:62:10:9d:91:cc:cc:82:7b:c3:86: 34:f0:51:97:c3:47:c3:2c:f8:2f:37:91:13:2f:03: f3:da:11:df:75:62:7b:d1:44:5f:bc:9b:93:ad:be: ba:b7:4d:cf:9b:24:aa:dc:21:e5:63:81:e5:d9:b1: ab:16:d7:47:02:f1:6b:7f:af:c1:00:bd:66:98:7d: b7:b7:5a:d8:6d:54:7b:76:07:31:9f:fe:a6:83:c2: ab:7f:f3:e9:7b:f8:bd:70:b6:4b:4a:12:7e:3d:49: 0f:6a:df:0c:2f:82:ed:df:28:5a:16:e0:86:97:68: c6:d1:91:32:dd:ea:6d:30:f1:bb:bd:98:a8:fa:8d: d0:4e:99:5f:ad:1b:d1:36:63:04:f7:00:06:82:cf: b8:21:8f:53:b5:d3:21:73:5f:7d:b8:5a:36:2f:27: 5b:92:86:5b:47:1c:2c:d5:76:a1:2e:99:bf:67:f0: d6:2b:f7:c9:84:a3:40:b7:a3:34:5d:26:26:8a:f0: 80:83:3c:a0:45:ea:70:a5:8b:48:0d:6a:7a:c4:66: 7c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:AC:B1:FC:F8:E7:0A:8A:97:86:39:BA:C0:0F:D9:CA:F2:17:EB X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/4Kqssfz45wqKl4Y5usAP2cryF-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.62.0/23 IPv6: 2a13:f580:2::/48 Signature Algorithm: sha256WithRSAEncryption 82:6c:7d:45:02:5f:08:61:60:d9:d1:b5:2b:89:e0:d0:34:3f: 6d:1c:43:de:2a:17:4e:d7:d3:62:3c:6e:68:dc:06:9d:20:6f: 28:44:60:d4:be:10:77:f5:cf:79:dd:3b:d4:64:26:e7:0a:e0: cf:82:48:f4:5a:f1:69:a3:ca:7d:9a:4c:cd:63:fa:e5:9d:74: c7:36:ac:e4:df:76:0f:28:da:1b:4f:8a:af:4d:9f:03:89:b3: 2b:a0:e5:e1:a0:31:aa:b2:02:a6:b6:f2:c9:06:7d:c9:f9:4c: 7c:f9:41:fe:ab:d6:95:0f:e0:2d:fe:6d:f4:42:27:66:4f:66: 44:d5:96:9d:8d:e3:2b:5b:b5:db:58:88:34:2c:4d:6d:e7:0f: 63:06:c3:6d:94:a5:a0:cc:25:3f:59:b9:f9:0d:c9:91:b6:61: a9:e5:91:3f:e4:92:5b:96:7d:af:a3:a1:db:22:17:28:f7:3c: 8e:77:86:e7:a1:72:c3:59:b0:9d:f2:d7:29:9e:d9:d8:88:e7: 69:a8:65:dc:c4:eb:51:b2:50:4d:cb:e6:db:44:ce:c3:5e:92: de:bc:83:70:8f:7b:30:b2:99:03:3f:25:a4:04:8a:21:2c:b6: 57:5b:20:d6:c5:a0:e5:1b:15:d4:7d:33:43:0d:c6:8d:80:21: 20:2b:e2:9d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8a068plg31yxkXXxx7B6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjYwMTAyMTgyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFhYWNiMWZjZjhlNzBhOGE5Nzg2MzliYWMwMGZkOWNhZjIxN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDyIJYAGxzNLI++87GbzXB5RyTZF ISEC/6mZImx7VBZ57hHzJAj3maziKwikPY5OF2IQnZHMzIJ7w4Y08FGXw0fDLPgv N5ETLwPz2hHfdWJ70URfvJuTrb66t03PmySq3CHlY4Hl2bGrFtdHAvFrf6/BAL1m mH23t1rYbVR7dgcxn/6mg8Krf/Ppe/i9cLZLShJ+PUkPat8ML4Lt3yhaFuCGl2jG 0ZEy3eptMPG7vZio+o3QTplfrRvRNmME9wAGgs+4IY9TtdMhc199uFo2LydbkoZb Rxws1XahLpm/Z/DWK/fJhKNAt6M0XSYmivCAgzygRepwpYtIDWp6xGZ8BwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOCqrLH8+OcKipeGObrAD9nK8hfrMB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvNEtxc3NmejQ1d3FLbDRZNXVzQVAyY3J5Ri1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBsGc+MA8E AgACMAkDBwAqE/WAAAIwDQYJKoZIhvcNAQELBQADggEBAIJsfUUCXwhhYNnRtSuJ 4NA0P20cQ94qF07X02I8bmjcBp0gbyhEYNS+EHf1z3ndO9RkJucK4M+CSPRa8Wmj yn2aTM1j+uWddMc2rOTfdg8o2htPiq9NnwOJsyug5eGgMaqyAqa28skGfcn5THz5 Qf6r1pUP4C3+bfRCJ2ZPZkTVlp2N4ytbtdtYiDQsTW3nD2MGw22UpaDMJT9ZufkN yZG2YanlkT/kkluWfa+jodsiFyj3PI53huehcsNZsJ3y1yme2diI52moZdzE61Gy UE3L5ttEzsNekt68g3CPezCymQM/JaQEiiEstldbINbFoOUbFdR9M0MNxo2AISAr 4p0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:30 2026 by rpki-client