This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/R4_SJs76nKZn0cSBV0Fo8ieHskA.roa File: R4_SJs76nKZn0cSBV0Fo8ieHskA.roa (raw, json) Hash identifier: c/IdymIEHuxEUxv3cqvY3uKO7Hvs1Km9DwMMsG6LoKE= Subject key identifier: 47:8F:D2:26:CE:FA:9C:A6:67:D1:C4:81:57:41:68:F2:27:87:B2:40 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B791119991B3F948311BD44A28BBD2BE1 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/R4_SJs76nKZn0cSBV0Fo8ieHskA.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56486 IP address blocks: 37.202.243.0/24 maxlen: 24 94.182.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:19:99:1b:3f:94:83:11:bd:44:a2:8b:bd:2b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=478fd226cefa9ca667d1c481574168f22787b240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:b4:85:1f:7b:7b:4a:c2:ca:84:bc:a5:98: 0b:6f:ca:98:b2:72:bb:d1:28:8d:bb:fc:60:a7:5b: 93:7c:2e:b5:fd:12:63:81:88:76:d5:44:c7:de:35: 41:98:dc:d3:a6:e6:b2:9c:0b:75:1d:16:eb:53:93: 4b:6d:b6:86:18:d5:da:c6:41:9b:d3:0b:19:53:56: 12:51:8f:01:88:36:1b:19:a0:43:88:8d:f1:79:8f: 93:a3:b1:28:b3:15:67:55:58:39:ee:88:15:1d:c3: e1:ef:8f:f9:2a:06:ad:b5:3c:ed:08:a5:53:20:2f: fe:73:bc:6c:11:2c:3d:3b:da:5d:25:41:93:86:77: 3d:08:d8:d3:90:54:0c:60:f8:ff:12:b2:c4:51:f4: f4:fa:f3:33:fd:a5:ab:35:c1:d4:da:ae:72:86:2d: 62:cf:6f:38:ce:6f:71:9f:18:fd:e7:a9:77:ca:7a: 64:94:e9:a9:29:3b:c4:b6:cb:43:74:14:ba:21:4b: b4:8a:6e:9d:0c:1f:7b:5b:6d:21:36:b0:7e:2d:e9: 20:c3:78:6c:59:6e:a4:27:d6:c4:32:00:2d:9b:d2: 67:81:6d:9c:38:69:bb:c1:80:f0:b6:a9:90:11:f6: 88:7a:2c:41:cc:d1:63:0f:8f:81:22:cc:0e:c5:73: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:D2:26:CE:FA:9C:A6:67:D1:C4:81:57:41:68:F2:27:87:B2:40 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/R4_SJs76nKZn0cSBV0Fo8ieHskA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.243.0/24 94.182.30.0/24 Signature Algorithm: sha256WithRSAEncryption 65:c6:ab:88:02:03:d5:cb:f2:07:31:85:09:db:9c:03:45:44: 38:f8:7b:14:0c:e5:7f:23:4e:8b:5f:4f:44:f5:b5:f8:7b:62: d8:b2:da:f1:65:2a:3b:0a:3d:a1:00:59:bf:d7:50:bc:b9:0f: 8e:d9:d1:04:9c:af:7b:55:dc:83:41:3a:97:a5:0d:c1:94:05: dd:b0:45:63:a4:d2:5f:51:76:b8:bf:6d:ee:52:3e:5d:44:ca: a2:3a:e0:54:de:11:37:fb:bf:7d:58:b7:f9:79:06:d1:8a:f9: 93:66:75:fc:18:c1:12:a1:ac:3c:5d:ce:2f:e9:7e:fb:aa:d1: e4:8a:53:72:ae:56:5f:52:3b:ec:f9:08:1b:6c:a1:0c:9d:b8: fb:e8:77:22:3b:5e:e2:e7:88:a1:94:58:e0:94:32:2e:2b:ae: bb:a0:63:7b:7f:0b:c0:2f:c9:a9:96:c6:38:1b:6f:09:90:49: ad:1e:82:e1:83:9b:c6:2e:ab:69:dc:41:e0:98:d8:86:e0:15: 9c:78:3e:25:b5:17:38:a8:2f:5a:18:56:0d:90:c5:a1:0b:ce: 0e:ad:dc:fe:67:2b:be:a7:10:7c:84:e6:b3:00:ae:76:fe:8f: 0a:49:ce:de:44:c8:7d:a6:32:18:89:55:9f:dd:77:fb:2c:df: 04:51:b5:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERmZGz+UgxG9RKKLvSvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzhmZDIyNmNlZmE5Y2E2NjdkMWM0ODE1NzQxNjhmMjI3ODdiMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpi0hR97e0rCyoS8pZgLb8qYsnK7 0SiNu/xgp1uTfC61/RJjgYh21UTH3jVBmNzTpuaynAt1HRbrU5NLbbaGGNXaxkGb 0wsZU1YSUY8BiDYbGaBDiI3xeY+To7EosxVnVVg57ogVHcPh74/5KgattTztCKVT IC/+c7xsESw9O9pdJUGThnc9CNjTkFQMYPj/ErLEUfT0+vMz/aWrNcHU2q5yhi1i z284zm9xnxj956l3ynpklOmpKTvEtstDdBS6IUu0im6dDB97W20hNrB+Lekgw3hs WW6kJ9bEMgAtm9JngW2cOGm7wYDwtqmQEfaIeixBzNFjD4+BIswOxXO88wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEeP0ibO+pymZ9HEgVdBaPInh7JAMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvUjRfU0pzNzZuS1puMGNTQlYwRm84aWVIc2tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrzAwQA XrYeMA0GCSqGSIb3DQEBCwUAA4IBAQBlxquIAgPVy/IHMYUJ25wDRUQ4+HsUDOV/ I06LX09E9bX4e2LYstrxZSo7Cj2hAFm/11C8uQ+O2dEEnK97VdyDQTqXpQ3BlAXd sEVjpNJfUXa4v23uUj5dRMqiOuBU3hE3+799WLf5eQbRivmTZnX8GMESoaw8Xc4v 6X77qtHkilNyrlZfUjvs+QgbbKEMnbj76HciO17i54ihlFjglDIuK667oGN7fwvA L8mplsY4G28JkEmtHoLhg5vGLqtp3EHgmNiG4BWceD4ltRc4qC9aGFYNkMWhC84O rdz+Zyu+pxB8hOazAK52/o8KSc7eRMh9pjIYiVWf3Xf7LN8EUbXi -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:48 2026 by rpki-client