This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/4rH8_KArysg1wV6ciMc3tWxygTg.roa File: 4rH8_KArysg1wV6ciMc3tWxygTg.roa (raw, json) Hash identifier: cq85Psa3QmMqDUVP4F4xb9vfchcL6V84oYNIOe6pTDM= Subject key identifier: E2:B1:FC:FC:A0:2B:CA:C8:35:C1:5E:9C:88:C7:37:B5:6C:72:81:38 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DFE2DF634AA399D850129D8E936B Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/4rH8_KArysg1wV6ciMc3tWxygTg.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35238 IP address blocks: 86.63.224.0/19 maxlen: 19 91.91.0.0/16 maxlen: 16 2a00:a580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:df:e2:df:63:4a:a3:99:d8:50:12:9d:8e:93:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2b1fcfca02bcac835c15e9c88c737b56c728138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:e6:ef:13:ad:fe:16:ef:9d:4b:95:a0:ba: 65:f0:ec:04:65:32:c6:03:ab:48:6a:3c:b3:60:e2: 86:b5:b0:7b:85:1b:90:cf:85:43:07:f3:a3:13:39: cf:ad:88:cc:a8:86:96:92:1e:aa:da:84:1e:ae:0b: 33:da:f2:b5:df:42:32:eb:70:28:f2:d2:1b:85:cd: 9b:fe:a4:48:88:76:73:8e:44:84:d0:c0:7f:da:31: b5:8b:f2:fe:95:56:70:48:e8:4c:ea:75:6c:fc:44: 3b:f9:3b:c6:ff:a5:3c:f9:61:06:f7:42:0d:24:31: 0c:f8:98:9b:b1:f3:11:65:04:0c:bc:6a:d0:8f:5a: 25:3c:d5:20:d4:49:9b:9b:cd:de:40:41:c3:33:e2: 80:4e:f4:85:22:8d:9f:67:22:f9:35:9d:cb:47:2b: a3:90:d9:9f:28:50:3f:29:0e:24:7e:fa:cf:89:cd: 6d:6d:64:9a:5e:c0:5f:a1:50:21:f1:97:5e:33:ab: c4:43:b7:c9:23:e6:9f:7a:ce:90:22:23:87:4e:f4: d6:c4:37:c7:14:b2:77:cb:59:d8:8b:b0:6e:f6:52: c3:5a:0a:27:0e:5a:e5:31:d2:8a:d8:b2:6a:e6:6a: a1:63:04:18:85:90:19:6a:a7:f6:4d:13:78:b3:15: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:FC:FC:A0:2B:CA:C8:35:C1:5E:9C:88:C7:37:B5:6C:72:81:38 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/4rH8_KArysg1wV6ciMc3tWxygTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.63.224.0/19 91.91.0.0/16 IPv6: 2a00:a580::/32 Signature Algorithm: sha256WithRSAEncryption 77:92:2e:e8:8e:4b:66:6d:7e:d6:89:7d:0e:58:e4:29:66:55: db:4e:3e:85:0c:20:ef:47:68:ae:8d:c2:0c:d9:2f:cf:94:69: a0:22:19:04:6b:62:89:a4:2c:83:5f:cf:13:55:35:9c:52:09: bf:e5:b0:8f:82:4a:77:e0:30:66:b1:77:5c:c7:59:4f:1d:61: d1:d0:40:ee:7d:8b:18:8d:d8:cc:e9:fb:86:2f:62:92:1b:39: 2b:e8:88:d6:25:83:3d:4b:22:ec:19:7b:a3:cc:d1:15:1c:3b: 97:ab:e6:65:76:e6:f9:f5:02:4b:8e:f1:ed:ad:7f:d8:3d:da: d6:1f:30:37:e4:88:03:f7:a9:58:d6:e5:78:a8:cf:42:16:23: 6a:44:40:32:b0:b0:0b:10:a1:f9:ad:62:15:e9:00:42:4d:47: 3c:6a:a7:94:d1:27:3f:cd:a6:4c:c3:41:47:91:48:ab:88:7d: 24:5d:93:de:71:7a:37:a0:d1:e7:c5:d5:4b:8c:5d:54:90:a0: 1f:ab:3c:fc:74:e6:ce:c5:5c:b7:18:a5:ce:ce:fd:3f:79:da: 70:3f:fc:07:f5:5d:43:1c:09:90:70:0a:df:19:ea:4a:ab:1c: da:8b:19:fc:a0:21:87:7a:e5:0d:63:9d:6b:ee:57:a9:60:27: 88:6f:2f:a6 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6yN/i32NKo5nYUBKdjpNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmIxZmNmY2EwMmJjYWM4MzVjMTVlOWM4OGM3MzdiNTZjNzI4MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V/m7xOt/hbvnUuVoLpl8OwEZTLG A6tIajyzYOKGtbB7hRuQz4VDB/OjEznPrYjMqIaWkh6q2oQergsz2vK130Iy63Ao 8tIbhc2b/qRIiHZzjkSE0MB/2jG1i/L+lVZwSOhM6nVs/EQ7+TvG/6U8+WEG90IN JDEM+JibsfMRZQQMvGrQj1olPNUg1Embm83eQEHDM+KATvSFIo2fZyL5NZ3LRyuj kNmfKFA/KQ4kfvrPic1tbWSaXsBfoVAh8ZdeM6vEQ7fJI+afes6QIiOHTvTWxDfH FLJ3y1nYi7Bu9lLDWgonDlrlMdKK2LJq5mqhYwQYhZAZaqf2TRN4sxVLoQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOKx/PygK8rINcFenIjHN7VscoE4MB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvNHJIOF9LQXJ5c2cxd1Y2Y2lNYzN0V3h5Z1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQFVj/gAwMA W1swDQQCAAIwBwMFACoApYAwDQYJKoZIhvcNAQELBQADggEBAHeSLuiOS2ZtftaJ fQ5Y5ClmVdtOPoUMIO9HaK6NwgzZL8+UaaAiGQRrYomkLINfzxNVNZxSCb/lsI+C SnfgMGaxd1zHWU8dYdHQQO59ixiN2Mzp+4YvYpIbOSvoiNYlgz1LIuwZe6PM0RUc O5er5mV25vn1AkuO8e2tf9g92tYfMDfkiAP3qVjW5Xioz0IWI2pEQDKwsAsQofmt YhXpAEJNRzxqp5TRJz/NpkzDQUeRSKuIfSRdk95xejeg0efF1UuMXVSQoB+rPPx0 5s7FXLcYpc7O/T952nA//Af1XUMcCZBwCt8Z6kqrHNqLGfygIYd65Q1jnWvuV6lg J4hvL6Y= -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:45 2026 by rpki-client