This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/4c-GbGdVRIrY9IqPjRy0nzn_VSE.roa File: 4c-GbGdVRIrY9IqPjRy0nzn_VSE.roa (raw, json) Hash identifier: icjwc3qakSmAHiw3iEGT6Xw+HBGCPaCuGNR8zcJ+6LU= Subject key identifier: E1:CF:86:6C:67:55:44:8A:D8:F4:8A:8F:8D:1C:B4:9F:39:FF:55:21 Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Certificate serial: 019B896999547EBF97BB61FC607DEB681AE4 Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/4c-GbGdVRIrY9IqPjRy0nzn_VSE.roa Signing time: Sun 04 Jan 2026 14:29:17 +0000 ROA not before: Sun 04 Jan 2026 14:29:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205984 IP address blocks: 84.246.241.0/24 maxlen: 24 84.246.243.0/24 maxlen: 24 91.196.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:69:99:54:7e:bf:97:bb:61:fc:60:7d:eb:68:1a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Validity Not Before: Jan 4 14:29:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1cf866c6755448ad8f48a8f8d1cb49f39ff5521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:ae:fc:ed:52:4c:78:f8:e9:59:d3:51:5b: 81:9d:14:6e:b6:c7:64:34:7a:18:a7:2a:fa:85:d8: 2a:ec:71:68:fe:44:a2:ef:39:fc:10:6b:b5:ec:76: d2:c4:93:ab:e1:b4:4d:2e:b8:07:5c:6d:f3:da:4b: f6:dd:e8:a2:49:d9:fa:e0:b6:06:82:b8:cc:e8:53: 26:99:32:d9:1f:18:d9:3c:13:05:ef:0a:ae:b9:b5: 7f:bf:c7:e7:63:ef:42:6d:60:24:79:e0:05:e4:88: 21:a5:13:4d:13:11:7b:ed:82:ac:bf:59:f1:3a:a6: ca:c4:ac:7c:a1:57:75:95:d3:e9:66:59:a2:16:6c: b9:f2:d4:00:bf:47:c5:89:0c:bc:51:7b:49:e5:e9: d9:4f:5d:a5:94:81:03:50:5d:2d:d8:8c:a2:3a:c5: 56:9a:22:92:e5:02:b3:f0:86:6d:62:2d:fb:30:2b: 7e:1e:9f:50:9c:e4:f3:0a:5d:cb:2b:a5:e1:78:b0: 6b:d6:bd:a6:92:63:58:65:c4:63:72:14:a7:a3:dd: 62:7f:62:f0:d0:2d:e1:92:18:20:30:fd:36:5c:ec: a4:9b:71:11:6b:10:a6:f3:c4:81:a4:59:a2:30:38: d3:cd:d9:46:e0:24:53:76:79:50:e4:75:28:fd:f2: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:86:6C:67:55:44:8A:D8:F4:8A:8F:8D:1C:B4:9F:39:FF:55:21 X509v3 Authority Key Identifier: keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/4c-GbGdVRIrY9IqPjRy0nzn_VSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.241.0/24 84.246.243.0/24 91.196.188.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:2a:16:2e:8d:98:4c:22:fb:5b:e0:f8:d5:2d:a4:2a:0e:13: b0:96:9b:c9:d5:96:f7:ec:29:d8:02:63:46:1e:fe:88:83:c4: 1b:99:e1:cd:db:2e:27:7a:14:59:db:49:45:88:f8:99:07:36: fe:8e:0f:9b:f4:35:60:e8:b4:cb:24:08:04:f0:43:5f:86:1b: 5b:b7:63:32:06:a4:b0:10:ce:cb:93:52:58:af:7c:70:06:62: ab:d6:23:da:5e:b5:5c:26:4c:fe:f1:78:9f:5a:d9:55:6f:f8: e7:6f:38:5d:ff:34:b1:07:a3:e1:23:da:5d:d3:8c:67:b5:0d: ae:e3:f4:bb:8d:ba:27:64:21:82:b7:f8:49:b1:51:e0:ed:c7: 55:e5:c2:7a:0d:88:db:a3:06:a9:62:d4:b4:8f:ab:63:ce:c3: c1:c8:08:b4:93:93:99:ae:74:ac:32:e2:ac:92:f8:28:6c:90: 88:a2:7a:28:60:e5:6b:23:cf:06:8e:0b:0f:1c:a6:fc:7e:b4: 59:2f:f1:f5:1b:de:20:b7:0b:d5:90:e7:a2:b6:7a:6c:5c:6e: 3e:9f:fb:b3:a4:b9:80:f0:4e:fc:29:05:cc:cd:57:16:02:64: df:b3:c9:f7:c0:f2:40:a7:4e:1b:bf:ce:d8:75:50:0f:14:bb: 1e:ae:70:11 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuJaZlUfr+Xu2H8YH3raBrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZGNmMWU4OTdlNTk4ZWMzZjFhYjYwYmQ0NDMzMjg3MjZk ZWRhZTQwHhcNMjYwMTA0MTQyOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNmODY2YzY3NTU0NDhhZDhmNDhhOGY4ZDFjYjQ5ZjM5ZmY1NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14Ou/O1STHj46VnTUVuBnRRutsdk NHoYpyr6hdgq7HFo/kSi7zn8EGu17HbSxJOr4bRNLrgHXG3z2kv23eiiSdn64LYG grjM6FMmmTLZHxjZPBMF7wquubV/v8fnY+9CbWAkeeAF5IghpRNNExF77YKsv1nx OqbKxKx8oVd1ldPpZlmiFmy58tQAv0fFiQy8UXtJ5enZT12llIEDUF0t2IyiOsVW miKS5QKz8IZtYi37MCt+Hp9QnOTzCl3LK6XheLBr1r2mkmNYZcRjchSno91if2Lw 0C3hkhggMP02XOykm3ERaxCm88SBpFmiMDjTzdlG4CRTdnlQ5HUo/fJfZwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOHPhmxnVUSK2PSKj40ctJ85/1UhMB8GA1UdIwQY MBaAFAnc8eiX5ZjsPxq2C9RDMocm3trkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUt NjIzZTE5OWZkYmU5LzEvNGMtR2JHZFZSSXJZOUlxUGpSeTBuem5fVlNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUtNjIzZTE5OWZkYmU5 LzEvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVPbxAwQA VPbzAwQAW8S8MA0GCSqGSIb3DQEBCwUAA4IBAQBqKhYujZhMIvtb4PjVLaQqDhOw lpvJ1Zb37CnYAmNGHv6Ig8QbmeHN2y4nehRZ20lFiPiZBzb+jg+b9DVg6LTLJAgE 8ENfhhtbt2MyBqSwEM7Lk1JYr3xwBmKr1iPaXrVcJkz+8XifWtlVb/jnbzhd/zSx B6PhI9pd04xntQ2u4/S7jbonZCGCt/hJsVHg7cdV5cJ6DYjbowapYtS0j6tjzsPB yAi0k5OZrnSsMuKskvgobJCIonooYOVrI88GjgsPHKb8frRZL/H1G94gtwvVkOei tnpsXG4+n/uzpLmA8E78KQXMzVcWAmTfs8n3wPJAp04bv87YdVAPFLsernAR -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:57 2026 by rpki-client