This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/1-p4IzeNZ_thqk3gT86HFE59jybU.roa File: 1-p4IzeNZ_thqk3gT86HFE59jybU.roa (raw, json) Hash identifier: Bh8NPouJ6TSJDvUilBsi/W0T0m7s/8DFI4qT+kAvA2Y= Subject key identifier: FA:9E:08:CD:E3:59:FE:D8:6A:93:78:13:F3:A1:C5:13:9F:63:C9:B5 Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019BEB1218875497FC2128C86696AEDC4DD3 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/1-p4IzeNZ_thqk3gT86HFE59jybU.roa Signing time: Fri 23 Jan 2026 13:36:30 +0000 ROA not before: Fri 23 Jan 2026 13:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 163.62.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:12:18:87:54:97:fc:21:28:c8:66:96:ae:dc:4d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Jan 23 13:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9e08cde359fed86a937813f3a1c5139f63c9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:1c:73:6e:4f:af:09:1d:60:c2:1b:57:ff: 62:9c:f0:11:b7:1c:67:60:8b:ea:64:df:b9:11:43: 8e:89:e5:cb:8b:28:88:86:6f:f1:f6:ad:ac:1b:f2: 4a:2e:02:c1:23:4c:ef:74:ff:ba:3c:ac:d2:a7:27: 64:2f:34:bf:de:26:a0:a4:de:b6:0b:fd:1a:5a:e4: dc:aa:86:64:11:b9:c1:ad:dc:69:bd:56:72:ad:26: f9:8d:3f:21:32:48:50:b6:1a:67:8c:1d:9c:91:9e: c7:85:d4:5a:83:a2:6a:59:5d:13:47:c5:0b:f2:38: 1f:5f:9a:c4:71:d3:1c:c9:57:06:73:89:22:3e:34: 2c:9f:ad:95:25:72:ed:1f:ab:00:6a:28:9a:e1:e3: c2:06:5e:38:df:de:c2:74:47:9b:96:bf:13:ac:78: e9:30:b3:9f:3f:15:2e:e7:a2:f5:8b:6e:4e:b9:62: f3:f0:21:e6:ce:ae:b7:53:c3:96:52:07:0b:4b:2a: 09:fc:02:37:74:0d:96:79:1a:5f:a4:56:4b:8e:88: 3f:0d:91:6a:90:f8:b4:f8:f4:ee:74:e2:fc:2c:9b: 5d:ea:f6:58:73:6a:24:6e:2d:fc:c6:81:41:00:1e: 27:ff:70:04:10:38:c1:73:fd:2e:76:94:41:2e:1e: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9E:08:CD:E3:59:FE:D8:6A:93:78:13:F3:A1:C5:13:9F:63:C9:B5 X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/1-p4IzeNZ_thqk3gT86HFE59jybU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.62.72.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:f3:5b:b5:bb:44:37:e0:d8:0c:8b:8d:ba:0c:94:0c:e4:77: ef:a4:9b:24:16:c7:70:8d:ec:57:a7:85:76:77:0d:55:a1:31: 63:2e:f6:f2:dc:23:0b:e2:5b:9e:40:ee:47:1c:72:a3:20:e7: ae:8a:df:93:fc:e0:e7:51:58:14:6c:7e:1c:ed:3d:b5:09:8c: 57:6f:3e:2f:0c:57:34:bc:04:ad:4a:3b:c0:24:e2:6a:ec:17: 5a:ae:4f:fd:2b:05:eb:db:0a:ef:cb:49:db:b7:e7:a9:7b:f9: 96:8a:77:df:8d:fb:10:f7:92:3f:c9:af:6b:b0:e5:e5:1c:4e: 20:d2:4c:72:7f:31:e9:ee:69:07:dd:41:1e:b4:3c:77:c4:73: ef:0d:21:a2:0e:10:85:e5:ab:a8:d2:6c:f1:4a:c3:3a:a1:83: ad:bc:47:da:b4:85:78:91:c1:0a:c4:29:69:a6:09:03:3f:c6: 18:65:7b:d1:7e:3c:08:04:cb:ad:bd:c9:e9:14:d7:4e:10:d7: 4e:9c:f7:ed:af:6b:53:8d:c9:33:97:42:a8:c8:bd:c8:85:2f: fd:99:f1:ee:3d:bc:41:bd:6d:74:37:60:7d:4a:81:10:59:fd: fb:ca:0c:52:03:d8:18:06:c0:93:71:02:c1:04:11:e2:6f:bc: 64:59:35:b7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvrEhiHVJf8ISjIZpau3E3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjYwMTIzMTMzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTllMDhjZGUzNTlmZWQ4NmE5Mzc4MTNmM2ExYzUxMzlmNjNjOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNkcc25PrwkdYMIbV/9inPARtxxn YIvqZN+5EUOOieXLiyiIhm/x9q2sG/JKLgLBI0zvdP+6PKzSpydkLzS/3iagpN62 C/0aWuTcqoZkEbnBrdxpvVZyrSb5jT8hMkhQthpnjB2ckZ7HhdRag6JqWV0TR8UL 8jgfX5rEcdMcyVcGc4kiPjQsn62VJXLtH6sAaiia4ePCBl44397CdEeblr8TrHjp MLOfPxUu56L1i25OuWLz8CHmzq63U8OWUgcLSyoJ/AI3dA2WeRpfpFZLjog/DZFq kPi0+PTudOL8LJtd6vZYc2okbi38xoFBAB4n/3AEEDjBc/0udpRBLh4OAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqeCM3jWf7YapN4E/OhxROfY8m1MB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvMS1wNEl6ZU5aX3RocWszZ1Q4NkhGRTU5anliVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzUvMDRlMjJlLWU1NTUtNGVjZS04NWNmLWNlNTk1MjJlZjY2 Zi8xL1MzRExDbDQ2VGxNSW0xSGVtamNLWHlNNGRNWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA6M+SDAN BgkqhkiG9w0BAQsFAAOCAQEAPfNbtbtEN+DYDIuNugyUDOR376SbJBbHcI3sV6eF dncNVaExYy728twjC+JbnkDuRxxyoyDnrorfk/zg51FYFGx+HO09tQmMV28+LwxX NLwErUo7wCTiauwXWq5P/SsF69sK78tJ27fnqXv5lop33437EPeSP8mva7Dl5RxO INJMcn8x6e5pB91BHrQ8d8Rz7w0hog4QheWrqNJs8UrDOqGDrbxH2rSFeJHBCsQp aaYJAz/GGGV70X48CATLrb3J6RTXThDXTpz37a9rU43JM5dCqMi9yIUv/Znx7j28 Qb1tdDdgfUqBEFn9+8oMUgPYGAbAk3ECwQQR4m+8ZFk1tw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:06 2026 by rpki-client