This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/x4-mHKJb7bMwY9GE86KAS0BLgKg.roa File: x4-mHKJb7bMwY9GE86KAS0BLgKg.roa (raw, json) Hash identifier: ++8zNyvezH+pL+l7TXoCaIybHlTSo3lc/2BXe8F2UWc= Subject key identifier: C7:8F:A6:1C:A2:5B:ED:B3:30:63:D1:84:F3:A2:80:4B:40:4B:80:A8 Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Certificate serial: 019B7CED7307BC542551A6F20891CAEA0F56 Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/x4-mHKJb7bMwY9GE86KAS0BLgKg.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200023 IP address blocks: 146.19.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:73:07:bc:54:25:51:a6:f2:08:91:ca:ea:0f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c78fa61ca25bedb33063d184f3a2804b404b80a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:59:1f:ed:a2:66:85:16:53:e9:e2:3c:cc:11: d5:97:74:61:cb:45:91:a8:b0:17:df:90:82:cb:d6: da:c6:a5:7a:81:8b:d8:5c:32:f2:f0:72:f5:2d:9d: 0c:0f:24:e4:da:bf:6d:a1:ea:c2:82:60:26:83:a0: 43:56:fa:a2:b5:50:22:7d:a8:31:67:c9:6a:c9:65: 4e:34:0c:4c:f4:cc:17:aa:af:c8:03:a1:14:ea:a6: 23:88:20:46:db:23:ca:ad:97:85:85:79:0c:0f:e9: 1b:8e:a3:e1:c4:76:34:47:d7:1f:5f:02:34:90:85: 04:af:61:f3:8f:0a:64:ae:db:59:0e:71:e2:db:35: ce:eb:c4:72:86:42:a3:16:01:da:97:13:58:49:b5: 1a:8d:e7:43:06:cf:71:b9:fe:87:2b:8e:7d:41:c7: c0:79:b0:7d:75:5e:4d:7c:d7:b1:15:2c:29:2c:fa: 42:df:b0:36:56:4d:47:94:9c:c1:8f:c6:66:11:cb: 66:67:36:4a:3f:e1:df:3c:d3:ab:8b:f2:4f:f5:82: ec:f3:26:c6:3a:33:86:65:f5:e6:06:84:ae:eb:d9: ea:19:db:20:91:2a:4e:83:b4:5e:4d:d6:9f:ec:46: 23:89:d2:dd:7f:56:c9:ff:4c:2e:30:d2:24:bb:c0: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:A6:1C:A2:5B:ED:B3:30:63:D1:84:F3:A2:80:4B:40:4B:80:A8 X509v3 Authority Key Identifier: keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/x4-mHKJb7bMwY9GE86KAS0BLgKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.103.0/24 Signature Algorithm: sha256WithRSAEncryption 71:5a:d4:24:89:e5:03:75:4d:fd:d6:40:95:86:6d:c0:10:27: e2:aa:8e:fc:58:3b:03:04:d6:1c:e0:3a:75:89:c6:83:b3:5e: 50:85:65:ce:09:2a:86:ac:70:26:94:58:a6:84:59:41:62:1d: 6d:6b:96:ed:f6:6d:e1:f7:68:13:99:77:07:dc:0f:69:34:ee: 2c:e5:7b:2d:6e:0b:c4:8b:b6:00:d8:c2:c6:01:eb:0c:bf:c0: f1:71:91:23:19:3b:f2:45:52:b5:dc:9d:e5:e3:32:35:1e:26: 8a:0a:99:15:71:82:55:eb:c7:ed:46:4e:e1:ca:78:13:60:7c: cb:e3:58:bc:9d:e6:55:24:02:32:cb:93:b8:65:15:b5:13:4f: 2e:44:5d:e1:91:d5:a2:f6:52:e0:84:3a:6a:3f:e5:ae:91:dd: 84:32:a6:5e:ad:e2:d3:3e:a6:07:51:2b:c8:a8:1b:74:16:06: da:e8:29:d2:a5:72:f8:5e:30:1f:3b:d9:03:e6:c0:92:dc:fe: d8:35:81:aa:77:23:29:dd:4a:be:8d:e7:78:52:65:83:8e:d7: 5e:5a:79:87:4e:8b:cb:b9:20:78:2e:ec:58:ed:72:ac:b8:10: bf:7a:a1:0a:dc:38:3c:6a:30:93:95:0a:d2:de:23:31:f9:1f: 48:a8:66:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87XMHvFQlUabyCJHK6g9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzNjQ0YzcwOTE5ZjYwODNmMjgxOWE3M2YzZDM5ZWI5 Y2I1ZTgwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzhmYTYxY2EyNWJlZGIzMzA2M2QxODRmM2EyODA0YjQwNGI4MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71kf7aJmhRZT6eI8zBHVl3Rhy0WR qLAX35CCy9baxqV6gYvYXDLy8HL1LZ0MDyTk2r9toerCgmAmg6BDVvqitVAifagx Z8lqyWVONAxM9MwXqq/IA6EU6qYjiCBG2yPKrZeFhXkMD+kbjqPhxHY0R9cfXwI0 kIUEr2HzjwpkrttZDnHi2zXO68RyhkKjFgHalxNYSbUajedDBs9xuf6HK459QcfA ebB9dV5NfNexFSwpLPpC37A2Vk1HlJzBj8ZmEctmZzZKP+HfPNOri/JP9YLs8ybG OjOGZfXmBoSu69nqGdsgkSpOg7ReTdaf7EYjidLdf1bJ/0wuMNIku8DYCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMePphyiW+2zMGPRhPOigEtAS4CoMB8GA1UdIwQY MBaAFMNZNkTHCRn2CD8oGac/PTnrnLXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQt YTZjZTM4ZjNkMWQ4LzEveDQtbUhLSmI3Yk13WTlHRTg2S0FTMEJMZ0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQtYTZjZTM4ZjNkMWQ4 LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNnMA0G CSqGSIb3DQEBCwUAA4IBAQBxWtQkieUDdU391kCVhm3AECfiqo78WDsDBNYc4Dp1 icaDs15QhWXOCSqGrHAmlFimhFlBYh1ta5bt9m3h92gTmXcH3A9pNO4s5XstbgvE i7YA2MLGAesMv8DxcZEjGTvyRVK13J3l4zI1HiaKCpkVcYJV68ftRk7hyngTYHzL 41i8neZVJAIyy5O4ZRW1E08uRF3hkdWi9lLghDpqP+Wukd2EMqZereLTPqYHUSvI qBt0Fgba6CnSpXL4XjAfO9kD5sCS3P7YNYGqdyMp3Uq+jed4UmWDjtdeWnmHTovL uSB4LuxY7XKsuBC/eqEK3Dg8ajCTlQrS3iMx+R9IqGah -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:09 2026 by rpki-client