This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4NDC07baSXIC9W7oCPiTrJKQH9c.roa File: 4NDC07baSXIC9W7oCPiTrJKQH9c.roa (raw, json) Hash identifier: hXmj7E7NuHNk9bfWB0WbQsiTumjkhUBxI89GiyxYFgE= Subject key identifier: E0:D0:C2:D3:B6:DA:49:72:02:F5:6E:E8:08:F8:93:AC:92:90:1F:D7 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775962FB81B8A495B67FD20E49A38B6C Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4NDC07baSXIC9W7oCPiTrJKQH9c.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60583 IP address blocks: 89.36.143.0/24 maxlen: 24 217.19.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:62:fb:81:b8:a4:95:b6:7f:d2:0e:49:a3:8b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0d0c2d3b6da497202f56ee808f893ac92901fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:c0:2e:d6:9b:aa:d6:9a:50:87:8e:2c:fb: 6c:39:8c:61:92:ee:d6:02:d0:a8:1d:46:01:53:c1: b0:dc:59:7d:7f:ce:42:b6:44:89:ca:0a:a8:a7:c7: 68:ec:06:f5:43:34:e7:81:04:13:7f:c5:aa:e1:6d: 18:28:67:b5:ee:1a:1a:42:4d:5b:16:08:a7:d4:4f: 4f:e7:52:c0:44:f2:0b:f5:16:25:fd:61:30:d2:71: 76:8d:08:3d:a4:9d:12:10:95:30:2d:1a:86:c2:52: 85:e2:b3:ef:26:bf:de:3d:d5:49:a9:21:76:4e:19: d4:e6:ad:82:a7:d0:59:ab:38:06:19:34:0c:69:de: b4:72:14:94:62:81:e3:56:ff:86:55:82:7d:a3:4c: 63:ba:80:f1:35:0f:08:0b:d9:f3:3b:85:fd:2e:ec: d1:67:ea:9c:47:34:a8:24:c7:4f:d7:c2:3d:6a:48: 87:ca:c1:ac:9d:c5:f2:ab:71:be:20:bb:5f:ae:cd: 37:2d:ae:97:ca:ba:c6:8c:d6:ec:1c:87:09:29:8c: cc:de:3c:bb:5e:22:0a:d7:e1:b4:cb:2b:2e:9f:c8: 9e:b9:95:2d:e7:06:59:09:8a:ad:21:40:18:1b:a1: 9d:ef:ba:11:78:01:60:cb:7a:6a:a2:08:42:20:80: a2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D0:C2:D3:B6:DA:49:72:02:F5:6E:E8:08:F8:93:AC:92:90:1F:D7 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4NDC07baSXIC9W7oCPiTrJKQH9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.143.0/24 217.19.12.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:4c:0a:ef:5d:3a:9d:43:89:26:64:76:3b:19:d1:3c:0e:16: b8:9e:96:dc:02:ce:ab:4f:38:6a:80:a0:fc:34:f8:c3:7c:91: cb:c1:b5:a1:2e:d4:95:04:b3:f8:73:8d:4d:25:ed:d0:c2:0f: e0:7d:67:e7:cd:4d:82:fe:4e:b7:6c:5a:cd:d0:06:eb:da:02: ff:e5:4a:4c:b8:43:2e:dc:b1:6c:51:a1:6e:40:e5:ab:65:c0: 5b:71:24:59:29:d5:76:c8:d0:ae:c1:1b:25:9d:42:45:ea:87: 9a:82:4a:ff:96:0a:18:39:87:18:0d:14:75:39:dc:5c:a4:45: d8:81:b5:5b:fb:95:0d:5b:88:1a:7b:c2:24:40:72:9e:9f:47: 99:c3:4a:42:30:d5:c5:12:41:f1:3d:d7:e8:08:d4:4a:2c:0c: 67:bf:d9:c5:63:4b:91:a5:dc:9f:75:de:00:3b:fd:cf:03:56: 1e:82:ff:2a:e8:1b:31:43:c8:95:6f:bd:2b:5f:f0:90:e1:6b: 33:2e:47:b6:fa:4c:b0:62:72:c6:48:75:cb:45:99:dc:12:8a: 86:d8:41:8c:6e:a9:50:84:83:61:93:6f:81:ba:fd:7c:d5:69: 82:73:3a:c2:fa:26:76:f7:e1:6c:6f:8e:11:ef:c5:fb:f2:85: d7:21:97:0c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WWL7gbiklbZ/0g5Jo4tsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGQwYzJkM2I2ZGE0OTcyMDJmNTZlZTgwOGY4OTNhYzkyOTAxZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wXALtabqtaaUIeOLPtsOYxhku7W AtCoHUYBU8Gw3Fl9f85CtkSJygqop8do7Ab1QzTngQQTf8Wq4W0YKGe17hoaQk1b Fgin1E9P51LARPIL9RYl/WEw0nF2jQg9pJ0SEJUwLRqGwlKF4rPvJr/ePdVJqSF2 ThnU5q2Cp9BZqzgGGTQMad60chSUYoHjVv+GVYJ9o0xjuoDxNQ8IC9nzO4X9LuzR Z+qcRzSoJMdP18I9akiHysGsncXyq3G+ILtfrs03La6XyrrGjNbsHIcJKYzM3jy7 XiIK1+G0yysun8ieuZUt5wZZCYqtIUAYG6Gd77oReAFgy3pqoghCIICi7wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFODQwtO22klyAvVu6Aj4k6ySkB/XMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzROREMwN2JhU1hJQzlXN29DUGlUckpLUUg5Yy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABZJI8D BADZEwwwDQYJKoZIhvcNAQELBQADggEBAJ1MCu9dOp1DiSZkdjsZ0TwOFrieltwC zqtPOGqAoPw0+MN8kcvBtaEu1JUEs/hzjU0l7dDCD+B9Z+fNTYL+TrdsWs3QBuva Av/lSky4Qy7csWxRoW5A5atlwFtxJFkp1XbI0K7BGyWdQkXqh5qCSv+WChg5hxgN FHU53FykRdiBtVv7lQ1biBp7wiRAcp6fR5nDSkIw1cUSQfE91+gI1EosDGe/2cVj S5Gl3J913gA7/c8DVh6C/yroGzFDyJVvvStf8JDhazMuR7b6TLBicsZIdctFmdwS iobYQYxuqVCEg2GTb4G6/XzVaYJzOsL6Jnb34WxvjhHvxfvyhdchlww= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:34 2026 by rpki-client