This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4u6kJL8FmWl6Vz6ayHWzPS3Zt7I.roa File: 4u6kJL8FmWl6Vz6ayHWzPS3Zt7I.roa (raw, json) Hash identifier: xTCMds/Pm0wku8qKRSt4r29HDU0NZvNIaZ5ofhWJV1o= Subject key identifier: E2:EE:A4:24:BF:05:99:69:7A:57:3E:9A:C8:75:B3:3D:2D:D9:B7:B2 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775942D38AB7E0967FBFA6ECC7A9BC9E Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4u6kJL8FmWl6Vz6ayHWzPS3Zt7I.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34358 IP address blocks: 89.34.107.0/24 maxlen: 24 89.35.204.0/24 maxlen: 24 89.39.189.0/24 maxlen: 24 176.223.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:42:d3:8a:b7:e0:96:7f:bf:a6:ec:c7:a9:bc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2eea424bf0599697a573e9ac875b33d2dd9b7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:d6:b4:dc:65:82:be:27:12:a5:69:5b:a2: a1:00:e1:1e:b6:22:da:0b:c4:7d:ee:84:ca:48:74: 74:b9:b5:16:24:26:60:1d:e2:8f:c2:7f:bf:b7:6e: 74:e9:98:40:58:60:51:98:6a:3e:af:62:2f:82:9e: fa:af:b8:7e:d9:ef:94:51:94:54:e2:c1:bb:5c:83: 24:34:70:65:03:f0:52:ae:c1:60:83:18:65:8c:85: 77:1b:0a:52:1b:28:26:da:1d:33:13:4c:4b:68:a8: e8:50:15:8e:f4:b2:a9:d7:51:94:e4:24:20:d3:1e: c7:2e:9f:48:ec:31:28:74:e6:aa:bf:3b:fa:32:7b: 05:b9:42:11:e3:7b:32:27:86:df:3a:77:e4:10:8b: 5f:68:fe:66:53:bd:59:43:5a:30:e9:a3:4d:a1:84: c0:33:1e:0c:6c:c4:01:e5:4e:ed:06:d1:e5:32:72: 44:40:47:7d:c3:49:44:96:bb:4f:5c:71:e7:7a:8b: 65:0b:bc:43:e5:24:3c:b9:c0:ad:35:03:d0:0b:9a: f1:b7:a0:12:ea:33:b4:4f:38:5c:5d:de:d9:f6:cb: 46:1b:08:c1:ba:79:de:f2:f4:4d:15:b9:7d:9c:5c: 8f:96:30:8e:69:7b:e0:eb:86:b8:6f:10:aa:79:bb: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EE:A4:24:BF:05:99:69:7A:57:3E:9A:C8:75:B3:3D:2D:D9:B7:B2 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/4u6kJL8FmWl6Vz6ayHWzPS3Zt7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.107.0/24 89.35.204.0/24 89.39.189.0/24 176.223.166.0/24 Signature Algorithm: sha256WithRSAEncryption 44:fc:aa:19:13:02:e2:6a:79:82:1c:70:d2:76:d6:de:94:dc: 8a:66:09:d1:8a:57:93:5b:8d:15:98:66:52:60:16:1c:50:8f: 62:cc:8d:c2:51:90:8b:76:0e:f0:7e:0b:b0:18:6d:bb:25:ed: 4d:5f:f0:cc:92:7f:46:c7:c5:1b:80:ca:a1:ee:e8:bf:c7:40: 82:d7:1d:6c:ff:1f:53:1f:41:94:62:34:95:3e:f3:b6:2d:68: 82:aa:4f:53:af:2a:b9:04:81:e3:97:2d:b8:e4:e9:05:e4:9f: 6c:98:91:4e:5e:62:6f:e7:63:8f:d1:c3:bb:ad:19:fe:d9:fe: dd:bb:6e:ef:ba:d7:f8:2c:13:ba:29:48:3d:50:cd:93:c5:30: 6c:88:6b:84:ab:2e:83:b7:08:6c:0e:e8:ac:45:99:2d:60:a9: 25:67:c8:bc:7f:4d:ba:84:45:a8:0a:19:63:a1:f8:42:3f:7d: bf:0c:3e:f9:ca:ad:7b:e5:e3:db:1b:67:27:a1:24:32:29:fb: 37:a3:76:aa:e1:e1:2c:dc:2f:f3:2f:0f:a1:1e:9c:c0:ba:fb: 77:d6:cb:77:cd:11:b6:d0:8c:e6:a7:de:f6:78:bd:ee:1b:91: 60:c4:a1:45:6d:2c:bb:8f:06:ed:73:36:c1:00:56:a6:c2:bb: 18:68:ec:35 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WULTirfgln+/puzHqbyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmVlYTQyNGJmMDU5OTY5N2E1NzNlOWFjODc1YjMzZDJkZDliN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfvWtNxlgr4nEqVpW6KhAOEetiLa C8R97oTKSHR0ubUWJCZgHeKPwn+/t2506ZhAWGBRmGo+r2Ivgp76r7h+2e+UUZRU 4sG7XIMkNHBlA/BSrsFggxhljIV3GwpSGygm2h0zE0xLaKjoUBWO9LKp11GU5CQg 0x7HLp9I7DEodOaqvzv6MnsFuUIR43syJ4bfOnfkEItfaP5mU71ZQ1ow6aNNoYTA Mx4MbMQB5U7tBtHlMnJEQEd9w0lElrtPXHHneotlC7xD5SQ8ucCtNQPQC5rxt6AS 6jO0TzhcXd7Z9stGGwjBunne8vRNFbl9nFyPljCOaXvg64a4bxCqebvXnwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOLupCS/BZlpelc+msh1sz0t2beyMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzR1NmtKTDhGbVdsNlZ6NmF5SFd6UFMzWnQ3SS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABZImsD BABZI8wDBABZJ70DBACw36YwDQYJKoZIhvcNAQELBQADggEBAET8qhkTAuJqeYIc cNJ21t6U3IpmCdGKV5NbjRWYZlJgFhxQj2LMjcJRkIt2DvB+C7AYbbsl7U1f8MyS f0bHxRuAyqHu6L/HQILXHWz/H1MfQZRiNJU+87YtaIKqT1OvKrkEgeOXLbjk6QXk n2yYkU5eYm/nY4/Rw7utGf7Z/t27bu+61/gsE7opSD1QzZPFMGyIa4SrLoO3CGwO 6KxFmS1gqSVnyLx/TbqERagKGWOh+EI/fb8MPvnKrXvl49sbZyehJDIp+zejdqrh 4SzcL/MvD6EenMC6+3fWy3fNEbbQjOan3vZ4ve4bkWDEoUVtLLuPBu1zNsEAVqbC uxho7DU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:18 2026 by rpki-client