This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa File: 4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa (raw, json) Hash identifier: uUV3NRxzmHCDo1hNed6mKPC9qoNr+1AXHF3xP4nPhT8= Subject key identifier: E0:D9:15:BE:D7:06:AD:95:4A:5D:C2:07:51:73:77:69:7E:5A:47:E5 Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Certificate serial: 019B78A343002CA457E4F69F9C2FC37E1E09 Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29311 IP address blocks: 62.112.224.0/19 maxlen: 24 185.61.224.0/22 maxlen: 24 213.108.29.0/24 maxlen: 24 2a00:1558::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:00:2c:a4:57:e4:f6:9f:9c:2f:c3:7e:1e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0d915bed706ad954a5dc207517377697e5a47e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:f5:55:be:f4:9b:ef:e3:cd:23:ac:43:c7: 6e:07:36:1f:fd:0d:ed:f9:f1:38:31:33:b0:48:62: 2a:69:89:24:de:ce:58:59:22:85:97:3e:b5:4c:94: d3:65:2c:06:5e:ac:f4:77:a2:eb:8b:7d:55:fc:89: 74:67:c4:36:bd:44:04:d3:54:ae:c2:7b:bc:b7:71: 8b:fd:d2:f0:af:a9:9e:5d:f2:55:98:19:84:ac:bb: 61:43:e8:9a:a0:09:c8:21:62:4f:3a:77:73:5b:a6: 9e:13:49:2c:c3:de:0d:78:4c:e2:aa:d5:7a:b1:a8: 19:7a:a6:dd:7c:d7:8a:75:33:66:43:71:84:bc:a2: 22:72:82:80:ed:cd:98:04:2b:f4:94:9a:26:1b:eb: 9b:0c:56:f5:37:7d:10:e5:b2:d0:74:63:c9:b8:31: f7:5b:b5:0e:78:4d:9c:06:ba:54:e9:1e:e7:0d:a7: 6f:9c:8d:51:4a:dd:71:b5:3e:92:88:ca:2b:71:28: 8a:29:6a:26:70:4f:af:7a:76:e3:19:b2:7c:21:1a: 9d:e7:d8:f8:32:00:88:b1:ae:92:b3:c4:8d:3f:cd: 6d:5a:bc:c2:c8:1d:23:2d:cf:87:d7:13:7a:05:de: e1:1e:c6:25:ed:82:81:1b:5b:ac:ee:4f:4b:18:ed: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D9:15:BE:D7:06:AD:95:4A:5D:C2:07:51:73:77:69:7E:5A:47:E5 X509v3 Authority Key Identifier: keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.112.224.0/19 185.61.224.0/22 213.108.29.0/24 IPv6: 2a00:1558::/32 Signature Algorithm: sha256WithRSAEncryption 99:49:2b:dc:18:6c:6c:86:b3:9e:e6:8c:70:bd:bd:3a:b4:68: 3f:c9:5a:7e:7c:54:f1:16:4d:84:1a:10:aa:c4:a3:33:69:bb: 28:aa:e6:c3:3d:60:fc:fc:75:ea:e4:c6:58:3f:15:66:f3:67: ac:f2:3c:ad:e4:9f:3a:ea:ae:64:61:b6:3e:65:cc:07:67:c5: 6f:6a:e2:5f:82:f1:df:b3:d6:b8:a5:60:19:b3:e9:4a:22:ac: f4:b4:30:79:ba:a8:f1:66:e6:cd:db:0c:39:34:fe:df:b6:3f: ba:67:19:a6:f0:b9:68:d2:ec:c2:e0:08:7b:9b:2c:ed:b0:e3: 13:b4:a7:c0:e6:d8:90:71:aa:1d:0f:bb:37:7c:23:e3:8c:d5: 99:d1:a7:0d:7e:2c:ad:fc:52:0a:1d:fe:25:2a:0a:0e:34:08: 60:31:4f:86:ed:18:6a:77:ac:fa:e6:3f:76:31:42:b0:2e:72: 32:3c:6f:27:a3:20:d9:38:2a:14:b8:f7:26:45:b2:a8:9a:22: 88:12:b4:55:b3:34:49:cc:ca:c9:af:e0:b4:26:c1:c8:b0:8f: 94:d0:5e:77:32:69:38:42:17:8a:a4:29:c1:10:ab:a9:ee:7f: 54:dd:b3:4f:6f:05:50:a0:7e:5e:8f:0b:34:f5:8a:62:42:9f: 4c:8b:75:39 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4o0MALKRX5PafnC/Dfh4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm ZDdmMzAwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGQ5MTViZWQ3MDZhZDk1NGE1ZGMyMDc1MTczNzc2OTdlNWE0N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFv1Vb70m+/jzSOsQ8duBzYf/Q3t +fE4MTOwSGIqaYkk3s5YWSKFlz61TJTTZSwGXqz0d6Lri31V/Il0Z8Q2vUQE01Su wnu8t3GL/dLwr6meXfJVmBmErLthQ+iaoAnIIWJPOndzW6aeE0ksw94NeEziqtV6 sagZeqbdfNeKdTNmQ3GEvKIicoKA7c2YBCv0lJomG+ubDFb1N30Q5bLQdGPJuDH3 W7UOeE2cBrpU6R7nDadvnI1RSt1xtT6SiMorcSiKKWomcE+venbjGbJ8IRqd59j4 MgCIsa6Ss8SNP81tWrzCyB0jLc+H1xN6Bd7hHsYl7YKBG1us7k9LGO1myQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFODZFb7XBq2VSl3CB1Fzd2l+WkflMB8GA1UdIwQY MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt MDcyMjg4MTJkMDE3LzEvNE5rVnZ0Y0dyWlZLWGNJSFVYTjNhWDVhUi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3 LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFPnDgAwQC uT3gAwQA1WwdMA0EAgACMAcDBQAqABVYMA0GCSqGSIb3DQEBCwUAA4IBAQCZSSvc GGxshrOe5oxwvb06tGg/yVp+fFTxFk2EGhCqxKMzabsoqubDPWD8/HXq5MZYPxVm 82es8jyt5J866q5kYbY+ZcwHZ8VvauJfgvHfs9a4pWAZs+lKIqz0tDB5uqjxZubN 2ww5NP7ftj+6Zxmm8Llo0uzC4Ah7myztsOMTtKfA5tiQcaodD7s3fCPjjNWZ0acN fiyt/FIKHf4lKgoONAhgMU+G7Rhqd6z65j92MUKwLnIyPG8noyDZOCoUuPcmRbKo miKIErRVszRJzMrJr+C0JsHIsI+U0F53Mmk4QheKpCnBEKup7n9U3bNPbwVQoH5e jws09YpiQp9Mi3U5 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:16 2026 by rpki-client