This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/4siB5e1GQm-axBvoOugw52N_IkE.roa File: 4siB5e1GQm-axBvoOugw52N_IkE.roa (raw, json) Hash identifier: /3IxrvNXYC3JPq03y8Dq56bw9cEQPSNh5PVk8H407no= Subject key identifier: E2:C8:81:E5:ED:46:42:6F:9A:C4:1B:E8:3A:E8:30:E7:63:7F:22:41 Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Certificate serial: 019B7F15941F64C6BC10CF0049F518F8CB3E Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/4siB5e1GQm-axBvoOugw52N_IkE.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47794 IP address blocks: 194.11.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:94:1f:64:c6:bc:10:cf:00:49:f5:18:f8:cb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c881e5ed46426f9ac41be83ae830e7637f2241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:c8:c3:92:6c:a6:9b:38:29:29:ce:24:3b: 95:ca:95:fd:ba:5f:2d:9a:72:dd:e8:3f:6d:2c:ec: cb:3b:68:6c:f3:71:27:52:ca:6e:0f:6c:ee:92:cf: 8a:1d:6d:18:07:81:3c:a8:c4:65:16:e5:f8:07:52: e9:b1:e1:1c:09:ab:1d:a6:86:9c:ba:45:57:8f:93: 34:4c:82:3b:24:a8:f0:1b:90:75:1e:f4:e2:f8:9b: dd:56:ff:f6:41:53:b6:f6:20:08:0d:9e:50:ea:bd: 77:82:af:e3:d0:6b:68:85:c9:7c:2d:1d:8c:1d:19: 7e:7b:57:6d:02:78:55:d7:44:62:a4:d5:84:d1:a7: 99:75:28:93:6d:54:92:b1:93:38:8f:b1:d1:ce:d4: cb:b6:88:32:8a:8a:0f:26:46:95:1f:04:3e:08:c1: 28:aa:1f:3f:c3:82:77:a0:82:f0:d0:1e:88:fc:91: 7e:e0:2c:fb:91:a2:da:dd:c3:16:e3:a9:6c:dc:15: b9:b6:bc:28:ec:7d:29:73:f0:87:e3:a9:32:69:2e: 40:f5:c6:5e:e3:06:5d:56:74:5d:e2:85:6d:a3:03: 7e:4f:46:73:ac:9b:3c:91:36:a4:96:56:69:d9:53: e0:3a:09:8b:df:01:4d:2d:82:1a:97:06:53:25:cd: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C8:81:E5:ED:46:42:6F:9A:C4:1B:E8:3A:E8:30:E7:63:7F:22:41 X509v3 Authority Key Identifier: keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/4siB5e1GQm-axBvoOugw52N_IkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.247.0/24 Signature Algorithm: sha256WithRSAEncryption 25:25:70:98:3e:1b:9a:d8:3d:b9:6c:68:46:70:bb:da:79:e9: 3a:aa:5c:ee:ef:38:e3:a5:31:62:1c:72:fb:92:16:94:60:53: 03:90:9a:33:c8:ee:52:25:2c:bf:c6:1c:4a:01:e8:19:51:62: 31:36:6a:7e:13:4f:ba:2c:9f:15:26:6e:f7:0b:30:2b:66:09: 61:40:b7:f0:ca:07:6b:25:b6:03:18:34:49:81:f9:b7:03:8f: d4:71:6b:83:b4:62:6f:35:37:13:10:3e:9c:17:12:11:55:7f: 5d:c0:a5:31:bd:16:2e:cf:76:b0:d2:95:a0:3e:5e:d8:9d:c4: 8e:21:70:4b:11:76:7f:fb:91:4f:6a:29:a5:3c:c2:1a:74:f2: 7f:ec:32:3a:22:cb:ab:37:b3:a5:48:48:ea:1d:6f:ad:5e:b6: 1b:1f:35:17:79:80:83:06:a6:7b:b1:1e:8b:df:d2:8d:63:96: 86:fa:b5:94:31:c8:63:07:12:aa:e2:86:2e:17:d9:7d:91:ff: 2d:32:63:2c:58:87:27:87:ae:75:d9:4d:dc:a4:06:cf:91:38: c3:10:16:84:ab:f8:9c:45:55:e8:ca:d0:ac:d0:9b:62:f3:c0: d1:85:42:7a:f3:dc:7d:39:00:e2:a4:7a:ee:10:c3:77:e4:1f: 1a:89:91:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZQfZMa8EM8ASfUY+Ms+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2 ZDRjMGIwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmM4ODFlNWVkNDY0MjZmOWFjNDFiZTgzYWU4MzBlNzYzN2YyMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM7Iw5Jspps4KSnOJDuVypX9ul8t mnLd6D9tLOzLO2hs83EnUspuD2zuks+KHW0YB4E8qMRlFuX4B1LpseEcCasdpoac ukVXj5M0TII7JKjwG5B1HvTi+JvdVv/2QVO29iAIDZ5Q6r13gq/j0Gtohcl8LR2M HRl+e1dtAnhV10RipNWE0aeZdSiTbVSSsZM4j7HRztTLtogyiooPJkaVHwQ+CMEo qh8/w4J3oILw0B6I/JF+4Cz7kaLa3cMW46ls3BW5trwo7H0pc/CH46kyaS5A9cZe 4wZdVnRd4oVtowN+T0ZzrJs8kTakllZp2VPgOgmL3wFNLYIalwZTJc11LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLIgeXtRkJvmsQb6DroMOdjfyJBMB8GA1UdIwQY MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt Y2RhMzYyNTYyOTZjLzEvNHNpQjVlMUdRbS1heEJ2b091Z3c1Mk5fSWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgv3MA0G CSqGSIb3DQEBCwUAA4IBAQAlJXCYPhua2D25bGhGcLvaeek6qlzu7zjjpTFiHHL7 khaUYFMDkJozyO5SJSy/xhxKAegZUWIxNmp+E0+6LJ8VJm73CzArZglhQLfwygdr JbYDGDRJgfm3A4/UcWuDtGJvNTcTED6cFxIRVX9dwKUxvRYuz3aw0pWgPl7YncSO IXBLEXZ/+5FPaimlPMIadPJ/7DI6IsurN7OlSEjqHW+tXrYbHzUXeYCDBqZ7sR6L 39KNY5aG+rWUMchjBxKq4oYuF9l9kf8tMmMsWIcnh6512U3cpAbPkTjDEBaEq/ic RVXoytCs0Jti88DRhUJ689x9OQDipHruEMN35B8aiZEX -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:20 2026 by rpki-client