This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/4QLQLdRNistD58V4Gobwba2l7ak.roa File: 4QLQLdRNistD58V4Gobwba2l7ak.roa (raw, json) Hash identifier: rdeifE6ly74qVEIujDihCPvAKVfy9CBgE4V+s0Ryjsg= Subject key identifier: E1:02:D0:2D:D4:4D:8A:CB:43:E7:C5:78:1A:86:F0:6D:AD:A5:ED:A9 Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9 Certificate serial: 019B7A5AA673C230B8AD16D71E208BD68FF1 Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/4QLQLdRNistD58V4Gobwba2l7ak.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 217.14.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:73:c2:30:b8:ad:16:d7:1e:20:8b:d6:8f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e102d02dd44d8acb43e7c5781a86f06dada5eda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f7:a1:92:c0:00:11:50:84:82:70:df:a7:ad: 03:cc:a8:52:f5:3d:1e:d9:f6:95:a3:4b:d2:c3:ea: 04:69:51:20:55:79:22:3e:b1:76:27:2b:39:28:81: bc:a3:4e:ef:28:18:dc:5b:5d:d3:1a:44:df:9d:62: bb:5a:4d:53:c3:1a:3d:aa:84:29:1a:2a:dc:b7:83: 79:a3:c9:ae:14:26:aa:c2:fa:22:09:85:30:99:91: c4:8d:9e:06:2d:a3:53:04:59:5c:7c:47:83:0d:56: 39:be:0b:c7:5c:f8:ee:b1:4b:b8:dc:7d:13:40:15: d8:91:c9:13:d6:00:f0:90:84:63:c6:70:51:97:53: 73:44:dd:99:ab:47:81:1a:8e:63:cf:07:76:55:d7: 7b:fc:57:a9:c2:ba:71:31:64:99:b9:f3:56:52:93: 50:ed:70:c4:79:c8:7b:b1:bb:ad:92:e3:e0:49:62: 01:11:1a:45:42:84:6a:de:f6:ac:96:ec:bb:51:50: 42:3b:43:eb:e0:04:4e:88:dc:9e:29:1d:1a:25:bc: 83:14:b8:60:00:cd:ea:02:7e:ba:c7:f9:08:d1:31: 1a:bc:ca:05:a7:b8:f0:ea:bc:88:63:71:e2:9b:c7: a0:d9:11:4a:1a:17:4f:9e:b5:70:63:54:3b:da:42: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:02:D0:2D:D4:4D:8A:CB:43:E7:C5:78:1A:86:F0:6D:AD:A5:ED:A9 X509v3 Authority Key Identifier: keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/4QLQLdRNistD58V4Gobwba2l7ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.14.120.0/22 Signature Algorithm: sha256WithRSAEncryption 02:76:dc:01:20:b6:de:8f:5a:13:5a:14:ac:0a:f4:26:67:79: fb:00:77:dc:61:5f:8d:be:01:6c:b6:0b:c0:cd:13:9b:2d:6d: 79:7f:d3:d6:69:2e:aa:fd:6a:d8:c5:3f:be:10:fd:4e:fc:11: 13:b8:8d:1e:e0:5d:31:2f:c3:6e:75:6f:2f:f1:ef:c1:9d:9a: 97:03:98:21:dc:c9:f1:5d:93:41:c3:a8:90:87:5a:ea:43:39: 94:98:4b:d5:07:2b:d7:d8:8d:77:f5:b2:41:20:ce:f1:d4:57: 1e:bd:ce:97:14:ce:3a:d9:70:5d:bb:00:d5:c0:71:76:e2:7e: 40:f5:d7:1e:c5:82:ac:b0:22:23:d1:fd:69:dd:ad:cf:0b:72: a0:72:81:0d:9b:29:de:6a:37:f2:5f:73:a3:0b:cc:c8:40:6c: 53:c5:f4:44:4c:fe:ba:52:56:6c:e7:89:1a:96:72:04:87:58: 50:51:75:86:68:22:ff:a7:45:66:2a:dd:e9:72:89:23:a1:37: 02:86:b3:f0:55:d7:af:58:bd:5f:32:5f:dc:79:36:b4:81:b9: 5c:3c:57:f7:db:85:46:d5:38:f1:9f:94:00:2b:bb:f6:10:f2: 9d:89:99:61:5c:b1:0a:ea:bb:ad:62:40:25:3b:fd:ad:f7:dd: c2:5a:c1:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqZzwjC4rRbXHiCL1o/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NWRiZWJiYzEwNzBiOTllNGZiMzcyMTE3ZGYyNjIwMDM4 NjAzZTkwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTAyZDAyZGQ0NGQ4YWNiNDNlN2M1NzgxYTg2ZjA2ZGFkYTVlZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/ehksAAEVCEgnDfp60DzKhS9T0e 2faVo0vSw+oEaVEgVXkiPrF2Jys5KIG8o07vKBjcW13TGkTfnWK7Wk1Twxo9qoQp Girct4N5o8muFCaqwvoiCYUwmZHEjZ4GLaNTBFlcfEeDDVY5vgvHXPjusUu43H0T QBXYkckT1gDwkIRjxnBRl1NzRN2Zq0eBGo5jzwd2Vdd7/FepwrpxMWSZufNWUpNQ 7XDEech7sbutkuPgSWIBERpFQoRq3vasluy7UVBCO0Pr4AROiNyeKR0aJbyDFLhg AM3qAn66x/kI0TEavMoFp7jw6ryIY3Him8eg2RFKGhdPnrVwY1Q72kLbAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEC0C3UTYrLQ+fFeBqG8G2tpe2pMB8GA1UdIwQY MBaAFJVdvrvBBwuZ5Ps3IRffJiADhgPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYt MDIzMjAzOTQ3ZDlkLzEvNFFMUUxkUk5pc3RENThWNEdvYndiYTJsN2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYtMDIzMjAzOTQ3ZDlk LzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Q54MA0G CSqGSIb3DQEBCwUAA4IBAQACdtwBILbej1oTWhSsCvQmZ3n7AHfcYV+NvgFstgvA zRObLW15f9PWaS6q/WrYxT++EP1O/BETuI0e4F0xL8NudW8v8e/BnZqXA5gh3Mnx XZNBw6iQh1rqQzmUmEvVByvX2I139bJBIM7x1Fcevc6XFM462XBduwDVwHF24n5A 9dcexYKssCIj0f1p3a3PC3KgcoENmyneajfyX3OjC8zIQGxTxfRETP66UlZs54ka lnIEh1hQUXWGaCL/p0VmKt3pcokjoTcChrPwVdevWL1fMl/ceTa0gblcPFf324VG 1Tjxn5QAK7v2EPKdiZlhXLEK6rutYkAlO/2t993CWsHL -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:24 2026 by rpki-client