This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/t4ElfnENcIC_okPPyJa4ZzN81yQ.roa File: t4ElfnENcIC_okPPyJa4ZzN81yQ.roa (raw, json) Hash identifier: PzQD5S/AHK7SK7ouVXpLNAicfo5T5PWIFC9Ztw/en60= Subject key identifier: B7:81:25:7E:71:0D:70:80:BF:A2:43:CF:C8:96:B8:67:33:7C:D7:24 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019B7C12D1F9BD51BB271D4A56456ACD27D9 Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/t4ElfnENcIC_okPPyJa4ZzN81yQ.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56822 IP address blocks: 176.32.51.0/24 maxlen: 24 176.32.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d1:f9:bd:51:bb:27:1d:4a:56:45:6a:cd:27:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b781257e710d7080bfa243cfc896b867337cd724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:bd:08:f3:5a:11:86:7d:82:b0:9d:3e:05: 63:6b:ae:fb:4c:29:12:37:07:4b:07:09:e4:31:64: 2e:d4:1b:e9:c7:46:80:e7:b2:6d:84:c5:37:1f:ff: 86:02:4e:2d:54:7b:3a:59:90:be:2b:52:c8:06:86: af:09:e3:7a:f9:40:6a:d3:8e:5c:6a:31:c3:24:d8: 4d:2f:37:3d:57:71:01:59:f5:df:4b:86:88:3d:af: 7c:bc:e9:16:a5:93:10:06:56:c6:fc:f0:b8:87:44: 63:09:11:4e:36:46:a9:f3:bb:70:b6:1d:b2:05:49: 87:41:0f:d0:60:b3:18:35:fe:ee:c7:68:d7:a5:cd: ea:25:e6:0c:67:fe:2c:a7:d7:b5:d4:d3:f1:80:23: 03:02:9d:43:80:6a:ad:0f:d7:1b:46:8c:62:6d:d8: db:b5:5a:fc:14:4d:eb:0b:a1:48:d2:1c:1b:df:13: d9:9b:e8:df:8a:66:d8:1c:fe:c6:60:d4:e5:5a:07: 70:ae:f8:37:34:fe:79:18:7d:7c:c8:76:cb:af:af: 88:ef:f8:e4:36:c0:0a:d4:04:d1:7a:1b:57:c7:a5: 2b:2d:a0:ce:f3:e5:37:d4:3d:fc:ab:af:d4:ec:b5: c0:7b:9c:2b:9a:25:b9:0d:f7:76:7a:f4:2d:9c:0e: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:25:7E:71:0D:70:80:BF:A2:43:CF:C8:96:B8:67:33:7C:D7:24 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/t4ElfnENcIC_okPPyJa4ZzN81yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.51.0/24 176.32.55.0/24 Signature Algorithm: sha256WithRSAEncryption 54:da:39:30:55:0a:a2:d2:e8:06:6e:3c:82:78:d8:cd:f0:1c: fd:4d:d5:94:ab:f5:14:9e:e1:dc:90:39:2d:c6:d1:36:07:0b: b7:ee:a6:c4:6d:f9:3e:c7:07:07:23:e5:64:69:84:ea:2b:d6: 8e:ca:b5:d5:24:23:48:95:e6:5d:7b:36:1c:ee:70:e2:d2:ea: e7:bf:eb:1c:30:01:85:87:b8:50:2b:6d:aa:b1:52:c7:5d:62: 68:36:c8:ae:b4:fc:91:65:8b:da:62:32:0b:97:5a:aa:5a:ae: b6:76:65:50:1f:7c:d8:78:82:78:04:4c:a9:56:38:23:84:0d: fc:eb:69:50:f1:ea:3c:f6:27:e5:57:c3:fd:7d:e4:c8:a9:15: 5c:ee:89:8d:6a:ea:79:e9:27:9c:7b:28:fd:c6:09:3c:76:35: 3e:a6:98:32:fb:b1:4a:e6:cc:31:de:12:b5:4e:d2:f1:22:e2: 5b:bb:32:b3:42:8c:37:92:c0:7d:d1:61:4b:47:18:1e:83:1f: 56:30:5a:6c:b0:e3:3f:98:a7:c7:38:0f:c3:eb:4a:30:65:79: 1d:2b:88:e8:21:a4:5f:37:1e:51:aa:98:60:24:20:0c:cf:71: ec:30:2b:b1:d6:44:50:74:ec:ec:8d:d0:e8:66:37:ae:45:f8: d0:1d:30:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtH5vVG7Jx1KVkVqzSfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzgxMjU3ZTcxMGQ3MDgwYmZhMjQzY2ZjODk2Yjg2NzMzN2NkNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6a9CPNaEYZ9grCdPgVja677TCkS NwdLBwnkMWQu1Bvpx0aA57JthMU3H/+GAk4tVHs6WZC+K1LIBoavCeN6+UBq045c ajHDJNhNLzc9V3EBWfXfS4aIPa98vOkWpZMQBlbG/PC4h0RjCRFONkap87twth2y BUmHQQ/QYLMYNf7ux2jXpc3qJeYMZ/4sp9e11NPxgCMDAp1DgGqtD9cbRoxibdjb tVr8FE3rC6FI0hwb3xPZm+jfimbYHP7GYNTlWgdwrvg3NP55GH18yHbLr6+I7/jk NsAK1ATRehtXx6UrLaDO8+U31D38q6/U7LXAe5wrmiW5Dfd2evQtnA44kQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLeBJX5xDXCAv6JDz8iWuGczfNckMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvdDRFbGZuRU5jSUNfb2tQUHlKYTRaek44MXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsCAzAwQA sCA3MA0GCSqGSIb3DQEBCwUAA4IBAQBU2jkwVQqi0ugGbjyCeNjN8Bz9TdWUq/UU nuHckDktxtE2Bwu37qbEbfk+xwcHI+VkaYTqK9aOyrXVJCNIleZdezYc7nDi0urn v+scMAGFh7hQK22qsVLHXWJoNsiutPyRZYvaYjILl1qqWq62dmVQH3zYeIJ4BEyp VjgjhA3862lQ8eo89iflV8P9feTIqRVc7omNaup56Seceyj9xgk8djU+ppgy+7FK 5swx3hK1TtLxIuJbuzKzQow3ksB90WFLRxgegx9WMFpssOM/mKfHOA/D60owZXkd K4joIaRfNx5RqphgJCAMz3HsMCux1kRQdOzsjdDoZjeuRfjQHTAi -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:19 2026 by rpki-client