This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa File: 4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa (raw, json) Hash identifier: 4N+MVFoHn+t4XX6dy0VLE63oifYd03KKG5mUbwfZupw= Subject key identifier: E3:17:00:C2:F1:ED:FF:FF:0C:E2:AE:EA:EB:F3:FC:1A:67:06:74:9D Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Certificate serial: 019B7D5CB8E07C0A5E5D98DFA936564A6727 Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 193.201.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b8:e0:7c:0a:5e:5d:98:df:a9:36:56:4a:67:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31700c2f1edffff0ce2aeeaebf3fc1a6706749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:16:cf:3f:14:df:83:80:97:74:48:f8:8e: 4e:04:29:3a:b3:63:af:3d:06:38:59:9d:6a:a8:c7: 58:c6:88:73:14:3e:22:c0:48:6b:e1:36:c3:ea:fa: d4:e3:ac:c1:f8:6f:6d:7d:48:1a:92:8f:fd:73:7a: e2:de:de:3d:73:92:9e:19:3f:57:31:b7:06:f6:12: 81:5f:f0:a0:13:56:5a:24:37:0e:73:ec:78:cf:e6: a8:37:df:ea:da:d2:c4:e4:5e:35:e1:91:c3:ef:01: 21:77:40:b5:1a:3d:9a:e8:c2:41:65:5e:fd:d3:13: 74:e0:1e:15:60:6f:83:37:49:38:7f:31:bd:65:aa: 96:45:c5:ab:6e:01:7a:30:8d:cc:53:8a:39:bf:19: b9:32:3c:58:76:fd:c1:1d:9f:78:53:46:3f:d2:b9: 7c:d4:15:37:70:66:20:86:be:f6:e9:3a:ea:5a:88: 12:cc:9e:3c:c0:dc:60:b5:b6:4b:b9:44:aa:ec:17: db:cd:58:92:35:18:fb:f1:cb:4a:29:c5:54:8f:1a: 5a:74:8c:48:0a:80:ce:ba:c6:9e:c3:f0:8a:3a:7d: 04:d8:af:53:05:a3:56:bc:42:9e:13:55:22:01:42: ad:43:98:2f:3f:7d:01:c7:48:d2:28:dd:bd:83:d6: 0b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:00:C2:F1:ED:FF:FF:0C:E2:AE:EA:EB:F3:FC:1A:67:06:74:9D X509v3 Authority Key Identifier: keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/4xcAwvHt__8M4q7q6_P8GmcGdJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.33.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b3:0a:31:b0:72:ff:c6:c2:e5:41:73:fc:d4:6c:a2:8e:45: 73:15:11:f2:56:51:23:11:9d:27:e4:b9:f4:1d:23:46:fa:27: 02:80:25:19:76:89:7d:c3:8f:15:2f:82:ef:11:75:5a:b6:d2: ba:26:41:19:3e:b0:dc:f3:36:42:f1:ca:f9:67:14:fd:a3:ac: 47:08:0d:23:39:ca:cb:1a:9b:ea:ce:55:77:7a:37:31:c1:2c: 7e:3c:80:06:39:18:7d:c5:fb:b6:a0:b3:9d:5e:48:8e:ad:73: 22:89:07:58:6b:91:9f:b4:49:4b:75:0f:52:d6:1c:93:37:fa: 06:e0:13:cc:84:fa:37:03:dd:e1:f6:4a:8d:06:7e:02:31:be: d9:48:76:5a:40:92:91:0d:f9:7f:cf:a4:c2:6d:b6:42:2d:2f: c8:01:25:ba:30:7e:a8:51:93:4d:d2:18:82:e7:ed:85:99:16: 31:bb:e1:aa:6f:8f:4a:01:52:98:44:02:92:98:ec:2f:0a:7b: d8:0b:57:b8:41:79:19:db:b2:af:38:32:f6:78:78:e0:1d:54: 3f:46:21:4c:bd:73:6e:ca:32:8b:ea:83:7a:34:f6:c9:78:5e: 09:1d:96:59:51:ff:33:cf:82:cf:84:39:bd:41:2c:4d:b2:5d: c5:55:d6:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLjgfApeXZjfqTZWSmcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMGNlYjgxZWJjZTg1OWY1MDkyOGU4ZWQzZTFmMGE4NTEx MTUyZGIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE3MDBjMmYxZWRmZmZmMGNlMmFlZWFlYmYzZmMxYTY3MDY3NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ0Wzz8U34OAl3RI+I5OBCk6s2Ov PQY4WZ1qqMdYxohzFD4iwEhr4TbD6vrU46zB+G9tfUgako/9c3ri3t49c5KeGT9X MbcG9hKBX/CgE1ZaJDcOc+x4z+aoN9/q2tLE5F414ZHD7wEhd0C1Gj2a6MJBZV79 0xN04B4VYG+DN0k4fzG9ZaqWRcWrbgF6MI3MU4o5vxm5MjxYdv3BHZ94U0Y/0rl8 1BU3cGYghr726TrqWogSzJ48wNxgtbZLuUSq7BfbzViSNRj78ctKKcVUjxpadIxI CoDOusaew/CKOn0E2K9TBaNWvEKeE1UiAUKtQ5gvP30Bx0jSKN29g9YLTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMXAMLx7f//DOKu6uvz/BpnBnSdMB8GA1UdIwQY MBaAFCwM64HrzoWfUJKOjtPh8KhREVLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4Nzkt NmU4YjM0ZjE5NzZiLzEvNHhjQXd2SHRfXzhNNHE3cTZfUDhHbWNHZEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4NzktNmU4YjM0ZjE5NzZi LzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwckhMA0G CSqGSIb3DQEBCwUAA4IBAQAkswoxsHL/xsLlQXP81GyijkVzFRHyVlEjEZ0n5Ln0 HSNG+icCgCUZdol9w48VL4LvEXVattK6JkEZPrDc8zZC8cr5ZxT9o6xHCA0jOcrL GpvqzlV3ejcxwSx+PIAGORh9xfu2oLOdXkiOrXMiiQdYa5GftElLdQ9S1hyTN/oG 4BPMhPo3A93h9kqNBn4CMb7ZSHZaQJKRDfl/z6TCbbZCLS/IASW6MH6oUZNN0hiC 5+2FmRYxu+Gqb49KAVKYRAKSmOwvCnvYC1e4QXkZ27KvODL2eHjgHVQ/RiFMvXNu yjKL6oN6NPbJeF4JHZZZUf8zz4LPhDm9QSxNsl3FVdbN -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:52 2026 by rpki-client