This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/4GacYlC1xTXBA2gZGI4h12SFY-0.roa File: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (raw, json) Hash identifier: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q= Subject key identifier: E0:66:9C:62:50:B5:C5:35:C1:03:68:19:18:8E:21:D7:64:85:63:ED Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Certificate serial: 019B7F8256A62A0B3741AE85A5654E7EBF23 Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/4GacYlC1xTXBA2gZGI4h12SFY-0.roa Signing time: Fri 02 Jan 2026 16:20:06 +0000 ROA not before: Fri 02 Jan 2026 16:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42821 IP address blocks: 195.182.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:56:a6:2a:0b:37:41:ae:85:a5:65:4e:7e:bf:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Validity Not Before: Jan 2 16:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0669c6250b5c535c1036819188e21d7648563ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:fc:43:0d:be:6a:29:54:44:8f:1e:d6:8f: 0b:8b:f9:7c:36:5d:8b:6c:1f:56:69:25:11:be:47: cf:2a:3d:39:36:6c:ba:af:76:86:e3:6f:78:52:e0: 6b:9d:7e:af:4d:db:b4:e2:e9:90:9f:90:29:12:6b: f7:26:c3:45:aa:dd:3d:ad:38:11:f4:10:6e:1d:d0: de:ed:d5:08:73:d7:15:c2:91:36:e8:33:16:1b:5d: 14:b2:82:1b:58:66:a4:0d:d4:e4:f6:2b:b7:c9:fe: 9b:25:9f:58:89:0a:3c:07:a8:2a:28:cf:ba:e3:9c: ef:e2:49:df:de:31:dd:e4:4a:91:ed:f2:02:4b:5a: 03:83:f0:43:da:4d:19:61:87:1b:fc:db:3a:1f:b8: f2:54:c1:41:ea:3c:fa:00:7d:11:89:31:ad:76:45: 80:ec:b9:04:7b:43:06:ff:2f:94:f8:4e:3e:90:9c: 32:93:8e:ef:6c:8e:a0:16:38:f1:2a:09:83:9d:9d: c4:1e:18:c5:4d:54:b0:d7:64:9b:7b:8d:ea:a1:dd: 75:44:6c:ad:06:8b:c4:22:12:ad:04:b9:b1:2b:a5: 85:23:37:fa:b9:c4:5a:2a:31:83:88:e1:90:ad:99: 22:4b:58:c7:1b:fb:49:56:2b:a3:bf:e3:94:e7:33: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:9C:62:50:B5:C5:35:C1:03:68:19:18:8E:21:D7:64:85:63:ED X509v3 Authority Key Identifier: keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/4GacYlC1xTXBA2gZGI4h12SFY-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.50.0/24 Signature Algorithm: sha256WithRSAEncryption 52:97:bc:81:46:1d:58:fa:43:cd:4e:24:e6:e5:a8:72:56:e4: 29:e9:40:b0:8a:70:ec:01:9a:65:f6:6c:3c:34:20:39:eb:04: 1b:16:6a:af:a2:9d:3c:25:51:0d:38:fb:3b:08:50:58:e4:ae: 1c:aa:46:01:e6:d0:95:63:fb:48:f1:c0:49:36:2a:5e:b1:67: aa:77:23:28:10:ab:3b:d1:8a:09:1c:29:f6:41:ca:5b:83:6a: e5:7c:96:fc:a6:88:bb:73:7c:ec:5c:94:c4:bd:60:1e:58:a5: 08:b6:35:b4:68:a1:b4:20:97:7e:51:29:50:6e:41:7f:16:2f: dd:30:76:d9:a7:8b:98:d1:5b:65:92:e9:ba:01:82:5f:2f:e0: 86:3f:4a:31:7e:1d:40:47:40:49:46:02:e2:83:cc:6b:07:d3: fc:09:3c:69:fa:88:ad:28:d5:f2:3f:c2:14:e7:48:45:c9:1c: a1:bb:93:8c:69:70:b1:37:f0:0d:84:77:65:d0:e4:e0:02:12: 46:e4:52:6e:7f:5b:ac:2c:d5:9f:b6:8f:02:e6:22:cb:52:6b: 08:85:af:85:a1:68:71:b8:ae:65:40:ab:9a:38:a8:18:dc:09: bc:5e:88:24:a9:3f:1c:f2:52:3e:d0:c6:65:f7:da:58:79:67: b2:07:d3:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/glamKgs3Qa6FpWVOfr8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2 OGZiZWEwHhcNMjYwMTAyMTYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDY2OWM2MjUwYjVjNTM1YzEwMzY4MTkxODhlMjFkNzY0ODU2M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08n8Qw2+ailURI8e1o8Li/l8Nl2L bB9WaSURvkfPKj05Nmy6r3aG4294UuBrnX6vTdu04umQn5ApEmv3JsNFqt09rTgR 9BBuHdDe7dUIc9cVwpE26DMWG10UsoIbWGakDdTk9iu3yf6bJZ9YiQo8B6gqKM+6 45zv4knf3jHd5EqR7fICS1oDg/BD2k0ZYYcb/Ns6H7jyVMFB6jz6AH0RiTGtdkWA 7LkEe0MG/y+U+E4+kJwyk47vbI6gFjjxKgmDnZ3EHhjFTVSw12Sbe43qod11RGyt BovEIhKtBLmxK6WFIzf6ucRaKjGDiOGQrZkiS1jHG/tJViujv+OU5zPqBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBmnGJQtcU1wQNoGRiOIddkhWPtMB8GA1UdIwQY MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt ZGE4MWYwOGY2MDAxLzEvNEdhY1lsQzF4VFhCQTJnWkdJNGgxMlNGWS0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YyMA0G CSqGSIb3DQEBCwUAA4IBAQBSl7yBRh1Y+kPNTiTm5ahyVuQp6UCwinDsAZpl9mw8 NCA56wQbFmqvop08JVENOPs7CFBY5K4cqkYB5tCVY/tI8cBJNipesWeqdyMoEKs7 0YoJHCn2Qcpbg2rlfJb8poi7c3zsXJTEvWAeWKUItjW0aKG0IJd+USlQbkF/Fi/d MHbZp4uY0Vtlkum6AYJfL+CGP0oxfh1AR0BJRgLig8xrB9P8CTxp+oitKNXyP8IU 50hFyRyhu5OMaXCxN/ANhHdl0OTgAhJG5FJuf1usLNWfto8C5iLLUmsIha+FoWhx uK5lQKuaOKgY3Am8XogkqT8c8lI+0MZl99pYeWeyB9N0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:07 2026 by rpki-client