This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/4-Kuyhra6Pj-z2hUF16HkaHj9uU.roa File: 4-Kuyhra6Pj-z2hUF16HkaHj9uU.roa (raw, json) Hash identifier: R5niomc2n1HE4RWyhi6lkmKstzQAGxfES0erD2zkkYw= Subject key identifier: E3:E2:AE:CA:1A:DA:E8:F8:FE:CF:68:54:17:5E:87:91:A1:E3:F6:E5 Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101 Certificate serial: 019B7835268E857C8625FC19D64B1635FB5F Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/4-Kuyhra6Pj-z2hUF16HkaHj9uU.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61424 IP address blocks: 185.48.248.0/23 maxlen: 23 2a04:b540::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:26:8e:85:7c:86:25:fc:19:d6:4b:16:35:fb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3e2aeca1adae8f8fecf6854175e8791a1e3f6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:d0:19:35:d4:ec:e6:e9:1f:50:dd:76:ae: 1d:25:c8:93:8a:22:46:82:66:1b:32:dc:a6:e8:12: 53:7a:8b:ed:fb:3e:d7:3d:c4:79:cb:a1:fc:79:71: 81:e6:de:73:eb:b0:35:ef:47:51:94:29:55:db:21: 4c:23:be:b7:2f:1c:33:32:cc:ef:e1:30:e4:00:b4: 18:b4:5c:0f:eb:3e:58:f4:99:63:1e:c6:bd:4e:05: 94:ab:15:ce:f7:29:48:0e:ae:07:44:c3:ff:1a:d2: aa:e6:ca:91:7e:e1:4d:bf:98:cc:19:0f:93:d2:61: e4:bc:92:81:68:a6:b8:ce:aa:e6:96:bf:63:97:fb: 51:50:a2:a4:5d:3f:d2:8c:b2:4f:81:ac:1f:ce:5d: 5a:57:bd:11:b2:04:2b:53:30:0e:0a:23:09:69:e0: 51:61:84:2f:b8:83:31:09:0b:1d:aa:91:54:47:7d: 27:a3:72:6f:44:e2:81:ed:a5:95:64:ef:6c:f5:ec: b4:02:86:2c:fc:fe:b9:bf:7e:7a:69:fb:b1:d9:74: 8b:5f:9f:9d:a4:23:83:44:14:bb:01:24:5c:83:f1: 0c:4b:30:e0:c4:d8:93:03:79:c3:f7:94:21:73:fe: ae:e4:d7:d5:30:0f:21:16:08:62:67:bf:3e:10:5d: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:AE:CA:1A:DA:E8:F8:FE:CF:68:54:17:5E:87:91:A1:E3:F6:E5 X509v3 Authority Key Identifier: keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/4-Kuyhra6Pj-z2hUF16HkaHj9uU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.248.0/23 IPv6: 2a04:b540::/36 Signature Algorithm: sha256WithRSAEncryption 56:e8:90:ba:c8:21:78:25:18:ca:bc:72:ca:e8:8e:fc:85:a6: f1:72:e3:b9:3d:b4:d4:41:27:91:fe:55:39:56:68:00:7c:8a: c6:3d:6d:d6:38:e4:22:de:a6:3f:41:e2:e3:6d:dc:28:23:01: 3d:27:87:02:49:26:6d:a7:14:87:84:88:fd:e8:cf:5f:d9:88: 72:b0:69:36:90:b5:29:cc:3b:d8:e4:d9:43:98:d5:76:9d:8d: eb:4b:6a:78:6f:e1:75:76:53:9c:f8:86:ff:c8:8b:42:d8:d5: 87:04:25:6b:2b:4c:77:55:b7:e6:40:2a:bc:82:67:34:42:a6: 0c:23:10:ec:5b:4e:2c:5f:0f:dd:cf:42:e2:48:5d:45:08:eb: 6e:7e:2d:57:34:5b:60:c7:2b:ce:4f:d0:00:22:54:60:2b:ac: d3:2b:f2:51:09:17:63:23:e1:a3:ac:e6:e5:a5:55:2d:b4:3d: d2:68:af:f5:b9:fb:c0:aa:93:39:49:96:c9:31:64:4c:9e:3e: 1e:ae:c3:41:d3:44:77:39:84:ad:d2:7b:a2:59:52:44:2d:0f: 99:42:45:58:0f:74:e6:ee:ad:6f:9b:2b:9d:ea:e5:3f:82:7c: 70:15:63:93:91:74:90:a3:7c:95:83:48:69:54:8e:c4:77:0b: 86:b9:e3:2c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NSaOhXyGJfwZ1ksWNftfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj MzIxMDEwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2UyYWVjYTFhZGFlOGY4ZmVjZjY4NTQxNzVlODc5MWExZTNmNmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmPQGTXU7ObpH1Dddq4dJciTiiJG gmYbMtym6BJTeovt+z7XPcR5y6H8eXGB5t5z67A170dRlClV2yFMI763LxwzMszv 4TDkALQYtFwP6z5Y9JljHsa9TgWUqxXO9ylIDq4HRMP/GtKq5sqRfuFNv5jMGQ+T 0mHkvJKBaKa4zqrmlr9jl/tRUKKkXT/SjLJPgawfzl1aV70RsgQrUzAOCiMJaeBR YYQvuIMxCQsdqpFUR30no3JvROKB7aWVZO9s9ey0AoYs/P65v356afux2XSLX5+d pCODRBS7ASRcg/EMSzDgxNiTA3nD95Qhc/6u5NfVMA8hFghiZ78+EF0+iwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOPirsoa2uj4/s9oVBdeh5Gh4/blMB8GA1UdIwQY MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It ZDA3OGVlYzgyYjJhLzEvNC1LdXlocmE2UGotejJoVUYxNkhrYUhqOXVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuTD4MA4E AgACMAgDBgQqBLVAADANBgkqhkiG9w0BAQsFAAOCAQEAVuiQusgheCUYyrxyyuiO /IWm8XLjuT201EEnkf5VOVZoAHyKxj1t1jjkIt6mP0Hi423cKCMBPSeHAkkmbacU h4SI/ejPX9mIcrBpNpC1Kcw72OTZQ5jVdp2N60tqeG/hdXZTnPiG/8iLQtjVhwQl aytMd1W35kAqvIJnNEKmDCMQ7FtOLF8P3c9C4khdRQjrbn4tVzRbYMcrzk/QACJU YCus0yvyUQkXYyPho6zm5aVVLbQ90miv9bn7wKqTOUmWyTFkTJ4+Hq7DQdNEdzmE rdJ7ollSRC0PmUJFWA905u6tb5srnerlP4J8cBVjk5F0kKN8lYNIaVSOxHcLhrnj LA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:29 2026 by rpki-client