This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/4ypzGfCHhgDoMmCtv9mhP95DsH8.roa File: 4ypzGfCHhgDoMmCtv9mhP95DsH8.roa (raw, json) Hash identifier: cgyweP6TWOD2EkCngfHayXAx2FserZFtDFpsPs5VJG0= Subject key identifier: E3:2A:73:19:F0:87:86:00:E8:32:60:AD:BF:D9:A1:3F:DE:43:B0:7F Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f Certificate serial: 019B7CED0D9CF83FA0E5CE712AE65112724F Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/4ypzGfCHhgDoMmCtv9mhP95DsH8.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213162 IP address blocks: 83.138.57.0/24 maxlen: 24 176.116.120.0/22 maxlen: 22 2a0f:fa40::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0d:9c:f8:3f:a0:e5:ce:71:2a:e6:51:12:72:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e32a7319f0878600e83260adbfd9a13fde43b07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:bf:24:5f:d1:4b:3f:1e:f3:f8:8e:0a:fb: 2a:c5:72:84:df:65:90:81:95:e2:eb:aa:fa:d6:e8: 67:08:a4:f4:6f:86:0f:c7:d7:5d:b7:cf:bd:39:a2: 02:a4:02:fa:59:5e:3e:b8:a4:e8:1b:99:99:a1:7a: 40:4e:4d:75:74:8d:ba:a7:41:57:78:6c:3f:1f:54: 6a:6f:51:f7:5e:32:04:f4:3d:24:cb:53:8f:99:b2: 78:23:29:2a:fc:db:fd:02:bd:90:7a:d3:b7:f6:f5: 8a:6b:00:8f:c2:15:8a:a4:bd:91:70:5a:20:d7:35: bd:83:0a:29:90:ab:fc:35:47:f7:ae:78:9b:2b:93: f9:5c:2b:5c:d9:0e:b6:45:8c:f8:c7:bb:3a:18:f1: 70:4c:ca:66:3b:be:60:75:f0:9c:f6:50:fd:d6:d7: 9e:2f:9b:f8:f9:f6:33:db:5a:a5:85:9d:12:ae:10: 65:d9:74:a7:35:c2:92:d7:9a:55:12:c9:4f:12:54: 2a:3c:f6:44:87:bd:4a:90:b5:9d:01:7e:08:0e:92: c5:39:47:88:45:f3:f5:31:5a:5c:ef:03:df:59:f1: 79:af:8e:a6:94:63:ed:8f:55:96:b3:68:f4:96:03: ae:7a:b4:38:8e:87:e4:59:79:2d:a2:c1:72:75:52: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:73:19:F0:87:86:00:E8:32:60:AD:BF:D9:A1:3F:DE:43:B0:7F X509v3 Authority Key Identifier: keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/4ypzGfCHhgDoMmCtv9mhP95DsH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.138.57.0/24 176.116.120.0/22 IPv6: 2a0f:fa40::/29 Signature Algorithm: sha256WithRSAEncryption 3f:e4:1c:89:80:fc:2c:84:2d:c7:6f:c1:d6:b1:b7:b7:f4:cf: 43:83:d0:80:52:e5:25:db:29:d5:9e:dd:e1:56:c9:88:5d:56: ef:9e:d8:9c:10:cb:28:23:b9:3d:57:cb:ec:f2:22:d1:aa:21: b8:59:c2:49:e0:6d:fc:23:9a:66:f3:21:13:ab:3f:92:dc:d3: 42:e9:43:d6:6e:ad:d4:7e:e9:ad:01:ac:ec:ae:53:c8:2a:05: 41:a4:37:cd:61:5b:c8:5d:21:c6:e6:9a:25:85:a3:db:63:d0: 29:a3:ba:a5:e8:76:b4:c6:6c:a8:a0:af:55:9d:c0:44:6a:41: 83:29:7c:c2:77:a3:d7:7e:8e:e8:01:b2:75:32:89:4f:7f:04: 1e:de:f1:7e:b2:b2:57:cb:a4:4e:98:18:f4:19:89:0e:46:40: e9:ba:a3:bb:13:05:bf:c5:25:47:77:36:39:8d:10:b3:a2:78: 50:42:ba:79:97:86:44:64:94:4a:7d:ae:43:a7:9a:27:77:0e: 47:c5:0d:10:c3:f9:24:9e:1f:55:53:dc:c1:1a:06:bc:71:eb: df:91:ad:ed:72:ae:6d:a1:81:fb:85:39:02:6a:5f:a3:43:f6: 8f:2a:1e:20:a4:38:f3:4e:12:7c:35:63:9a:10:0e:8d:9b:ab: 9d:12:67:e7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87Q2c+D+g5c5xKuZREnJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl ZDM3OWYwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzJhNzMxOWYwODc4NjAwZTgzMjYwYWRiZmQ5YTEzZmRlNDNiMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoS/JF/RSz8e8/iOCvsqxXKE32WQ gZXi66r61uhnCKT0b4YPx9ddt8+9OaICpAL6WV4+uKToG5mZoXpATk11dI26p0FX eGw/H1Rqb1H3XjIE9D0ky1OPmbJ4Iykq/Nv9Ar2QetO39vWKawCPwhWKpL2RcFog 1zW9gwopkKv8NUf3rnibK5P5XCtc2Q62RYz4x7s6GPFwTMpmO75gdfCc9lD91tee L5v4+fYz21qlhZ0SrhBl2XSnNcKS15pVEslPElQqPPZEh71KkLWdAX4IDpLFOUeI RfP1MVpc7wPfWfF5r46mlGPtj1WWs2j0lgOuerQ4jofkWXktosFydVK1+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOMqcxnwh4YA6DJgrb/ZoT/eQ7B/MB8GA1UdIwQY MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt MTI2NDFmOWU2ZmMwLzEvNHlwekdmQ0hoZ0RvTW1DdHY5bWhQOTVEc0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAU4o5AwQC sHR4MA0EAgACMAcDBQMqD/pAMA0GCSqGSIb3DQEBCwUAA4IBAQA/5ByJgPwshC3H b8HWsbe39M9Dg9CAUuUl2ynVnt3hVsmIXVbvnticEMsoI7k9V8vs8iLRqiG4WcJJ 4G38I5pm8yETqz+S3NNC6UPWbq3UfumtAazsrlPIKgVBpDfNYVvIXSHG5polhaPb Y9Apo7ql6Ha0xmyooK9VncBEakGDKXzCd6PXfo7oAbJ1MolPfwQe3vF+srJXy6RO mBj0GYkORkDpuqO7EwW/xSVHdzY5jRCzonhQQrp5l4ZEZJRKfa5Dp5ondw5HxQ0Q w/kknh9VU9zBGga8cevfka3tcq5toYH7hTkCal+jQ/aPKh4gpDjzThJ8NWOaEA6N m6udEmfn -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:51 2026 by rpki-client