This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/4cocr0q1XWVnObqRRasdUZTa22c.roa File: 4cocr0q1XWVnObqRRasdUZTa22c.roa (raw, json) Hash identifier: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo= Subject key identifier: E1:CA:1C:AF:4A:B5:5D:65:67:39:BA:91:45:AB:1D:51:94:DA:DB:67 Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Certificate serial: 019B77C74E3F978F143EA3D8E8F7E0420E2D Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/4cocr0q1XWVnObqRRasdUZTa22c.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21101 IP address blocks: 91.240.230.0/23 maxlen: 24 94.143.96.0/21 maxlen: 24 185.5.94.0/24 maxlen: 24 185.5.95.0/24 maxlen: 24 193.109.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4e:3f:97:8f:14:3e:a3:d8:e8:f7:e0:42:0e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ca1caf4ab55d656739ba9145ab1d5194dadb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:42:d0:1a:b7:24:93:3e:1a:44:85:34:10: 59:93:32:6e:6a:aa:9a:1d:1f:52:92:b7:32:2a:de: 77:07:2b:c7:c3:cb:1e:fb:db:dc:a2:b7:ba:21:f0: ae:5e:fc:26:03:bb:58:41:b4:ee:fd:c5:a0:48:9c: 6a:ea:66:c7:a5:3c:c6:a1:8b:81:0d:35:b6:ac:29: 8c:66:e8:76:e3:a1:91:e1:27:d8:b3:ae:c0:f7:55: 84:3d:9f:76:06:97:d0:04:29:de:4c:d5:d1:38:44: 83:78:30:d8:7f:a5:f0:92:6b:88:b8:91:cb:24:29: bd:6e:3f:c9:4c:1d:7d:f6:5d:bc:36:83:74:ac:43: b8:37:37:f7:7a:51:75:14:b1:c2:20:2f:a0:80:89: 6c:c2:49:2a:c6:7f:16:e0:a1:3b:f2:e8:d8:64:1b: f5:aa:f1:d0:f6:20:d2:63:eb:70:dc:3e:43:1f:5b: 71:13:dc:10:9a:89:f6:d3:02:75:ad:6d:b7:db:53: f9:75:ac:56:cf:9a:96:99:8b:5e:e8:37:f0:dc:05: 13:85:a9:7b:3a:f6:84:dd:00:82:3c:80:b5:4d:75: f3:10:b7:b2:aa:d2:b8:03:15:59:ac:06:73:a1:0a: f5:f2:63:26:6f:3a:47:eb:bc:b3:1a:3d:6c:f0:06: eb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CA:1C:AF:4A:B5:5D:65:67:39:BA:91:45:AB:1D:51:94:DA:DB:67 X509v3 Authority Key Identifier: keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/4cocr0q1XWVnObqRRasdUZTa22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.230.0/23 94.143.96.0/21 185.5.94.0/23 193.109.32.0/21 Signature Algorithm: sha256WithRSAEncryption b8:68:a4:39:25:f8:5b:27:f3:c9:b2:7b:75:32:98:e9:6b:0f: c8:f1:54:4d:a6:15:33:b9:24:2a:bf:26:2a:5b:88:70:47:b3: d7:22:c4:44:4a:48:25:d6:7b:1a:39:58:7b:cc:4b:f7:cb:f6: e1:4d:d0:f4:ae:20:0b:b5:59:d9:be:b2:93:29:54:54:25:ee: 11:25:5b:65:20:a4:cd:ee:50:6e:4c:73:59:1b:d3:ef:65:1a: c5:16:d1:ad:98:a8:d6:17:29:89:40:2e:d9:66:c8:bd:22:e0: 3c:19:de:bb:a1:e5:d9:4b:f1:c7:7c:24:f1:51:6c:0d:4b:d1: f2:51:47:b3:f9:24:91:33:89:26:e1:dc:11:0a:3e:8f:1f:5d: 08:c6:25:b9:8c:41:d7:d2:a2:74:1c:41:48:09:ce:ce:12:b9: 0e:06:76:f0:b9:ef:28:91:c2:ef:bb:c1:69:52:52:a4:73:bd: 80:21:35:f9:5e:e0:a2:e0:e1:a8:17:8b:d7:43:f2:b1:4c:00: 17:af:c8:c1:c1:23:59:db:33:47:3f:3e:31:2e:ef:01:57:bb: 0a:bf:74:08:61:ef:af:3f:d8:01:5c:bc:0e:ec:24:a6:7f:39: db:d0:e5:27:aa:5f:b9:72:9a:7b:5d:0b:9c:d4:43:ed:e8:70: 49:7f:7d:e8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x04/l48UPqPY6PfgQg4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1 MjE3NDYwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNhMWNhZjRhYjU1ZDY1NjczOWJhOTE0NWFiMWQ1MTk0ZGFkYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vVC0Bq3JJM+GkSFNBBZkzJuaqqa HR9SkrcyKt53ByvHw8se+9vcore6IfCuXvwmA7tYQbTu/cWgSJxq6mbHpTzGoYuB DTW2rCmMZuh246GR4SfYs67A91WEPZ92BpfQBCneTNXROESDeDDYf6XwkmuIuJHL JCm9bj/JTB199l28NoN0rEO4Nzf3elF1FLHCIC+ggIlswkkqxn8W4KE78ujYZBv1 qvHQ9iDSY+tw3D5DH1txE9wQmon20wJ1rW2321P5daxWz5qWmYte6Dfw3AUThal7 OvaE3QCCPIC1TXXzELeyqtK4AxVZrAZzoQr18mMmbzpH67yzGj1s8AbrIQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOHKHK9KtV1lZzm6kUWrHVGU2ttnMB8GA1UdIwQY MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt NTBmYzRkNTU3ZDA4LzEvNGNvY3IwcTFYV1ZuT2JxUlJhc2RVWlRhMjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4 LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW/DmAwQD Xo9gAwQBuQVeAwQDwW0gMA0GCSqGSIb3DQEBCwUAA4IBAQC4aKQ5JfhbJ/PJsnt1 Mpjpaw/I8VRNphUzuSQqvyYqW4hwR7PXIsRESkgl1nsaOVh7zEv3y/bhTdD0riAL tVnZvrKTKVRUJe4RJVtlIKTN7lBuTHNZG9PvZRrFFtGtmKjWFymJQC7ZZsi9IuA8 Gd67oeXZS/HHfCTxUWwNS9HyUUez+SSRM4km4dwRCj6PH10IxiW5jEHX0qJ0HEFI Cc7OErkOBnbwue8okcLvu8FpUlKkc72AITX5XuCi4OGoF4vXQ/KxTAAXr8jBwSNZ 2zNHPz4xLu8BV7sKv3QIYe+vP9gBXLwO7CSmfznb0OUnql+5cpp7XQuc1EPt6HBJ f33o -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:46 2026 by rpki-client