This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa File: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (raw, json) Hash identifier: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg= Subject key identifier: B7:80:5A:1C:C7:3A:C8:25:43:13:C2:79:50:A6:10:13:71:DE:48:49 Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Certificate serial: 019B76EB64C3F3F72F98D5B11A2163F774E0 Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 193.218.207.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:64:c3:f3:f7:2f:98:d5:b1:1a:21:63:f7:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7805a1cc73ac8254313c27950a6101371de4849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:e9:b0:1a:58:2f:8d:9a:b2:e1:66:fc:c4: 66:86:8d:dc:43:6b:9e:4c:4e:b0:03:83:c5:ab:83: d9:b4:0e:d0:29:55:4e:b5:ef:4a:9d:2e:ca:e0:db: e5:49:0b:06:7d:ca:b8:aa:d5:d4:fe:44:e4:c6:66: fc:46:31:39:b5:b2:e0:1c:68:23:cc:9f:79:aa:63: 2d:ff:5e:bc:87:f1:8b:f7:0e:d4:3f:f9:75:30:c9: 8e:ee:64:c5:c6:f5:6a:85:6d:57:b0:10:f4:6e:1b: 93:a4:32:cf:b6:e0:d2:4a:82:ba:f2:63:b3:36:e7: 45:a7:a9:e1:07:c2:09:70:2b:97:a4:0e:9a:2e:d2: c1:0f:3e:fc:c9:74:aa:20:a7:f4:53:61:e3:24:3f: a1:85:da:0e:9d:3e:f5:88:ee:31:86:ef:d4:e2:de: 2e:b7:d6:6f:ba:21:cf:09:bd:71:9c:d5:ba:94:91: 33:75:f3:c0:30:07:04:10:72:4c:ca:97:60:1b:d0: 0c:17:9f:e9:89:59:96:45:10:ff:63:b4:dd:2c:e4: ce:91:ec:a0:b8:f9:29:ec:00:1c:b5:67:d8:83:a0: 76:1b:1c:f9:50:c1:9c:50:52:ba:c1:ad:70:55:e3: 24:37:8f:59:ba:8b:2c:5b:1c:17:fe:75:76:6e:8e: bb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:80:5A:1C:C7:3A:C8:25:43:13:C2:79:50:A6:10:13:71:DE:48:49 X509v3 Authority Key Identifier: keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.207.0/28 Signature Algorithm: sha256WithRSAEncryption 48:30:fc:75:80:6f:38:59:21:39:bb:b8:46:74:20:1c:6a:f7: b4:7e:c1:42:a7:38:8f:42:80:23:ca:09:37:03:a8:53:c5:c4: 15:19:f0:3d:11:c0:da:db:f9:f9:da:05:d1:69:d2:45:f4:ed: ce:6e:a1:04:24:f2:52:00:f5:ba:31:06:51:13:f7:4a:9c:8e: fe:7f:1c:ce:71:58:21:88:ce:d3:a4:81:c4:7e:1f:61:57:9b: 0c:92:68:7f:d4:53:6c:5a:92:0b:94:a1:c7:a1:7f:41:c1:c1: 67:4d:46:95:ca:48:9f:f8:6c:aa:a1:1c:06:15:db:5f:94:a2: d1:c7:8f:ef:c1:a3:2d:ca:2c:2e:0d:1b:10:f2:e3:65:74:15: 9e:cb:73:24:bb:69:7e:e6:2f:03:4b:59:1f:69:13:01:bf:de: f1:f7:e5:fc:88:8c:5b:60:d7:65:09:ef:a1:cc:14:c7:05:25: c4:79:4c:38:fe:2a:81:ab:59:4f:fb:f8:5a:a4:a1:ea:2a:02: 2e:d6:83:49:c1:91:65:15:68:81:ce:2b:fa:ad:f3:76:20:3b: c9:13:9f:cb:bd:3f:7a:e6:41:59:f1:ec:1e:69:4b:2d:c8:14: 25:df:48:f3:63:98:b1:fe:f5:09:9e:43:94:8a:0a:d9:de:38: 97:76:72:c1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt262TD8/cvmNWxGiFj93TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3 YTYwNDYwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzgwNWExY2M3M2FjODI1NDMxM2MyNzk1MGE2MTAxMzcxZGU0ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLTpsBpYL42asuFm/MRmho3cQ2ue TE6wA4PFq4PZtA7QKVVOte9KnS7K4NvlSQsGfcq4qtXU/kTkxmb8RjE5tbLgHGgj zJ95qmMt/168h/GL9w7UP/l1MMmO7mTFxvVqhW1XsBD0bhuTpDLPtuDSSoK68mOz NudFp6nhB8IJcCuXpA6aLtLBDz78yXSqIKf0U2HjJD+hhdoOnT71iO4xhu/U4t4u t9ZvuiHPCb1xnNW6lJEzdfPAMAcEEHJMypdgG9AMF5/piVmWRRD/Y7TdLOTOkeyg uPkp7AActWfYg6B2Gxz5UMGcUFK6wa1wVeMkN49ZuossWxwX/nV2bo67MQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFLeAWhzHOsglQxPCeVCmEBNx3khJMB8GA1UdIwQY MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt MjdiODdiZmJlZTdiLzEvdDRCYUhNYzZ5Q1ZERThKNVVLWVFFM0hlU0VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEwdrPADAN BgkqhkiG9w0BAQsFAAOCAQEASDD8dYBvOFkhObu4RnQgHGr3tH7BQqc4j0KAI8oJ NwOoU8XEFRnwPRHA2tv5+doF0WnSRfTtzm6hBCTyUgD1ujEGURP3SpyO/n8cznFY IYjO06SBxH4fYVebDJJof9RTbFqSC5Shx6F/QcHBZ01GlcpIn/hsqqEcBhXbX5Si 0ceP78GjLcosLg0bEPLjZXQVnstzJLtpfuYvA0tZH2kTAb/e8ffl/IiMW2DXZQnv ocwUxwUlxHlMOP4qgatZT/v4WqSh6ioCLtaDScGRZRVogc4r+q3zdiA7yROfy70/ euZBWfHsHmlLLcgUJd9I82OYsf71CZ5DlIoK2d44l3ZywQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:29 2026 by rpki-client