This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/4ck5stj-Nruh5mOMgR2qNBplGK4.roa File: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (raw, json) Hash identifier: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8= Subject key identifier: E1:C9:39:B2:D8:FE:36:BB:A1:E6:63:8C:81:1D:AA:34:1A:65:18:AE Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba Certificate serial: 019B7B369A10F43E42FB19E74DDCF104E508 Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/4ck5stj-Nruh5mOMgR2qNBplGK4.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197682 IP address blocks: 192.162.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9a:10:f4:3e:42:fb:19:e7:4d:dc:f1:04:e5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1c939b2d8fe36bba1e6638c811daa341a6518ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:55:96:98:5c:9c:d2:c9:26:45:2f:ae:bd: dd:87:6f:d7:49:93:e8:b3:09:5c:cd:60:46:7a:cd: e7:15:21:88:90:7e:10:59:e8:22:c0:0a:50:cc:28: e4:3c:27:fe:e1:18:85:94:10:e0:a4:a2:47:28:87: 53:fe:d2:04:2e:c1:f3:c3:97:56:a4:2d:c6:c6:29: 45:10:8a:26:5e:16:54:ad:70:48:f2:72:f9:03:89: db:a1:d4:1f:c3:17:00:e3:a1:d6:43:b7:36:9b:0b: a7:09:9a:a5:25:82:b4:99:6f:a8:31:58:ad:9e:b8: b7:01:e6:84:cd:f6:62:4a:81:0e:55:52:c9:a1:ff: ca:01:1c:e7:6f:23:5c:da:b9:95:ef:0f:01:33:31: f0:8a:9d:4a:24:a2:4a:b6:81:66:49:74:aa:fb:53: ec:33:a4:5b:16:9e:80:88:71:73:8c:13:1c:fe:13: fd:c5:6a:1b:9e:99:18:52:8a:08:45:27:10:77:8a: 92:cc:2f:f6:5f:bf:61:1f:71:09:07:f1:7e:c5:25: 64:35:32:39:bb:d7:05:28:c3:5b:93:30:9a:a0:16: e4:0d:9b:48:a7:1c:39:c2:68:71:ef:0c:ac:b4:fc: 31:b0:eb:98:ad:4b:fb:f5:70:2c:b1:2d:39:2f:94: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:39:B2:D8:FE:36:BB:A1:E6:63:8C:81:1D:AA:34:1A:65:18:AE X509v3 Authority Key Identifier: keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/4ck5stj-Nruh5mOMgR2qNBplGK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.44.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:df:81:94:25:7a:ec:ee:ba:21:14:91:6a:64:67:04:70:90: de:ed:eb:9d:a9:6d:da:66:70:e6:5f:9e:c5:48:60:83:5b:e7: f4:01:9b:69:ac:54:2e:d4:ff:0e:50:95:7f:84:5b:79:be:45: 14:5f:2c:1e:09:8a:2a:8d:d1:25:47:dd:b9:95:07:4b:59:1b: 2f:f9:25:13:6d:63:e2:b7:3a:71:bc:3d:4f:43:18:61:73:73: 08:9b:4f:b9:26:5c:a7:94:e4:89:44:a7:03:29:18:f9:ab:43: dd:54:d1:b9:70:f7:2c:f5:d6:f8:b0:a3:5d:4c:4e:a9:6d:a7: e2:56:38:b4:59:af:2d:c4:4e:66:f7:73:1e:3d:03:71:6b:75: 3e:79:d6:bd:13:9b:e5:74:a5:41:53:94:9e:90:64:10:fa:dc: 5c:cc:93:cb:6a:a5:52:89:e2:c1:f4:f0:2f:7a:e9:65:f6:bd: 76:8c:22:f3:9c:b8:18:4d:47:c1:3e:c3:fd:6b:ec:8e:9a:4e: 85:64:a8:b4:61:45:88:9e:61:ff:e9:cd:85:05:3b:91:d4:b5: 2f:1c:96:0a:97:63:9e:7c:e9:85:e3:74:9b:ab:b5:9a:cb:30: 92:fa:6b:cc:17:90:e6:93:c3:3b:06:4c:e2:1f:32:46:ec:64: a5:39:72:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpoQ9D5C+xnnTdzxBOUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzJlZjBjYWYwYTA1NzUyOWZiOTI4Zjc2OTYyYTc0MjUz OTBkYmEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWM5MzliMmQ4ZmUzNmJiYTFlNjYzOGM4MTFkYWEzNDFhNjUxOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8dVlphcnNLJJkUvrr3dh2/XSZPo swlczWBGes3nFSGIkH4QWegiwApQzCjkPCf+4RiFlBDgpKJHKIdT/tIELsHzw5dW pC3GxilFEIomXhZUrXBI8nL5A4nbodQfwxcA46HWQ7c2mwunCZqlJYK0mW+oMVit nri3AeaEzfZiSoEOVVLJof/KARznbyNc2rmV7w8BMzHwip1KJKJKtoFmSXSq+1Ps M6RbFp6AiHFzjBMc/hP9xWobnpkYUooIRScQd4qSzC/2X79hH3EJB/F+xSVkNTI5 u9cFKMNbkzCaoBbkDZtIpxw5wmhx7wystPwxsOuYrUv79XAssS05L5RtvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHJObLY/ja7oeZjjIEdqjQaZRiuMB8GA1UdIwQY MBaAFO0y7wyvCgV1KfuSj3aWKnQlOQ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEt MWRiNTMxYzlkMmQ4LzEvNGNrNXN0ai1OcnVoNW1PTWdSMnFOQnBsR0s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81ZjYzMmYtZTI1Ni00ZjI2LTgyMWEtMWRiNTMxYzlkMmQ4 LzEvN1RMdkRLOEtCWFVwLTVLUGRwWXFkQ1U1RGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKIsMA0G CSqGSIb3DQEBCwUAA4IBAQAu34GUJXrs7rohFJFqZGcEcJDe7eudqW3aZnDmX57F SGCDW+f0AZtprFQu1P8OUJV/hFt5vkUUXyweCYoqjdElR925lQdLWRsv+SUTbWPi tzpxvD1PQxhhc3MIm0+5JlynlOSJRKcDKRj5q0PdVNG5cPcs9db4sKNdTE6pbafi Vji0Wa8txE5m93MePQNxa3U+eda9E5vldKVBU5SekGQQ+txczJPLaqVSieLB9PAv eull9r12jCLznLgYTUfBPsP9a+yOmk6FZKi0YUWInmH/6c2FBTuR1LUvHJYKl2Oe fOmF43Sbq7WayzCS+mvMF5Dmk8M7BkziHzJG7GSlOXIV -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client