This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/4PDvFK89C4F409g_XmWPwr7q1a0.roa File: 4PDvFK89C4F409g_XmWPwr7q1a0.roa (raw, json) Hash identifier: 9lF1IQm65iaYh5J0JpeOleT0SuGGi5cwQEdnoe/v5JQ= Subject key identifier: E0:F0:EF:14:AF:3D:0B:81:78:D3:D8:3F:5E:65:8F:C2:BE:EA:D5:AD Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B797F066FE5175456C72539B7EC82C8F0 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/4PDvFK89C4F409g_XmWPwr7q1a0.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33824 IP address blocks: 212.19.63.96/29 maxlen: 32 2a02:2e0:413::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:06:6f:e5:17:54:56:c7:25:39:b7:ec:82:c8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f0ef14af3d0b8178d3d83f5e658fc2beead5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:7d:07:7b:32:f6:13:ed:c7:c6:01:d3:08: 98:3e:f8:29:f0:a0:b8:4b:47:f7:38:00:f5:d8:3b: e6:93:51:20:13:34:95:bd:03:be:89:d0:54:1e:0e: cd:07:b3:ea:24:48:3c:b9:a7:21:93:67:82:5c:41: 02:91:80:61:67:1c:90:cc:d4:d2:a5:2d:12:aa:d3: 25:7d:9f:ff:0f:e5:ad:1c:78:80:28:81:50:da:7c: 7b:99:4e:a7:36:29:91:e5:38:5f:41:b2:66:14:45: aa:1d:cf:d1:bc:c6:d5:0b:d2:27:b3:25:d0:81:b7: 8d:c1:6e:c1:d2:20:02:a6:aa:c4:ec:15:b3:e9:1c: a9:e2:77:c6:96:72:09:15:27:b1:b6:cc:cb:9b:e7: 02:99:ac:13:34:a7:43:1b:12:52:0f:5a:2f:30:58: fc:52:ae:6a:aa:e8:a8:57:b8:00:7d:cb:1e:20:d1: 7e:4b:8c:6d:2a:a5:b0:5a:a0:5f:90:fb:fc:74:7c: e6:f4:02:ac:e0:d0:fa:12:7f:56:22:37:88:1c:24: 9a:88:a7:14:4c:fd:80:6b:ff:8a:64:ed:e1:56:53: 60:ce:65:97:17:ba:1e:ab:83:71:b8:76:9e:e1:9a: c9:44:f0:b4:ce:b3:08:53:06:02:1d:5f:37:fa:75: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F0:EF:14:AF:3D:0B:81:78:D3:D8:3F:5E:65:8F:C2:BE:EA:D5:AD X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/4PDvFK89C4F409g_XmWPwr7q1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.19.63.96/29 IPv6: 2a02:2e0:413::/48 Signature Algorithm: sha256WithRSAEncryption be:48:85:ee:14:e8:df:72:99:df:28:11:18:cd:a5:e9:da:0b: 94:04:5d:cf:2c:7e:a4:ab:ec:e3:d5:7e:c3:d4:53:94:b7:b3: 80:51:84:9b:e6:ac:b7:16:ff:ab:5c:9a:20:74:90:47:e1:2b: d9:d9:91:f3:de:98:c7:a1:a2:b0:7a:66:dd:b0:ff:18:43:c7: 2b:41:e3:cf:db:4d:3b:49:f6:0b:2d:4b:60:de:ae:c3:a5:62: dd:6e:00:52:4f:db:bd:49:b6:26:02:64:96:83:71:f9:b3:6c: b6:dc:ac:b4:b9:3b:84:eb:1c:3a:b7:f0:eb:93:d8:9c:ee:e3: 52:3f:9f:9d:ac:f5:04:76:5d:af:6c:ff:26:46:a9:4e:ee:70: de:a5:88:7a:25:b4:09:60:79:3e:8b:0c:2f:25:40:da:11:08: cc:c3:06:21:12:44:24:5c:3f:2f:84:14:57:b7:b0:1e:73:6b: c7:3e:b2:05:ec:58:75:bd:67:fb:01:64:dc:9f:b9:14:d9:63: 9a:52:66:95:9b:14:57:be:0e:64:0a:6f:7b:3f:01:17:25:b9: 7a:4e:f7:d8:33:11:56:65:75:f7:37:9d:60:b9:6a:e7:f2:ae: 96:13:ea:6a:a5:e0:64:44:67:bf:4a:b3:b0:ea:dc:da:0a:4f: 4e:73:46:73 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fwZv5RdUVsclObfsgsjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGYwZWYxNGFmM2QwYjgxNzhkM2Q4M2Y1ZTY1OGZjMmJlZWFkNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1F9B3sy9hPtx8YB0wiYPvgp8KC4 S0f3OAD12Dvmk1EgEzSVvQO+idBUHg7NB7PqJEg8uachk2eCXEECkYBhZxyQzNTS pS0SqtMlfZ//D+WtHHiAKIFQ2nx7mU6nNimR5ThfQbJmFEWqHc/RvMbVC9InsyXQ gbeNwW7B0iACpqrE7BWz6Ryp4nfGlnIJFSextszLm+cCmawTNKdDGxJSD1ovMFj8 Uq5qquioV7gAfcseINF+S4xtKqWwWqBfkPv8dHzm9AKs4ND6En9WIjeIHCSaiKcU TP2Aa/+KZO3hVlNgzmWXF7oeq4NxuHae4ZrJRPC0zrMIUwYCHV83+nVyMQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFODw7xSvPQuBeNPYP15lj8K+6tWtMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvNFBEdkZLODlDNEY0MDlnX1htV1B3cjdxMWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDANBAIAATAHAwUD1BM/YDAP BAIAAjAJAwcAKgIC4AQTMA0GCSqGSIb3DQEBCwUAA4IBAQC+SIXuFOjfcpnfKBEY zaXp2guUBF3PLH6kq+zj1X7D1FOUt7OAUYSb5qy3Fv+rXJogdJBH4SvZ2ZHz3pjH oaKwembdsP8YQ8crQePP2007SfYLLUtg3q7DpWLdbgBST9u9SbYmAmSWg3H5s2y2 3Ky0uTuE6xw6t/Drk9ic7uNSP5+drPUEdl2vbP8mRqlO7nDepYh6JbQJYHk+iwwv JUDaEQjMwwYhEkQkXD8vhBRXt7Aec2vHPrIF7Fh1vWf7AWTcn7kU2WOaUmaVmxRX vg5kCm97PwEXJbl6TvfYMxFWZXX3N51guWrn8q6WE+pqpeBkRGe/SrOw6tzaCk9O c0Zz -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:36 2026 by rpki-client