This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa File: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (raw, json) Hash identifier: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4= Subject key identifier: E1:1C:BF:9A:5C:C1:69:44:3A:50:FD:6C:56:D1:23:B9:4B:13:0F:53 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 019B7835333433DA72C1D13690BCAC63BBCC Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa Signing time: Thu 01 Jan 2026 06:18:30 +0000 ROA not before: Thu 01 Jan 2026 06:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49788 IP address blocks: 91.240.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:33:34:33:da:72:c1:d1:36:90:bc:ac:63:bb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e11cbf9a5cc169443a50fd6c56d123b94b130f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:dd:87:68:3e:7e:7b:df:fb:43:9c:d8:b9: 18:ea:ed:34:f8:d3:d2:cf:4f:5c:c4:b1:dd:c3:9c: f1:4f:ae:30:b9:e2:4d:b9:02:ab:70:bb:db:54:9b: 0a:1c:53:ba:1a:e5:24:7f:9e:ef:dc:a3:55:d0:17: c3:66:ce:9e:00:ca:89:df:08:3d:38:d8:d9:1c:54: 10:b3:35:32:2d:87:a1:a6:be:09:28:7a:8a:4e:ef: cc:d3:0a:d3:1c:26:4b:bb:03:33:91:4d:3a:8c:83: 6f:c8:68:c0:a1:78:21:ee:3b:27:60:d7:71:1a:b3: 11:74:19:cc:dd:09:29:3f:bd:f2:7b:c9:74:c5:66: 1a:25:17:66:ef:d2:0e:42:bc:64:70:ae:8d:ef:a6: fc:81:be:a8:c0:b4:24:f0:b0:53:f3:f6:ef:e6:8f: 6b:2f:64:55:53:7a:93:f8:49:40:8d:6c:81:e0:60: 93:d0:38:57:a0:a3:c0:db:79:73:b6:31:6a:4c:39: e7:e0:30:fb:2d:d6:60:9a:b4:f8:e5:c4:92:6a:44: 2c:21:f2:de:d1:f1:08:cb:52:58:b8:8e:d3:1d:81: 70:f7:34:2a:be:65:d6:44:0d:63:e1:9b:5d:ec:2c: 6c:68:c7:6d:d7:f7:ed:b2:74:17:d2:54:e2:e5:c6: 66:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:BF:9A:5C:C1:69:44:3A:50:FD:6C:56:D1:23:B9:4B:13:0F:53 X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.204.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f0:ac:13:0b:68:1c:d8:fc:b1:1d:78:c4:32:9c:df:4f:71: 84:94:db:7f:0f:36:c3:17:bc:7d:27:00:31:99:a5:cb:c9:ab: 1e:53:4d:11:00:02:8d:ca:29:6f:76:a1:e7:a0:5f:e6:09:73: 2e:b2:2a:e7:df:4d:ea:77:00:1b:e1:14:98:6c:09:1f:f5:22: 0e:94:6d:a3:50:b3:ec:b2:d6:3d:1b:72:98:b2:84:f0:46:51: 9c:13:d1:f3:cf:71:6b:98:ab:45:91:ab:ad:78:2a:23:98:68: 83:3b:70:f7:29:aa:38:5f:49:f3:b1:7e:db:7a:5a:63:2a:3b: 53:57:f9:81:fc:37:d9:0a:c7:fa:64:a4:bc:40:00:9f:8f:41: 45:6f:15:e1:c2:fe:62:4b:ae:a2:b9:76:a2:39:97:41:36:65: d3:f9:53:2e:27:dd:0d:17:90:e9:fa:fc:b5:15:80:a7:4b:a5: c9:08:33:07:54:fb:30:1e:b4:55:e6:c7:1e:68:4b:0b:b3:de: 4e:e9:90:df:a8:8b:8d:bc:67:df:43:e2:55:19:b5:e4:a2:3b: 35:61:f2:bd:5a:3d:ae:69:4d:ec:6a:3a:81:bb:ea:91:d2:e7: 39:91:41:ab:88:e7:06:d0:0e:71:42:93:63:02:1d:c8:80:29: 96:ee:03:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTM0M9pywdE2kLysY7vMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTFjYmY5YTVjYzE2OTQ0M2E1MGZkNmM1NmQxMjNiOTRiMTMwZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK3dh2g+fnvf+0Oc2LkY6u00+NPS z09cxLHdw5zxT64wueJNuQKrcLvbVJsKHFO6GuUkf57v3KNV0BfDZs6eAMqJ3wg9 ONjZHFQQszUyLYehpr4JKHqKTu/M0wrTHCZLuwMzkU06jINvyGjAoXgh7jsnYNdx GrMRdBnM3QkpP73ye8l0xWYaJRdm79IOQrxkcK6N76b8gb6owLQk8LBT8/bv5o9r L2RVU3qT+ElAjWyB4GCT0DhXoKPA23lztjFqTDnn4DD7LdZgmrT45cSSakQsIfLe 0fEIy1JYuI7THYFw9zQqvmXWRA1j4Ztd7CxsaMdt1/ftsnQX0lTi5cZmgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEcv5pcwWlEOlD9bFbRI7lLEw9TMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvNFJ5X21sekJhVVE2VVAxc1Z0RWp1VXNURDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DMMA0G CSqGSIb3DQEBCwUAA4IBAQBl8KwTC2gc2PyxHXjEMpzfT3GElNt/DzbDF7x9JwAx maXLyaseU00RAAKNyilvdqHnoF/mCXMusirn303qdwAb4RSYbAkf9SIOlG2jULPs stY9G3KYsoTwRlGcE9Hzz3FrmKtFkauteCojmGiDO3D3Kao4X0nzsX7belpjKjtT V/mB/DfZCsf6ZKS8QACfj0FFbxXhwv5iS66iuXaiOZdBNmXT+VMuJ90NF5Dp+vy1 FYCnS6XJCDMHVPswHrRV5sceaEsLs95O6ZDfqIuNvGffQ+JVGbXkojs1YfK9Wj2u aU3sajqBu+qR0uc5kUGriOcG0A5xQpNjAh3IgCmW7gP5 -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:53 2026 by rpki-client