This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/4u_bkbKJNZM1KdwioLGPBiO50Ls.roa File: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (raw, json) Hash identifier: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g= Subject key identifier: E2:EF:DB:91:B2:89:35:93:35:29:DC:22:A0:B1:8F:06:23:B9:D0:BB Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019B7F838638E569674F7D44C6D2B2F1DF41 Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/4u_bkbKJNZM1KdwioLGPBiO50Ls.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56414 IP address blocks: 45.15.16.0/22 maxlen: 24 62.204.40.0/24 maxlen: 24 194.26.217.0/24 maxlen: 24 2a12:7800::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:86:38:e5:69:67:4f:7d:44:c6:d2:b2:f1:df:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2efdb91b28935933529dc22a0b18f0623b9d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:be:86:6c:c7:51:89:67:ca:84:af:65:9a: 12:6c:a0:dd:6c:b1:48:70:ec:e6:79:b0:c2:26:77: 3e:a3:f9:6d:9b:12:7b:8a:e3:67:30:f5:1c:87:67: 97:02:d1:0c:25:29:a2:36:e8:30:64:d8:db:54:9d: ac:1f:21:fa:46:d9:3a:28:fb:e1:2e:e4:62:a0:ac: cb:56:c1:c9:a6:6e:c0:27:e9:ed:df:f0:1d:74:71: 0a:b7:5d:2d:80:af:d0:29:bf:a1:fd:82:f7:94:0e: d4:72:19:07:99:ee:fd:38:46:59:e7:56:a6:5b:ab: 7f:63:f1:e3:36:e5:3e:ee:98:a7:ed:da:2f:d5:38: 1c:54:e6:57:f1:e7:cb:4a:a6:33:38:bd:1e:31:61: 7d:4a:05:57:83:b9:69:fb:1b:34:68:10:7b:5c:97: da:f1:17:bc:09:00:c3:70:1b:ad:30:94:89:b4:a7: fd:8b:73:31:44:18:5b:3f:6a:f1:85:da:9d:1d:2b: 5e:aa:ae:b2:8f:23:66:a0:df:d4:4e:df:53:d0:ee: 9f:cf:8e:26:4f:95:27:c1:4c:d6:19:df:52:2f:cf: 19:48:08:63:3c:16:b8:aa:25:d5:4a:74:63:76:25: 17:e5:c2:0a:95:d9:bd:1a:ec:d0:a3:15:da:e9:a4: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EF:DB:91:B2:89:35:93:35:29:DC:22:A0:B1:8F:06:23:B9:D0:BB X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/4u_bkbKJNZM1KdwioLGPBiO50Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.16.0/22 62.204.40.0/24 194.26.217.0/24 IPv6: 2a12:7800::/29 Signature Algorithm: sha256WithRSAEncryption 60:4f:4a:13:19:4a:1f:3f:e5:9f:fc:c4:cd:94:79:7a:07:dd: 86:44:7e:01:a2:5c:e3:d9:c2:3b:ef:28:cb:c8:4b:b3:0f:6e: 82:4a:90:84:85:a2:ef:e1:42:3a:c6:51:71:6b:76:c7:ff:58: bf:63:2a:eb:ac:f8:4c:31:69:4b:62:27:91:70:a9:90:97:4d: ae:68:20:c3:6b:8a:62:a4:85:af:58:af:85:4b:8f:68:82:36: 75:95:22:38:6c:28:97:6d:47:3d:69:ce:23:6d:9a:c1:42:0f: ad:67:d9:c4:1e:41:d3:2b:fc:cf:5f:d2:a9:cc:e8:6d:8e:8a: 3d:6b:95:67:20:c5:05:fb:e6:ee:64:8e:4d:b0:b1:e2:5a:08: 75:24:13:49:3f:f6:87:dc:bc:13:80:f4:7f:4d:7a:b1:f3:99: 1a:fd:ef:3d:e1:68:b7:10:24:f4:1a:23:00:26:f0:fc:de:aa: f5:6e:69:ec:6e:ed:a6:c7:cd:c3:d4:30:8b:f7:79:3d:48:8d: 77:65:5e:99:35:2c:02:cc:ca:55:97:27:dc:1f:ee:ec:10:a3: c2:95:b1:18:32:dd:26:58:84:91:1e:6e:3d:93:ef:b4:ef:1d: 7a:b3:8e:3a:a6:89:71:bf:7e:21:f3:87:6e:49:c6:91:83:a5: 40:7e:fb:d2 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/g4Y45WlnT31ExtKy8d9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmVmZGI5MWIyODkzNTkzMzUyOWRjMjJhMGIxOGYwNjIzYjlkMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXO+hmzHUYlnyoSvZZoSbKDdbLFI cOzmebDCJnc+o/ltmxJ7iuNnMPUch2eXAtEMJSmiNugwZNjbVJ2sHyH6Rtk6KPvh LuRioKzLVsHJpm7AJ+nt3/AddHEKt10tgK/QKb+h/YL3lA7UchkHme79OEZZ51am W6t/Y/HjNuU+7pin7dov1TgcVOZX8efLSqYzOL0eMWF9SgVXg7lp+xs0aBB7XJfa 8Re8CQDDcButMJSJtKf9i3MxRBhbP2rxhdqdHSteqq6yjyNmoN/UTt9T0O6fz44m T5UnwUzWGd9SL88ZSAhjPBa4qiXVSnRjdiUX5cIKldm9GuzQoxXa6aRD4wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOLv25GyiTWTNSncIqCxjwYjudC7MB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvNHVfYmtiS0pOWk0xS2R3aW9MR1BCaU81MExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ8QAwQA PswoAwQAwhrZMA0EAgACMAcDBQMqEngAMA0GCSqGSIb3DQEBCwUAA4IBAQBgT0oT GUofP+Wf/MTNlHl6B92GRH4Bolzj2cI77yjLyEuzD26CSpCEhaLv4UI6xlFxa3bH /1i/YyrrrPhMMWlLYieRcKmQl02uaCDDa4pipIWvWK+FS49ogjZ1lSI4bCiXbUc9 ac4jbZrBQg+tZ9nEHkHTK/zPX9KpzOhtjoo9a5VnIMUF++buZI5NsLHiWgh1JBNJ P/aH3LwTgPR/TXqx85ka/e894Wi3ECT0GiMAJvD83qr1bmnsbu2mx83D1DCL93k9 SI13ZV6ZNSwCzMpVlyfcH+7sEKPClbEYMt0mWISRHm49k++07x16s446polxv34h 84duScaRg6VAfvvS -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:34 2026 by rpki-client