This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/4nK7xMejEGysuibSYJIso6RlQpI.roa File: 4nK7xMejEGysuibSYJIso6RlQpI.roa (raw, json) Hash identifier: WFo/Wgq0Q0zz5SgRWVK30WfT98xnLcIsGWqhNlQwY78= Subject key identifier: E2:72:BB:C4:C7:A3:10:6C:AC:BA:26:D2:60:92:2C:A3:A4:65:42:92 Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508 Certificate serial: 019B79ED5BF4BC7068484D3B6C2F90886D85 Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/4nK7xMejEGysuibSYJIso6RlQpI.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 62.3.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:f4:bc:70:68:48:4d:3b:6c:2f:90:88:6d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e272bbc4c7a3106cacba26d260922ca3a4654292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:23:52:80:bd:7c:32:14:a8:6b:8a:e5:9f: ac:59:40:a2:11:bc:4d:76:4d:6d:a7:17:1d:d0:cb: db:52:65:79:7c:e3:73:09:7e:a3:c0:16:dd:5f:3b: d2:02:94:0b:a0:b3:2d:d5:07:b5:07:57:a9:f2:fd: 3b:78:2b:56:a4:fe:7a:c9:9c:6b:b1:75:82:e6:7d: 4f:e6:c3:6d:4b:5c:43:24:27:21:ed:cd:5e:41:61: fc:23:f1:e7:8a:0d:2d:74:c4:cb:8c:af:c7:24:9e: 2b:ae:3d:14:1d:8d:6b:b1:f1:bc:9c:3d:9c:1c:32: 9d:19:ef:8c:1c:db:b3:3f:ea:61:ec:de:fa:53:f1: 9b:8e:7a:dc:70:88:0f:0e:c0:84:f8:ae:83:57:14: 49:f1:bc:c9:2b:d1:a2:ce:a3:62:1e:2c:50:20:d6: 05:99:7a:12:97:1b:93:82:ea:26:f4:57:43:ad:f9: c1:f4:65:58:e6:c7:4a:c9:71:45:bf:ae:f0:81:c9: ba:a7:ea:4e:3a:bd:43:de:dc:4c:8c:6d:15:ae:72: 77:11:f7:22:71:56:c4:21:d1:c0:93:87:e1:e4:df: 4b:c8:18:1e:b7:ff:0e:c5:59:ab:0c:28:e7:08:7a: c8:d3:ac:4e:04:bd:0c:98:49:ea:14:2d:61:d3:31: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:BB:C4:C7:A3:10:6C:AC:BA:26:D2:60:92:2C:A3:A4:65:42:92 X509v3 Authority Key Identifier: keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/4nK7xMejEGysuibSYJIso6RlQpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.19.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b1:0c:10:76:04:ce:37:48:35:eb:32:50:1a:0d:cd:ab:f8: dd:96:2f:02:38:e7:81:93:dd:ce:b9:bc:f8:44:58:20:57:80: 7b:ab:d3:21:58:b2:b3:95:43:f2:c1:f8:9f:d1:08:a2:b4:37: 9a:0c:49:bb:58:d5:4a:99:04:c8:91:2b:b0:59:3b:9b:a9:9c: 0d:e9:aa:5b:65:30:bf:06:a7:5c:97:96:0c:41:3d:02:d1:87: ee:16:e0:15:cd:22:1f:30:d2:43:7e:47:3b:4d:a0:74:a8:eb: b4:1f:2b:bc:9b:b2:81:81:f9:a0:29:cc:7c:ff:b7:34:d1:60: 66:f7:0c:95:45:d6:ec:f5:b1:01:32:b6:01:39:15:a5:06:19: ce:53:b6:5e:0b:8b:77:45:f0:04:7c:00:93:20:5c:e6:2a:16: 75:13:9a:b4:4d:39:02:07:27:66:a0:20:a8:de:23:7b:c7:39: d1:c0:50:fe:88:0d:65:08:5d:83:ed:a6:de:24:15:24:86:1f: 42:24:d6:ca:5e:55:0c:b0:b9:2a:d9:2c:f7:b9:50:80:01:df: 4e:02:9d:60:cc:64:9c:ec:28:44:87:00:34:35:05:47:e6:94: 8f:70:e6:93:8d:8c:5d:db:bf:ad:22:a9:c2:cf:6f:f5:18:72: bd:74:36:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Vv0vHBoSE07bC+QiG2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2 Y2U1MDgwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjcyYmJjNGM3YTMxMDZjYWNiYTI2ZDI2MDkyMmNhM2E0NjU0MjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ojUoC9fDIUqGuK5Z+sWUCiEbxN dk1tpxcd0MvbUmV5fONzCX6jwBbdXzvSApQLoLMt1Qe1B1ep8v07eCtWpP56yZxr sXWC5n1P5sNtS1xDJCch7c1eQWH8I/Hnig0tdMTLjK/HJJ4rrj0UHY1rsfG8nD2c HDKdGe+MHNuzP+ph7N76U/GbjnrccIgPDsCE+K6DVxRJ8bzJK9GizqNiHixQINYF mXoSlxuTguom9FdDrfnB9GVY5sdKyXFFv67wgcm6p+pOOr1D3txMjG0VrnJ3Efci cVbEIdHAk4fh5N9LyBget/8OxVmrDCjnCHrI06xOBL0MmEnqFC1h0zHQGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJyu8THoxBsrLom0mCSLKOkZUKSMB8GA1UdIwQY MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt NWExZGFhOTRkZTQyLzEvNG5LN3hNZWpFR3lzdWliU1lKSXNvNlJsUXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMTMA0G CSqGSIb3DQEBCwUAA4IBAQBysQwQdgTON0g16zJQGg3Nq/jdli8COOeBk93Oubz4 RFggV4B7q9MhWLKzlUPywfif0QiitDeaDEm7WNVKmQTIkSuwWTubqZwN6apbZTC/ Bqdcl5YMQT0C0YfuFuAVzSIfMNJDfkc7TaB0qOu0Hyu8m7KBgfmgKcx8/7c00WBm 9wyVRdbs9bEBMrYBORWlBhnOU7ZeC4t3RfAEfACTIFzmKhZ1E5q0TTkCBydmoCCo 3iN7xznRwFD+iA1lCF2D7abeJBUkhh9CJNbKXlUMsLkq2Sz3uVCAAd9OAp1gzGSc 7ChEhwA0NQVH5pSPcOaTjYxd27+tIqnCz2/1GHK9dDYX -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:22 2026 by rpki-client