This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/4T-klQ0-zYIxPmTZsZ2-ok9Fbqw.roa File: 4T-klQ0-zYIxPmTZsZ2-ok9Fbqw.roa (raw, json) Hash identifier: shJr+S/cUVw8cRqdTWBJxqKJ+82DH/XCvjPD8oWgejQ= Subject key identifier: E1:3F:A4:95:0D:3E:CD:82:31:3E:64:D9:B1:9D:BE:A2:4F:45:6E:AC Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019BDC4B4EF801E6D3E041E6563C1A4CE6B1 Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/4T-klQ0-zYIxPmTZsZ2-ok9Fbqw.roa Signing time: Tue 20 Jan 2026 16:44:41 +0000 ROA not before: Tue 20 Jan 2026 16:44:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13009 IP address blocks: 195.191.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:4b:4e:f8:01:e6:d3:e0:41:e6:56:3c:1a:4c:e6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Jan 20 16:44:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e13fa4950d3ecd82313e64d9b19dbea24f456eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:6c:7c:78:89:22:38:ad:e0:0d:d7:26:55: bc:cb:02:7b:b0:54:c8:77:48:47:e4:70:1c:a8:0b: e5:1e:ee:e7:3c:42:d9:ec:d5:a7:dc:46:0e:72:04: d3:16:0a:65:38:bf:9b:9c:cf:e3:f0:5f:71:75:65: 64:72:75:6f:1f:9c:00:f7:77:da:33:a2:de:75:41: 42:d3:74:74:04:98:5c:6a:67:2c:8e:a5:c8:4e:42: d3:4c:e8:84:98:1b:5a:05:f1:aa:28:cd:69:bb:41: a6:62:7b:bc:b1:0c:9f:57:77:32:5a:27:d1:66:44: c9:01:95:53:6b:bb:68:da:d8:6a:be:ff:f3:99:28: c8:1d:28:0a:a3:ac:23:df:13:0b:36:63:15:92:d9: 5f:74:f8:80:c5:7d:e0:6d:59:d2:c3:c6:a9:9f:61: 31:ec:45:01:a7:fa:4e:77:ed:05:ff:75:51:9b:0a: 66:9f:16:35:3a:50:8d:ee:09:58:73:9d:ee:1d:b4: ce:56:eb:1b:5c:f8:1d:b5:8d:55:96:b9:1e:00:a5: a0:1e:16:8e:f3:2c:7d:a9:f4:7d:1c:b9:4a:80:ac: e3:09:3a:4f:7a:e2:0a:ca:69:fd:e6:4a:78:05:f1: 9f:75:84:48:4b:36:ae:f7:0b:31:26:14:5e:86:d3: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:A4:95:0D:3E:CD:82:31:3E:64:D9:B1:9D:BE:A2:4F:45:6E:AC X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/4T-klQ0-zYIxPmTZsZ2-ok9Fbqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.164.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ec:9c:eb:5a:d9:78:a4:8c:27:e8:73:f7:10:78:42:a2:03: e2:42:06:d8:7b:01:83:c6:19:26:5b:47:55:c4:ec:67:02:74: ac:39:e9:e2:ac:44:5a:12:3f:ab:ca:b1:16:69:1e:75:dc:b2: 5a:89:1b:41:23:b1:0a:fc:d8:85:27:c7:b9:0a:5d:e8:36:07: 42:b6:31:d9:2d:8e:01:d8:47:19:9c:46:25:a4:77:74:0c:a2: bc:d0:69:98:33:c0:b5:6e:69:f2:54:84:49:71:9d:ee:82:27: fe:a9:1c:d2:52:3a:cf:79:bb:dc:ad:cd:95:fb:3b:6e:dd:da: 02:24:c7:0c:ee:72:93:f3:38:4a:57:f6:ce:df:97:03:68:89: 31:78:bc:42:36:1f:7f:25:5b:cf:db:af:8f:d7:22:da:ae:31: 02:ec:34:ab:c7:eb:b6:26:30:ba:3f:ed:66:c5:3a:aa:73:08: d8:5f:31:83:59:7f:a7:2a:0e:11:da:54:3c:ca:ca:b4:41:5f: a4:d2:4d:8a:f0:f6:cd:16:e5:35:10:e5:7f:04:2f:b5:95:3c: 3f:81:82:29:08:8b:bb:ea:fb:d1:aa:62:08:ee:1a:e7:27:e7: ad:f7:f3:70:a5:89:07:82:53:19:4a:ef:39:57:94:5e:6b:b3: 19:2b:44:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcS074AebT4EHmVjwaTOaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjYwMTIwMTY0NDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTNmYTQ5NTBkM2VjZDgyMzEzZTY0ZDliMTlkYmVhMjRmNDU2ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk1sfHiJIjit4A3XJlW8ywJ7sFTI d0hH5HAcqAvlHu7nPELZ7NWn3EYOcgTTFgplOL+bnM/j8F9xdWVkcnVvH5wA93fa M6LedUFC03R0BJhcamcsjqXITkLTTOiEmBtaBfGqKM1pu0GmYnu8sQyfV3cyWifR ZkTJAZVTa7to2thqvv/zmSjIHSgKo6wj3xMLNmMVktlfdPiAxX3gbVnSw8apn2Ex 7EUBp/pOd+0F/3VRmwpmnxY1OlCN7glYc53uHbTOVusbXPgdtY1VlrkeAKWgHhaO 8yx9qfR9HLlKgKzjCTpPeuIKymn95kp4BfGfdYRISzau9wsxJhRehtNttwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOE/pJUNPs2CMT5k2bGdvqJPRW6sMB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvNFQta2xRMC16WUl4UG1UWnNaMi1vazlGYnF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7+kMA0G CSqGSIb3DQEBCwUAA4IBAQAR7JzrWtl4pIwn6HP3EHhCogPiQgbYewGDxhkmW0dV xOxnAnSsOenirERaEj+ryrEWaR513LJaiRtBI7EK/NiFJ8e5Cl3oNgdCtjHZLY4B 2EcZnEYlpHd0DKK80GmYM8C1bmnyVIRJcZ3ugif+qRzSUjrPebvcrc2V+ztu3doC JMcM7nKT8zhKV/bO35cDaIkxeLxCNh9/JVvP26+P1yLarjEC7DSrx+u2JjC6P+1m xTqqcwjYXzGDWX+nKg4R2lQ8ysq0QV+k0k2K8PbNFuU1EOV/BC+1lTw/gYIpCIu7 6vvRqmII7hrnJ+et9/NwpYkHglMZSu85V5Rea7MZK0Sd -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:29 2026 by rpki-client