This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa File: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (raw, json) Hash identifier: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II= Subject key identifier: E0:65:F5:36:2F:72:2D:A0:AF:4C:41:88:42:56:6C:C4:B1:D1:4E:8B Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15D04CC4B0D53859965CDE49EAD159 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 193.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d0:4c:c4:b0:d5:38:59:96:5c:de:49:ea:d1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e065f5362f722da0af4c418842566cc4b1d14e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fe:e2:48:72:fd:d8:50:fa:53:a6:7a:4f:52: 25:c1:9f:01:36:b6:ae:7c:d8:34:21:45:8f:3c:47: 19:74:8b:da:15:0b:9e:9b:0f:43:d6:ea:1c:d9:65: 04:b5:d1:d8:7f:89:08:4d:5a:43:b2:97:56:31:ef: 1b:21:22:06:a7:ca:d0:82:b8:99:cc:da:3a:c0:30: bb:61:a6:1f:aa:24:76:76:b6:26:f0:f1:50:a7:52: dd:94:fe:21:15:63:ca:92:fd:6a:18:3c:08:da:c9: 46:7f:a1:46:5e:cd:ad:b3:45:50:9c:f6:ac:18:a7: 33:0e:68:f2:d4:0f:c5:f7:87:35:1d:eb:77:9e:23: c5:8e:21:d1:2f:58:a2:41:db:63:30:92:0d:48:6b: a5:51:a0:53:dc:4a:1f:b4:ac:f6:e2:03:2d:68:68: 7c:b5:0c:8c:36:b1:23:66:2c:3b:86:59:01:01:da: 87:86:d5:a1:d4:45:45:af:5b:c3:c6:5f:37:03:75: 1e:7c:05:75:ce:8b:7f:fe:3e:3f:cf:f3:5b:d7:0d: d2:5d:c0:e3:af:21:18:12:24:32:95:fd:eb:43:36: c6:86:01:19:39:ab:db:1a:09:65:47:b2:ab:80:40: 45:f0:f1:ec:40:ac:bf:10:9f:c8:a9:a3:9c:64:8c: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:F5:36:2F:72:2D:A0:AF:4C:41:88:42:56:6C:C4:B1:D1:4E:8B X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.198.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:94:39:8c:74:63:6a:37:1c:50:a3:2f:a0:14:ce:bb:a0:8d: ee:da:6d:e1:a2:41:ae:15:17:b8:e0:30:dc:d7:d6:05:6b:a1: a0:86:a4:db:b2:d1:f7:e4:11:44:7e:54:23:fd:58:00:d6:af: e0:77:bf:80:f5:d0:22:3b:fc:a3:7c:26:a7:48:f2:3d:e7:ce: 78:bf:e9:d7:26:76:9f:e0:0c:25:fd:9c:0d:70:8c:4f:1c:6e: fa:eb:50:94:ec:22:b5:c3:c4:1b:41:40:a4:c3:52:93:db:2a: 09:a8:92:68:28:50:be:d7:bf:19:40:ab:76:9b:a6:85:4c:69: 36:76:62:1e:f9:7c:cd:6a:ca:c2:f8:a6:27:3c:38:54:85:05: 9d:5d:f2:5a:75:11:8d:ef:73:04:a2:ba:0a:57:cd:73:21:25: c7:7d:a8:7f:1c:45:1f:69:13:16:80:a1:b9:2e:79:ed:2e:2f: 23:fb:ae:2f:f6:20:f3:0d:04:c8:00:3d:c6:85:96:ab:0c:4b: c9:25:86:41:0f:3b:18:11:f7:6b:1a:9d:18:28:db:ec:1a:dd: d6:4b:28:99:03:19:83:ef:1a:ab:c3:4f:28:fb:66:ea:f8:91: 9b:18:67:fa:97:96:69:a5:5c:f2:8c:99:b3:42:5b:fd:5e:6d: 87:1b:32:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdBMxLDVOFmWXN5J6tFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDY1ZjUzNjJmNzIyZGEwYWY0YzQxODg0MjU2NmNjNGIxZDE0ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P7iSHL92FD6U6Z6T1IlwZ8BNrau fNg0IUWPPEcZdIvaFQuemw9D1uoc2WUEtdHYf4kITVpDspdWMe8bISIGp8rQgriZ zNo6wDC7YaYfqiR2drYm8PFQp1LdlP4hFWPKkv1qGDwI2slGf6FGXs2ts0VQnPas GKczDmjy1A/F94c1Het3niPFjiHRL1iiQdtjMJINSGulUaBT3EoftKz24gMtaGh8 tQyMNrEjZiw7hlkBAdqHhtWh1EVFr1vDxl83A3UefAV1zot//j4/z/Nb1w3SXcDj ryEYEiQylf3rQzbGhgEZOavbGgllR7KrgEBF8PHsQKy/EJ/IqaOcZIxSyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBl9TYvci2gr0xBiEJWbMSx0U6LMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvNEdYMU5pOXlMYUN2VEVHSVFsWnN4TEhSVG9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSXGMA0G CSqGSIb3DQEBCwUAA4IBAQAslDmMdGNqNxxQoy+gFM67oI3u2m3hokGuFRe44DDc 19YFa6GghqTbstH35BFEflQj/VgA1q/gd7+A9dAiO/yjfCanSPI95854v+nXJnaf 4Awl/ZwNcIxPHG7661CU7CK1w8QbQUCkw1KT2yoJqJJoKFC+178ZQKt2m6aFTGk2 dmIe+XzNasrC+KYnPDhUhQWdXfJadRGN73MEoroKV81zISXHfah/HEUfaRMWgKG5 LnntLi8j+64v9iDzDQTIAD3GhZarDEvJJYZBDzsYEfdrGp0YKNvsGt3WSyiZAxmD 7xqrw08o+2bq+JGbGGf6l5ZppVzyjJmzQlv9Xm2HGzLe -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:57 2026 by rpki-client