This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/4GxbIuH661wSAuRQff8xB62kOr8.roa File: 4GxbIuH661wSAuRQff8xB62kOr8.roa (raw, json) Hash identifier: 6Ggl9o0/dEzCv20oHVldt8BKrvybom3vgPN0XshsfwI= Subject key identifier: E0:6C:5B:22:E1:FA:EB:5C:12:02:E4:50:7D:FF:31:07:AD:A4:3A:BF Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Certificate serial: 019B7C80B60B8362944507E757B218DB82C0 Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/4GxbIuH661wSAuRQff8xB62kOr8.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207489 IP address blocks: 194.76.145.0/24 maxlen: 24 194.76.149.0/24 maxlen: 24 194.76.150.0/24 maxlen: 24 2a0f:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b6:0b:83:62:94:45:07:e7:57:b2:18:db:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e06c5b22e1faeb5c1202e4507dff3107ada43abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:99:f9:58:38:8e:e9:11:39:e7:ff:e9:74: b6:9d:5e:f5:46:70:90:cd:93:8f:32:dd:6e:7d:8c: ed:70:88:be:97:76:15:19:23:ef:e3:9e:f9:97:f4: 9f:3e:eb:d8:0e:17:de:c1:15:da:98:54:8a:8d:4a: 86:48:45:54:68:0a:97:ba:67:5d:82:ea:21:36:8e: 0a:3d:b4:13:54:f8:f1:b8:01:c6:00:ee:fa:3f:bc: 11:5d:16:48:55:1d:d8:f1:fb:c8:0a:86:4d:8d:a6: d8:13:42:cb:08:f6:f3:a4:e4:9f:59:53:a8:ca:8e: fb:95:21:18:32:c4:f1:d0:7c:71:c4:8f:82:1f:b2: e4:cc:7c:2a:fb:be:8b:f5:b0:d6:31:47:ff:90:49: b7:0f:fa:fe:a2:f7:08:07:8c:7c:a0:8a:5a:a1:6e: 01:a3:33:56:09:ba:cf:c2:9a:e7:1d:0e:d7:96:4e: 8c:4e:b4:c6:4c:71:26:af:e0:e9:9a:a2:60:ce:78: eb:ca:77:6d:4a:f1:33:1c:39:f0:8a:ff:ff:c8:1d: 46:d7:fc:7a:8a:f6:6b:73:d6:26:d7:d9:45:e1:cc: 41:e6:f8:02:a6:39:ce:ea:7f:94:5b:e8:57:ba:22: 3a:29:bf:e1:58:41:53:91:c9:2a:34:86:2b:10:13: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6C:5B:22:E1:FA:EB:5C:12:02:E4:50:7D:FF:31:07:AD:A4:3A:BF X509v3 Authority Key Identifier: keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/4GxbIuH661wSAuRQff8xB62kOr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.145.0/24 194.76.149.0-194.76.150.255 IPv6: 2a0f:ae40::/32 Signature Algorithm: sha256WithRSAEncryption 60:6d:d9:fe:11:86:1c:19:24:5c:91:d5:5b:29:37:74:84:82: 80:01:d7:95:92:80:c0:04:74:14:8b:24:3e:7f:20:6b:11:db: fc:62:f7:67:c9:93:15:62:7e:09:6f:64:a9:11:53:5e:1c:00: 35:75:55:0a:57:d8:a2:c5:60:ad:b5:9b:f2:00:16:70:c0:07: 5b:0f:82:ba:9c:27:89:81:f7:9d:3b:ab:7d:8a:b7:c9:18:d7: 31:08:6a:bb:28:3a:2d:f8:c7:6c:92:ff:8f:e7:09:c1:0d:01: 69:df:7d:06:78:23:3f:bf:54:08:3a:76:35:a4:e2:89:d3:42: 97:51:bc:a2:5e:57:6f:82:e4:26:9f:41:69:a6:e0:92:dc:bf: b1:32:15:5d:cf:91:72:6b:ad:1f:cf:73:4d:4a:49:66:00:cd: b4:3a:26:a8:db:e8:73:8e:76:2d:bc:bf:64:53:dc:93:65:dd: 0b:28:07:a3:93:4a:e9:84:c3:54:e6:dc:9f:4b:10:23:a5:29: d5:d7:72:c6:85:df:96:9f:e6:7c:65:6f:26:7e:9a:3c:89:d6: c0:a3:24:05:24:f8:a0:47:9e:f9:57:b2:91:1e:4b:ae:cb:fb: 97:32:7d:c5:72:77:a9:02:8c:70:8e:39:07:53:b9:95:4c:1a: 0d:94:b7:b8 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8gLYLg2KURQfnV7IY24LAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjdkYmU2YWM3NTVhOTA2M2MzNjBiMTUyNWU4NDRmZDJh NTdiOTMwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDZjNWIyMmUxZmFlYjVjMTIwMmU0NTA3ZGZmMzEwN2FkYTQzYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZuZ+Vg4jukROef/6XS2nV71RnCQ zZOPMt1ufYztcIi+l3YVGSPv4575l/SfPuvYDhfewRXamFSKjUqGSEVUaAqXumdd guohNo4KPbQTVPjxuAHGAO76P7wRXRZIVR3Y8fvICoZNjabYE0LLCPbzpOSfWVOo yo77lSEYMsTx0HxxxI+CH7LkzHwq+76L9bDWMUf/kEm3D/r+ovcIB4x8oIpaoW4B ozNWCbrPwprnHQ7Xlk6MTrTGTHEmr+DpmqJgznjryndtSvEzHDnwiv//yB1G1/x6 ivZrc9Ym19lF4cxB5vgCpjnO6n+UW+hXuiI6Kb/hWEFTkckqNIYrEBN3XQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFOBsWyLh+utcEgLkUH3/MQetpDq/MB8GA1UdIwQY MBaAFORn2+asdVqQY8NgsVJehE/SpXuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYt ZWNlNTc3ZTMwN2FkLzEvNEd4Ykl1SDY2MXdTQXVSUWZmOHhCNjJrT3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYtZWNlNTc3ZTMwN2Fk LzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAwkyRMAwD BADCTJUDBADCTJYwDQQCAAIwBwMFACoPrkAwDQYJKoZIhvcNAQELBQADggEBAGBt 2f4RhhwZJFyR1VspN3SEgoAB15WSgMAEdBSLJD5/IGsR2/xi92fJkxVifglvZKkR U14cADV1VQpX2KLFYK21m/IAFnDAB1sPgrqcJ4mB9507q32Kt8kY1zEIarsoOi34 x2yS/4/nCcENAWnffQZ4Iz+/VAg6djWk4onTQpdRvKJeV2+C5CafQWmm4JLcv7Ey FV3PkXJrrR/Pc01KSWYAzbQ6Jqjb6HOOdi28v2RT3JNl3QsoB6OTSumEw1Tm3J9L ECOlKdXXcsaF35af5nxlbyZ+mjyJ1sCjJAUk+KBHnvlXspEeS67L+5cyfcVyd6kC jHCOOQdTuZVMGg2Ut7g= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:49 2026 by rpki-client