This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa File: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (raw, json) Hash identifier: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA= Subject key identifier: E2:80:96:AE:61:EC:8C:CE:5B:CF:BF:9D:ED:5F:92:1D:C3:F1:C5:CC Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019B7910FFC91F7635F90AFB353E3DA1ADF6 Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61429 IP address blocks: 81.23.240.0/23 maxlen: 23 185.6.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ff:c9:1f:76:35:f9:0a:fb:35:3e:3d:a1:ad:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e28096ae61ec8cce5bcfbf9ded5f921dc3f1c5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:20:9e:bc:ef:bc:9b:4e:ba:c8:ea:e5:84: 10:92:98:3c:9b:5e:3e:21:a1:f6:41:7d:b6:4f:09: 0f:dc:b3:a4:51:8a:1e:d7:e7:aa:90:c0:bb:82:42: 65:1a:b3:63:bf:78:2e:14:d5:9e:94:5b:b5:47:8e: b4:d1:10:31:d4:dd:83:00:ce:58:57:92:a3:79:54: 6f:04:97:e9:9b:52:58:ab:8d:c1:84:32:b3:54:3d: 70:59:95:a7:a6:20:47:2e:24:63:1d:8b:fc:91:bc: a9:8b:ca:26:73:46:02:3b:ef:89:41:92:0b:c5:8f: 14:2a:30:15:4d:ae:09:82:59:06:76:b9:d8:99:7d: 48:6d:6b:0d:0b:ef:8c:25:b2:7c:40:bc:1b:6a:d3: 42:22:f0:b2:b2:22:7e:ea:9b:1d:ef:9e:3c:9c:d1: bf:4b:cc:78:b2:67:fa:3b:f2:cc:93:86:f2:5a:92: f9:35:27:2d:e3:76:73:3a:21:a8:86:df:83:35:fc: 8e:58:55:e1:ad:1d:86:81:91:8e:b0:2d:bc:3b:6d: 63:f8:b4:96:f9:9b:94:c4:a1:5d:90:43:66:32:a9: c6:22:06:f9:67:30:0d:6c:de:f1:66:d5:1e:36:64: f8:4b:de:eb:d1:85:5b:1a:fd:3e:5d:5d:4f:1f:50: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:80:96:AE:61:EC:8C:CE:5B:CF:BF:9D:ED:5F:92:1D:C3:F1:C5:CC X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.240.0/23 185.6.108.0/22 Signature Algorithm: sha256WithRSAEncryption ab:5f:28:af:65:c0:6d:9f:b6:69:d7:77:f7:f5:96:cd:0c:a2: 4f:2c:c9:f1:05:6c:63:13:4f:a9:98:df:c1:ef:8d:a6:02:5d: a6:8a:a7:97:e0:e6:8b:b9:c0:f0:25:fc:86:12:a4:63:23:22: 40:c1:1f:d7:dc:24:b8:1c:cb:7c:6e:cf:f5:ad:da:a7:ee:e0: 61:09:1d:a6:c7:cf:af:8a:fe:66:d7:ef:d5:77:8a:54:ae:ed: 8f:cf:d0:0c:25:b9:b0:7c:2c:3f:5e:c7:9f:76:c9:93:96:71: 80:6c:40:0b:09:56:f7:49:ea:cf:d3:2b:9c:13:09:2a:ad:cb: ab:d2:53:5f:b8:d4:be:55:82:00:a5:ab:fe:c4:b7:f5:39:f8: 4b:12:75:4e:ef:2a:20:b0:4e:5c:9b:d3:84:29:45:69:c2:5d: 28:9c:21:03:b1:ec:b6:6a:8d:30:6c:17:b9:db:85:b7:e4:3c: 5e:a8:82:01:bb:cb:4d:2e:6c:e0:6c:43:ec:3e:78:4c:15:a6: f0:93:b2:e3:62:28:31:d5:46:23:47:ab:61:b0:03:19:27:a3: c0:19:7e:0f:93:cb:e1:8a:fe:05:3e:fe:3f:ed:12:8f:58:6c: 2b:b1:6b:2f:4d:26:b2:e5:89:7f:f3:18:60:a3:3a:0a:b4:ad: c2:86:d7:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EP/JH3Y1+Qr7NT49oa32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjgwOTZhZTYxZWM4Y2NlNWJjZmJmOWRlZDVmOTIxZGMzZjFjNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpwgnrzvvJtOusjq5YQQkpg8m14+ IaH2QX22TwkP3LOkUYoe1+eqkMC7gkJlGrNjv3guFNWelFu1R4600RAx1N2DAM5Y V5KjeVRvBJfpm1JYq43BhDKzVD1wWZWnpiBHLiRjHYv8kbypi8omc0YCO++JQZIL xY8UKjAVTa4JglkGdrnYmX1IbWsNC++MJbJ8QLwbatNCIvCysiJ+6psd7548nNG/ S8x4smf6O/LMk4byWpL5NSct43ZzOiGoht+DNfyOWFXhrR2GgZGOsC28O21j+LSW +ZuUxKFdkENmMqnGIgb5ZzANbN7xZtUeNmT4S97r0YVbGv0+XV1PH1CiYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOKAlq5h7IzOW8+/ne1fkh3D8cXMMB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvNG9DV3JtSHNqTTViejctZDdWLVNIY1B4eGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBURfwAwQC uQZsMA0GCSqGSIb3DQEBCwUAA4IBAQCrXyivZcBtn7Zp13f39ZbNDKJPLMnxBWxj E0+pmN/B742mAl2miqeX4OaLucDwJfyGEqRjIyJAwR/X3CS4HMt8bs/1rdqn7uBh CR2mx8+viv5m1+/Vd4pUru2Pz9AMJbmwfCw/XsefdsmTlnGAbEALCVb3SerP0yuc Ewkqrcur0lNfuNS+VYIApav+xLf1OfhLEnVO7yogsE5cm9OEKUVpwl0onCEDsey2 ao0wbBe524W35DxeqIIBu8tNLmzgbEPsPnhMFabwk7LjYigx1UYjR6thsAMZJ6PA GX4Pk8vhiv4FPv4/7RKPWGwrsWsvTSay5Yl/8xhgozoKtK3Chtdz -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:17 2026 by rpki-client