This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/j4OaetARNIVx-9EsgUUwBCsDjoA.roa File: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (raw, json) Hash identifier: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g= Subject key identifier: 8F:83:9A:7A:D0:11:34:85:71:FB:D1:2C:81:45:30:04:2B:03:8E:80 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019B775899D21E8BE8AD6FD1242CB8FA2E59 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/j4OaetARNIVx-9EsgUUwBCsDjoA.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208046 IP address blocks: 193.142.146.0/24 maxlen: 24 2a0f:ca80:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:99:d2:1e:8b:e8:ad:6f:d1:24:2c:b8:fa:2e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f839a7ad011348571fbd12c814530042b038e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:e6:e5:ce:d4:93:42:9e:ed:32:af:d0:cd: 3b:82:ec:93:02:07:15:73:c3:bd:95:e0:ad:1b:7f: 63:b1:a5:b4:5f:3a:09:b2:af:31:54:ce:99:98:7c: 17:8e:cb:3a:e4:65:45:0f:3e:a3:fe:69:d9:ce:a9: 66:6a:8b:12:d8:fc:68:c7:f8:29:90:3b:6e:9f:83: bc:18:32:6e:7c:9d:9c:6b:7c:6e:26:f4:ac:83:be: 01:1b:5c:6d:f1:fe:87:f3:6b:d3:17:fb:20:7b:4c: 24:7f:75:23:35:a1:1b:d4:45:6e:14:d2:e5:8f:31: 3d:2f:fa:46:63:63:50:20:2a:7f:fd:07:3c:14:c1: 84:44:39:6b:fb:fb:81:31:31:f2:2f:7e:93:a1:2d: 41:b3:da:e4:93:9a:39:f2:fa:02:ab:63:3f:1d:16: f7:7c:21:50:79:2c:0c:da:a2:c3:02:04:01:4a:d8: 59:68:3a:8a:f0:17:0a:80:3d:ac:53:6b:68:7e:ff: 03:78:a7:9c:23:d2:41:6e:8d:72:2f:51:3c:f0:26: ed:52:c0:89:24:eb:e1:44:32:84:29:eb:7a:a2:52: b1:7e:4c:f3:f4:cc:25:73:5e:14:e4:51:c1:7c:e5: 6b:33:92:ef:5d:d7:66:8a:7d:7b:06:5b:e4:cb:47: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:83:9A:7A:D0:11:34:85:71:FB:D1:2C:81:45:30:04:2B:03:8E:80 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/j4OaetARNIVx-9EsgUUwBCsDjoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.146.0/24 IPv6: 2a0f:ca80:1200::/40 Signature Algorithm: sha256WithRSAEncryption 39:4c:c0:2f:e0:02:37:08:ef:11:d8:44:0a:16:04:82:5d:e6: 4e:a7:4b:bc:9b:61:77:65:52:a3:ae:8b:4e:e1:12:fa:00:fd: 0d:c4:cf:15:3a:73:86:36:e4:cd:fa:b9:07:82:0b:78:d3:97: 25:64:89:d7:37:0d:49:28:c6:0e:86:49:4b:f5:5c:fc:92:3f: f3:f3:e1:db:8d:92:4a:6d:63:b2:25:48:44:13:f2:21:a6:39: 89:9f:c4:01:57:fc:2a:51:8e:d4:ca:77:44:af:a8:66:5a:d3: 64:0d:5e:c8:94:34:6c:7d:b5:78:b4:2e:1e:f0:55:05:08:5a: 29:9a:8f:51:a0:9f:f1:d5:8e:d8:bc:06:95:0c:22:92:7a:5f: f2:28:90:b1:16:80:87:c7:a6:38:65:2c:06:44:7a:90:4a:cd: cd:eb:c4:8d:68:2f:27:36:35:c8:75:e7:8c:9a:21:8c:4c:12: d7:17:e6:46:c2:00:73:04:40:f8:bb:8e:99:94:91:ee:b5:70: 1f:a3:b6:ca:a6:b0:d1:3e:4b:b1:11:9e:ef:18:66:02:5c:fc: 26:02:8e:d1:cc:2f:b3:7c:3e:e4:8c:fb:12:76:6c:89:8f:df: 82:68:e3:52:fe:34:9d:ae:b2:66:9e:cd:2c:74:47:22:b5:3e: 9a:fa:07:fa -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3WJnSHovorW/RJCy4+i5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjgzOWE3YWQwMTEzNDg1NzFmYmQxMmM4MTQ1MzAwNDJiMDM4ZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJbm5c7Uk0Ke7TKv0M07guyTAgcV c8O9leCtG39jsaW0XzoJsq8xVM6ZmHwXjss65GVFDz6j/mnZzqlmaosS2Pxox/gp kDtun4O8GDJufJ2ca3xuJvSsg74BG1xt8f6H82vTF/sge0wkf3UjNaEb1EVuFNLl jzE9L/pGY2NQICp//Qc8FMGERDlr+/uBMTHyL36ToS1Bs9rkk5o58voCq2M/HRb3 fCFQeSwM2qLDAgQBSthZaDqK8BcKgD2sU2tofv8DeKecI9JBbo1yL1E88CbtUsCJ JOvhRDKEKet6olKxfkzz9Mwlc14U5FHBfOVrM5LvXddmin17Blvky0fvMQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFI+DmnrQETSFcfvRLIFFMAQrA46AMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvajRPYWV0QVJOSVZ4LTlFc2dVVXdCQ3NEam9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwY6SMA4E AgACMAgDBgAqD8qAEjANBgkqhkiG9w0BAQsFAAOCAQEAOUzAL+ACNwjvEdhEChYE gl3mTqdLvJthd2VSo66LTuES+gD9DcTPFTpzhjbkzfq5B4ILeNOXJWSJ1zcNSSjG DoZJS/Vc/JI/8/Ph242SSm1jsiVIRBPyIaY5iZ/EAVf8KlGO1Mp3RK+oZlrTZA1e yJQ0bH21eLQuHvBVBQhaKZqPUaCf8dWO2LwGlQwiknpf8iiQsRaAh8emOGUsBkR6 kErNzevEjWgvJzY1yHXnjJohjEwS1xfmRsIAcwRA+LuOmZSR7rVwH6O2yqaw0T5L sRGe7xhmAlz8JgKO0cwvs3w+5Iz7EnZsiY/fgmjjUv40na6yZp7NLHRHIrU+mvoH +g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:22 2026 by rpki-client