This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4b5IG88yGY57oOV8rMMD65D9450.roa File: 4b5IG88yGY57oOV8rMMD65D9450.roa (raw, json) Hash identifier: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE= Subject key identifier: E1:BE:48:1B:CF:32:19:8E:7B:A0:E5:7C:AC:C3:03:EB:90:FD:E3:9D Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED34A2473B8DEA93C5BB250AD7568 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4b5IG88yGY57oOV8rMMD65D9450.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212077 IP address blocks: 87.236.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:4a:24:73:b8:de:a9:3c:5b:b2:50:ad:75:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1be481bcf32198e7ba0e57cacc303eb90fde39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:a2:5c:36:69:50:47:10:a9:71:51:87:d8: 30:7b:93:a3:0e:93:e4:4c:c4:1b:5b:03:a8:07:f1: 20:ed:28:40:2b:ce:b3:3d:c2:d2:c9:5e:87:94:13: 92:bb:48:fe:00:cb:3f:29:5c:2c:3b:71:3c:9f:d2: 46:d3:e4:96:48:25:97:de:5e:6c:3a:b6:e6:76:96: 08:59:2c:fd:32:e8:02:b3:96:12:f9:15:f4:d8:8a: 6e:5c:0b:9f:03:76:fc:b6:3f:f6:29:f7:60:cc:01: cd:51:f8:7f:5b:80:de:e7:20:e0:9e:c9:c2:8b:7c: 02:df:56:40:8d:e7:a7:25:ab:8b:fd:ea:66:ae:0d: c8:24:bc:b3:23:d1:70:12:69:e3:f3:3e:bd:ab:54: 56:79:c2:54:14:a5:6d:0b:23:c5:de:49:82:51:3f: 22:c7:5f:ca:55:59:77:16:d0:7a:da:e3:44:a3:dc: ab:3b:46:5e:71:2b:a7:bc:bd:85:1a:9f:a6:28:5f: 94:6f:6e:3b:60:8d:01:17:d6:db:70:1d:5e:e1:1e: 0a:ac:d8:29:3e:7b:48:f4:bd:9a:0c:af:da:7f:db: 90:d3:42:b3:22:e0:b6:99:7c:1e:16:61:48:8b:20: 70:4b:e7:c8:1b:d7:79:5c:4d:ae:b4:e0:88:e9:f3: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BE:48:1B:CF:32:19:8E:7B:A0:E5:7C:AC:C3:03:EB:90:FD:E3:9D X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4b5IG88yGY57oOV8rMMD65D9450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.212.0/24 Signature Algorithm: sha256WithRSAEncryption 42:85:65:69:01:bd:a3:8a:1b:2c:59:2f:e0:0c:b7:0c:c3:83: 61:70:0e:f6:55:e0:b1:1d:95:bd:c1:99:71:69:75:49:68:37: da:c7:19:f2:3d:0d:d6:16:f2:95:98:f5:bd:ff:8b:20:62:b9: e5:e5:ce:85:b6:72:65:89:f8:f8:6b:bf:28:29:43:10:13:62: 26:a5:dd:e3:ab:e8:16:f4:07:7b:7b:13:6a:d4:fa:9f:67:68: 5a:c2:18:5c:89:3f:de:42:a9:7a:b9:4c:e7:6e:9f:25:71:46: d9:99:15:8c:fe:b9:40:19:e0:2c:e6:a1:19:25:40:5f:3d:de: 35:f8:fc:1d:04:c4:d8:c0:d2:36:b2:1f:0e:b9:d4:8b:fe:28: ab:aa:fe:9b:7e:d8:14:ac:3d:02:fe:90:84:5c:aa:e6:9c:9f: a0:05:8a:5e:53:c3:d9:82:39:84:ff:b7:9d:4c:dc:a4:3c:ec: fe:d0:ec:b0:0f:f6:54:7a:bc:4f:0b:40:d6:e5:48:d7:85:cf: f8:e6:50:c2:45:b6:03:1c:ea:50:e8:bb:97:3b:bf:fc:95:6b: 5d:de:4e:9e:ec:3b:27:4d:6c:3a:52:a8:44:46:f2:65:f1:ae: 2b:1d:99:19:c3:b5:04:9f:5a:60:22:64:51:4a:d4:61:8b:80: 90:2d:59:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftNKJHO43qk8W7JQrXVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWJlNDgxYmNmMzIxOThlN2JhMGU1N2NhY2MzMDNlYjkwZmRlMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ6iXDZpUEcQqXFRh9gwe5OjDpPk TMQbWwOoB/Eg7ShAK86zPcLSyV6HlBOSu0j+AMs/KVwsO3E8n9JG0+SWSCWX3l5s OrbmdpYIWSz9MugCs5YS+RX02IpuXAufA3b8tj/2KfdgzAHNUfh/W4De5yDgnsnC i3wC31ZAjeenJauL/epmrg3IJLyzI9FwEmnj8z69q1RWecJUFKVtCyPF3kmCUT8i x1/KVVl3FtB62uNEo9yrO0ZecSunvL2FGp+mKF+Ub247YI0BF9bbcB1e4R4KrNgp PntI9L2aDK/af9uQ00KzIuC2mXweFmFIiyBwS+fIG9d5XE2utOCI6fPi2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOG+SBvPMhmOe6DlfKzDA+uQ/eOdMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvNGI1SUc4OHlHWTU3b09WOHJNTUQ2NUQ5NDUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+zUMA0G CSqGSIb3DQEBCwUAA4IBAQBChWVpAb2jihssWS/gDLcMw4NhcA72VeCxHZW9wZlx aXVJaDfaxxnyPQ3WFvKVmPW9/4sgYrnl5c6FtnJlifj4a78oKUMQE2Impd3jq+gW 9Ad7exNq1PqfZ2hawhhciT/eQql6uUznbp8lcUbZmRWM/rlAGeAs5qEZJUBfPd41 +PwdBMTYwNI2sh8OudSL/iirqv6bftgUrD0C/pCEXKrmnJ+gBYpeU8PZgjmE/7ed TNykPOz+0OywD/ZUerxPC0DW5UjXhc/45lDCRbYDHOpQ6LuXO7/8lWtd3k6e7Dsn TWw6UqhERvJl8a4rHZkZw7UEn1pgImRRStRhi4CQLVkm -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:47 2026 by rpki-client