This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa File: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (raw, json) Hash identifier: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U= Subject key identifier: 73:8B:CE:D1:3D:8D:D7:0C:73:33:3C:65:82:DC:F4:9B:C7:0E:31:11 Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Certificate serial: 019B7DC9E18A50EF4656CA426CFF7225F1D5 Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa Signing time: Fri 02 Jan 2026 08:19:00 +0000 ROA not before: Fri 02 Jan 2026 08:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29137 IP address blocks: 195.234.248.0/23 maxlen: 23 195.234.250.0/23 maxlen: 23 213.180.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e1:8a:50:ef:46:56:ca:42:6c:ff:72:25:f1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=738bced13d8dd70c73333c6582dcf49bc70e3111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:58:02:12:d3:ce:b9:73:4a:af:21:b5:39: 88:fb:61:56:93:4a:b0:8a:b9:76:9c:29:12:8b:ae: ee:7e:74:10:5b:5a:b7:74:b7:91:57:96:75:71:89: 2b:fd:cf:80:81:c0:64:04:8b:0f:f6:3e:a0:ab:08: c1:ce:e9:2c:4f:54:3c:a0:7d:30:21:d0:f4:e7:9e: c6:e0:ba:4a:7a:29:4e:e4:49:c7:2f:26:b6:26:f8: 0d:e1:5e:e8:76:b8:ad:56:a9:21:79:59:b6:2c:97: f5:19:ca:44:a5:b5:66:06:e4:9f:71:38:ad:d7:e8: 50:99:b5:1d:0e:aa:51:64:cf:b5:04:85:2c:73:15: 51:43:3d:07:e8:c9:45:3d:f9:bb:71:d0:27:1b:2b: f8:46:59:73:04:49:b2:65:00:d5:c4:54:a4:0b:2b: 3d:8c:e9:de:96:5c:0f:00:97:73:38:02:8e:91:bb: 91:7f:b3:67:09:05:e0:9e:8b:60:db:e5:25:51:b2: aa:d3:ab:c5:e0:e0:1f:a6:f7:1c:b3:77:88:61:f7: d9:21:54:87:12:f1:c7:5a:65:9d:06:ab:21:51:7d: 4c:05:64:22:ab:84:be:73:90:21:44:61:53:37:79: 0e:79:0e:c5:8e:5f:8e:f3:15:3c:96:21:82:5d:7a: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:CE:D1:3D:8D:D7:0C:73:33:3C:65:82:DC:F4:9B:C7:0E:31:11 X509v3 Authority Key Identifier: keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.248.0/22 213.180.230.0/24 Signature Algorithm: sha256WithRSAEncryption 63:9b:d3:b9:55:b4:7b:b0:1a:f7:e7:26:9c:28:fa:19:c2:09: f2:0b:cd:a4:84:a2:a6:00:40:6f:c5:42:62:7a:6f:ff:90:42: f7:90:45:0c:88:02:2b:e0:5e:ce:62:11:c7:7e:ac:c4:04:b3: e0:13:b0:02:ae:c1:ff:46:91:93:37:66:5c:02:8c:c1:b9:fb: 61:2b:a0:a9:b1:a2:6b:5c:92:13:db:23:fa:0d:0a:29:f1:63: e4:a2:92:4d:36:b8:74:8e:9a:f9:50:3d:f7:ad:6c:2c:3c:2a: 4d:71:92:2c:5e:dc:8e:fb:b1:27:97:60:65:29:eb:35:8d:53: f0:1d:b0:ee:0b:40:b5:ef:32:6e:ce:be:56:1d:c5:a4:ed:52: f4:08:3b:f9:e6:5a:8f:fe:87:f6:f8:9a:27:51:ba:5b:79:4a: be:27:76:b6:0c:47:42:c5:b8:0a:c9:99:a0:eb:a4:a8:b3:32: 41:e3:3b:98:96:06:a4:a1:9a:85:36:79:96:9b:dd:29:91:04: 13:41:60:af:a5:a5:42:93:7a:9e:b3:36:6a:de:2a:d5:2b:e9: f2:5f:c6:8c:fd:2d:47:fe:5b:fb:72:72:f4:26:e4:b1:b7:b1: 68:fe:40:4e:fe:57:d5:3f:8a:9b:4a:35:a1:be:80:1b:1e:78: e9:3f:32:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yeGKUO9GVspCbP9yJfHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl ZDhjMWMwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzhiY2VkMTNkOGRkNzBjNzMzMzNjNjU4MmRjZjQ5YmM3MGUzMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWVYAhLTzrlzSq8htTmI+2FWk0qw irl2nCkSi67ufnQQW1q3dLeRV5Z1cYkr/c+AgcBkBIsP9j6gqwjBzuksT1Q8oH0w IdD0557G4LpKeilO5EnHLya2JvgN4V7odritVqkheVm2LJf1GcpEpbVmBuSfcTit 1+hQmbUdDqpRZM+1BIUscxVRQz0H6MlFPfm7cdAnGyv4RllzBEmyZQDVxFSkCys9 jOnellwPAJdzOAKOkbuRf7NnCQXgnotg2+UlUbKq06vF4OAfpvccs3eIYffZIVSH EvHHWmWdBqshUX1MBWQiq4S+c5AhRGFTN3kOeQ7Fjl+O8xU8liGCXXrlpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHOLztE9jdcMczM8ZYLc9JvHDjERMB8GA1UdIwQY MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt YmQ5MGEzZjA2ZTE2LzEvYzR2TzBUMk4xd3h6TXp4bGd0ejBtOGNPTVJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2 LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw+r4AwQA 1bTmMA0GCSqGSIb3DQEBCwUAA4IBAQBjm9O5VbR7sBr35yacKPoZwgnyC82khKKm AEBvxUJiem//kEL3kEUMiAIr4F7OYhHHfqzEBLPgE7ACrsH/RpGTN2ZcAozBufth K6CpsaJrXJIT2yP6DQop8WPkopJNNrh0jpr5UD33rWwsPCpNcZIsXtyO+7Enl2Bl Kes1jVPwHbDuC0C17zJuzr5WHcWk7VL0CDv55lqP/of2+JonUbpbeUq+J3a2DEdC xbgKyZmg66SoszJB4zuYlgakoZqFNnmWm90pkQQTQWCvpaVCk3qeszZq3irVK+ny X8aM/S1H/lv7cnL0JuSxt7Fo/kBO/lfVP4qbSjWhvoAbHnjpPzJs -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:56 2026 by rpki-client