This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa File: 4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa (raw, json) Hash identifier: +7cyCy/NdgEzdqXIvMYXBG6PX6qWy1L3JHGAtDMeS30= Subject key identifier: E2:14:B4:90:13:32:07:D1:FE:B4:7C:FF:14:F0:DF:71:80:FE:35:1D Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169 Certificate serial: 019B78A3793CEADACE851E0B802EBAEE0078 Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42 IP address blocks: 194.0.36.0/24 maxlen: 24 2001:678:4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:79:3c:ea:da:ce:85:1e:0b:80:2e:ba:ee:00:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e214b490133207d1feb47cff14f0df7180fe351d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:82:fc:9b:03:27:f9:04:a8:ea:f9:ce:29: 96:28:cd:bb:cb:39:48:e5:0c:20:7c:d8:46:e5:c0: ab:72:4d:1e:39:0d:28:3a:f0:58:99:a9:69:fe:01: 22:53:d7:32:bb:be:19:cc:7d:af:5f:f5:8a:d4:f0: b2:aa:7c:77:03:c3:be:a4:5e:d1:00:de:69:82:00: 30:f0:78:7e:51:b3:a0:26:a9:c0:8e:3f:32:00:16: 35:78:10:18:dc:dc:b3:d0:18:c9:e4:18:87:ef:ed: 2b:85:58:44:85:1a:e7:ff:d2:23:f9:de:b8:85:f4: e7:55:61:c9:00:a3:75:de:dc:4b:31:df:4c:cc:cf: 3c:49:cb:77:54:89:2e:ce:bf:bd:0f:a2:d0:e7:66: 72:d7:96:21:5f:c6:ec:53:94:56:41:0f:2f:bf:64: ac:09:28:03:19:cf:03:02:6f:ab:62:b7:c5:a1:0a: ec:b5:54:a0:e5:4c:3c:84:c0:62:78:49:d2:c1:4a: 80:c1:a8:f1:0a:dd:af:86:3f:3a:2d:62:d3:02:2e: aa:49:92:95:ab:38:3e:26:1c:bf:36:bb:43:fc:27: f2:4a:2a:14:f4:e1:fc:a3:00:f0:01:58:a0:6f:f3: 82:0d:2b:f2:b3:0d:ed:11:a9:b7:5b:60:db:4e:76: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:14:B4:90:13:32:07:D1:FE:B4:7C:FF:14:F0:DF:71:80:FE:35:1D X509v3 Authority Key Identifier: keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/4hS0kBMyB9H-tHz_FPDfcYD-NR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.36.0/24 IPv6: 2001:678:4c::/48 Signature Algorithm: sha256WithRSAEncryption 62:14:4e:41:5f:c1:de:f8:65:6b:bd:d6:f0:f5:a2:9b:c3:ff: 2c:7e:b4:35:86:15:69:b8:09:27:01:61:96:1b:fa:1a:72:f1: ec:7f:b0:9a:11:a0:28:f3:a5:fa:fe:dd:96:78:58:a5:21:fd: 52:ac:42:d1:f4:0f:2f:eb:c5:6d:1b:96:e2:23:d3:4c:09:e2: 08:51:20:bf:5c:e4:af:25:91:2d:9a:ae:04:21:5f:de:e3:7e: 5e:f2:78:25:e7:19:54:0c:0d:a0:cd:43:fa:29:aa:ad:3a:1c: 87:0e:b7:f1:67:73:0e:4c:05:a2:b8:9e:30:53:22:ae:2c:07: cf:dd:d8:54:61:1f:73:33:d4:69:db:99:01:fe:89:d9:5d:ce: b6:f1:28:55:85:4d:34:2b:30:33:d6:f4:0a:27:95:a3:a1:33: d0:b8:a0:57:ad:0a:fc:50:a1:a2:16:2f:c4:fb:b0:e5:2f:bc: 08:b4:b5:75:b8:87:6c:ac:62:60:8a:d3:69:b2:3d:42:28:2f: 5f:0c:d1:3f:f6:79:38:00:25:be:0e:80:ec:bc:43:b8:07:79: 14:1b:3d:1c:f0:9d:31:82:31:42:e9:aa:df:78:cd:9b:aa:b4: a5:f3:e6:a3:ac:34:06:f4:ef:fe:bf:62:e0:a0:8d:f6:a1:fa: 6c:6e:ea:c2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4o3k86trOhR4LgC667gB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQzYzBiNjQxNGM5Yzg2ZTNjOTRhNzE0ZGZiMjY5Y2I1 ZTkxNjkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjE0YjQ5MDEzMzIwN2QxZmViNDdjZmYxNGYwZGY3MTgwZmUzNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGSC/JsDJ/kEqOr5zimWKM27yzlI 5QwgfNhG5cCrck0eOQ0oOvBYmalp/gEiU9cyu74ZzH2vX/WK1PCyqnx3A8O+pF7R AN5pggAw8Hh+UbOgJqnAjj8yABY1eBAY3Nyz0BjJ5BiH7+0rhVhEhRrn/9Ij+d64 hfTnVWHJAKN13txLMd9MzM88Sct3VIkuzr+9D6LQ52Zy15YhX8bsU5RWQQ8vv2Ss CSgDGc8DAm+rYrfFoQrstVSg5Uw8hMBieEnSwUqAwajxCt2vhj86LWLTAi6qSZKV qzg+Jhy/NrtD/CfySioU9OH8owDwAVigb/OCDSvysw3tEam3W2DbTnZCBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOIUtJATMgfR/rR8/xTw33GA/jUdMB8GA1UdIwQY MBaAFF6NPAtkFMnIbjyUpxTfsmnLXpFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAt MjM0MzA5NTA2MDljLzEvNGhTMGtCTXlCOUgtdEh6X0ZQRGZjWUQtTlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAtMjM0MzA5NTA2MDlj LzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAkMA8E AgACMAkDBwAgAQZ4AEwwDQYJKoZIhvcNAQELBQADggEBAGIUTkFfwd74ZWu91vD1 opvD/yx+tDWGFWm4CScBYZYb+hpy8ex/sJoRoCjzpfr+3ZZ4WKUh/VKsQtH0Dy/r xW0bluIj00wJ4ghRIL9c5K8lkS2argQhX97jfl7yeCXnGVQMDaDNQ/opqq06HIcO t/Fncw5MBaK4njBTIq4sB8/d2FRhH3Mz1GnbmQH+idldzrbxKFWFTTQrMDPW9Aon laOhM9C4oFetCvxQoaIWL8T7sOUvvAi0tXW4h2ysYmCK02myPUIoL18M0T/2eTgA Jb4OgOy8Q7gHeRQbPRzwnTGCMULpqt94zZuqtKXz5qOsNAb07/6/YuCgjfah+mxu 6sI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:00 2026 by rpki-client