This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/n4s3R3iktWUGobIMBTVKacPInjg.roa File: n4s3R3iktWUGobIMBTVKacPInjg.roa (raw, json) Hash identifier: XxvWTy0J0RZ/Rk3snkitBdW77lxKp2361BnvrzID/vE= Subject key identifier: 9F:8B:37:47:78:A4:B5:65:06:A1:B2:0C:05:35:4A:69:C3:C8:9E:38 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019B7F1568071514DADF861618EEC1E811B9 Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/n4s3R3iktWUGobIMBTVKacPInjg.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201996 IP address blocks: 87.246.40.0/24 maxlen: 24 87.246.41.0/24 maxlen: 24 87.246.42.0/24 maxlen: 24 87.246.43.0/24 maxlen: 24 212.5.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:68:07:15:14:da:df:86:16:18:ee:c1:e8:11:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f8b374778a4b56506a1b20c05354a69c3c89e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:64:e0:da:5f:01:a4:0c:52:47:d2:6f:cc: 75:b1:8a:a3:6a:a2:ec:32:34:9b:b6:45:fd:32:f7: e3:a0:c7:5a:5f:1c:11:3d:4a:c4:cb:d7:e4:ce:1e: 2c:73:37:86:51:b6:38:a0:36:9e:e2:41:9c:85:e8: 07:7c:d6:c4:f7:9e:2a:f2:9a:4b:56:43:c7:e1:92: 91:5c:40:ea:f1:21:c7:63:a5:6a:d0:4e:c7:7c:4a: a4:07:25:bf:48:54:3a:31:ad:b5:e0:b9:6e:45:cd: 93:3a:96:47:c6:24:76:ff:14:bd:cb:b8:a5:79:8d: cf:92:4d:57:78:56:01:31:5a:67:c9:26:c7:6d:2f: 29:b6:bd:bb:50:e7:97:97:8b:a6:c6:98:cb:cd:81: 04:0f:60:a2:76:2b:69:6d:23:12:05:3f:e5:5e:02: 4c:06:ff:28:62:8c:f8:85:02:6c:27:8d:97:98:3d: de:68:9f:0d:6e:6e:33:c0:16:ef:4c:7d:c1:b9:6a: be:54:ff:74:c4:25:2b:87:e2:66:90:f2:88:70:27: 24:4a:17:58:f1:c4:e2:df:e4:b9:0d:fb:13:6b:2d: a2:cb:16:f9:2b:6b:89:22:44:43:3e:31:e1:82:ca: b4:44:d3:24:9b:2e:78:69:04:57:37:ea:a2:3b:3f: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8B:37:47:78:A4:B5:65:06:A1:B2:0C:05:35:4A:69:C3:C8:9E:38 X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/n4s3R3iktWUGobIMBTVKacPInjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.246.40.0/22 212.5.60.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:7d:90:b9:e6:62:57:a2:f6:45:2c:5a:05:1d:72:c1:53:50: 9a:f0:90:81:82:09:c2:c7:0b:96:7c:c9:af:0c:54:85:ed:6e: d1:42:09:1d:f6:f3:20:53:e7:3a:e1:a1:b0:c7:6d:3f:8c:c0: 5c:ca:eb:e1:d5:d1:b4:7c:80:27:01:01:b8:af:d8:55:1c:a2: 41:f5:82:ea:4c:78:60:3c:cc:96:1a:ca:72:ad:a4:cf:16:6c: d9:94:e7:98:dd:80:a8:3f:e0:f5:b9:c7:54:cc:53:60:c1:ba: 8e:af:99:5a:bc:b1:f8:07:a5:77:f8:46:a0:ca:8b:2f:ce:c0: 2d:af:a5:5a:d2:9f:d9:85:d6:10:f1:af:63:35:ac:67:2d:f5: 61:7d:d1:be:d0:35:19:db:03:78:6c:94:60:1e:8a:0b:ee:2c: 55:0a:2c:d7:1e:b4:dc:85:81:f2:0d:c0:60:80:e8:24:c2:d8: 2f:7c:2a:59:86:74:c2:19:b7:e4:68:e8:90:ff:f3:47:ea:8b: 23:a4:dd:aa:14:53:34:cd:7c:ae:76:81:7b:b5:aa:65:de:f7: fc:e8:b8:0c:e0:97:01:8b:7c:04:05:1d:70:cf:27:ba:7c:92: ad:a9:cd:8b:e7:7d:1a:72:77:dd:57:6b:b0:2f:16:88:da:51: b2:c2:9e:71 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FWgHFRTa34YWGO7B6BG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjhiMzc0Nzc4YTRiNTY1MDZhMWIyMGMwNTM1NGE2OWMzYzg5ZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk9k4NpfAaQMUkfSb8x1sYqjaqLs MjSbtkX9MvfjoMdaXxwRPUrEy9fkzh4sczeGUbY4oDae4kGchegHfNbE954q8ppL VkPH4ZKRXEDq8SHHY6Vq0E7HfEqkByW/SFQ6Ma214LluRc2TOpZHxiR2/xS9y7il eY3Pkk1XeFYBMVpnySbHbS8ptr27UOeXl4umxpjLzYEED2CiditpbSMSBT/lXgJM Bv8oYoz4hQJsJ42XmD3eaJ8Nbm4zwBbvTH3BuWq+VP90xCUrh+JmkPKIcCckShdY 8cTi3+S5DfsTay2iyxb5K2uJIkRDPjHhgsq0RNMkmy54aQRXN+qiOz+SDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ+LN0d4pLVlBqGyDAU1SmnDyJ44MB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEvbjRzM1IzaWt0V1VHb2JJTUJUVkthY1BJbmpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV/YoAwQA 1AU8MA0GCSqGSIb3DQEBCwUAA4IBAQAcfZC55mJXovZFLFoFHXLBU1Ca8JCBggnC xwuWfMmvDFSF7W7RQgkd9vMgU+c64aGwx20/jMBcyuvh1dG0fIAnAQG4r9hVHKJB 9YLqTHhgPMyWGspyraTPFmzZlOeY3YCoP+D1ucdUzFNgwbqOr5lavLH4B6V3+Eag yosvzsAtr6Va0p/ZhdYQ8a9jNaxnLfVhfdG+0DUZ2wN4bJRgHooL7ixVCizXHrTc hYHyDcBggOgkwtgvfCpZhnTCGbfkaOiQ//NH6osjpN2qFFM0zXyudoF7tapl3vf8 6LgM4JcBi3wEBR1wzye6fJKtqc2L530acnfdV2uwLxaI2lGywp5x -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:13 2026 by rpki-client