This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/4S2qsZzCJPetW2WOCqHNs5FcxT8.roa File: 4S2qsZzCJPetW2WOCqHNs5FcxT8.roa (raw, json) Hash identifier: 3wG55AD6TAHegj3cRr5EakoY4fzT8KIUe+pg60VUlQ4= Subject key identifier: E1:2D:AA:B1:9C:C2:24:F7:AD:5B:65:8E:0A:A1:CD:B3:91:5C:C5:3F Certificate issuer: /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc Certificate serial: 019B77C6F1D0DCFA7A0F8460E77277735B78 Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/4S2qsZzCJPetW2WOCqHNs5FcxT8.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47176 IP address blocks: 5.183.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f1:d0:dc:fa:7a:0f:84:60:e7:72:77:73:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e12daab19cc224f7ad5b658e0aa1cdb3915cc53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:3e:a2:52:1b:39:d4:90:97:d9:b0:72:2d: a5:08:5a:77:3f:1f:39:5a:e8:66:97:2a:62:c4:ea: 79:20:07:1f:07:23:24:6a:91:c5:c9:47:3d:9b:8a: e9:01:de:87:45:48:ce:89:dc:62:c0:c7:5f:3a:ab: 40:52:b8:d6:da:00:cd:ce:88:fc:95:4d:59:66:b6: 28:54:92:bb:9a:ec:35:fb:b3:44:02:98:30:26:d9: f5:42:5e:a6:ec:e1:11:02:f8:83:dc:9a:d0:1d:2d: ab:05:41:b6:62:19:aa:75:bd:d4:68:31:22:23:a8: bd:f8:83:39:e9:76:1b:5c:5f:c7:00:68:22:fc:78: 44:a9:fa:5d:76:8f:32:88:9a:27:82:4a:01:ed:fd: 11:b6:9e:79:86:36:41:db:f9:54:2f:e4:5c:e0:b8: ea:7f:cc:fa:5c:2b:ad:a4:17:7b:65:38:ca:98:6f: 87:e2:01:2e:93:95:5b:2b:ef:03:f7:19:62:dc:bb: d8:0c:24:ef:b4:9b:03:93:f5:79:2f:50:67:d5:f8: 0f:c6:7d:4f:33:b6:17:9e:69:6d:f5:c4:44:42:0c: ca:03:af:21:89:96:de:01:5f:b2:d1:28:3e:68:2c: 69:13:2c:d8:61:ba:f0:4a:66:d6:1f:0c:c0:da:ad: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2D:AA:B1:9C:C2:24:F7:AD:5B:65:8E:0A:A1:CD:B3:91:5C:C5:3F X509v3 Authority Key Identifier: keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/4S2qsZzCJPetW2WOCqHNs5FcxT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.4.0/24 Signature Algorithm: sha256WithRSAEncryption d4:da:36:50:8a:f3:b7:56:4e:76:a7:2d:08:bf:74:08:29:f0: f0:43:2b:1c:ab:68:41:4f:86:6a:63:47:02:07:d8:04:10:ee: 4f:a4:0e:f5:0f:ed:e9:a8:a8:08:d1:c3:ca:e6:78:e9:12:a3: a1:e3:ba:0c:08:e9:36:e1:5d:99:dd:bd:c3:16:4f:28:75:38: 31:6d:5e:f5:75:1a:af:de:d4:6c:50:27:ef:52:f5:51:1d:88: 55:c3:36:d9:20:cc:36:3d:3b:31:7a:95:db:e9:27:20:f6:3e: 83:fc:43:40:7d:56:96:d6:6e:26:7d:6d:2e:34:9e:c5:c6:d1: 8e:87:9b:bd:cf:16:89:24:d9:71:83:fd:22:2f:b4:1a:9a:8f: 84:83:7d:f4:56:18:cd:9b:52:7d:87:95:58:80:84:30:3a:3b: 3f:59:cf:59:64:25:60:ad:f5:4c:32:88:92:90:9c:6b:b1:3a: c1:98:24:ec:c0:05:16:2a:c3:c4:26:29:02:37:cd:e8:48:8d: 59:3d:9c:b0:25:40:a8:64:d6:39:5f:9e:4e:23:78:02:0d:02: c9:6a:2b:ec:e9:4c:f9:ee:be:d4:55:c8:61:8c:e3:af:c0:87: 74:74:ee:07:8d:84:b5:07:d4:3e:47:fa:14:fa:ac:6b:e9:f9: f0:ee:14:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvHQ3Pp6D4Rg53J3c1t4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDgxYTUyYWM5Y2IwODU2ZGY2NTYzZWQ4N2QzOGIwY2Fj YTdjY2MwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTJkYWFiMTljYzIyNGY3YWQ1YjY1OGUwYWExY2RiMzkxNWNjNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK0+olIbOdSQl9mwci2lCFp3Px85 WuhmlypixOp5IAcfByMkapHFyUc9m4rpAd6HRUjOidxiwMdfOqtAUrjW2gDNzoj8 lU1ZZrYoVJK7muw1+7NEApgwJtn1Ql6m7OERAviD3JrQHS2rBUG2Yhmqdb3UaDEi I6i9+IM56XYbXF/HAGgi/HhEqfpddo8yiJongkoB7f0Rtp55hjZB2/lUL+Rc4Ljq f8z6XCutpBd7ZTjKmG+H4gEuk5VbK+8D9xli3LvYDCTvtJsDk/V5L1Bn1fgPxn1P M7YXnmlt9cREQgzKA68hiZbeAV+y0Sg+aCxpEyzYYbrwSmbWHwzA2q2rPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEtqrGcwiT3rVtljgqhzbORXMU/MB8GA1UdIwQY MBaAFFoIGlKsnLCFbfZWPth9OLDKynzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYt YzQ4MGRhMDI2NGNhLzEvNFMycXNaekNKUGV0VzJXT0NxSE5zNUZjeFQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYtYzQ4MGRhMDI2NGNh LzEvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbcEMA0G CSqGSIb3DQEBCwUAA4IBAQDU2jZQivO3Vk52py0Iv3QIKfDwQyscq2hBT4ZqY0cC B9gEEO5PpA71D+3pqKgI0cPK5njpEqOh47oMCOk24V2Z3b3DFk8odTgxbV71dRqv 3tRsUCfvUvVRHYhVwzbZIMw2PTsxepXb6Scg9j6D/ENAfVaW1m4mfW0uNJ7FxtGO h5u9zxaJJNlxg/0iL7Qamo+Eg330VhjNm1J9h5VYgIQwOjs/Wc9ZZCVgrfVMMoiS kJxrsTrBmCTswAUWKsPEJikCN83oSI1ZPZywJUCoZNY5X55OI3gCDQLJaivs6Uz5 7r7UVchhjOOvwId0dO4HjYS1B9Q+R/oU+qxr6fnw7hQn -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:39 2026 by rpki-client