This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4xl3tok9SorpWFsyI4hTWRVgL8I.roa File: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (raw, json) Hash identifier: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg= Subject key identifier: E3:19:77:B6:89:3D:4A:8A:E9:58:5B:32:23:88:53:59:15:60:2F:C2 Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9 Certificate serial: 019B7CEDD48741F95F4EF612B7192ADDDE03 Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4xl3tok9SorpWFsyI4hTWRVgL8I.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1213 IP address blocks: 147.252.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d4:87:41:f9:5f:4e:f6:12:b7:19:2a:dd:de:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31977b6893d4a8ae9585b322388535915602fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:7c:df:17:55:e5:17:b6:23:87:5e:d7:09:81: af:d5:29:20:49:55:5d:c0:77:50:bb:15:7c:bd:2b: 41:ef:16:43:fe:1d:32:48:07:24:70:a6:64:4f:56: 6d:6b:86:c3:b9:4e:24:e5:5f:fd:57:dd:f6:84:52: d0:27:d9:ef:df:05:7f:70:de:e1:44:a7:d7:ed:a8: b9:f2:69:9c:4b:75:08:34:ab:74:7c:1d:51:8e:f4: 4c:50:e6:5e:22:f7:b3:6a:61:6c:56:50:75:a1:27: bc:9b:56:6b:92:23:a4:02:d5:b4:84:c1:8e:38:d9: 04:98:f4:45:8f:64:64:88:cc:9c:36:9e:05:46:7d: 7b:52:cb:f4:b3:47:4f:09:23:03:39:df:4b:41:cb: 8f:c4:31:1c:44:8e:cb:da:9b:a6:87:92:8d:c6:b1: 0b:87:c0:b2:b1:50:cf:91:f1:d7:7b:26:1b:22:87: 4e:38:a1:d8:6d:7c:ff:f8:61:3c:33:79:1e:88:ac: 3d:c3:1f:72:69:8d:c5:2e:e0:3e:38:4b:a6:ad:55: 34:61:fd:98:30:cc:eb:86:0f:12:83:e2:19:ed:43: fb:ae:84:45:ce:7a:0a:01:f5:ed:bd:aa:15:e0:45: 29:f4:fb:e0:01:97:8b:f0:85:26:dc:02:b9:81:de: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:77:B6:89:3D:4A:8A:E9:58:5B:32:23:88:53:59:15:60:2F:C2 X509v3 Authority Key Identifier: keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4xl3tok9SorpWFsyI4hTWRVgL8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:12:30:c5:af:7f:fc:20:14:ac:04:b1:3f:51:6b:59:24:07: 20:27:46:dc:fb:ab:05:1e:b8:ab:f5:c1:d7:90:53:ca:10:f7: 87:ab:cc:d7:2d:50:e0:54:54:52:17:a7:70:80:7c:b6:8b:37: ec:77:57:a5:6f:65:6c:23:d0:a9:5b:8e:a3:83:d6:fb:2f:15: cd:87:d8:10:83:a1:0c:63:38:d7:7b:5d:22:6e:5d:0a:c0:27: da:24:c2:ee:32:ca:18:45:ad:7c:6b:b2:8d:b2:f3:27:20:00: a5:fc:fe:bb:9c:c3:a6:d0:ae:18:e8:4f:51:41:f7:47:c0:25: 83:76:41:75:dc:26:a2:5f:ee:2a:44:ad:f3:de:ba:f9:63:27: ac:47:3a:37:f1:f4:64:f6:25:31:84:04:26:ac:ad:d6:37:7f: 65:aa:9a:6e:d0:ad:e0:b4:e5:ee:12:9c:0d:8a:ca:31:16:2f: 4b:19:cb:2d:e2:c4:29:15:29:ed:2f:77:fb:4d:51:a3:89:1d: fc:9f:5d:9e:a0:fa:4b:cf:91:65:25:f2:47:6f:b1:90:77:9f: 05:5a:32:45:48:07:86:75:68:c2:e7:63:ef:04:b3:6f:14:e2: 1c:4b:75:ab:b6:50:5d:ec:24:96:0f:72:1c:a2:e6:0f:e2:3c: 70:40:11:76 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt87dSHQflfTvYStxkq3d4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTZhNzg1YmY3ZmU0ZDdjNGE1YzZiNzIxMjE0ZjBlOTZm M2FlYzkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE5NzdiNjg5M2Q0YThhZTk1ODViMzIyMzg4NTM1OTE1NjAyZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3zfF1XlF7Yjh17XCYGv1SkgSVVd wHdQuxV8vStB7xZD/h0ySAckcKZkT1Zta4bDuU4k5V/9V932hFLQJ9nv3wV/cN7h RKfX7ai58mmcS3UINKt0fB1RjvRMUOZeIvezamFsVlB1oSe8m1ZrkiOkAtW0hMGO ONkEmPRFj2RkiMycNp4FRn17Usv0s0dPCSMDOd9LQcuPxDEcRI7L2pumh5KNxrEL h8CysVDPkfHXeyYbIodOOKHYbXz/+GE8M3keiKw9wx9yaY3FLuA+OEumrVU0Yf2Y MMzrhg8Sg+IZ7UP7roRFznoKAfXtvaoV4EUp9PvgAZeL8IUm3AK5gd6wlQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOMZd7aJPUqK6VhbMiOIU1kVYC/CMB8GA1UdIwQY MBaAFOFWp4W/f+TXxKXGtyEhTw6W867JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUt N2JkMGNmYTIzOWY2LzEvNHhsM3RvazlTb3JwV0ZzeUk0aFRXUlZnTDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUtN2JkMGNmYTIzOWY2 LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk/wwDQYJ KoZIhvcNAQELBQADggEBACASMMWvf/wgFKwEsT9Ra1kkByAnRtz7qwUeuKv1wdeQ U8oQ94erzNctUOBUVFIXp3CAfLaLN+x3V6VvZWwj0KlbjqOD1vsvFc2H2BCDoQxj ONd7XSJuXQrAJ9okwu4yyhhFrXxrso2y8ycgAKX8/rucw6bQrhjoT1FB90fAJYN2 QXXcJqJf7ipErfPeuvljJ6xHOjfx9GT2JTGEBCasrdY3f2Wqmm7QreC05e4SnA2K yjEWL0sZyy3ixCkVKe0vd/tNUaOJHfyfXZ6g+kvPkWUl8kdvsZB3nwVaMkVIB4Z1 aMLnY+8Es28U4hxLdau2UF3sJJYPchyi5g/iPHBAEXY= -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:47 2026 by rpki-client