This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa File: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (raw, json) Hash identifier: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA= Subject key identifier: E3:15:C4:80:61:E6:E8:53:44:BF:35:D2:64:C6:00:E0:20:75:E5:7A Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Certificate serial: 019B79110250A8A53D9EDB1BCE85B5013137 Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211028 IP address blocks: 194.39.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:02:50:a8:a5:3d:9e:db:1b:ce:85:b5:01:31:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e315c48061e6e85344bf35d264c600e02075e57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:bb:c8:09:c9:30:c0:ed:92:52:8a:86:b8: 17:2a:47:76:4f:ed:d6:9a:23:b2:2b:7b:fd:fe:12: 59:68:58:5d:88:b7:f2:82:c5:73:13:ea:5b:e5:e7: 1a:7f:a6:4b:14:5b:cb:9c:45:8d:b4:6c:50:ba:ee: 35:b8:c2:df:54:aa:06:b6:21:94:9b:c6:a9:1d:3e: cf:cf:46:e3:b8:f7:80:a9:51:72:fe:32:55:5f:ce: c4:46:6a:8f:c8:f2:90:82:c2:ba:2f:78:13:99:1e: 4c:a1:9c:dc:05:39:20:ec:cd:28:6e:98:94:9f:97: d4:dd:ee:4e:90:74:eb:e4:a9:35:c6:32:14:9a:cc: 52:82:fd:7f:22:13:17:13:d4:1a:2f:d8:ba:02:20: 80:5d:5f:b4:72:56:70:93:a5:a1:3d:0f:79:a6:4d: 5a:5d:04:93:75:86:10:e3:b8:f4:fc:25:0a:7f:e3: df:12:79:0a:07:87:ea:ab:9b:ff:54:38:ea:38:4e: 77:43:5f:f3:1f:5c:6c:ae:0b:68:3c:60:ea:cd:2d: 72:6b:66:f2:62:46:9a:9c:8a:3e:32:28:08:7d:19: ef:64:3b:fe:93:f9:84:54:02:ad:2d:7f:d1:9e:3d: 44:00:cd:d9:f7:89:f8:de:30:be:b9:04:79:76:d8: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:15:C4:80:61:E6:E8:53:44:BF:35:D2:64:C6:00:E0:20:75:E5:7A X509v3 Authority Key Identifier: keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.108.0/24 Signature Algorithm: sha256WithRSAEncryption 96:98:aa:9d:f1:8a:0c:99:44:6b:db:d6:bb:92:26:c6:f1:ad: 74:c3:fd:ff:f0:25:04:0b:25:91:09:2b:82:83:05:e1:d9:f1: 9c:ad:42:49:f5:20:5f:76:5a:1a:7a:90:99:22:7f:47:25:e7: f6:f2:d6:f6:7b:75:1c:1e:21:1d:29:d0:81:99:de:47:d5:e2: 9c:f4:23:b5:81:e9:2d:07:92:8e:6f:cc:22:93:99:7b:cb:85: e0:49:9b:8b:5d:9b:78:e0:62:15:15:62:ba:12:9c:e8:8b:3d: fe:dd:85:a3:8d:e9:dd:9a:fd:55:58:08:c8:bf:99:90:54:e7: 95:26:41:89:00:bd:30:0d:d8:55:e4:8c:e4:2b:b6:cc:c5:4a: 62:f8:9f:79:a3:c9:ce:2f:12:cd:4c:97:0d:ee:4b:10:ee:1e: a3:e7:f7:fb:60:71:2c:0f:e6:d0:41:79:b7:f5:5a:f5:82:02: a4:4c:c9:9a:4a:3a:4c:84:42:61:ab:7c:4a:9c:ea:93:b0:4e: ef:8a:a2:f0:d2:ef:8b:40:e9:23:fb:02:40:42:32:77:bc:69: 11:17:3a:75:6f:e2:4e:4f:80:76:43:46:22:c2:d6:e5:7b:e2: d9:af:65:32:1e:98:99:81:89:f9:b7:66:36:93:45:df:bd:33: 29:9d:bd:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQJQqKU9ntsbzoW1ATE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm ZDk4ODkwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE1YzQ4MDYxZTZlODUzNDRiZjM1ZDI2NGM2MDBlMDIwNzVlNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCC7yAnJMMDtklKKhrgXKkd2T+3W miOyK3v9/hJZaFhdiLfygsVzE+pb5ecaf6ZLFFvLnEWNtGxQuu41uMLfVKoGtiGU m8apHT7Pz0bjuPeAqVFy/jJVX87ERmqPyPKQgsK6L3gTmR5MoZzcBTkg7M0obpiU n5fU3e5OkHTr5Kk1xjIUmsxSgv1/IhMXE9QaL9i6AiCAXV+0clZwk6WhPQ95pk1a XQSTdYYQ47j0/CUKf+PfEnkKB4fqq5v/VDjqOE53Q1/zH1xsrgtoPGDqzS1ya2by YkaanIo+MigIfRnvZDv+k/mEVAKtLX/Rnj1EAM3Z94n43jC+uQR5dtgkWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMVxIBh5uhTRL810mTGAOAgdeV6MB8GA1UdIwQY MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt NDBmOGE4Y2QxYmRkLzEvNHhYRWdHSG02Rk5FdnpYU1pNWUE0Q0IxNVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwidsMA0G CSqGSIb3DQEBCwUAA4IBAQCWmKqd8YoMmURr29a7kibG8a10w/3/8CUECyWRCSuC gwXh2fGcrUJJ9SBfdloaepCZIn9HJef28tb2e3UcHiEdKdCBmd5H1eKc9CO1gekt B5KOb8wik5l7y4XgSZuLXZt44GIVFWK6Epzoiz3+3YWjjendmv1VWAjIv5mQVOeV JkGJAL0wDdhV5IzkK7bMxUpi+J95o8nOLxLNTJcN7ksQ7h6j5/f7YHEsD+bQQXm3 9Vr1ggKkTMmaSjpMhEJhq3xKnOqTsE7viqLw0u+LQOkj+wJAQjJ3vGkRFzp1b+JO T4B2Q0Yiwtble+LZr2UyHpiZgYn5t2Y2k0XfvTMpnb1r -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:24 2026 by rpki-client