This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/4oer0NIy8gLaot91RUTGaO6LrAo.roa File: 4oer0NIy8gLaot91RUTGaO6LrAo.roa (raw, json) Hash identifier: yRr8CCQ/YtEMqUBMAHOSC+xneg3hncFxDqmVEzIn8BA= Subject key identifier: E2:87:AB:D0:D2:32:F2:02:DA:A2:DF:75:45:44:C6:68:EE:8B:AC:0A Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e Certificate serial: 019B7C7F08E757266E189E3C0B66AC3AA137 Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/4oer0NIy8gLaot91RUTGaO6LrAo.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 45.10.25.0/24 maxlen: 24 185.250.249.0/24 maxlen: 24 194.26.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:08:e7:57:26:6e:18:9e:3c:0b:66:ac:3a:a1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e287abd0d232f202daa2df754544c668ee8bac0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:34:b1:3e:8a:6b:dc:30:f4:22:f9:73:4f: 67:c8:a0:4a:13:67:97:3a:1e:86:11:a0:e0:ec:61: 53:89:a8:25:3d:77:77:09:d1:76:4b:34:07:e2:c7: 91:92:08:5b:1f:de:ac:73:16:5e:c4:18:6f:98:6f: 48:8d:4d:c3:ed:bf:2e:d9:6c:89:59:95:68:64:77: e2:95:fa:7e:b9:fe:73:b2:3a:b7:72:44:e3:d6:24: e4:63:9a:c5:c4:65:96:72:25:b3:4d:82:c3:68:27: 0f:22:8c:5f:19:98:6a:08:75:43:6e:c8:67:00:eb: cc:90:d3:d0:fb:27:6e:95:8b:38:8d:23:e0:8b:7f: ff:5d:da:08:d3:05:90:0d:a6:a4:0d:ac:f9:e3:74: cb:2c:73:1d:01:51:d1:29:8d:af:a9:9d:1d:ca:c4: 00:a6:39:f0:ce:9e:db:27:8d:03:d2:96:ac:ca:87: 88:c9:6a:14:29:5c:b9:9b:4e:01:34:bd:ae:f7:51: f0:92:8f:4f:aa:53:68:08:9a:c0:58:46:ea:92:c9: 72:83:38:af:af:ba:5f:8d:47:6d:12:18:f9:78:b2: 65:d2:44:99:6f:82:da:cd:cb:39:f2:59:fb:30:f2: 64:39:48:b1:3c:19:c2:79:02:6c:e2:56:1d:05:55: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:87:AB:D0:D2:32:F2:02:DA:A2:DF:75:45:44:C6:68:EE:8B:AC:0A X509v3 Authority Key Identifier: keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/4oer0NIy8gLaot91RUTGaO6LrAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.25.0/24 185.250.249.0/24 194.26.183.0/24 Signature Algorithm: sha256WithRSAEncryption 48:7d:74:4d:89:62:26:46:7f:5e:90:7f:46:10:b5:88:5c:18: 45:d1:24:e7:00:4f:9b:67:d7:cf:3a:ea:f7:ec:ee:8f:97:36: 4a:2d:aa:f6:e1:c8:62:83:29:73:43:d3:54:16:48:4e:b2:b5: 77:39:6f:8f:53:24:73:75:30:aa:3c:cd:27:0d:b3:ce:d3:13: 8f:41:df:39:1e:fb:95:38:95:8b:e6:cd:6d:fe:50:cc:ed:0f: 46:b6:2c:5a:98:46:a2:41:1f:a6:00:05:f5:33:1f:45:3c:10: 46:ef:48:96:5b:27:91:ff:bb:ac:3d:0f:e1:b8:98:4d:af:23: 21:e7:67:67:a9:10:6e:d6:25:40:c0:5a:3e:f6:a9:8c:8a:8f: f0:e4:d1:0d:e6:25:b2:83:47:7d:50:85:3b:80:64:8f:c9:6a: 96:33:da:25:92:4c:53:fa:85:ee:5f:9e:06:65:1a:56:2c:16: fb:17:02:2c:c6:da:2d:26:47:4c:bc:d6:bf:25:a9:69:9f:a2: 12:dd:20:d8:18:89:b0:6b:a3:d2:0d:32:17:8a:60:5b:0d:8d: f4:5b:ee:c2:55:c9:7d:6b:ff:ba:6f:88:da:c0:b6:79:9d:eb: 05:57:cd:ab:f2:dd:7c:f3:b9:ce:34:4b:2c:ff:7b:c7:5a:b3: 64:21:cd:7d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8fwjnVyZuGJ48C2asOqE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzAwN2U1MDgyYjhlOGQ4Mjg5MDE4NzE4Y2ZkNTI3YTc4 OTNlNWUwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg3YWJkMGQyMzJmMjAyZGFhMmRmNzU0NTQ0YzY2OGVlOGJhYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvk0sT6Ka9ww9CL5c09nyKBKE2eX Oh6GEaDg7GFTiaglPXd3CdF2SzQH4seRkghbH96scxZexBhvmG9IjU3D7b8u2WyJ WZVoZHfilfp+uf5zsjq3ckTj1iTkY5rFxGWWciWzTYLDaCcPIoxfGZhqCHVDbshn AOvMkNPQ+ydulYs4jSPgi3//XdoI0wWQDaakDaz543TLLHMdAVHRKY2vqZ0dysQA pjnwzp7bJ40D0pasyoeIyWoUKVy5m04BNL2u91Hwko9PqlNoCJrAWEbqkslygziv r7pfjUdtEhj5eLJl0kSZb4Lazcs58ln7MPJkOUixPBnCeQJs4lYdBVXfjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOKHq9DSMvIC2qLfdUVExmjui6wKMB8GA1UdIwQY MBaAFCfAB+UIK46NgokBhxjP1SeniT5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEt MmM2NGMyOTEzNTNlLzEvNG9lcjBOSXk4Z0xhb3Q5MVJVVEdhTzZMckFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEtMmM2NGMyOTEzNTNl LzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQoZAwQA ufr5AwQAwhq3MA0GCSqGSIb3DQEBCwUAA4IBAQBIfXRNiWImRn9ekH9GELWIXBhF 0STnAE+bZ9fPOur37O6PlzZKLar24chigylzQ9NUFkhOsrV3OW+PUyRzdTCqPM0n DbPO0xOPQd85HvuVOJWL5s1t/lDM7Q9GtixamEaiQR+mAAX1Mx9FPBBG70iWWyeR /7usPQ/huJhNryMh52dnqRBu1iVAwFo+9qmMio/w5NEN5iWyg0d9UIU7gGSPyWqW M9olkkxT+oXuX54GZRpWLBb7FwIsxtotJkdMvNa/Jalpn6IS3SDYGImwa6PSDTIX imBbDY30W+7CVcl9a/+6b4jawLZ5nesFV82r8t1887nONEss/3vHWrNkIc19 -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:27 2026 by rpki-client