This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/4IlfLEz6dwzaqqqVlNjwuzwxN2I.roa File: 4IlfLEz6dwzaqqqVlNjwuzwxN2I.roa (raw, json) Hash identifier: U15PiIvVGRDdgusGxs9xqEZkfwuc1OoD5qhPjpSs+gs= Subject key identifier: E0:89:5F:2C:4C:FA:77:0C:DA:AA:AA:95:94:D8:F0:BB:3C:31:37:62 Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07 Certificate serial: 019B9525C49BF3F76B8533AE3F7CF110DE1B Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/4IlfLEz6dwzaqqqVlNjwuzwxN2I.roa Signing time: Tue 06 Jan 2026 21:10:38 +0000 ROA not before: Tue 06 Jan 2026 21:10:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.12.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:25:c4:9b:f3:f7:6b:85:33:ae:3f:7c:f1:10:de:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07 Validity Not Before: Jan 6 21:10:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0895f2c4cfa770cdaaaaa9594d8f0bb3c313762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:72:98:10:7b:3b:23:5f:41:32:01:94:4c: ba:9b:aa:a8:de:7a:4d:9a:1e:e9:31:71:85:ee:a3: b7:3b:bd:e3:44:6b:c7:90:18:5f:c7:7a:a7:3f:8a: 07:e9:18:d1:f8:cb:b5:38:72:01:fe:e8:ed:f6:db: b9:4a:93:86:ed:a7:72:d6:c8:1f:e5:88:4b:ad:d0: 6c:83:6e:80:3b:0d:e4:6e:b8:c2:e4:41:af:6e:da: 62:3c:57:c2:96:ce:a7:aa:9b:9e:5d:fb:63:09:a9: e4:c1:39:22:cc:0c:05:a6:4e:ec:94:cf:f5:61:fd: 1d:0d:95:26:8f:00:d9:ce:cf:56:1b:da:b6:9c:87: 2f:35:de:6e:0f:19:96:f6:26:a0:e9:85:72:f0:fc: aa:00:76:95:66:79:48:03:10:f4:a6:99:8f:19:11: 94:8c:fe:03:ca:db:aa:41:80:cd:d3:d7:7a:aa:49: bb:e3:fb:33:84:4f:e6:5e:03:f3:c8:e4:6c:cf:d5: 0d:08:d8:30:94:c4:5b:4f:e4:63:d5:27:65:7e:f6: 06:30:23:45:5a:15:56:40:3c:2c:e2:62:6c:cb:50: ec:2b:18:2f:22:85:fb:89:e1:fd:6f:be:0c:d2:5c: 42:0c:04:24:3b:cd:56:fd:e1:09:de:38:84:40:f8: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:5F:2C:4C:FA:77:0C:DA:AA:AA:95:94:D8:F0:BB:3C:31:37:62 X509v3 Authority Key Identifier: keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/4IlfLEz6dwzaqqqVlNjwuzwxN2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.198.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:6b:f0:e5:98:56:fe:a7:3f:44:db:18:c7:df:bd:7f:d8:c7: 9f:ca:99:64:30:98:4a:84:57:48:b4:4e:08:0c:0d:c9:bc:d6: 7d:eb:42:b9:22:c3:c7:43:a0:3f:04:27:67:c0:b4:69:1f:b0: a3:29:d3:1f:19:68:47:d2:08:ac:d3:e9:3a:7f:d5:82:74:b3: 3e:19:77:bf:05:c3:76:5d:0b:9a:fa:88:5d:7f:09:47:53:2d: c2:76:d1:cb:82:bc:fa:0e:53:cb:8f:bc:6d:01:2a:10:de:eb: d7:1b:13:eb:4a:a6:8f:08:db:38:29:19:28:7b:77:e1:d4:34: 30:50:04:ee:1c:2f:6e:be:b0:5d:04:c9:41:3c:a9:84:df:a1: 63:0e:0b:e1:e4:44:3d:37:71:2f:f8:ad:41:70:86:94:35:e9: 2c:53:8d:84:e7:d8:d4:f8:c4:11:ef:57:b8:7f:db:52:1d:a5: 05:5c:bc:b1:be:30:be:de:44:6e:11:85:e4:8a:df:42:a4:af: a4:fd:b1:a9:6f:d3:ba:9b:4e:17:23:ca:49:46:99:42:5b:25: 96:39:62:be:3a:96:15:38:3b:36:15:5d:27:ed:f6:61:1f:99: ff:fc:dd:1b:69:e6:e4:52:56:7b:0d:38:37:96:7b:0e:ca:eb: 2c:19:36:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuVJcSb8/drhTOuP3zxEN4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmUxNDc0NDgyODk2MzRiOTg2ODhlZTVhNWFmNDQ3ZDQy Y2JiMDcwHhcNMjYwMTA2MjExMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDg5NWYyYzRjZmE3NzBjZGFhYWFhOTU5NGQ4ZjBiYjNjMzEzNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKxymBB7OyNfQTIBlEy6m6qo3npN mh7pMXGF7qO3O73jRGvHkBhfx3qnP4oH6RjR+Mu1OHIB/ujt9tu5SpOG7ady1sgf 5YhLrdBsg26AOw3kbrjC5EGvbtpiPFfCls6nqpueXftjCankwTkizAwFpk7slM/1 Yf0dDZUmjwDZzs9WG9q2nIcvNd5uDxmW9iag6YVy8PyqAHaVZnlIAxD0ppmPGRGU jP4DytuqQYDN09d6qkm74/szhE/mXgPzyORsz9UNCNgwlMRbT+Rj1SdlfvYGMCNF WhVWQDws4mJsy1DsKxgvIoX7ieH9b74M0lxCDAQkO81W/eEJ3jiEQPiO2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCJXyxM+ncM2qqqlZTY8Ls8MTdiMB8GA1UdIwQY MBaAFJpuFHRIKJY0uYaI7lpa9EfULLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82NjFkYWQtMDBjOS00ZjE3LTk0ZDgt MmJiZDAxZjllNTAwLzEvNElsZkxFejZkd3phcXFxVmxOand1end4TjJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82NjFkYWQtMDBjOS00ZjE3LTk0ZDgtMmJiZDAxZjllNTAw LzEvbW00VWRFZ29salM1aG9qdVdscjBSOVFzdXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQzGMA0G CSqGSIb3DQEBCwUAA4IBAQCba/DlmFb+pz9E2xjH371/2MefyplkMJhKhFdItE4I DA3JvNZ960K5IsPHQ6A/BCdnwLRpH7CjKdMfGWhH0gis0+k6f9WCdLM+GXe/BcN2 XQua+ohdfwlHUy3CdtHLgrz6DlPLj7xtASoQ3uvXGxPrSqaPCNs4KRkoe3fh1DQw UATuHC9uvrBdBMlBPKmE36FjDgvh5EQ9N3Ev+K1BcIaUNeksU42E59jU+MQR71e4 f9tSHaUFXLyxvjC+3kRuEYXkit9CpK+k/bGpb9O6m04XI8pJRplCWyWWOWK+OpYV ODs2FV0n7fZhH5n//N0baebkUlZ7DTg3lnsOyussGTZ9 -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:20 2026 by rpki-client