This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4c6RmWpdsCX4AC558bB8N8HExI4.roa File: 4c6RmWpdsCX4AC558bB8N8HExI4.roa (raw, json) Hash identifier: p+iMI9llmTnAFFdg9pxi9LGdcwXNNNKKImzvwYKwNMI= Subject key identifier: E1:CE:91:99:6A:5D:B0:25:F8:00:2E:79:F1:B0:7C:37:C1:C4:C4:8E Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85406963417702BE259DCC15F4934A Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4c6RmWpdsCX4AC558bB8N8HExI4.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 195.133.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:40:69:63:41:77:02:be:25:9d:cc:15:f4:93:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ce91996a5db025f8002e79f1b07c37c1c4c48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:49:0c:84:bf:11:52:c0:77:34:47:0c:37: 28:dc:c0:78:c6:ae:b7:33:5d:52:50:30:3b:f8:cd: c8:cd:8d:76:1e:dc:98:e7:38:30:ce:e6:8f:55:ab: a6:f2:f8:55:8b:36:93:8e:9c:93:71:fd:54:fb:22: 39:79:95:93:31:39:1d:3d:76:7b:92:c1:75:f0:a0: 38:2c:d4:94:36:ac:cb:35:71:d0:44:10:49:65:d8: 45:ce:3e:cd:ed:6d:0f:df:e1:65:8e:93:a5:17:7b: 92:5f:98:d5:f5:a3:9e:70:78:3f:19:ef:c7:e4:ad: 61:aa:71:d5:dd:19:9b:be:da:ac:07:0b:eb:e9:9f: 83:dd:92:20:3c:f7:97:e6:de:1d:76:58:2e:c5:ba: 1c:b6:bd:be:85:be:bb:7e:8d:28:ea:7d:22:d8:78: 03:44:17:cd:da:6b:52:bd:1f:ef:9e:a5:58:4a:70: 1a:58:04:8a:45:d8:eb:f2:50:a4:75:1f:3f:dc:83: 66:e2:0a:4d:6c:8b:2c:f2:e1:65:c4:29:63:6c:92: d7:73:be:d8:de:11:d7:19:c5:b3:e6:85:2c:6f:50: 4f:ab:8d:f3:ba:b2:68:23:3c:2b:5d:c8:44:7f:7d: bd:bd:82:88:28:1d:5e:6d:ad:6c:25:10:89:a6:f1: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:91:99:6A:5D:B0:25:F8:00:2E:79:F1:B0:7C:37:C1:C4:C4:8E X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4c6RmWpdsCX4AC558bB8N8HExI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.133.7.0/24 Signature Algorithm: sha256WithRSAEncryption 60:1b:7c:da:98:5f:77:19:f4:07:e1:16:5f:dd:e6:2e:a4:87: 92:54:35:dd:f5:68:51:c2:a8:ce:ff:7a:c3:e9:9f:fc:21:d9: a4:d9:e8:40:db:2b:a2:64:c5:69:78:9c:07:e4:e8:b5:bc:06: 8d:83:97:fa:5b:e8:6c:ad:08:35:92:21:99:19:6d:2b:0b:ca: 0f:c2:4a:24:ce:91:6d:c2:9a:ad:62:8b:37:a3:bc:2b:02:35: d9:64:b3:a7:80:a5:8f:cd:6f:a7:0c:eb:0a:f6:cf:64:73:61: 46:6c:28:96:10:39:86:9f:af:fa:32:59:fb:62:85:d7:2e:2e: c1:5f:b1:06:38:a4:a5:96:54:7a:0b:d4:32:d3:b1:3b:83:76: 3e:fc:43:8c:ca:92:55:80:18:86:b6:15:c1:44:3a:ff:59:4a: 04:90:d7:8a:8c:56:3e:d1:40:71:b7:31:10:30:fc:af:9a:f1: f3:45:19:3f:b0:d2:fd:08:82:aa:a9:b4:6d:d2:71:4c:bc:b5: ee:e9:46:b3:b2:20:50:cd:e6:c3:c4:6d:e3:1d:4f:5b:97:04: d1:c9:be:62:f4:b1:d9:d6:ad:cf:1e:eb:77:7f:63:20:e0:49: 4b:06:4d:46:d0:74:04:32:3a:04:12:97:87:a1:40:5d:8f:97: 4f:84:b7:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUBpY0F3Ar4lncwV9JNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNlOTE5OTZhNWRiMDI1ZjgwMDJlNzlmMWIwN2MzN2MxYzRjNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LNJDIS/EVLAdzRHDDco3MB4xq63 M11SUDA7+M3IzY12HtyY5zgwzuaPVaum8vhVizaTjpyTcf1U+yI5eZWTMTkdPXZ7 ksF18KA4LNSUNqzLNXHQRBBJZdhFzj7N7W0P3+FljpOlF3uSX5jV9aOecHg/Ge/H 5K1hqnHV3RmbvtqsBwvr6Z+D3ZIgPPeX5t4ddlguxboctr2+hb67fo0o6n0i2HgD RBfN2mtSvR/vnqVYSnAaWASKRdjr8lCkdR8/3INm4gpNbIss8uFlxCljbJLXc77Y 3hHXGcWz5oUsb1BPq43zurJoIzwrXchEf329vYKIKB1eba1sJRCJpvGb3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHOkZlqXbAl+AAuefGwfDfBxMSOMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvNGM2Um1XcGRzQ1g0QUM1NThiQjhOOEhFeEk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UHMA0G CSqGSIb3DQEBCwUAA4IBAQBgG3zamF93GfQH4RZf3eYupIeSVDXd9WhRwqjO/3rD 6Z/8Idmk2ehA2yuiZMVpeJwH5Oi1vAaNg5f6W+hsrQg1kiGZGW0rC8oPwkokzpFt wpqtYos3o7wrAjXZZLOngKWPzW+nDOsK9s9kc2FGbCiWEDmGn6/6Mln7YoXXLi7B X7EGOKSlllR6C9Qy07E7g3Y+/EOMypJVgBiGthXBRDr/WUoEkNeKjFY+0UBxtzEQ MPyvmvHzRRk/sNL9CIKqqbRt0nFMvLXu6UazsiBQzebDxG3jHU9blwTRyb5i9LHZ 1q3PHut3f2Mg4ElLBk1G0HQEMjoEEpeHoUBdj5dPhLc/ -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:08 2026 by rpki-client