This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/4tLtZV00F7203d-0-VBLm-eP82U.roa File: 4tLtZV00F7203d-0-VBLm-eP82U.roa (raw, json) Hash identifier: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM= Subject key identifier: E2:D2:ED:65:5D:34:17:BD:B4:DD:DF:B4:F9:50:4B:9B:E7:8F:F3:65 Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Certificate serial: 019B77593B911E589FEEF55C723E012B2FCC Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/4tLtZV00F7203d-0-VBLm-eP82U.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.212.127.0/24 maxlen: 24 91.238.107.0/24 maxlen: 24 193.110.146.0/24 maxlen: 24 193.138.90.0/24 maxlen: 24 194.165.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3b:91:1e:58:9f:ee:f5:5c:72:3e:01:2b:2f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d2ed655d3417bdb4dddfb4f9504b9be78ff365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:93:fa:36:56:30:c0:b2:3d:25:46:54:bb: 06:c5:8a:97:d5:7d:5b:11:f4:f5:2e:8a:5f:f1:72: 6f:37:6c:26:d8:01:a9:39:58:6d:83:c0:7f:a4:3b: f8:43:74:bd:d6:d9:88:05:77:79:38:65:38:1d:b3: 72:37:d2:de:c3:be:a6:05:7e:0d:9e:67:95:b7:2a: 6d:f5:21:7f:2b:fe:c0:7e:da:cf:fd:88:90:d9:ee: a0:de:48:65:5a:64:74:7f:ec:24:a1:07:7d:94:52: dc:f1:77:aa:5b:cd:32:5e:8e:4b:7c:31:72:1d:a8: 20:75:5c:38:23:0d:18:ce:18:fd:0d:86:63:0d:f0: 4d:92:03:58:4d:64:8c:f8:1c:94:e5:04:2e:ff:9a: c9:1a:68:ee:2e:f5:7b:57:fc:03:fc:ac:0b:b5:4f: 6f:ac:3a:62:13:e4:bb:6b:c9:42:ac:ab:dd:c8:38: c9:11:08:3d:cb:18:53:e0:f5:39:bf:f7:21:c1:fc: 6e:3a:f7:8d:57:ca:8d:12:f2:91:9d:1d:a3:05:bc: 79:84:0e:2e:94:0d:47:ae:53:cc:7c:80:ee:70:75: aa:fe:3e:d6:64:c9:bd:2b:75:7e:c8:7e:06:0c:7d: 52:31:73:99:9e:b7:1c:c5:92:c3:24:71:ec:f9:49: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D2:ED:65:5D:34:17:BD:B4:DD:DF:B4:F9:50:4B:9B:E7:8F:F3:65 X509v3 Authority Key Identifier: keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/4tLtZV00F7203d-0-VBLm-eP82U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.127.0/24 91.238.107.0/24 193.110.146.0/24 193.138.90.0/24 194.165.43.0/24 Signature Algorithm: sha256WithRSAEncryption a1:7b:3f:b0:24:4d:fd:56:66:e4:a9:52:ff:70:40:8b:f0:5a: 54:73:c0:91:f1:e4:b9:ad:2d:3b:50:89:e9:da:72:5b:04:52: 9d:46:2a:79:af:9a:c3:44:69:a7:0a:ed:a6:7b:b0:40:95:da: 74:0a:9d:00:c3:18:0f:68:4f:d6:9c:a3:8d:4e:6d:15:ab:9f: 23:44:58:d9:8e:74:a3:ee:1a:b9:05:17:bd:bc:fa:18:c0:81: 87:cd:2a:e3:40:ef:7a:10:c2:e8:70:95:ac:29:9a:7d:85:0d: 0d:e2:e1:3e:2a:2f:47:1f:48:7c:ac:c7:d6:77:2f:ee:1c:b7: c1:0f:e3:5b:61:32:bb:51:c3:37:e1:33:56:b1:36:78:8a:51: 9f:8e:69:8d:e5:e9:5e:07:a7:64:d8:fd:a8:a0:e7:ad:7c:2f: 8d:70:f2:31:3f:58:09:95:a9:de:c0:3f:f3:09:86:d6:ee:b0: 48:75:5b:e9:e7:71:af:69:15:64:45:e6:cd:47:52:62:f0:14: 3d:49:05:4b:9c:79:26:28:22:99:35:80:14:ee:c2:29:51:6f: 43:8c:a3:c6:87:48:31:83:f1:49:5c:7f:25:c6:27:e4:c2:72: 3d:c0:dd:63:5a:2e:c6:cf:56:1f:1c:79:32:4d:ca:14:a2:ab: 42:73:1e:a5 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WTuRHlif7vVccj4BKy/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh N2U5ZDQwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQyZWQ2NTVkMzQxN2JkYjRkZGRmYjRmOTUwNGI5YmU3OGZmMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pST+jZWMMCyPSVGVLsGxYqX1X1b EfT1Lopf8XJvN2wm2AGpOVhtg8B/pDv4Q3S91tmIBXd5OGU4HbNyN9Lew76mBX4N nmeVtypt9SF/K/7AftrP/YiQ2e6g3khlWmR0f+wkoQd9lFLc8XeqW80yXo5LfDFy HaggdVw4Iw0Yzhj9DYZjDfBNkgNYTWSM+ByU5QQu/5rJGmjuLvV7V/wD/KwLtU9v rDpiE+S7a8lCrKvdyDjJEQg9yxhT4PU5v/chwfxuOveNV8qNEvKRnR2jBbx5hA4u lA1HrlPMfIDucHWq/j7WZMm9K3V+yH4GDH1SMXOZnrccxZLDJHHs+UlfiwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOLS7WVdNBe9tN3ftPlQS5vnj/NlMB8GA1UdIwQY MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt ZjdkMDI3NTYwMDU4LzEvNHRMdFpWMDBGNzIwM2QtMC1WQkxtLWVQODJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4 LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW9R/AwQA W+5rAwQAwW6SAwQAwYpaAwQAwqUrMA0GCSqGSIb3DQEBCwUAA4IBAQChez+wJE39 VmbkqVL/cECL8FpUc8CR8eS5rS07UInp2nJbBFKdRip5r5rDRGmnCu2me7BAldp0 Cp0AwxgPaE/WnKONTm0Vq58jRFjZjnSj7hq5BRe9vPoYwIGHzSrjQO96EMLocJWs KZp9hQ0N4uE+Ki9HH0h8rMfWdy/uHLfBD+NbYTK7UcM34TNWsTZ4ilGfjmmN5ele B6dk2P2ooOetfC+NcPIxP1gJlanewD/zCYbW7rBIdVvp53GvaRVkRebNR1Ji8BQ9 SQVLnHkmKCKZNYAU7sIpUW9DjKPGh0gxg/FJXH8lxifkwnI9wN1jWi7Gz1YfHHky TcoUoqtCcx6l -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:24 2026 by rpki-client