This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4u1mmytACViWLByX4lMEeUtsHdI.roa File: 4u1mmytACViWLByX4lMEeUtsHdI.roa (raw, json) Hash identifier: LJ/tr81kjeixdsGU+Vz+1hr+srUZVCrya7X5M0hyPFQ= Subject key identifier: E2:ED:66:9B:2B:40:09:58:96:2C:1C:97:E2:53:04:79:4B:6C:1D:D2 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3481832B06C33CF5D2FF6B1B77449 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4u1mmytACViWLByX4lMEeUtsHdI.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214209 IP address blocks: 94.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:48:18:32:b0:6c:33:cf:5d:2f:f6:b1:b7:74:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ed669b2b400958962c1c97e25304794b6c1dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:a3:87:56:fc:42:9d:43:93:f4:45:47:8e: 00:ec:77:8e:28:4c:59:74:a4:22:ab:1f:69:e4:19: e7:f7:36:3a:30:49:73:15:d8:12:1c:f1:77:5f:62: 4f:2b:c0:d7:9c:9f:8d:fa:14:59:d8:fa:03:14:24: 9b:62:2a:e4:04:cb:62:8f:65:26:41:db:5d:64:fe: 2b:17:ce:4a:c7:7d:88:2b:08:69:3e:db:e5:70:9e: 8a:a0:86:bb:3e:4f:5a:c5:2e:73:f5:9f:11:c3:5a: 7e:22:f0:00:2e:30:0f:22:29:c5:1b:77:85:82:5c: 7d:b1:7b:11:c6:84:d1:dd:d5:51:90:28:1b:f1:11: 71:02:98:e2:2e:f9:de:5a:11:c0:02:2c:2d:dd:27: 69:e2:11:16:e6:fe:9e:95:0d:8d:f2:e9:e4:b6:8e: e4:b6:08:3b:42:4c:28:57:55:57:5a:84:d8:1a:cc: 5b:7a:12:45:4a:a2:ae:3f:7b:20:35:35:c6:43:8f: 42:30:f3:2f:ad:62:e3:5a:1f:8e:03:34:63:e1:28: 8a:3e:20:7b:29:a7:ae:f4:f7:f3:d3:b0:59:46:0a: c5:3d:c6:b1:9a:7a:69:6e:83:13:be:96:3e:0f:fb: 29:45:fa:67:83:af:30:f2:e9:4b:55:45:c9:b3:f0: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:66:9B:2B:40:09:58:96:2C:1C:97:E2:53:04:79:4B:6C:1D:D2 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4u1mmytACViWLByX4lMEeUtsHdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.152.0/24 Signature Algorithm: sha256WithRSAEncryption 39:72:81:6f:0d:9a:87:e4:52:a0:7d:bc:ec:1b:c4:97:1d:a2: 44:5f:eb:ad:18:c2:8d:90:5a:de:db:d4:12:58:00:38:ef:06: 2f:8b:da:2b:c6:03:f9:a0:58:87:f3:05:ba:9f:14:c5:ea:24: 3f:66:1a:29:85:7b:89:49:57:57:74:85:88:07:49:a3:d6:ba: db:69:f0:57:ec:d5:0d:94:6e:49:e8:d0:a2:f6:d9:ee:23:d3: e1:75:d5:85:ca:cd:cf:20:d0:f2:5b:82:7d:c2:c5:8c:6a:c4: 05:13:c3:89:b0:53:4e:69:c9:3b:75:7c:f1:8b:27:84:91:b8: d8:82:a6:e8:79:98:11:30:4f:2f:21:8e:e9:b9:7b:f6:c8:93: c9:61:48:4f:16:d7:32:da:0c:c0:86:26:c5:b5:06:b3:89:4b: e1:6d:2f:b5:e4:3f:aa:93:d5:1b:fb:35:db:20:55:bf:39:20: 1a:b6:08:19:51:fb:cd:85:00:27:c5:b4:72:94:81:18:c0:d8: fd:ae:37:1c:38:fd:4f:bb:b0:6e:13:a1:82:f8:e7:52:1a:40: 45:5a:21:22:db:d6:9d:02:01:7f:9d:12:1a:b9:a3:62:60:ce: 8f:a8:d1:a3:5a:1a:43:ad:a1:f3:e1:64:1c:98:af:e0:60:4d: 28:3b:4b:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0gYMrBsM89dL/axt3RJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmVkNjY5YjJiNDAwOTU4OTYyYzFjOTdlMjUzMDQ3OTRiNmMxZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohajh1b8Qp1Dk/RFR44A7HeOKExZ dKQiqx9p5Bnn9zY6MElzFdgSHPF3X2JPK8DXnJ+N+hRZ2PoDFCSbYirkBMtij2Um QdtdZP4rF85Kx32IKwhpPtvlcJ6KoIa7Pk9axS5z9Z8Rw1p+IvAALjAPIinFG3eF glx9sXsRxoTR3dVRkCgb8RFxApjiLvneWhHAAiwt3Sdp4hEW5v6elQ2N8unkto7k tgg7QkwoV1VXWoTYGsxbehJFSqKuP3sgNTXGQ49CMPMvrWLjWh+OAzRj4SiKPiB7 Kaeu9Pfz07BZRgrFPcaxmnppboMTvpY+D/spRfpng68w8ulLVUXJs/DY4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLtZpsrQAlYliwcl+JTBHlLbB3SMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvNHUxbW15dEFDVmlXTEJ5WDRsTUVlVXRzSGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpyYMA0G CSqGSIb3DQEBCwUAA4IBAQA5coFvDZqH5FKgfbzsG8SXHaJEX+utGMKNkFre29QS WAA47wYvi9orxgP5oFiH8wW6nxTF6iQ/ZhophXuJSVdXdIWIB0mj1rrbafBX7NUN lG5J6NCi9tnuI9PhddWFys3PINDyW4J9wsWMasQFE8OJsFNOack7dXzxiyeEkbjY gqboeZgRME8vIY7puXv2yJPJYUhPFtcy2gzAhibFtQaziUvhbS+15D+qk9Ub+zXb IFW/OSAatggZUfvNhQAnxbRylIEYwNj9rjccOP1Pu7BuE6GC+OdSGkBFWiEi29ad AgF/nRIauaNiYM6PqNGjWhpDraHz4WQcmK/gYE0oO0sb -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:31 2026 by rpki-client