This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4-2PHy4BbqBG4XIZeUFJyecMDB0.roa File: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (raw, json) Hash identifier: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q= Subject key identifier: E3:ED:8F:1F:2E:01:6E:A0:46:E1:72:19:79:41:49:C9:E7:0C:0C:1D Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Certificate serial: 019B7B3589D98768EA5E577EFAC28549F204 Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4-2PHy4BbqBG4XIZeUFJyecMDB0.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 83.136.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:89:d9:87:68:ea:5e:57:7e:fa:c2:85:49:f2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ed8f1f2e016ea046e17219794149c9e70c0c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:60:e9:33:b5:7d:d9:87:1a:24:39:4b:98: 26:81:12:c8:6a:9f:77:75:9a:07:bf:3a:37:9e:a7: 2e:1e:67:57:6e:f1:e2:c8:a4:14:7d:67:7e:b7:a7: e5:f5:a0:79:cf:f4:d4:42:e7:1d:22:8d:7b:bc:7d: 1f:4c:2c:c2:79:5f:63:1d:0a:c8:ba:f5:e7:9d:61: 6f:12:11:99:39:85:11:1f:d1:bd:cf:e8:30:ef:10: 5e:26:a6:24:92:99:73:31:89:a0:5b:40:63:4c:02: 1d:c8:7c:bc:8f:0f:2c:41:68:76:69:cd:57:88:8b: c6:dc:5f:2d:76:bd:89:d4:dd:2d:e6:3a:eb:4b:7d: 2f:d7:17:f1:a4:69:5f:10:db:ba:54:4e:68:c1:92: 0c:de:42:9c:45:19:9b:d2:00:16:5a:46:70:d8:5e: 64:b2:cf:24:19:d0:f1:42:09:ba:1a:1f:e8:09:a0: 4b:7c:e7:46:d0:6c:19:9b:f6:1d:e3:9a:88:1d:5c: dc:41:f2:65:b4:5c:f7:03:7d:43:4b:84:79:4a:b3: cf:40:01:a7:86:d6:05:35:cc:d0:f8:04:55:c9:a6: 93:7f:de:47:da:1a:ad:c8:a1:2a:0f:49:57:34:63: 31:b6:71:b3:c9:c1:c8:5e:e7:47:8c:0a:10:02:13: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:ED:8F:1F:2E:01:6E:A0:46:E1:72:19:79:41:49:C9:E7:0C:0C:1D X509v3 Authority Key Identifier: keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/4-2PHy4BbqBG4XIZeUFJyecMDB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.213.0/24 Signature Algorithm: sha256WithRSAEncryption a1:47:16:44:1e:74:84:44:0b:d0:bf:ae:73:13:15:51:3f:77: 43:c1:9b:76:59:ef:f6:86:82:7c:fc:f8:7d:ee:56:62:a5:96: 79:54:ef:18:a1:20:75:96:22:6c:54:62:72:8b:c5:35:61:f3: 8c:e7:71:7e:b8:39:b4:e5:c6:44:11:9f:f3:60:19:cf:97:89: eb:79:e7:87:4d:58:23:75:8e:09:5f:1e:cf:0e:7e:7c:fb:79: 5e:f9:3d:94:98:0e:9b:be:77:95:6a:25:92:d7:6c:03:69:1b: 06:36:32:e6:4a:e9:ce:a8:6f:c1:ae:d6:13:ca:95:63:77:e6: 39:02:97:9b:43:00:42:6d:65:6b:b8:29:e0:ad:ce:72:90:2b: 15:c0:a2:89:d1:09:ca:a5:5e:9b:ee:e9:19:f2:bf:39:14:44: 6c:7e:1b:ba:cb:7c:42:ed:b6:46:0d:fd:73:64:71:72:97:15: a8:95:dc:64:50:04:4d:ec:e8:72:4c:5b:0a:d8:38:d4:7f:bb: a6:70:06:ef:bf:51:50:69:61:55:b4:25:52:45:9f:51:11:2c: 6c:84:42:38:d3:e3:a1:67:7a:08:63:d0:4b:81:81:95:bb:0a: 2a:ff:a5:36:3d:27:02:9e:41:77:ba:b0:d0:46:81:22:aa:81: c3:73:de:59 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NYnZh2jqXld++sKFSfIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj OTkzZTcwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2VkOGYxZjJlMDE2ZWEwNDZlMTcyMTk3OTQxNDljOWU3MGMwYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK1g6TO1fdmHGiQ5S5gmgRLIap93 dZoHvzo3nqcuHmdXbvHiyKQUfWd+t6fl9aB5z/TUQucdIo17vH0fTCzCeV9jHQrI uvXnnWFvEhGZOYURH9G9z+gw7xBeJqYkkplzMYmgW0BjTAIdyHy8jw8sQWh2ac1X iIvG3F8tdr2J1N0t5jrrS30v1xfxpGlfENu6VE5owZIM3kKcRRmb0gAWWkZw2F5k ss8kGdDxQgm6Gh/oCaBLfOdG0GwZm/Yd45qIHVzcQfJltFz3A31DS4R5SrPPQAGn htYFNczQ+ARVyaaTf95H2hqtyKEqD0lXNGMxtnGzycHIXudHjAoQAhNdbwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOPtjx8uAW6gRuFyGXlBScnnDAwdMB8GA1UdIwQY MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0 LTA0NzBiNGJiMzBkYi8xLzQtMlBIeTRCYnFCRzRYSVplVUZKeWVjTURCMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTiNUw DQYJKoZIhvcNAQELBQADggEBAKFHFkQedIREC9C/rnMTFVE/d0PBm3ZZ7/aGgnz8 +H3uVmKllnlU7xihIHWWImxUYnKLxTVh84zncX64ObTlxkQRn/NgGc+Xiet554dN WCN1jglfHs8Ofnz7eV75PZSYDpu+d5VqJZLXbANpGwY2MuZK6c6ob8Gu1hPKlWN3 5jkCl5tDAEJtZWu4KeCtznKQKxXAoonRCcqlXpvu6RnyvzkURGx+G7rLfELttkYN /XNkcXKXFaiV3GRQBE3s6HJMWwrYONR/u6ZwBu+/UVBpYVW0JVJFn1ERLGyEQjjT 46Fneghj0EuBgZW7Cir/pTY9JwKeQXe6sNBGgSKqgcNz3lk= -----END CERTIFICATE-----Generated at Mon Jan 19 10:36:57 2026 by rpki-client