This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa File: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (raw, json) Hash identifier: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE= Subject key identifier: E2:AD:72:F1:39:62:FC:84:5D:21:D3:F9:AA:48:69:67:00:3F:97:BC Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51 Certificate serial: 019B78A2F85205A7F826CC906EF47861755E Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201709 IP address blocks: 45.153.112.0/22 maxlen: 24 2a12:c380::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f8:52:05:a7:f8:26:cc:90:6e:f4:78:61:75:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ad72f13962fc845d21d3f9aa486967003f97bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:48:91:06:55:8a:10:b6:7c:52:7b:43:86:14: c6:b2:6d:24:2c:17:dd:15:47:3f:f8:d8:50:b6:dc: b8:45:bb:af:77:71:f1:b4:5a:c7:cd:e1:7b:3d:7a: 88:aa:5d:82:17:5a:1a:6f:40:79:f8:3c:d0:6c:b7: 82:69:f3:a6:42:17:08:a9:6a:56:83:11:43:ce:d6: 78:3a:af:1f:33:43:cf:b9:7c:dc:60:c9:23:ec:11: 2b:ac:7d:e3:7f:3c:a2:12:6e:63:af:90:2c:12:b9: e9:5e:6e:62:46:30:03:69:62:fd:5c:c2:ac:fb:cb: b3:35:4c:ac:64:8f:91:ba:3b:79:61:d9:1a:58:a7: 05:04:ee:be:20:e8:c5:01:3c:ba:c9:db:be:eb:7c: a2:cb:15:94:bc:ec:43:fd:d4:43:d3:7b:42:ae:39: e4:0a:4f:a6:0c:c4:16:ed:5a:4d:3e:b6:5e:e9:48: 0e:fc:8c:82:b9:30:34:f5:4b:de:bc:e1:c2:7b:4c: e0:18:1c:28:e2:19:4e:75:a1:b5:e2:2e:3b:dc:73: 3a:38:1d:91:7b:7b:3c:ea:ac:97:d8:4d:37:7f:1b: 1c:d2:82:20:c9:93:de:88:b2:9a:9a:15:8d:8a:88: 2f:dd:f3:91:69:2c:fb:5e:3f:fd:da:6b:b2:82:8f: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:72:F1:39:62:FC:84:5D:21:D3:F9:AA:48:69:67:00:3F:97:BC X509v3 Authority Key Identifier: keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.112.0/22 IPv6: 2a12:c380::/29 Signature Algorithm: sha256WithRSAEncryption 78:79:27:82:46:77:38:ad:cd:55:1d:8d:db:a9:a9:45:7f:7f: c6:e3:df:3b:b1:18:a8:ea:c7:7d:0f:5c:a7:1c:13:c9:72:6c: f8:95:fc:6e:58:b0:cd:ce:2d:69:63:60:8d:1f:32:a3:0a:2a: fa:46:90:b6:8b:9e:3a:72:93:0f:3c:96:5f:9d:2a:f8:26:69: 22:7d:30:26:f9:16:f0:ef:18:d4:05:ab:fe:22:54:87:6c:9e: 62:3e:cc:91:73:41:a3:83:b6:5b:96:15:b9:29:0e:f3:02:ed: db:b9:f0:7d:7f:50:9e:f7:e4:7b:ee:b3:13:6c:85:7a:6e:17: 97:2c:13:4c:04:25:5e:ac:01:b9:56:0e:91:76:f6:1e:bf:3b: 46:93:95:98:be:91:6c:17:d3:02:da:92:22:5e:48:fc:6f:cd: f6:23:cb:c2:a8:bf:b5:f3:4c:60:71:bf:11:38:dd:5e:0d:12: 7f:73:14:cd:a4:25:51:c4:85:a5:62:02:99:f3:8d:61:07:db: f3:a4:45:2e:80:69:55:af:07:28:60:eb:68:e3:b5:b3:ff:ae: 63:49:ea:c3:87:78:b4:02:df:2d:77:25:3b:ac:8b:6a:54:41: 99:ff:c0:f2:84:84:ef:dc:53:ff:43:50:ab:79:42:02:ab:e7: 2b:93:e0:00 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ovhSBaf4JsyQbvR4YXVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2I3N2E3MDc1ZjkyN2NjNDAxOGQ1NmU2Y2Q3NWM1OThk YzNhNTEwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmFkNzJmMTM5NjJmYzg0NWQyMWQzZjlhYTQ4Njk2NzAwM2Y5N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EiRBlWKELZ8UntDhhTGsm0kLBfd FUc/+NhQtty4Rbuvd3HxtFrHzeF7PXqIql2CF1oab0B5+DzQbLeCafOmQhcIqWpW gxFDztZ4Oq8fM0PPuXzcYMkj7BErrH3jfzyiEm5jr5AsErnpXm5iRjADaWL9XMKs +8uzNUysZI+Rujt5YdkaWKcFBO6+IOjFATy6ydu+63yiyxWUvOxD/dRD03tCrjnk Ck+mDMQW7VpNPrZe6UgO/IyCuTA09UvevOHCe0zgGBwo4hlOdaG14i473HM6OB2R e3s86qyX2E03fxsc0oIgyZPeiLKamhWNiogv3fORaSz7Xj/92muygo8jswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOKtcvE5YvyEXSHT+apIaWcAP5e8MB8GA1UdIwQY MBaAFPPLd6cHX5J8xAGNVubNdcWY3DpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQt NzA3NzExYjgxZWY3LzEvNHExeThUbGlfSVJkSWRQNXFraHBad0FfbDd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQtNzA3NzExYjgxZWY3 LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZlwMA0E AgACMAcDBQMqEsOAMA0GCSqGSIb3DQEBCwUAA4IBAQB4eSeCRnc4rc1VHY3bqalF f3/G4987sRio6sd9D1ynHBPJcmz4lfxuWLDNzi1pY2CNHzKjCir6RpC2i546cpMP PJZfnSr4JmkifTAm+Rbw7xjUBav+IlSHbJ5iPsyRc0Gjg7ZblhW5KQ7zAu3bufB9 f1Ce9+R77rMTbIV6bheXLBNMBCVerAG5Vg6RdvYevztGk5WYvpFsF9MC2pIiXkj8 b832I8vCqL+180xgcb8RON1eDRJ/cxTNpCVRxIWlYgKZ841hB9vzpEUugGlVrwco YOto47Wz/65jSerDh3i0At8tdyU7rItqVEGZ/8DyhITv3FP/Q1CreUICq+crk+AA -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:49 2026 by rpki-client