This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa File: E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa (raw, json) Hash identifier: rwJ5587Bc7BJP4v6xl5VcHy6DfSAotRzBjDqDy0qIfU= Subject key identifier: 13:8F:CB:09:80:32:A0:DC:39:67:A3:75:AA:B6:4B:E2:0A:91:21:46 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844BACDEFF604BF519310F7C564CB8 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201732 IP address blocks: 2a0b:3c40:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4b:ac:de:ff:60:4b:f5:19:31:0f:7c:56:4c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=138fcb098032a0dc3967a375aab64be20a912146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:63:98:22:56:3b:fb:ff:ca:e3:26:c6:ad: d7:c3:fa:fe:a6:5a:0b:96:37:c1:fb:c6:63:07:1f: 1f:5b:da:d4:8d:7a:5a:b6:4e:e2:66:1f:04:18:17: dd:eb:ea:47:83:64:3c:2a:e3:24:76:e3:89:83:1e: 54:1b:d3:17:be:52:c3:ef:1f:9d:80:7c:d5:68:d4: 47:e8:95:6e:03:23:f4:23:e3:0f:f2:92:d4:c5:d8: c0:85:70:31:09:66:ff:64:96:9f:bd:af:24:a4:ff: e0:83:02:81:33:b4:89:ce:ca:c1:14:75:26:56:25: 61:12:d5:a8:33:15:3a:a7:38:b2:ed:dd:f0:95:01: 65:f4:6e:d8:63:a6:5c:98:00:4f:3a:9d:cb:94:44: a7:46:a1:e7:5e:e2:5e:b8:64:f5:98:f3:90:e6:c2: 1f:b8:a6:90:30:d3:28:39:5d:60:0e:1d:74:00:65: a9:54:45:0a:18:1d:1d:66:b0:d9:46:ce:09:72:7b: 02:68:33:03:75:db:71:2b:03:06:9f:51:c6:11:7d: 71:5a:60:09:d3:0e:a6:5e:75:13:55:e5:97:69:df: d4:b2:ce:db:d3:5e:1a:5a:68:7e:5d:33:98:cb:aa: 3d:7b:91:48:ed:96:89:9f:d4:e6:90:0e:44:fe:1e: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8F:CB:09:80:32:A0:DC:39:67:A3:75:AA:B6:4B:E2:0A:91:21:46 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/E4_LCYAyoNw5Z6N1qrZL4gqRIUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:3c40:18::/48 Signature Algorithm: sha256WithRSAEncryption 69:f0:65:e0:4c:b5:23:c0:ed:2b:d6:9e:73:f2:5e:3c:dd:a3: 48:b7:e0:d0:0c:b9:31:94:cf:04:16:bc:5a:9d:b5:f3:a9:50: f4:d6:74:23:4f:1d:06:c1:15:ec:0c:8a:60:20:86:95:14:5e: c0:3e:3e:f6:a1:07:e9:22:97:0d:af:bd:e7:a7:b4:8e:7b:04: 42:6d:61:31:a8:21:19:e8:57:8d:d0:45:24:79:bf:bd:0a:39: 14:e7:e9:92:98:1e:da:8d:8e:62:47:d7:98:bc:26:5a:52:d0: 97:5e:5e:88:d7:e7:50:e6:08:6e:70:8a:44:44:07:e0:8c:49: 50:65:0c:58:5d:35:17:58:ed:5a:13:db:50:11:b4:a8:5e:27: 5a:cb:cc:4c:f8:31:1e:e7:5b:f6:ba:f4:2b:67:73:b4:1e:f5: 91:c4:7d:b7:2f:49:a3:7c:eb:d7:02:be:0a:64:b4:98:38:d7: 16:44:2c:60:f8:ac:83:01:eb:4b:29:84:f0:16:c0:85:15:5b: c7:a1:02:e3:bd:75:b1:5e:91:39:c2:1c:00:69:ac:38:99:d6: f8:e7:3c:02:1c:85:f6:9c:14:63:43:5c:9b:83:a8:8c:67:94: 3e:55:f9:4c:83:ee:49:6d:63:0e:82:8c:e8:55:15:d0:a1:02: 8f:99:2e:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hEus3v9gS/UZMQ98Vky4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzhmY2IwOTgwMzJhMGRjMzk2N2EzNzVhYWI2NGJlMjBhOTEyMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcdjmCJWO/v/yuMmxq3Xw/r+ploL ljfB+8ZjBx8fW9rUjXpatk7iZh8EGBfd6+pHg2Q8KuMkduOJgx5UG9MXvlLD7x+d gHzVaNRH6JVuAyP0I+MP8pLUxdjAhXAxCWb/ZJafva8kpP/ggwKBM7SJzsrBFHUm ViVhEtWoMxU6pziy7d3wlQFl9G7YY6ZcmABPOp3LlESnRqHnXuJeuGT1mPOQ5sIf uKaQMNMoOV1gDh10AGWpVEUKGB0dZrDZRs4JcnsCaDMDddtxKwMGn1HGEX1xWmAJ 0w6mXnUTVeWXad/Uss7b014aWmh+XTOYy6o9e5FI7ZaJn9TmkA5E/h6nlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBOPywmAMqDcOWejdaq2S+IKkSFGMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvRTRfTENZQXlvTnc1WjZOMXFyWkw0Z3FSSVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgs8QAAY MA0GCSqGSIb3DQEBCwUAA4IBAQBp8GXgTLUjwO0r1p5z8l483aNIt+DQDLkxlM8E FrxanbXzqVD01nQjTx0GwRXsDIpgIIaVFF7APj72oQfpIpcNr73np7SOewRCbWEx qCEZ6FeN0EUkeb+9CjkU5+mSmB7ajY5iR9eYvCZaUtCXXl6I1+dQ5ghucIpERAfg jElQZQxYXTUXWO1aE9tQEbSoXiday8xM+DEe51v2uvQrZ3O0HvWRxH23L0mjfOvX Ar4KZLSYONcWRCxg+KyDAetLKYTwFsCFFVvHoQLjvXWxXpE5whwAaaw4mdb45zwC HIX2nBRjQ1ybg6iMZ5Q+VflMg+5JbWMOgozoVRXQoQKPmS7l -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:08 2026 by rpki-client