This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4--nc4BQUGrN2sH0zYmsNUmWE4A.roa File: 4--nc4BQUGrN2sH0zYmsNUmWE4A.roa (raw, json) Hash identifier: aqQdKhDMdFK+oMcQss+L6HIfHPrf9M66KqkFohfBztY= Subject key identifier: E3:EF:A7:73:80:50:50:6A:CD:DA:C1:F4:CD:89:AC:35:49:96:13:80 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14473A39E6BECF8ED1ED5677B635F1 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4--nc4BQUGrN2sH0zYmsNUmWE4A.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42745 IP address blocks: 193.233.15.0/24 maxlen: 24 193.233.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:47:3a:39:e6:be:cf:8e:d1:ed:56:77:b6:35:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3efa7738050506acddac1f4cd89ac3549961380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6a:cb:94:b9:df:f5:f8:cd:c6:47:3d:dd:66: 01:69:43:16:4b:24:60:33:58:59:e2:e5:9b:df:46: 52:46:a8:61:09:56:d1:b7:dd:5f:6c:cf:ea:e9:5b: d9:1f:dd:4f:3e:52:df:e8:23:cb:b2:11:47:49:e6: 12:d4:2f:17:75:6d:41:b4:6a:b6:be:6f:86:44:31: d6:27:17:b6:e5:04:dc:51:1b:dd:d0:4c:d0:ce:2e: 18:e7:eb:3f:7a:2b:fd:44:20:a4:2b:ee:0d:04:ae: e5:fd:70:a9:31:8a:06:44:d6:bf:3d:ab:bc:0b:2e: 4e:95:d5:1a:ec:ec:1e:a8:ac:fe:41:65:7c:9a:83: 0f:81:f6:78:1e:51:27:33:69:9b:41:7b:de:95:0e: 5b:8c:cf:23:08:d9:10:9d:4a:57:7c:7f:80:63:44: 2f:be:3b:25:7d:03:03:67:41:69:34:fd:35:bb:5f: 28:e8:65:c5:5b:b4:f3:0b:d4:58:6e:cb:b8:30:d1: e3:27:c1:65:32:85:82:b4:5a:4f:a8:c1:6f:99:54: bf:98:b6:ff:a6:3f:26:5f:33:12:e7:a1:23:d5:a3: 73:9f:81:ab:13:3c:f5:32:a8:51:9f:85:e8:07:62: 76:b0:5c:ec:8f:ad:c8:60:06:65:8d:b5:b3:af:f8: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EF:A7:73:80:50:50:6A:CD:DA:C1:F4:CD:89:AC:35:49:96:13:80 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4--nc4BQUGrN2sH0zYmsNUmWE4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.15.0/24 193.233.63.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ef:a3:27:34:b3:bf:ad:f8:c0:4b:fa:fe:13:cc:0a:35:ce: a3:f7:af:a3:a1:68:9d:21:b5:1a:2d:bb:9f:89:5a:4e:97:88: 7a:30:d8:42:bf:59:c2:fd:a3:1c:3a:5c:f7:54:4e:65:2b:91: a3:1b:3b:72:b3:ea:67:99:e6:d8:33:33:f5:17:41:00:03:9f: 33:b0:89:87:aa:60:df:9f:a5:11:da:7c:a1:19:b0:36:10:b6: d2:4c:51:80:ee:ad:4c:ac:e9:8f:d8:ef:e4:96:75:97:74:f7: 21:51:f0:27:95:c7:62:a9:bf:2b:30:fa:75:29:1e:de:40:71: e3:b7:f6:39:5b:6d:0d:cb:28:3e:bb:a6:20:ac:7e:0c:e6:95: 2a:67:5e:77:94:d9:c4:29:cd:d9:5f:ce:4e:43:3a:6e:39:dd: b2:26:a8:1b:67:4e:5a:cf:ed:6b:19:7d:36:88:fd:05:ce:06: 20:f5:ed:6d:f0:2f:55:ad:e4:ee:93:f0:db:17:2b:71:ea:d7: a0:3d:d4:d6:7d:17:1d:0b:11:2f:f9:74:dc:c1:a1:6e:08:6b: c8:3f:f2:0b:63:02:30:ff:7a:fc:fe:f5:40:5a:0f:9c:12:65: fc:ef:5c:7e:b8:f7:0b:5f:fd:4b:d6:b5:da:5e:6d:74:6b:3f: ee:58:25:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FEc6Oea+z47R7VZ3tjXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2VmYTc3MzgwNTA1MDZhY2RkYWMxZjRjZDg5YWMzNTQ5OTYxMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimrLlLnf9fjNxkc93WYBaUMWSyRg M1hZ4uWb30ZSRqhhCVbRt91fbM/q6VvZH91PPlLf6CPLshFHSeYS1C8XdW1BtGq2 vm+GRDHWJxe25QTcURvd0EzQzi4Y5+s/eiv9RCCkK+4NBK7l/XCpMYoGRNa/Pau8 Cy5OldUa7OweqKz+QWV8moMPgfZ4HlEnM2mbQXvelQ5bjM8jCNkQnUpXfH+AY0Qv vjslfQMDZ0FpNP01u18o6GXFW7TzC9RYbsu4MNHjJ8FlMoWCtFpPqMFvmVS/mLb/ pj8mXzMS56Ej1aNzn4GrEzz1MqhRn4XoB2J2sFzsj63IYAZljbWzr/grcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOPvp3OAUFBqzdrB9M2JrDVJlhOAMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvNC0tbmM0QlFVR3JOMnNIMHpZbXNOVW1XRTRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwekPAwQA wek/MA0GCSqGSIb3DQEBCwUAA4IBAQBh76MnNLO/rfjAS/r+E8wKNc6j96+joWid IbUaLbufiVpOl4h6MNhCv1nC/aMcOlz3VE5lK5GjGztys+pnmebYMzP1F0EAA58z sImHqmDfn6UR2nyhGbA2ELbSTFGA7q1MrOmP2O/klnWXdPchUfAnlcdiqb8rMPp1 KR7eQHHjt/Y5W20Nyyg+u6YgrH4M5pUqZ153lNnEKc3ZX85OQzpuOd2yJqgbZ05a z+1rGX02iP0FzgYg9e1t8C9VreTuk/DbFytx6tegPdTWfRcdCxEv+XTcwaFuCGvI P/ILYwIw/3r8/vVAWg+cEmX871x+uPcLX/1L1rXaXm10az/uWCWt -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:49 2026 by rpki-client