This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4PAgQ8VPe7uN7TbM-BQplmemrIo.roa File: 4PAgQ8VPe7uN7TbM-BQplmemrIo.roa (raw, json) Hash identifier: PlhTVqQh/1t2VAFyOnqc4DhQu8tZay6JwwmHEJWdxC4= Subject key identifier: E0:F0:20:43:C5:4F:7B:BB:8D:ED:36:CC:F8:14:29:96:67:A6:AC:8A Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F145F4500345334A5456EA7169452E4 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4PAgQ8VPe7uN7TbM-BQplmemrIo.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207416 IP address blocks: 147.45.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5f:45:00:34:53:34:a5:45:6e:a7:16:94:52:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f02043c54f7bbb8ded36ccf814299667a6ac8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:bc:52:d5:83:29:2e:42:ba:1f:df:d3:b8: e7:a1:00:10:c5:7e:57:69:3c:8d:ae:7b:38:70:3b: aa:00:78:c8:6e:01:57:96:6e:24:be:3c:f1:a9:00: 61:a9:64:b2:68:f6:7e:59:f9:a4:7c:0e:dd:88:48: ed:8f:5a:4b:2b:6a:2f:fe:6d:3c:1a:aa:64:93:b7: de:e5:40:32:2e:24:6f:83:15:43:30:65:e8:1e:f1: b8:e2:37:30:9b:eb:8b:f8:e8:d7:4e:5d:dc:73:1d: bd:24:d6:38:c3:d7:be:e7:0d:85:80:9a:84:8d:19: 23:ae:c6:35:d4:cb:8f:81:03:bb:8b:4b:b4:11:13: 8f:a0:b8:b7:39:55:8e:16:d6:a0:92:9e:3d:59:1b: 47:8f:4d:15:52:38:91:22:cc:4e:34:df:ad:20:24: d6:da:05:e6:77:bf:98:9c:e7:1e:9d:64:e4:23:92: 5d:31:e2:4c:07:e4:27:28:10:c6:e2:62:c1:dd:97: ca:cc:e8:8e:f4:ec:9e:52:cc:27:90:b3:f5:4e:43: cc:7c:c2:f8:8e:4d:37:27:65:f1:9b:6f:e7:a2:62: 8b:5a:bb:12:65:e4:d5:24:4d:c4:54:e4:5a:65:68: 68:aa:a6:8f:81:d4:3f:df:10:35:0f:c6:ae:6f:68: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F0:20:43:C5:4F:7B:BB:8D:ED:36:CC:F8:14:29:96:67:A6:AC:8A X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4PAgQ8VPe7uN7TbM-BQplmemrIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.210.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8e:a2:10:60:27:e9:0f:6d:14:d7:5c:9c:f9:a9:f2:4d:6a: 58:90:b4:ce:92:81:a0:20:bc:32:af:02:7b:c0:16:58:cb:98: 5f:f8:b0:11:b9:2a:b8:a3:f7:71:83:13:6c:aa:e7:1b:9b:f1: b1:48:55:5a:9f:d7:6b:8e:b8:64:1d:f8:69:55:76:9c:f3:ad: ec:27:98:49:1a:fb:20:31:d6:73:48:a7:2c:ec:0f:64:f0:ef: 1e:56:c6:37:34:b6:f4:92:1a:fa:74:0f:bf:f6:4d:1a:b3:9a: 1c:12:a1:23:21:6b:7e:9d:a7:c1:5d:c5:53:50:de:08:85:c1: 1b:7a:b0:e8:f5:e3:2d:a3:da:3b:d0:35:14:2c:e8:67:ca:22: 09:be:5f:67:d7:ae:51:25:ca:8b:3f:f3:96:a8:e4:71:35:e9: 3a:fb:2a:e4:06:89:cc:ad:dd:47:c2:51:71:41:fe:15:60:e6: eb:85:82:f2:8e:f0:3d:bf:96:5e:5c:c7:bc:a4:6e:a6:20:5d: b0:f9:54:3b:68:59:27:30:1c:88:14:76:24:10:23:71:55:e8: 95:d9:a0:71:63:9a:61:01:5d:03:8d:1f:33:c9:85:96:f5:4f: c3:bd:14:a5:78:74:b0:81:23:45:46:50:c1:b9:d1:86:11:aa: df:19:b3:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FF9FADRTNKVFbqcWlFLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGYwMjA0M2M1NGY3YmJiOGRlZDM2Y2NmODE0Mjk5NjY3YTZhYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHS8UtWDKS5Cuh/f07jnoQAQxX5X aTyNrns4cDuqAHjIbgFXlm4kvjzxqQBhqWSyaPZ+WfmkfA7diEjtj1pLK2ov/m08 Gqpkk7fe5UAyLiRvgxVDMGXoHvG44jcwm+uL+OjXTl3ccx29JNY4w9e+5w2FgJqE jRkjrsY11MuPgQO7i0u0EROPoLi3OVWOFtagkp49WRtHj00VUjiRIsxONN+tICTW 2gXmd7+YnOcenWTkI5JdMeJMB+QnKBDG4mLB3ZfKzOiO9OyeUswnkLP1TkPMfML4 jk03J2Xxm2/nomKLWrsSZeTVJE3EVORaZWhoqqaPgdQ/3xA1D8aub2iUyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODwIEPFT3u7je02zPgUKZZnpqyKMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvNFBBZ1E4VlBlN3VON1RiTS1CUXBsbWVtcklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky3SMA0G CSqGSIb3DQEBCwUAA4IBAQARjqIQYCfpD20U11yc+anyTWpYkLTOkoGgILwyrwJ7 wBZYy5hf+LARuSq4o/dxgxNsqucbm/GxSFVan9drjrhkHfhpVXac863sJ5hJGvsg MdZzSKcs7A9k8O8eVsY3NLb0khr6dA+/9k0as5ocEqEjIWt+nafBXcVTUN4IhcEb erDo9eMto9o70DUULOhnyiIJvl9n165RJcqLP/OWqORxNek6+yrkBonMrd1HwlFx Qf4VYObrhYLyjvA9v5ZeXMe8pG6mIF2w+VQ7aFknMByIFHYkECNxVeiV2aBxY5ph AV0DjR8zyYWW9U/DvRSleHSwgSNFRlDBudGGEarfGbOS -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:44 2026 by rpki-client