This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/4wk9G6gIn4aYwuhM1IHla1F3g_o.roa File: 4wk9G6gIn4aYwuhM1IHla1F3g_o.roa (raw, json) Hash identifier: zRDXNJfCkrvxLeiW37gj5jm7Vy6uGsNGYEbIgmJIKNY= Subject key identifier: E3:09:3D:1B:A8:08:9F:86:98:C2:E8:4C:D4:81:E5:6B:51:77:83:FA Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Certificate serial: 019B7D5BD8FFD58D90FC4136FDA24A7791FA Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/4wk9G6gIn4aYwuhM1IHla1F3g_o.roa Signing time: Fri 02 Jan 2026 06:18:49 +0000 ROA not before: Fri 02 Jan 2026 06:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208783 IP address blocks: 46.227.165.0/24 maxlen: 24 91.200.178.0/24 maxlen: 24 91.213.251.0/24 maxlen: 24 194.48.199.0/24 maxlen: 24 217.113.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d8:ff:d5:8d:90:fc:41:36:fd:a2:4a:77:91:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147 Validity Not Before: Jan 2 06:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3093d1ba8089f8698c2e84cd481e56b517783fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:b5:22:dc:a8:6c:6c:c7:f7:c6:19:b7:02: 0f:41:ee:39:70:d6:df:52:06:46:eb:3e:a7:b7:c5: ba:67:0c:8d:ee:c1:0b:a7:cd:66:25:02:bc:94:54: 92:bf:76:59:a4:7c:55:bf:8e:0b:e7:4d:db:77:0c: 64:c2:87:11:1c:a9:53:b2:b7:1b:07:26:c6:3b:90: 30:1d:e1:16:97:ea:75:fd:99:16:1d:8c:e4:91:ad: 87:05:d1:c4:39:d4:c7:8c:86:a3:ab:ef:c2:d7:19: 81:4a:19:37:55:3b:42:16:b5:49:27:45:f9:ad:22: c6:e5:6d:d6:a6:2f:d9:c6:10:e5:90:e6:e2:8d:eb: ad:9f:eb:38:39:b6:90:e4:1c:5e:92:3a:41:c4:84: ea:37:d0:41:1d:70:4b:04:8f:22:f6:15:a5:44:a4: a4:2e:f5:aa:82:c7:17:f9:35:a0:3c:91:90:d7:b8: 9c:d1:e3:7d:1a:dc:07:ba:1a:86:fb:41:3d:1c:9d: 58:9d:19:32:f7:49:43:23:3d:84:5c:c4:14:5a:52: 1f:f5:81:5f:5c:69:b9:c7:4a:f3:b2:ff:d2:4a:8a: 26:7b:cd:ac:ba:39:03:eb:be:82:26:9c:88:5b:c8: 21:5b:40:9e:4f:dc:63:ae:db:90:25:93:9c:cc:e2: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:09:3D:1B:A8:08:9F:86:98:C2:E8:4C:D4:81:E5:6B:51:77:83:FA X509v3 Authority Key Identifier: keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/4wk9G6gIn4aYwuhM1IHla1F3g_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.165.0/24 91.200.178.0/24 91.213.251.0/24 194.48.199.0/24 217.113.48.0/24 Signature Algorithm: sha256WithRSAEncryption 52:61:31:02:a0:4d:e3:9a:35:c3:7a:88:a1:cd:fe:f0:46:70: b2:dc:ae:31:d1:43:8c:5b:39:55:84:58:5e:2b:b4:71:90:d0: 55:17:70:27:61:2a:60:94:ec:8b:cd:46:3e:cc:01:c9:22:e6: 74:cc:45:87:1c:d4:21:39:9e:51:53:e2:0d:83:de:5d:c9:85: c1:be:0d:99:d3:db:9f:5d:2c:ff:4a:51:86:6c:08:47:bf:80: df:0c:97:fb:dc:4f:59:38:12:ad:96:ba:d1:2f:a5:73:9e:af: 95:1b:93:7f:43:6c:fa:23:09:07:e1:5e:dc:de:5d:9e:fd:1c: 3b:b6:e1:2d:4b:fc:99:70:0c:3b:e9:6e:09:5f:79:55:41:25: 1b:a7:b3:95:d3:6d:0d:29:4a:04:93:f8:0d:e3:02:cb:9a:fe: 15:f5:bd:bd:cc:67:a6:87:ed:75:18:17:c3:1f:af:62:51:ce: ec:ae:03:3b:40:aa:e0:68:9f:ff:ce:4b:7f:f0:9d:d4:1b:ce: 6d:e9:f7:62:8d:45:37:4f:39:fa:99:76:4d:7b:a2:dd:61:5c: 6d:80:e4:29:62:dd:3b:1b:d3:a9:a1:ed:f3:a5:e6:50:47:b4: 79:ef:d7:80:eb:cd:9c:47:08:6c:4a:b3:92:2e:41:49:86:37: 21:27:6f:7c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9W9j/1Y2Q/EE2/aJKd5H6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjZmYjY4MWZiODc1NGU0ZDk2NjliMmRjNjgwNmFiMjg0 Y2UxNDcwHhcNMjYwMTAyMDYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzA5M2QxYmE4MDg5Zjg2OThjMmU4NGNkNDgxZTU2YjUxNzc4M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGS1ItyobGzH98YZtwIPQe45cNbf UgZG6z6nt8W6ZwyN7sELp81mJQK8lFSSv3ZZpHxVv44L503bdwxkwocRHKlTsrcb BybGO5AwHeEWl+p1/ZkWHYzkka2HBdHEOdTHjIajq+/C1xmBShk3VTtCFrVJJ0X5 rSLG5W3Wpi/ZxhDlkObijeutn+s4ObaQ5BxekjpBxITqN9BBHXBLBI8i9hWlRKSk LvWqgscX+TWgPJGQ17ic0eN9GtwHuhqG+0E9HJ1YnRky90lDIz2EXMQUWlIf9YFf XGm5x0rzsv/SSoome82sujkD676CJpyIW8ghW0CeT9xjrtuQJZOczOKoPwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOMJPRuoCJ+GmMLoTNSB5WtRd4P6MB8GA1UdIwQY MBaAFJUm+2gfuHVOTZZpstxoBqsoTOFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMt NDc3NTVjNjNjYzAzLzEvNHdrOUc2Z0luNGFZd3VoTTFJSGxhMUYzZ19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jNWNjNmItYmZkZi00MDJmLWJlNmMtNDc3NTVjNjNjYzAz LzEvbFNiN2FCLTRkVTVObG1teTNHZ0dxeWhNNFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALuOlAwQA W8iyAwQAW9X7AwQAwjDHAwQA2XEwMA0GCSqGSIb3DQEBCwUAA4IBAQBSYTECoE3j mjXDeoihzf7wRnCy3K4x0UOMWzlVhFheK7RxkNBVF3AnYSpglOyLzUY+zAHJIuZ0 zEWHHNQhOZ5RU+INg95dyYXBvg2Z09ufXSz/SlGGbAhHv4DfDJf73E9ZOBKtlrrR L6Vznq+VG5N/Q2z6IwkH4V7c3l2e/Rw7tuEtS/yZcAw76W4JX3lVQSUbp7OV020N KUoEk/gN4wLLmv4V9b29zGemh+11GBfDH69iUc7srgM7QKrgaJ//zkt/8J3UG85t 6fdijUU3Tzn6mXZNe6LdYVxtgOQpYt07G9Opoe3zpeZQR7R579eA682cRwhsSrOS LkFJhjchJ298 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:00 2026 by rpki-client