This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/4aCUeUm4DYpWSQ7MSed7gWheYek.roa File: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (raw, json) Hash identifier: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ= Subject key identifier: E1:A0:94:79:49:B8:0D:8A:56:49:0E:CC:49:E7:7B:81:68:5E:61:E9 Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Certificate serial: 019B7C7F8E2771647EFD2452315DE538DE7D Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/4aCUeUm4DYpWSQ7MSed7gWheYek.roa Signing time: Fri 02 Jan 2026 02:18:12 +0000 ROA not before: Fri 02 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 176.113.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8e:27:71:64:7e:fd:24:52:31:5d:e5:38:de:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06 Validity Not Before: Jan 2 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1a0947949b80d8a56490ecc49e77b81685e61e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:34:45:2a:e9:5c:1a:62:09:b6:8d:45:79: a3:84:fa:65:34:6d:23:c4:f3:fe:69:73:4f:d5:9f: af:0f:e5:d0:91:66:b0:e7:2b:5a:cc:0e:6e:8b:2d: 45:fc:aa:90:be:52:07:50:6b:e7:b2:c6:05:95:38: de:0c:b7:09:de:2c:7c:d7:0f:42:a0:3a:18:7d:ce: 66:08:6c:dd:69:2b:db:34:bd:bc:d6:38:4a:55:24: 7f:73:c1:27:93:eb:3b:b5:e8:a9:c6:7e:f4:db:cd: b4:a0:39:91:51:34:4b:44:56:21:f8:22:80:b4:39: 4c:f2:c9:97:22:ae:22:b2:d1:9a:e8:7a:08:31:23: bc:b1:20:a7:f1:4e:68:3a:cc:c4:10:f4:ea:bc:8d: 7f:59:4c:94:5d:89:96:fc:33:53:c2:42:cf:a2:60: bf:8d:eb:6f:83:fe:d4:7e:ab:92:5c:ff:cf:99:4b: 35:ae:19:aa:b9:6d:5f:d8:39:b9:a3:9b:fb:c4:0a: 6d:59:a3:eb:77:b1:fe:16:df:9f:6b:06:49:ce:fe: 71:79:fe:10:bd:d0:78:ae:e0:4b:8a:0b:d3:e4:c4: a3:27:42:a5:19:65:6f:3c:da:30:54:07:8b:fc:c6: f4:bd:ef:c5:0e:38:ae:3e:2d:e9:0b:c3:77:cd:4c: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A0:94:79:49:B8:0D:8A:56:49:0E:CC:49:E7:7B:81:68:5E:61:E9 X509v3 Authority Key Identifier: keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/4aCUeUm4DYpWSQ7MSed7gWheYek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.47.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:a2:47:5b:ce:47:e5:32:46:6e:28:35:86:d7:84:f3:05:ec: 80:ce:ed:e9:d5:4d:93:d7:e5:f7:61:c0:cd:aa:2e:03:e5:e2: 73:32:52:02:eb:58:d7:61:7b:cd:ea:9e:c1:4c:4d:7d:59:79: 78:26:0d:44:b8:8d:48:34:fa:dd:57:c3:92:3d:05:c4:6e:cd: 12:24:32:01:23:d2:06:d5:c8:f7:44:8d:1d:05:e6:63:fe:9f: 10:24:ab:fb:38:a8:e6:17:25:24:0b:3e:73:c0:99:ed:e6:38: a7:f6:41:55:fc:76:ca:98:07:0f:bb:fb:fb:65:79:51:d9:62: 5d:40:93:56:9c:df:ff:da:bf:ae:72:8f:3c:d6:1e:da:ae:fd: 77:ea:8b:09:6e:42:b4:4e:8b:9b:46:c2:c6:6b:e2:39:34:16: 58:a5:79:ab:39:b5:dc:f3:f4:e7:ad:57:01:13:86:21:28:ef: 76:80:ff:35:0e:87:e2:6e:c1:08:25:30:19:77:48:9a:56:7d: 77:b7:0e:a4:d4:ed:71:2f:27:8b:59:27:16:bf:ff:7e:26:ee: 59:c9:ec:37:33:40:10:ec:60:1d:d9:e3:83:0b:6a:b9:04:09: ad:cf:b4:5b:72:6c:be:23:86:2b:88:de:00:d7:48:62:69:1d: 05:d5:91:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f44ncWR+/SRSMV3lON59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk MzRjMDYwHhcNMjYwMTAyMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWEwOTQ3OTQ5YjgwZDhhNTY0OTBlY2M0OWU3N2I4MTY4NWU2MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDE0RSrpXBpiCbaNRXmjhPplNG0j xPP+aXNP1Z+vD+XQkWaw5ytazA5uiy1F/KqQvlIHUGvnssYFlTjeDLcJ3ix81w9C oDoYfc5mCGzdaSvbNL281jhKVSR/c8Enk+s7teipxn702820oDmRUTRLRFYh+CKA tDlM8smXIq4istGa6HoIMSO8sSCn8U5oOszEEPTqvI1/WUyUXYmW/DNTwkLPomC/ jetvg/7UfquSXP/PmUs1rhmquW1f2Dm5o5v7xAptWaPrd7H+Ft+fawZJzv5xef4Q vdB4ruBLigvT5MSjJ0KlGWVvPNowVAeL/Mb0ve/FDjiuPi3pC8N3zUxP+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGglHlJuA2KVkkOzEnne4FoXmHpMB8GA1UdIwQY MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt ZGJiNjRhNjgzNWFkLzEvNGFDVWVVbTREWXBXU1E3TVNlZDdnV2hlWWVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHEvMA0G CSqGSIb3DQEBCwUAA4IBAQAMokdbzkflMkZuKDWG14TzBeyAzu3p1U2T1+X3YcDN qi4D5eJzMlIC61jXYXvN6p7BTE19WXl4Jg1EuI1INPrdV8OSPQXEbs0SJDIBI9IG 1cj3RI0dBeZj/p8QJKv7OKjmFyUkCz5zwJnt5jin9kFV/HbKmAcPu/v7ZXlR2WJd QJNWnN//2r+uco881h7arv136osJbkK0ToubRsLGa+I5NBZYpXmrObXc8/TnrVcB E4YhKO92gP81DofibsEIJTAZd0iaVn13tw6k1O1xLyeLWScWv/9+Ju5Zyew3M0AQ 7GAd2eODC2q5BAmtz7Rbcmy+I4YriN4A10hiaR0F1ZGE -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:37 2026 by rpki-client