This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4WIy0HEkCKCS7TJLv4KBMzz36zI.roa File: 4WIy0HEkCKCS7TJLv4KBMzz36zI.roa (raw, json) Hash identifier: l+cZRQndavxWtNLA0yT8H2HQobivYM/j+UsKI2b2RPw= Subject key identifier: E1:62:32:D0:71:24:08:A0:92:ED:32:4B:BF:82:81:33:3C:F7:EB:32 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D373F5AC71FB7B394B8418025D91 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4WIy0HEkCKCS7TJLv4KBMzz36zI.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45815 IP address blocks: 94.103.163.0/24 maxlen: 24 94.249.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d3:73:f5:ac:71:fb:7b:39:4b:84:18:02:5d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e16232d0712408a092ed324bbf8281333cf7eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:ee:4a:67:f2:4c:84:fe:f7:36:e4:c6:d8: e2:47:66:3e:2d:4d:80:a0:be:86:9b:f7:97:61:d2: 25:09:5e:74:19:69:2b:c6:fa:8f:61:aa:60:8d:db: 7c:14:e0:86:f7:1d:a3:2b:40:4f:00:24:c7:bf:ab: d3:20:f4:65:59:f2:89:b0:b9:35:43:02:2b:d3:0c: 80:4f:ec:10:0e:9a:8f:eb:5d:25:5d:36:7a:32:0f: 7b:30:e0:03:16:cd:a7:16:2f:2e:4b:af:9b:2f:d5: f2:4f:7c:c2:bf:0d:93:e7:25:5a:51:74:84:60:3e: cc:de:28:38:9e:db:73:9a:ee:52:4d:df:37:ab:de: d5:31:fb:30:7d:4a:70:d8:91:a2:b9:3e:60:a1:7a: d8:3f:a5:54:9c:67:1f:f3:91:c4:b6:8a:28:ec:9a: 55:bc:4e:a5:20:0b:6f:46:bc:1d:76:ae:8f:25:35: 25:dc:63:82:1f:bd:d0:0a:49:d4:17:17:95:d4:a1: 9b:b6:aa:c1:f9:ed:3e:bc:71:03:3a:1e:2e:13:c5: 80:ed:3b:42:ce:f0:27:fa:c1:ae:66:31:77:35:2d: 6d:10:c0:5c:4d:b0:f3:90:a4:d9:51:9f:04:c6:13: 85:82:47:b1:44:3d:39:9e:16:7a:85:f4:93:1f:cd: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:62:32:D0:71:24:08:A0:92:ED:32:4B:BF:82:81:33:3C:F7:EB:32 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4WIy0HEkCKCS7TJLv4KBMzz36zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.163.0/24 94.249.213.0/24 Signature Algorithm: sha256WithRSAEncryption 01:45:1b:0e:8c:5a:ee:2c:74:b2:64:e5:a8:1b:8a:60:7e:8b: f0:ea:66:46:c8:86:26:32:d8:d3:fd:22:53:34:06:a8:d5:14: 80:db:26:5a:a4:cd:91:4c:33:a9:f4:b5:e6:2e:46:8d:82:99: c8:75:bd:cc:4b:db:ff:05:c4:41:e7:19:7a:c9:2d:2c:88:93: 48:5e:e6:d6:e1:12:52:43:be:cd:d2:09:83:96:a3:76:39:b4: 2f:8b:9f:49:7c:91:f3:08:46:04:c2:14:58:9e:4a:3d:ce:7b: db:7b:50:ec:31:17:15:65:22:4b:5f:c6:63:34:74:b2:42:13: 34:0a:82:4f:85:3d:3b:b7:6b:9f:13:e1:de:13:b3:98:15:fd: 14:3f:56:04:d6:6a:70:21:97:30:63:71:7d:48:fe:94:69:2b: 85:3a:48:9a:55:7a:d8:22:d9:93:70:f2:73:d6:a7:15:fe:e1: 48:4b:33:d8:23:09:6a:4f:4e:95:43:ee:7f:a0:0d:fd:89:52: da:9b:ed:d0:14:4e:f8:c4:d3:82:ed:d9:b3:85:64:05:1f:14: 41:4c:74:6e:12:2d:19:88:29:b9:78:5f:e4:69:59:f8:2b:a4: 6e:06:a1:09:97:2b:a1:94:2c:93:2b:95:bb:8b:d1:a9:b5:e9: f4:1d:d1:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtNz9axx+3s5S4QYAl2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTYyMzJkMDcxMjQwOGEwOTJlZDMyNGJiZjgyODEzMzNjZjdlYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP3uSmfyTIT+9zbkxtjiR2Y+LU2A oL6Gm/eXYdIlCV50GWkrxvqPYapgjdt8FOCG9x2jK0BPACTHv6vTIPRlWfKJsLk1 QwIr0wyAT+wQDpqP610lXTZ6Mg97MOADFs2nFi8uS6+bL9XyT3zCvw2T5yVaUXSE YD7M3ig4nttzmu5STd83q97VMfswfUpw2JGiuT5goXrYP6VUnGcf85HEtooo7JpV vE6lIAtvRrwddq6PJTUl3GOCH73QCknUFxeV1KGbtqrB+e0+vHEDOh4uE8WA7TtC zvAn+sGuZjF3NS1tEMBcTbDzkKTZUZ8ExhOFgkexRD05nhZ6hfSTH832KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOFiMtBxJAigku0yS7+CgTM89+syMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNFdJeTBIRWtDS0NTN1RKTHY0S0JNenozNnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXmejAwQA XvnVMA0GCSqGSIb3DQEBCwUAA4IBAQABRRsOjFruLHSyZOWoG4pgfovw6mZGyIYm MtjT/SJTNAao1RSA2yZapM2RTDOp9LXmLkaNgpnIdb3MS9v/BcRB5xl6yS0siJNI XubW4RJSQ77N0gmDlqN2ObQvi59JfJHzCEYEwhRYnko9znvbe1DsMRcVZSJLX8Zj NHSyQhM0CoJPhT07t2ufE+HeE7OYFf0UP1YE1mpwIZcwY3F9SP6UaSuFOkiaVXrY ItmTcPJz1qcV/uFISzPYIwlqT06VQ+5/oA39iVLam+3QFE74xNOC7dmzhWQFHxRB THRuEi0ZiCm5eF/kaVn4K6RuBqEJlyuhlCyTK5W7i9Gpten0HdFc -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:23 2026 by rpki-client