This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa File: 4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa (raw, json) Hash identifier: l5wy/qIfUulCmH/VGEZK2Kox3s/Htye0nx0GKzhDkHw= Subject key identifier: E2:58:18:D1:6F:CE:19:EA:08:3A:BC:C9:99:B5:E7:11:DA:39:FA:97 Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Certificate serial: 019B7B35578D54E91D4A620108E8AA16A861 Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207024 IP address blocks: 195.14.104.0/24 maxlen: 24 2a12:b1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:57:8d:54:e9:1d:4a:62:01:08:e8:aa:16:a8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25818d16fce19ea083abcc999b5e711da39fa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:5c:a9:57:22:87:49:27:f9:4b:43:75:a3: ea:19:e6:88:42:0e:d0:4e:df:bc:ce:81:62:32:68: dc:a3:51:d9:96:64:79:09:86:72:19:80:62:ef:81: 3e:57:31:40:64:8a:d8:85:9a:e7:6f:1f:7f:9b:1d: 6d:ad:ea:e4:a2:50:cf:b2:db:f6:6e:b1:97:41:ac: d7:35:46:f1:d8:56:24:db:be:6f:66:ec:20:b6:29: b3:ba:c2:ff:94:7a:07:9c:18:b4:03:d3:34:3e:a7: c7:0b:47:91:f3:72:7b:1d:60:8f:1e:3c:45:51:f0: 42:af:f0:5b:28:31:2c:78:0b:57:c9:b1:28:5e:55: 9f:11:51:fe:d9:76:5f:15:59:60:da:56:1c:cc:06: 32:33:23:63:ec:54:8f:7a:d0:84:27:08:f2:e0:24: 18:cc:29:99:4b:c6:9a:a4:ff:3b:e0:ee:f2:e3:e7: 15:d2:31:dd:6d:fa:4b:2c:46:5c:53:d8:dd:47:0f: 2d:73:72:5a:d1:3e:16:5f:cc:14:9f:50:71:ee:d9: 2f:93:a4:70:21:ec:43:ba:80:bd:5d:b1:d2:bd:d3: 64:68:1d:ea:70:41:2c:f3:a9:e9:d4:ee:78:07:57: f1:7a:30:2a:57:90:9b:aa:47:67:41:89:da:86:37: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:18:D1:6F:CE:19:EA:08:3A:BC:C9:99:B5:E7:11:DA:39:FA:97 X509v3 Authority Key Identifier: keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/4lgY0W_OGeoIOrzJmbXnEdo5-pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.14.104.0/24 IPv6: 2a12:b1c0::/29 Signature Algorithm: sha256WithRSAEncryption 43:36:df:2e:4e:19:bc:75:ee:9c:4f:52:7d:49:8f:d7:0e:6a: 18:1c:54:e8:1a:f0:ce:39:98:46:d0:ac:5f:1e:d4:ba:bd:bc: 72:ab:0e:1f:9b:4c:c3:ce:99:f9:8e:16:3e:2a:95:2b:45:90: 26:2d:d9:42:e3:b1:a2:03:ee:1d:12:02:fb:0c:59:1f:b6:5c: 17:93:37:c3:bb:0d:9b:3d:04:11:d5:5f:0a:53:bb:bc:e6:97: 54:25:ac:58:70:c5:60:9a:76:18:2b:4d:ad:83:fc:27:a1:66: d1:4e:09:37:97:0c:6f:3c:fe:4e:07:21:5c:3f:53:57:81:18: 51:4f:61:ce:cc:80:c0:eb:b0:e1:2b:df:11:c8:2e:7a:ba:d2: 17:86:09:6c:24:d9:bb:5b:55:1e:9d:cd:d1:8c:1d:ba:83:2c: 5b:57:93:1a:cd:ce:cf:4f:f6:a3:e7:28:23:60:dd:09:e0:22: 30:89:fd:dd:24:0b:db:78:9c:34:eb:53:7d:ca:8b:a7:a7:11: 56:bf:ed:0a:4e:5a:38:36:6f:4c:11:25:31:c5:b6:d2:7c:a6: d8:43:78:4c:6a:78:fa:e1:f5:ca:f5:09:2a:93:d2:78:29:7a: 3d:18:eb:25:d8:56:f9:57:28:18:81:ef:67:01:58:3b:9f:74: d5:29:7c:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NVeNVOkdSmIBCOiqFqhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz ZTM3YTMwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjU4MThkMTZmY2UxOWVhMDgzYWJjYzk5OWI1ZTcxMWRhMzlmYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsBcqVcih0kn+UtDdaPqGeaIQg7Q Tt+8zoFiMmjco1HZlmR5CYZyGYBi74E+VzFAZIrYhZrnbx9/mx1trerkolDPstv2 brGXQazXNUbx2FYk275vZuwgtimzusL/lHoHnBi0A9M0PqfHC0eR83J7HWCPHjxF UfBCr/BbKDEseAtXybEoXlWfEVH+2XZfFVlg2lYczAYyMyNj7FSPetCEJwjy4CQY zCmZS8aapP874O7y4+cV0jHdbfpLLEZcU9jdRw8tc3Ja0T4WX8wUn1Bx7tkvk6Rw IexDuoC9XbHSvdNkaB3qcEEs86np1O54B1fxejAqV5CbqkdnQYnahjdHhwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOJYGNFvzhnqCDq8yZm15xHaOfqXMB8GA1UdIwQY MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt Y2E3OGVmNTgyNmNhLzEvNGxnWTBXX09HZW9JT3J6Sm1iWG5FZG81LXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAww5oMA0E AgACMAcDBQMqErHAMA0GCSqGSIb3DQEBCwUAA4IBAQBDNt8uThm8de6cT1J9SY/X DmoYHFToGvDOOZhG0KxfHtS6vbxyqw4fm0zDzpn5jhY+KpUrRZAmLdlC47GiA+4d EgL7DFkftlwXkzfDuw2bPQQR1V8KU7u85pdUJaxYcMVgmnYYK02tg/wnoWbRTgk3 lwxvPP5OByFcP1NXgRhRT2HOzIDA67DhK98RyC56utIXhglsJNm7W1Uenc3RjB26 gyxbV5Mazc7PT/aj5ygjYN0J4CIwif3dJAvbeJw061N9younpxFWv+0KTlo4Nm9M ESUxxbbSfKbYQ3hManj64fXK9Qkqk9J4KXo9GOsl2Fb5VygYge9nAVg7n3TVKXwN -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:55 2026 by rpki-client