This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/4VUm_geSRPJQwIGOeaAoFsu42EQ.roa File: 4VUm_geSRPJQwIGOeaAoFsu42EQ.roa (raw, json) Hash identifier: B3ePVndHpxNK0Mu3H5cJRx+tUJcw9Q+xUJCk6fROmUU= Subject key identifier: E1:55:26:FE:07:92:44:F2:50:C0:81:8E:79:A0:28:16:CB:B8:D8:44 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B7910892924396EDE277ED063A069CBDE Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/4VUm_geSRPJQwIGOeaAoFsu42EQ.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 195.180.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:89:29:24:39:6e:de:27:7e:d0:63:a0:69:cb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e15526fe079244f250c0818e79a02816cbb8d844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:2a:8e:ae:dd:01:31:48:e5:8d:68:b1:89: a7:b9:70:ff:47:52:ca:6c:1e:38:3b:8e:0f:f6:d7: b7:97:0c:48:94:d9:6a:0a:f3:94:d2:37:ca:3f:91: 62:d4:0f:f5:60:74:1c:e2:6e:8f:fb:61:71:e2:fa: c5:47:95:bd:e6:d3:82:84:4a:68:df:50:a2:67:fb: 28:ff:b0:dd:59:46:c1:13:f9:d3:6a:f1:b8:ff:15: 8a:a8:4b:f6:f3:d6:e3:e4:c9:23:3d:9b:0f:44:86: d2:ef:9d:29:fb:bc:f2:65:c8:40:d0:e6:ce:bb:d2: a7:15:85:7b:1b:97:a9:21:42:5a:46:be:ec:be:7a: c6:e3:7f:e0:c3:4c:f5:83:21:8d:c5:d2:54:7a:1a: 76:73:fd:ae:2c:bd:be:74:a7:aa:aa:20:ea:46:b5: 39:cf:ba:23:2b:a8:ba:a2:88:29:2a:64:16:6e:57: 59:bc:28:9f:8e:cc:be:fc:1e:6f:6b:5c:8b:ba:57: fb:6c:18:5d:f3:1a:0b:53:88:75:bd:14:da:ce:5c: 63:9b:66:5f:8e:da:b1:3d:29:4c:ef:f5:6a:41:28: ab:89:dc:c3:d7:a0:00:79:fb:ce:24:72:9b:2e:ed: 68:94:5f:d2:04:48:e9:54:80:7e:31:a8:9c:a6:0b: b5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:26:FE:07:92:44:F2:50:C0:81:8E:79:A0:28:16:CB:B8:D8:44 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/4VUm_geSRPJQwIGOeaAoFsu42EQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.180.137.0/24 Signature Algorithm: sha256WithRSAEncryption b3:d8:ee:d0:79:31:5d:33:f5:b2:9a:0e:3d:08:ea:d3:91:05: 73:1d:1c:6c:7a:94:23:03:31:6a:20:55:d1:e9:6f:59:a7:ba: 41:f3:67:d2:99:21:df:27:86:c6:5b:f1:f6:1e:2d:d6:b0:ba: 19:c2:a9:47:bc:db:9d:a4:2e:b8:44:32:04:e0:ee:76:8f:ba: ec:cd:75:6e:04:d7:68:5d:1b:b3:e9:a0:f9:87:37:d5:1a:67: e7:6b:b9:67:c0:fd:13:dc:99:bb:14:a8:c1:24:c2:47:23:a6: 7d:63:57:bd:72:f6:c8:18:ab:72:0a:2b:b7:72:4a:91:71:df: 1b:c0:24:d9:77:09:83:c7:18:36:23:12:dc:02:89:be:63:bd: 75:a7:19:8b:be:b8:99:ba:72:a6:aa:c0:a8:b2:56:97:0c:8d: aa:24:27:4b:0e:20:6c:dc:ca:f3:83:c1:7c:13:79:99:b3:a6: 6e:07:9c:22:f5:97:85:90:8e:7b:50:7b:6d:39:b5:c0:78:83: 7e:25:bf:18:4c:b3:d4:e8:db:ce:1f:5a:ce:e4:a9:af:d3:03: 6e:ef:8d:a0:a4:dd:93:ff:b5:72:f9:eb:69:be:94:fa:da:58: 07:04:3e:2c:e3:ff:f7:fe:17:57:4a:f0:0d:31:1d:62:87:a0: 9e:8c:52:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIkpJDlu3id+0GOgacveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTU1MjZmZTA3OTI0NGYyNTBjMDgxOGU3OWEwMjgxNmNiYjhkODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/sqjq7dATFI5Y1osYmnuXD/R1LK bB44O44P9te3lwxIlNlqCvOU0jfKP5Fi1A/1YHQc4m6P+2Fx4vrFR5W95tOChEpo 31CiZ/so/7DdWUbBE/nTavG4/xWKqEv289bj5MkjPZsPRIbS750p+7zyZchA0ObO u9KnFYV7G5epIUJaRr7svnrG43/gw0z1gyGNxdJUehp2c/2uLL2+dKeqqiDqRrU5 z7ojK6i6oogpKmQWbldZvCifjsy+/B5va1yLulf7bBhd8xoLU4h1vRTazlxjm2Zf jtqxPSlM7/VqQSiridzD16AAefvOJHKbLu1olF/SBEjpVIB+Maicpgu1cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOFVJv4HkkTyUMCBjnmgKBbLuNhEMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvNFZVbV9nZVNSUEpRd0lHT2VhQW9Gc3U0MkVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7SJMA0G CSqGSIb3DQEBCwUAA4IBAQCz2O7QeTFdM/Wymg49COrTkQVzHRxsepQjAzFqIFXR 6W9Zp7pB82fSmSHfJ4bGW/H2Hi3WsLoZwqlHvNudpC64RDIE4O52j7rszXVuBNdo XRuz6aD5hzfVGmfna7lnwP0T3Jm7FKjBJMJHI6Z9Y1e9cvbIGKtyCiu3ckqRcd8b wCTZdwmDxxg2IxLcAom+Y711pxmLvriZunKmqsCoslaXDI2qJCdLDiBs3Mrzg8F8 E3mZs6ZuB5wi9ZeFkI57UHttObXAeIN+Jb8YTLPU6NvOH1rO5Kmv0wNu742gpN2T /7Vy+etpvpT62lgHBD4s4//3/hdXSvANMR1ih6CejFJ0 -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:10 2026 by rpki-client