This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/_4nu0JdctABQfG6P-XC3LzNhZBE.roa File: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (raw, json) Hash identifier: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178= Subject key identifier: FF:89:EE:D0:97:5C:B4:00:50:7C:6E:8F:F9:70:B7:2F:33:61:64:11 Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Certificate serial: 019B7F81FE0B3880137EB2D1A2A91A9C9422 Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/_4nu0JdctABQfG6P-XC3LzNhZBE.roa Signing time: Fri 02 Jan 2026 16:19:44 +0000 ROA not before: Fri 02 Jan 2026 16:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.140.230.0/24 maxlen: 24 2001:67c:144::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:fe:0b:38:80:13:7e:b2:d1:a2:a9:1a:9c:94:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Validity Not Before: Jan 2 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff89eed0975cb400507c6e8ff970b72f33616411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:12:54:6c:f9:f3:9e:db:d0:ac:15:57:c9: 2f:80:06:90:0a:c9:04:5d:7b:63:b3:db:08:86:9b: bc:8f:b0:61:af:6e:68:ba:c4:64:43:23:82:46:ad: 8b:a1:38:a2:50:ec:f0:e8:19:c7:1f:48:ef:01:ba: 8e:fe:be:34:b6:d0:0b:e1:08:01:54:fa:b2:ad:60: 55:3b:51:9f:78:93:2e:90:0e:90:fa:9e:dd:f8:fe: d9:2e:65:4c:d1:11:d3:e9:bd:c1:cc:53:6c:4f:fe: 09:ec:db:da:74:68:9e:fb:f4:e5:8e:63:ce:49:d7: cf:4b:92:80:c3:3e:59:31:74:62:a5:c4:3d:35:61: fc:d8:b7:4e:a2:2f:e6:d3:48:c8:eb:28:bc:5f:dd: 67:b6:d8:28:3e:ad:54:94:35:35:2f:64:a2:d4:38: 0e:0d:1f:92:59:d6:60:19:db:0b:9e:64:1e:d8:13: 51:7b:74:54:2a:67:62:f0:4c:68:46:2e:e8:1f:9f: 83:68:9a:e1:3d:a5:91:d2:19:23:ae:cb:ee:b0:b3: 84:c1:5b:b0:18:21:53:56:b0:0b:50:af:d0:2a:c7: da:de:09:b7:44:80:d0:7c:b3:39:b9:6d:67:43:4f: 65:84:8d:f7:37:fe:88:54:e3:9a:40:06:a2:43:16: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:EE:D0:97:5C:B4:00:50:7C:6E:8F:F9:70:B7:2F:33:61:64:11 X509v3 Authority Key Identifier: keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/_4nu0JdctABQfG6P-XC3LzNhZBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.230.0/24 IPv6: 2001:67c:144::/48 Signature Algorithm: sha256WithRSAEncryption 95:c6:e0:fd:b7:38:80:26:da:53:6d:40:70:5f:f7:b7:00:13: 50:e2:fa:53:32:e4:04:eb:a0:b4:18:ca:46:d0:97:4c:13:9c: fb:12:1b:ec:6f:0f:8a:57:a3:3d:6d:e1:69:a8:ca:09:04:5e: 11:88:42:e1:8b:02:be:9b:04:4e:34:ec:5e:fc:e6:c3:be:ab: f3:7a:26:bb:a8:3d:68:c5:30:31:d8:36:67:89:60:fa:69:8b: 5e:cc:fc:4f:13:06:ca:e9:7f:2b:6a:51:80:9f:c6:9d:b4:1a: 6a:a2:7f:e0:61:9f:2f:df:ca:8f:81:9c:72:b1:65:5f:ed:3a: cc:d2:4e:56:ae:9d:e8:95:37:86:7a:cb:24:44:01:95:26:d4: 44:dc:ac:83:f0:2a:44:d6:6e:fc:e4:54:47:5c:98:fa:a2:d6: 99:b5:9c:a6:42:26:47:7e:62:c4:fa:1a:f6:c4:fc:f8:2b:9e: ad:7f:eb:30:de:9b:b8:8a:e6:e5:58:cb:cf:ba:0c:e3:90:9b: 81:57:cd:8c:d5:f7:7e:d5:ed:da:67:d1:6f:64:72:1b:33:56: fe:04:f8:d8:ad:3f:80:68:d5:03:1a:bd:b5:f8:ac:b2:71:74: ef:49:1b:7b:03:14:cf:65:81:21:ed:f0:f5:36:81:cf:93:d1: f3:f5:d9:8a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gf4LOIATfrLRoqkanJQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj MGQzMTgwHhcNMjYwMTAyMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjg5ZWVkMDk3NWNiNDAwNTA3YzZlOGZmOTcwYjcyZjMzNjE2NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAASVGz5857b0KwVV8kvgAaQCskE XXtjs9sIhpu8j7Bhr25ousRkQyOCRq2LoTiiUOzw6BnHH0jvAbqO/r40ttAL4QgB VPqyrWBVO1GfeJMukA6Q+p7d+P7ZLmVM0RHT6b3BzFNsT/4J7NvadGie+/TljmPO SdfPS5KAwz5ZMXRipcQ9NWH82LdOoi/m00jI6yi8X91nttgoPq1UlDU1L2Si1DgO DR+SWdZgGdsLnmQe2BNRe3RUKmdi8ExoRi7oH5+DaJrhPaWR0hkjrsvusLOEwVuw GCFTVrALUK/QKsfa3gm3RIDQfLM5uW1nQ09lhI33N/6IVOOaQAaiQxZ7gwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFP+J7tCXXLQAUHxuj/lwty8zYWQRMB8GA1UdIwQY MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt MzUxNjE5MWE5ZDY4LzEvXzRudTBKZGN0QUJRZkc2UC1YQzNMek5oWkJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4 LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwozmMA8E AgACMAkDBwAgAQZ8AUQwDQYJKoZIhvcNAQELBQADggEBAJXG4P23OIAm2lNtQHBf 97cAE1Di+lMy5ATroLQYykbQl0wTnPsSG+xvD4pXoz1t4WmoygkEXhGIQuGLAr6b BE407F785sO+q/N6JruoPWjFMDHYNmeJYPppi17M/E8TBsrpfytqUYCfxp20Gmqi f+Bhny/fyo+BnHKxZV/tOszSTlauneiVN4Z6yyREAZUm1ETcrIPwKkTWbvzkVEdc mPqi1pm1nKZCJkd+YsT6GvbE/Pgrnq1/6zDem7iK5uVYy8+6DOOQm4FXzYzV937V 7dpn0W9kchszVv4E+NitP4Bo1QMavbX4rLJxdO9JG3sDFM9lgSHt8PU2gc+T0fP1 2Yo= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:44 2026 by rpki-client