This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/K4YIpNVER-DFL9QSjAJbgja5kpI.roa File: K4YIpNVER-DFL9QSjAJbgja5kpI.roa (raw, json) Hash identifier: 4LZlDHFe7a3V5tX5Of2rt5GC1LM+o4iblPpEFTc0rds= Subject key identifier: 2B:86:08:A4:D5:44:47:E0:C5:2F:D4:12:8C:02:5B:82:36:B9:92:92 Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Certificate serial: 019B7CEDF31959E1FEB3161AF1B853C050E5 Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/K4YIpNVER-DFL9QSjAJbgja5kpI.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 94.198.152.0/24 maxlen: 24 94.198.153.0/24 maxlen: 24 94.198.154.0/24 maxlen: 24 94.198.155.0/24 maxlen: 24 94.198.156.0/24 maxlen: 24 94.198.157.0/24 maxlen: 24 94.198.158.0/24 maxlen: 24 94.198.159.0/24 maxlen: 24 185.76.134.0/24 maxlen: 24 185.76.135.0/24 maxlen: 24 193.176.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f3:19:59:e1:fe:b3:16:1a:f1:b8:53:c0:50:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13 Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b8608a4d54447e0c52fd4128c025b8236b99292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:19:85:0f:12:57:ef:e3:4a:69:0b:2a:e1: 03:cd:01:79:3c:52:f5:83:e3:a0:71:eb:d0:b1:dd: 3c:b2:06:88:52:ba:6c:56:c4:9d:37:5c:d8:12:36: d6:26:6f:50:c4:8a:b3:3d:37:22:df:fa:e2:0b:aa: d5:7e:d0:7a:4b:15:c0:5e:ad:fa:b3:4f:b8:c5:87: e4:03:ab:22:4a:37:27:c3:03:55:a2:fe:3c:99:c8: 55:a0:54:53:09:46:37:53:ce:7f:e6:8a:87:ec:dd: d4:54:e0:53:27:5a:b9:a7:4a:bc:dc:ed:4f:fe:5e: 1e:d8:77:35:ef:9f:16:4f:8d:1d:51:77:9d:74:c6: 32:e9:db:53:fd:d5:f1:b5:85:5e:40:ff:41:9b:23: 4f:19:1a:00:22:e6:93:06:51:19:5b:96:93:b0:62: 4d:76:aa:62:44:5e:8b:c0:50:f9:19:69:e5:94:b1: 49:ed:d7:56:fa:da:3e:9f:08:b9:2f:e2:14:4b:5b: 28:5e:28:55:02:49:6c:29:35:a7:42:44:25:dd:6f: a0:8a:1d:dc:4c:68:16:e6:33:c7:6a:42:93:9b:ca: 9b:94:a6:e3:d7:a9:4a:5b:58:12:af:7a:a1:88:ed: a6:3c:c7:d3:11:15:57:f8:4f:85:1f:4e:13:62:f8: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:08:A4:D5:44:47:E0:C5:2F:D4:12:8C:02:5B:82:36:B9:92:92 X509v3 Authority Key Identifier: keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/K4YIpNVER-DFL9QSjAJbgja5kpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.152.0/21 185.76.134.0/23 193.176.144.0/24 Signature Algorithm: sha256WithRSAEncryption 73:86:94:93:7c:9b:01:63:34:e2:76:2c:a3:c2:04:54:a7:cc: d4:a3:fd:f9:78:a5:d1:ff:ab:ba:11:f1:b6:8d:38:48:30:ac: 41:b4:d2:27:86:23:ac:4c:cb:a4:78:48:eb:ea:cd:b5:17:e1: a5:8d:2e:f1:6d:a1:e6:8d:20:28:ef:54:cc:78:e7:42:b0:a3: 43:13:98:47:01:6e:b3:bd:85:92:10:e7:d9:c0:72:c4:2d:ff: f8:25:4a:12:03:84:79:6f:aa:7b:73:ef:7d:d2:95:0f:31:d2: 7d:00:cd:57:35:d0:d0:9c:f4:cb:13:ea:af:0b:cc:1d:9a:09: bd:e6:08:6b:3e:ab:10:71:26:97:5e:12:3f:30:c1:ef:72:b3: 12:18:17:69:7d:ef:7c:54:40:5b:ac:24:21:71:9d:1b:cb:9e: d3:74:19:9a:8f:ea:06:fd:7b:0e:8c:33:d4:86:2b:45:c2:a7: 4b:45:ba:6b:cd:86:a3:b6:28:6d:3b:12:97:d3:f4:20:63:af: 0d:1a:a2:b5:20:af:d9:4c:7a:18:7a:10:bf:54:26:a2:49:0f: bb:1c:b1:42:f8:4a:6b:4d:55:8f:18:d9:77:a0:a9:54:09:22: 53:3c:15:77:e7:72:08:a1:cb:eb:05:9c:2b:8b:d2:80:37:f6: c7:b7:16:00 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87fMZWeH+sxYa8bhTwFDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx N2VhMTMwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjg2MDhhNGQ1NDQ0N2UwYzUyZmQ0MTI4YzAyNWI4MjM2Yjk5MjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQMZhQ8SV+/jSmkLKuEDzQF5PFL1 g+OgcevQsd08sgaIUrpsVsSdN1zYEjbWJm9QxIqzPTci3/riC6rVftB6SxXAXq36 s0+4xYfkA6siSjcnwwNVov48mchVoFRTCUY3U85/5oqH7N3UVOBTJ1q5p0q83O1P /l4e2Hc1758WT40dUXeddMYy6dtT/dXxtYVeQP9BmyNPGRoAIuaTBlEZW5aTsGJN dqpiRF6LwFD5GWnllLFJ7ddW+to+nwi5L+IUS1soXihVAklsKTWnQkQl3W+gih3c TGgW5jPHakKTm8qblKbj16lKW1gSr3qhiO2mPMfTERVX+E+FH04TYvin4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCuGCKTVREfgxS/UEowCW4I2uZKSMB8GA1UdIwQY MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et YzhlODYzYzFhOGQxLzEvSzRZSXBOVkVSLURGTDlRU2pBSmJnamE1a3BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXsaYAwQB uUyGAwQAwbCQMA0GCSqGSIb3DQEBCwUAA4IBAQBzhpSTfJsBYzTidiyjwgRUp8zU o/35eKXR/6u6EfG2jThIMKxBtNInhiOsTMukeEjr6s21F+GljS7xbaHmjSAo71TM eOdCsKNDE5hHAW6zvYWSEOfZwHLELf/4JUoSA4R5b6p7c+990pUPMdJ9AM1XNdDQ nPTLE+qvC8wdmgm95ghrPqsQcSaXXhI/MMHvcrMSGBdpfe98VEBbrCQhcZ0by57T dBmaj+oG/XsOjDPUhitFwqdLRbprzYajtihtOxKX0/QgY68NGqK1IK/ZTHoYehC/ VCaiSQ+7HLFC+EprTVWPGNl3oKlUCSJTPBV353IIocvrBZwri9KAN/bHtxYA -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:57 2026 by rpki-client