This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/4qZtNptb8ER3904DdA6MFe8pZsU.roa File: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (raw, json) Hash identifier: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME= Subject key identifier: E2:A6:6D:36:9B:5B:F0:44:77:F7:4E:03:74:0E:8C:15:EF:29:66:C5 Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Certificate serial: 019B7DCAA11D1D889C0D6641707B3AEF4131 Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/4qZtNptb8ER3904DdA6MFe8pZsU.roa Signing time: Fri 02 Jan 2026 08:19:50 +0000 ROA not before: Fri 02 Jan 2026 08:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25415 IP address blocks: 212.51.0.0/19 maxlen: 19 2a01:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a1:1d:1d:88:9c:0d:66:41:70:7b:3a:ef:41:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2a66d369b5bf04477f74e03740e8c15ef2966c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:fb:19:cc:04:22:55:88:0b:e5:9f:54:4f: 89:82:36:e5:9e:57:4d:41:9c:d7:5f:7f:be:36:e6: 0f:0e:9a:3e:b9:73:52:b0:aa:5f:20:87:93:3b:49: 7b:3c:cc:d7:00:2c:21:4e:9c:4b:ae:4c:65:34:3a: 6a:07:84:4f:a5:fa:23:b9:88:b8:b0:48:e2:16:ba: bc:cb:e5:1a:f5:be:59:72:62:6c:74:1b:bd:9b:bb: 47:2d:07:22:43:05:df:dc:55:96:ff:1a:5d:e9:2f: bd:c5:5f:e2:30:ee:fc:06:3f:df:76:4d:a4:86:5d: 90:4b:6c:8d:76:b3:e5:a6:ab:65:f4:09:0a:c7:74: 43:0b:ba:53:c6:de:6f:34:08:3d:8a:2e:49:cb:99: 44:52:d3:29:8d:3e:f6:68:83:24:0d:df:04:7b:64: dd:74:c1:da:8f:45:2b:f4:98:f8:42:d0:13:59:67: da:81:aa:25:1d:45:40:77:a1:41:30:9c:0b:90:a0: 47:ab:6d:14:16:45:5e:96:63:f3:a8:e1:a6:a3:06: 04:63:0e:90:fd:7b:e2:4b:7a:b2:89:82:78:d7:4a: ca:7a:f1:af:0c:12:9f:33:ea:d4:31:49:0c:62:e6: e2:82:2f:77:d3:da:61:7c:ac:c4:57:cf:59:b2:c8: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A6:6D:36:9B:5B:F0:44:77:F7:4E:03:74:0E:8C:15:EF:29:66:C5 X509v3 Authority Key Identifier: keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/4qZtNptb8ER3904DdA6MFe8pZsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.51.0.0/19 IPv6: 2a01:780::/32 Signature Algorithm: sha256WithRSAEncryption 06:3b:2f:44:49:0b:b8:42:cd:f0:b2:e2:f3:a9:2d:d9:03:f6: dd:bd:f6:95:d2:df:73:59:9a:c4:25:01:0c:0f:f9:e9:f9:0e: e7:6a:19:aa:9f:92:08:92:57:85:e4:62:d1:74:5b:67:df:af: 7a:71:6d:34:58:f8:b6:82:40:af:03:07:a4:d2:43:6c:f9:0a: 3c:69:0a:ff:95:0e:42:5f:9d:82:85:e2:ed:00:dc:93:18:54: 0a:1a:3a:17:eb:16:0f:78:e4:b5:09:58:53:f3:fa:7f:fb:c9: dd:c0:6c:97:35:4f:8c:6d:8e:d8:e7:89:cc:20:fe:27:cc:23: 5d:c5:6f:a8:30:a4:b5:25:5c:17:a9:fe:d6:39:23:58:f6:3f: 7f:15:9a:ba:78:ea:05:5b:fc:08:d3:7d:7f:79:14:f9:28:67: 90:9c:eb:d0:8c:a0:c5:b2:65:0c:e3:83:7b:69:d5:81:7c:c9: f6:86:c9:58:8c:82:59:eb:3e:1c:63:57:22:87:2a:e8:da:b0: 4f:c0:27:04:1c:ad:b1:e1:2f:03:7e:65:3b:4a:94:47:f7:65: 6c:6d:cf:6d:4c:5d:96:b1:ae:67:c6:ec:be:9c:23:41:da:96: a5:df:9a:3e:a0:a7:99:d1:e0:52:d4:46:c2:40:7e:de:78:b3: 78:ce:20:1f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yqEdHYicDWZBcHs670ExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWYxMTU0YTlhMTVkNWE4M2E5YTk4MTdhNzI0YmZjNTM5 ZGI1OTYwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmE2NmQzNjliNWJmMDQ0NzdmNzRlMDM3NDBlOGMxNWVmMjk2NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkT7GcwEIlWIC+WfVE+JgjblnldN QZzXX3++NuYPDpo+uXNSsKpfIIeTO0l7PMzXACwhTpxLrkxlNDpqB4RPpfojuYi4 sEjiFrq8y+Ua9b5ZcmJsdBu9m7tHLQciQwXf3FWW/xpd6S+9xV/iMO78Bj/fdk2k hl2QS2yNdrPlpqtl9AkKx3RDC7pTxt5vNAg9ii5Jy5lEUtMpjT72aIMkDd8Ee2Td dMHaj0Ur9Jj4QtATWWfagaolHUVAd6FBMJwLkKBHq20UFkVelmPzqOGmowYEYw6Q /XviS3qyiYJ410rKevGvDBKfM+rUMUkMYubigi9309phfKzEV89ZsshCFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOKmbTabW/BEd/dOA3QOjBXvKWbFMB8GA1UdIwQY MBaAFAyfEVSpoV1ag6mpgXpyS/xTnbWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQt YjlkYmE2MzliMWIxLzEvNHFadE5wdGI4RVIzOTA0RGRBNk1GZThwWnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQtYjlkYmE2MzliMWIx LzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1DMAMA0E AgACMAcDBQAqAQeAMA0GCSqGSIb3DQEBCwUAA4IBAQAGOy9ESQu4Qs3wsuLzqS3Z A/bdvfaV0t9zWZrEJQEMD/np+Q7nahmqn5IIkleF5GLRdFtn3696cW00WPi2gkCv Awek0kNs+Qo8aQr/lQ5CX52CheLtANyTGFQKGjoX6xYPeOS1CVhT8/p/+8ndwGyX NU+MbY7Y54nMIP4nzCNdxW+oMKS1JVwXqf7WOSNY9j9/FZq6eOoFW/wI031/eRT5 KGeQnOvQjKDFsmUM44N7adWBfMn2hslYjIJZ6z4cY1cihyro2rBPwCcEHK2x4S8D fmU7SpRH92Vsbc9tTF2Wsa5nxuy+nCNB2pal35o+oKeZ0eBS1EbCQH7eeLN4ziAf -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:05 2026 by rpki-client