This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4gM94ce2HsGaCNVlxIEkArO5Ubs.roa File: 4gM94ce2HsGaCNVlxIEkArO5Ubs.roa (raw, json) Hash identifier: YoTLJ0Uyj3g81j3JA3Ap3UPIOnKoI9tSgmpCuWD7GLM= Subject key identifier: E2:03:3D:E1:C7:B6:1E:C1:9A:08:D5:65:C4:81:24:02:B3:B9:51:BB Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E75303A566D1F1F442C4183DA4D72 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4gM94ce2HsGaCNVlxIEkArO5Ubs.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 91.210.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:75:30:3a:56:6d:1f:1f:44:2c:41:83:da:4d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2033de1c7b61ec19a08d565c4812402b3b951bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:5a:2c:5f:7b:67:ca:9c:96:70:ad:fb:32: 10:79:81:24:25:17:a0:81:e4:6a:ff:6b:a4:27:54: 30:7e:17:85:ed:b1:83:a0:ee:b0:60:0c:14:1c:48: 6b:6b:f6:44:c0:1e:b3:7b:ab:65:0c:25:1f:5e:dc: 1c:09:d2:51:d0:49:68:56:07:bd:22:4f:a4:ca:f9: 66:97:4f:54:cb:57:b3:53:ee:ff:d3:1f:aa:95:ce: da:17:64:f5:a4:3e:2c:40:e2:fb:11:0b:07:d6:7a: 4d:28:4e:20:b8:dd:ec:4a:05:81:dc:68:4c:52:d1: a8:b7:45:1f:62:3b:7a:c4:3c:b8:a0:a8:94:06:ab: 67:bf:d0:11:30:69:2e:84:ed:70:45:63:8f:0f:ca: aa:0b:e5:f6:da:90:32:e0:bd:bc:a8:c9:a0:0a:68: 64:32:4c:f5:1f:04:62:5a:f0:e6:ac:44:d9:21:63: 3f:45:d4:fb:fc:b2:f8:d2:f1:a7:73:bd:2a:60:a1: 05:05:8a:f5:11:0b:2a:93:20:89:84:a7:99:18:25: cd:c8:ef:18:ac:9b:5a:e5:a8:59:24:ec:1b:76:0c: 88:a6:58:64:54:bd:d2:1c:66:bc:d4:3a:cf:a7:90: 85:78:e0:9c:e8:a7:9c:db:35:fd:b9:7e:50:72:22: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:03:3D:E1:C7:B6:1E:C1:9A:08:D5:65:C4:81:24:02:B3:B9:51:BB X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4gM94ce2HsGaCNVlxIEkArO5Ubs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.147.0/24 Signature Algorithm: sha256WithRSAEncryption 74:42:e6:c1:f9:8e:49:c1:a3:47:52:d8:fd:0b:1e:bc:85:17: bb:8e:e1:39:15:fb:75:cc:03:76:1a:76:d1:26:c2:e3:f4:39: 5f:aa:a7:53:18:05:a8:aa:49:c6:07:0f:97:de:ec:ae:c0:97: 21:52:8d:87:9d:1e:8d:ba:ad:9c:b9:f9:0b:6b:96:4f:65:1b: eb:ac:fb:de:ec:af:56:ad:b0:d0:48:18:15:88:92:36:e7:db: 11:68:2f:65:44:27:6f:fc:b5:f5:ca:c4:97:41:6b:e9:2b:75: c6:23:56:64:cf:31:30:a2:5e:d8:6a:fc:ad:e9:4c:58:67:92: 6b:8d:dc:cd:9d:08:d1:04:81:10:9c:c9:bb:78:bf:14:eb:a9: 41:ba:02:be:da:de:62:dc:75:e4:ca:5c:d1:85:16:88:73:72: 1d:2c:51:b2:31:d0:28:d3:e0:2e:6d:5a:80:4e:12:02:b1:2f: 95:42:9e:5c:4d:c6:db:45:d0:bc:a1:35:b9:7c:cf:ce:33:cf: 88:cb:75:65:cf:fe:3f:0d:72:15:55:eb:8c:ce:02:01:ef:21: 45:dd:cb:72:37:1f:6c:e2:75:23:ca:30:8e:ff:8b:1b:1e:79: 47:09:ab:d7:68:aa:7b:67:d2:b3:62:60:b3:cd:a1:f9:39:6d: b8:b5:cc:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnUwOlZtHx9ELEGD2k1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjAzM2RlMWM3YjYxZWMxOWEwOGQ1NjVjNDgxMjQwMmIzYjk1MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZJaLF97Z8qclnCt+zIQeYEkJReg geRq/2ukJ1QwfheF7bGDoO6wYAwUHEhra/ZEwB6ze6tlDCUfXtwcCdJR0EloVge9 Ik+kyvlml09Uy1ezU+7/0x+qlc7aF2T1pD4sQOL7EQsH1npNKE4guN3sSgWB3GhM UtGot0UfYjt6xDy4oKiUBqtnv9ARMGkuhO1wRWOPD8qqC+X22pAy4L28qMmgCmhk Mkz1HwRiWvDmrETZIWM/RdT7/LL40vGnc70qYKEFBYr1EQsqkyCJhKeZGCXNyO8Y rJta5ahZJOwbdgyIplhkVL3SHGa81DrPp5CFeOCc6Kec2zX9uX5QciI0gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIDPeHHth7BmgjVZcSBJAKzuVG7MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvNGdNOTRjZTJIc0dhQ05WbHhJRWtBck81VWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9KTMA0G CSqGSIb3DQEBCwUAA4IBAQB0QubB+Y5JwaNHUtj9Cx68hRe7juE5Fft1zAN2GnbR JsLj9DlfqqdTGAWoqknGBw+X3uyuwJchUo2HnR6Nuq2cufkLa5ZPZRvrrPve7K9W rbDQSBgViJI259sRaC9lRCdv/LX1ysSXQWvpK3XGI1ZkzzEwol7Yavyt6UxYZ5Jr jdzNnQjRBIEQnMm7eL8U66lBugK+2t5i3HXkylzRhRaIc3IdLFGyMdAo0+AubVqA ThICsS+VQp5cTcbbRdC8oTW5fM/OM8+Iy3Vlz/4/DXIVVeuMzgIB7yFF3ctyNx9s 4nUjyjCO/4sbHnlHCavXaKp7Z9KzYmCzzaH5OW24tcwI -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:15 2026 by rpki-client