This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4vC4X9fgJSHfha18dd5w-JcuGGs.roa File: 4vC4X9fgJSHfha18dd5w-JcuGGs.roa (raw, json) Hash identifier: VHnk7IjHU9cYsFoYsqAIaPufKi1ZuHssQPmQtJydV1M= Subject key identifier: E2:F0:B8:5F:D7:E0:25:21:DF:85:AD:7C:75:DE:70:F8:97:2E:18:6B Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6B45DF6A33992ED653339C9358D4 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4vC4X9fgJSHfha18dd5w-JcuGGs.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 89.21.86.0/24 maxlen: 24 109.122.43.0/24 maxlen: 24 109.122.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6b:45:df:6a:33:99:2e:d6:53:33:9c:93:58:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2f0b85fd7e02521df85ad7c75de70f8972e186b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:18:2d:f4:80:0f:0b:b1:8c:ab:89:d7:a8: bf:df:31:17:6d:07:a3:75:2a:47:2c:b6:49:5c:d0: a1:51:5c:6b:14:4b:04:ee:2b:3a:fc:96:2c:83:e1: fa:96:75:72:d5:ee:f7:7a:94:e0:00:bc:e6:6a:ef: 89:e6:f2:24:07:b1:da:ad:66:62:f3:38:2d:eb:1c: bd:1b:07:05:68:2d:df:8a:49:26:90:03:f5:b5:4b: 2a:90:ff:4c:5c:dc:d5:45:bb:5c:19:f0:60:19:8a: d7:cc:5a:50:7c:20:c5:c5:b1:23:07:27:6f:74:09: 19:e0:af:a3:9e:5d:79:50:21:78:dd:6b:dc:fb:d6: a4:2c:82:c0:1a:6b:33:a3:2c:9f:ce:6a:6f:a2:7c: d8:88:bf:2b:5a:af:94:03:93:70:02:9a:e6:1f:27: 56:1c:30:cd:bf:e4:cb:54:e3:d6:9f:0c:88:4a:16: 5a:db:f0:f2:c1:0b:e7:48:28:99:70:1a:43:94:fb: cb:8a:aa:37:fa:ce:9f:44:ac:62:cb:fa:5b:9c:da: b4:b5:85:ea:bd:02:9a:eb:3c:59:a7:f4:d2:5b:26: c6:09:2c:d3:fe:99:a9:70:6c:27:c7:37:d8:75:66: fb:ce:ce:77:5a:b9:71:4f:ec:9c:8a:47:40:6e:c0: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F0:B8:5F:D7:E0:25:21:DF:85:AD:7C:75:DE:70:F8:97:2E:18:6B X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4vC4X9fgJSHfha18dd5w-JcuGGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.86.0/24 109.122.43.0/24 109.122.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:1c:42:a2:89:04:1c:a0:79:15:da:e8:29:75:58:4b:46:9b: 84:8e:18:88:5b:72:26:db:41:c6:3b:e0:78:dc:9a:58:2d:83: b8:e5:de:b5:46:f0:6b:35:f6:52:2a:64:9b:f1:86:2a:c1:22: 2a:8d:a1:d8:6d:7d:d8:48:63:f6:3a:f5:d5:73:04:56:69:4d: 52:a5:46:ba:ab:90:3d:a9:76:95:a6:cb:b4:c8:6c:a9:d7:01: a9:dd:ac:39:ee:44:ed:c7:42:14:6f:2f:94:b9:74:f7:b4:ab: 2d:b7:eb:a4:70:e9:5c:34:48:6c:e1:21:c2:80:bc:65:97:0d: 2e:f5:04:2f:41:30:48:b0:2a:54:4d:8b:c3:12:44:de:a1:a3: bf:89:11:06:9e:75:26:05:35:a1:ce:a0:a2:8e:fe:ea:1a:34: 49:52:37:36:68:65:57:28:26:54:46:6c:40:12:0a:95:a5:8b: 38:9e:97:22:ee:ba:e6:f4:01:fb:f4:93:b4:02:57:40:29:48: f0:9e:da:df:32:64:be:32:4a:b3:86:7c:6d:3a:f7:81:71:38: 24:09:2e:9b:86:56:c7:76:02:32:6f:0f:c3:53:0f:df:ba:c4: 01:33:7c:37:58:dd:64:58:6b:66:c9:09:7a:04:05:3e:2b:2f: 7b:5e:cc:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fmtF32ozmS7WUzOck1jUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmYwYjg1ZmQ3ZTAyNTIxZGY4NWFkN2M3NWRlNzBmODk3MmUxODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EYYLfSADwuxjKuJ16i/3zEXbQej dSpHLLZJXNChUVxrFEsE7is6/JYsg+H6lnVy1e73epTgALzmau+J5vIkB7HarWZi 8zgt6xy9GwcFaC3fikkmkAP1tUsqkP9MXNzVRbtcGfBgGYrXzFpQfCDFxbEjBydv dAkZ4K+jnl15UCF43Wvc+9akLILAGmszoyyfzmpvonzYiL8rWq+UA5NwAprmHydW HDDNv+TLVOPWnwyIShZa2/DywQvnSCiZcBpDlPvLiqo3+s6fRKxiy/pbnNq0tYXq vQKa6zxZp/TSWybGCSzT/pmpcGwnxzfYdWb7zs53WrlxT+ycikdAbsCS/wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOLwuF/X4CUh34WtfHXecPiXLhhrMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvNHZDNFg5ZmdKU0hmaGExOGRkNXctSmN1R0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRVWAwQA bXorAwQAbXotMA0GCSqGSIb3DQEBCwUAA4IBAQB8HEKiiQQcoHkV2ugpdVhLRpuE jhiIW3Im20HGO+B43JpYLYO45d61RvBrNfZSKmSb8YYqwSIqjaHYbX3YSGP2OvXV cwRWaU1SpUa6q5A9qXaVpsu0yGyp1wGp3aw57kTtx0IUby+UuXT3tKstt+ukcOlc NEhs4SHCgLxllw0u9QQvQTBIsCpUTYvDEkTeoaO/iREGnnUmBTWhzqCijv7qGjRJ Ujc2aGVXKCZURmxAEgqVpYs4npci7rrm9AH79JO0AldAKUjwntrfMmS+Mkqzhnxt OveBcTgkCS6bhlbHdgIybw/DUw/fusQBM3w3WN1kWGtmyQl6BAU+Ky97Xsw6 -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:12 2026 by rpki-client