This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/K4GADlpJx7a-ADehO2WgAR3RfPo.roa File: K4GADlpJx7a-ADehO2WgAR3RfPo.roa (raw, json) Hash identifier: dXoSVWob3o9r4eiPJsMBcF4NpFZwbEa5hGIeV5W7+/g= Subject key identifier: 2B:81:80:0E:5A:49:C7:B6:BE:00:37:A1:3B:65:A0:01:1D:D1:7C:FA Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6419810DD38DB4F6FCF85FC46DA0 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/K4GADlpJx7a-ADehO2WgAR3RfPo.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 89.251.17.0/24 maxlen: 24 193.93.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:64:19:81:0d:d3:8d:b4:f6:fc:f8:5f:c4:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b81800e5a49c7b6be0037a13b65a0011dd17cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:3c:42:b7:d0:08:43:15:08:61:0b:e2:3f: 5a:d4:74:a1:b0:d8:34:93:b7:45:69:59:bd:2e:f5: 39:ba:e3:d8:90:cc:0d:8a:cb:81:71:0b:09:f4:e0: d4:36:09:e4:5c:2e:cb:1e:95:98:8c:9d:c2:fb:5c: 23:33:95:55:1c:66:fd:77:19:5e:76:bd:90:1b:f5: 4d:47:67:b4:5b:a0:b2:5c:b0:c2:69:ca:12:6f:bb: c0:b3:b0:8f:d0:33:6f:27:74:f9:b6:54:91:16:48: 5d:fd:72:48:46:55:a8:8a:5f:f5:75:37:98:24:83: 06:f0:ee:a6:67:52:5e:93:74:df:a2:69:ee:7e:59: ed:05:a1:94:4a:89:72:6d:ea:57:aa:83:f3:1c:83: 38:c8:5a:e3:23:78:a2:f1:05:c8:5f:46:cb:24:cc: 3b:97:d6:6c:f5:ef:42:4a:4d:a4:70:f6:ba:39:fe: 12:df:85:51:85:45:0b:f2:32:67:a7:c2:28:85:a8: 90:71:b4:2e:42:2f:39:78:09:25:72:c8:35:2c:64: 3d:d6:d7:00:03:91:66:e3:2a:b7:65:57:77:85:1e: 22:47:4a:dd:f3:f7:f7:00:71:fa:cb:db:23:c5:ed: 3a:2b:9b:41:5e:84:f1:16:2b:db:3a:42:15:37:00: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:81:80:0E:5A:49:C7:B6:BE:00:37:A1:3B:65:A0:01:1D:D1:7C:FA X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/K4GADlpJx7a-ADehO2WgAR3RfPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.17.0/24 193.93.53.0/24 Signature Algorithm: sha256WithRSAEncryption 36:9e:9c:2d:6c:89:55:c6:51:a3:b9:97:d5:a8:21:e7:9d:7f: dd:b7:77:fd:61:aa:d9:4e:c5:9e:86:0f:63:75:6c:bb:62:35: 1c:ee:03:cb:93:34:4f:d8:33:29:82:61:96:f8:ef:dd:09:63: fa:0c:17:4d:7e:ff:37:55:5b:a7:5d:a8:b1:be:ff:0f:49:ee: 52:7d:21:2d:ac:39:e5:e1:a8:da:37:2c:72:55:87:58:74:cd: c0:40:76:50:bb:b3:ce:ad:dc:f6:99:2b:6d:d6:a2:26:6a:58: ad:5a:2d:6f:b8:b8:dd:ba:a1:da:89:5a:78:be:cf:40:7e:44: ca:9f:f3:b2:77:bb:6b:d0:2b:89:8c:ab:3b:33:8f:9f:3c:25: a1:1e:02:ea:89:19:b2:6c:25:ec:e9:2c:96:61:d6:88:5f:22: f2:66:9a:99:3e:ed:e5:b5:76:16:28:0b:7d:c7:91:22:09:37: 19:58:2d:b8:88:0f:f5:bf:97:ae:51:6d:54:80:21:4e:da:94: 56:ac:8c:d1:66:2c:88:1c:a5:bd:9c:7c:1d:b5:9c:db:84:c7: 7e:1b:74:c4:c8:9f:d4:7e:0d:20:66:b5:c8:15:b1:74:d3:41: 3d:54:25:38:ea:db:00:e2:dd:85:ac:c4:30:b0:06:e7:48:65: df:e2:8c:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fmQZgQ3TjbT2/PhfxG2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjgxODAwZTVhNDljN2I2YmUwMDM3YTEzYjY1YTAwMTFkZDE3Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNo8QrfQCEMVCGEL4j9a1HShsNg0 k7dFaVm9LvU5uuPYkMwNisuBcQsJ9ODUNgnkXC7LHpWYjJ3C+1wjM5VVHGb9dxle dr2QG/VNR2e0W6CyXLDCacoSb7vAs7CP0DNvJ3T5tlSRFkhd/XJIRlWoil/1dTeY JIMG8O6mZ1Jek3TfomnuflntBaGUSolybepXqoPzHIM4yFrjI3ii8QXIX0bLJMw7 l9Zs9e9CSk2kcPa6Of4S34VRhUUL8jJnp8IohaiQcbQuQi85eAklcsg1LGQ91tcA A5Fm4yq3ZVd3hR4iR0rd8/f3AHH6y9sjxe06K5tBXoTxFivbOkIVNwCpnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCuBgA5aSce2vgA3oTtloAEd0Xz6MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvSzRHQURscEp4N2EtQURlaE8yV2dBUjNSZlBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsRAwQA wV01MA0GCSqGSIb3DQEBCwUAA4IBAQA2npwtbIlVxlGjuZfVqCHnnX/dt3f9YarZ TsWehg9jdWy7YjUc7gPLkzRP2DMpgmGW+O/dCWP6DBdNfv83VVunXaixvv8PSe5S fSEtrDnl4ajaNyxyVYdYdM3AQHZQu7POrdz2mStt1qImalitWi1vuLjduqHaiVp4 vs9AfkTKn/Oyd7tr0CuJjKs7M4+fPCWhHgLqiRmybCXs6SyWYdaIXyLyZpqZPu3l tXYWKAt9x5EiCTcZWC24iA/1v5euUW1UgCFO2pRWrIzRZiyIHKW9nHwdtZzbhMd+ G3TEyJ/Ufg0gZrXIFbF000E9VCU46tsA4t2FrMQwsAbnSGXf4owB -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:30 2026 by rpki-client