This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa File: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (raw, json) Hash identifier: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0= Subject key identifier: E1:9B:C0:8B:E8:27:D6:91:7E:AA:B2:10:9A:1A:4D:45:F2:BC:92:3D Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92 Certificate serial: 019B7F8450D06B80D1A30B86B672449DBA77 Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.36.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:50:d0:6b:80:d1:a3:0b:86:b6:72:44:9d:ba:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92 Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e19bc08be827d6917eaab2109a1a4d45f2bc923d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:fb:51:22:87:8a:d7:18:d8:b3:3a:d2:62: 14:86:f5:f2:d8:b4:e5:6f:ad:ea:9a:f5:ed:f2:9c: 49:61:41:a0:37:f0:b3:9e:d6:dc:a4:11:80:84:7c: 27:aa:df:80:e0:c1:fa:f8:b9:b1:9f:43:42:e8:b6: 3f:06:82:e2:bf:6f:3c:22:91:46:82:cc:84:44:3d: 45:92:29:f9:2b:7b:48:30:58:4a:89:98:99:4e:67: 7f:9b:eb:f3:a1:4d:f8:14:16:39:fa:11:2c:09:1b: 75:20:c6:98:72:35:96:bc:21:bd:da:95:5a:7c:c6: 5f:4a:4c:04:af:df:67:c7:c5:6a:21:87:bd:d9:0c: c4:58:5b:9a:a3:02:81:63:e3:16:63:85:fb:b6:ac: 53:62:4b:05:f1:51:63:d0:70:89:71:59:4e:ef:97: 2b:80:b5:e6:dd:a5:0a:d8:a1:8c:ea:9b:8e:dd:67: ef:36:5a:b4:43:45:ab:8e:e9:01:20:80:2e:9d:cf: 12:72:54:58:4a:d5:7e:9e:74:fe:bf:5c:54:f1:b9: 96:e0:d9:7b:47:0a:2f:c6:fc:78:37:c9:25:3e:eb: 44:02:a1:1a:7f:8b:04:d1:0c:73:67:2c:c5:22:fa: 43:13:d3:f5:71:ad:86:0a:4b:ff:06:ad:c9:28:df: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9B:C0:8B:E8:27:D6:91:7E:AA:B2:10:9A:1A:4D:45:F2:BC:92:3D X509v3 Authority Key Identifier: keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.242.0/24 Signature Algorithm: sha256WithRSAEncryption d4:a4:af:e8:78:61:ef:8b:2a:be:15:46:72:50:39:59:85:b3: c1:5c:67:d7:ad:47:4d:7c:43:4e:b4:a4:10:1f:ca:c4:18:f6: fd:35:9e:8c:55:fb:02:c9:e0:2b:12:66:1b:59:03:c8:82:e9: 11:d5:42:1f:dc:00:c6:bb:91:18:78:07:ec:a9:5f:1c:b4:a5: 7e:ee:a6:55:59:74:01:ba:01:7d:fa:81:45:78:47:73:58:e1: c3:09:c3:a5:4d:d7:dc:00:ff:e5:fe:41:c0:0d:64:4a:94:94: b5:a9:25:3d:a1:82:15:fd:c2:5c:0f:7b:9a:2b:56:e5:c9:19: a3:b2:df:58:85:b8:65:d1:4d:d0:30:c4:07:e3:ac:fd:06:79: fe:6f:90:fd:a4:a5:bd:a2:e3:de:a3:4e:6d:7d:07:b7:36:c4: 17:e3:94:c8:7a:a7:76:d3:21:a5:ca:26:5f:bf:f9:67:15:f0: 2f:0f:68:23:39:2f:c3:b2:5e:fc:2c:29:39:1f:bc:4d:c7:f2: 7f:73:70:d3:a9:2e:af:7d:92:f3:07:96:73:d2:ba:62:b6:61: 55:2f:4e:9d:0d:e2:ec:51:14:9c:cd:0d:e8:89:6d:f9:0e:44: 9e:62:e0:10:64:0e:42:e0:93:08:8d:05:06:0e:19:6a:d1:84: f4:ec:b2:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFDQa4DRowuGtnJEnbp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3 ZmFlOTIwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTliYzA4YmU4MjdkNjkxN2VhYWIyMTA5YTFhNGQ0NWYyYmM5MjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDf7USKHitcY2LM60mIUhvXy2LTl b63qmvXt8pxJYUGgN/CzntbcpBGAhHwnqt+A4MH6+Lmxn0NC6LY/BoLiv288IpFG gsyERD1Fkin5K3tIMFhKiZiZTmd/m+vzoU34FBY5+hEsCRt1IMaYcjWWvCG92pVa fMZfSkwEr99nx8VqIYe92QzEWFuaowKBY+MWY4X7tqxTYksF8VFj0HCJcVlO75cr gLXm3aUK2KGM6puO3WfvNlq0Q0WrjukBIIAunc8SclRYStV+nnT+v1xU8bmW4Nl7 Rwovxvx4N8klPutEAqEaf4sE0QxzZyzFIvpDE9P1ca2GCkv/Bq3JKN+VnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGbwIvoJ9aRfqqyEJoaTUXyvJI9MB8GA1UdIwQY MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt YTIzNTFmNGU4OTE1LzEvNFp2QWktZ24xcEYtcXJJUW1ocE5SZks4a2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1 LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSTyMA0G CSqGSIb3DQEBCwUAA4IBAQDUpK/oeGHviyq+FUZyUDlZhbPBXGfXrUdNfENOtKQQ H8rEGPb9NZ6MVfsCyeArEmYbWQPIgukR1UIf3ADGu5EYeAfsqV8ctKV+7qZVWXQB ugF9+oFFeEdzWOHDCcOlTdfcAP/l/kHADWRKlJS1qSU9oYIV/cJcD3uaK1blyRmj st9Yhbhl0U3QMMQH46z9Bnn+b5D9pKW9ouPeo05tfQe3NsQX45TIeqd20yGlyiZf v/lnFfAvD2gjOS/Dsl78LCk5H7xNx/J/c3DTqS6vfZLzB5Zz0rpitmFVL06dDeLs URSczQ3oiW35DkSeYuAQZA5C4JMIjQUGDhlq0YT07LL7 -----END CERTIFICATE-----Generated at Wed Jan 21 12:21:06 2026 by rpki-client