This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/K4OipTcwUR5GHe48dIx0uYunkgU.roa File: K4OipTcwUR5GHe48dIx0uYunkgU.roa (raw, json) Hash identifier: 4X8maR7BlRFLa0y2Jq93U8WPeZASLwROy9eW+4OpHmY= Subject key identifier: 2B:83:A2:A5:37:30:51:1E:46:1D:EE:3C:74:8C:74:B9:8B:A7:92:05 Certificate issuer: /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Certificate serial: 019B77C71F380ACA8599A7DB2789DB512CF1 Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/K4OipTcwUR5GHe48dIx0uYunkgU.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207946 IP address blocks: 91.204.81.0/24 maxlen: 24 2001:678:5a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1f:38:0a:ca:85:99:a7:db:27:89:db:51:2c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b83a2a53730511e461dee3c748c74b98ba79205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:35:6b:e5:ea:c7:37:e0:49:d7:5f:cd:8a: 6d:2f:61:e9:ab:6d:83:06:0a:15:72:02:33:7c:80: ba:39:5f:17:14:82:b7:59:d9:66:a0:f5:ed:81:b5: c9:b2:c2:99:20:2b:66:73:70:0d:c0:c5:b8:60:e4: ad:b7:1b:7a:6a:03:0f:6b:c1:22:4d:67:ef:bc:61: df:07:94:16:9d:80:27:16:7a:02:60:d9:f4:f3:a8: 67:35:96:ba:35:37:6f:cc:4b:e6:f9:3f:2b:29:ba: 6c:09:fd:7c:5d:07:9d:9a:f5:9a:3d:4a:c6:da:da: be:1d:03:2c:ff:1a:aa:01:c2:a5:e7:e1:f8:83:a4: 18:b8:61:46:2b:99:35:67:3f:46:7a:30:18:ad:f4: 96:55:9c:85:35:2a:86:6e:c1:00:87:90:97:54:0d: 12:56:72:5a:8e:f8:3a:94:36:d3:5a:3a:0f:8a:37: d6:6f:13:d9:9f:25:aa:79:4e:90:14:e5:52:a5:76: 31:da:a2:1e:ee:04:20:3f:fc:aa:d1:bb:e0:1b:5b: e9:19:84:8e:07:f3:f3:bc:dc:85:39:33:f1:bb:fb: 5e:df:65:af:a6:05:93:7a:24:5d:9f:ee:50:fa:cc: 57:3c:e4:54:8c:13:ae:ac:7d:1e:20:29:79:c1:fa: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:A2:A5:37:30:51:1E:46:1D:EE:3C:74:8C:74:B9:8B:A7:92:05 X509v3 Authority Key Identifier: keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/K4OipTcwUR5GHe48dIx0uYunkgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.81.0/24 IPv6: 2001:678:5a0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:af:b1:a6:d6:25:2d:70:f5:f5:49:cb:8a:86:c5:a8:ee:45: 09:0c:24:13:42:0d:24:a7:da:c3:9c:ca:eb:c5:84:86:1d:66: 17:68:d7:37:85:cc:4c:18:cd:7a:00:ab:21:b7:28:c5:43:e0: b4:df:64:01:2c:81:69:77:77:67:39:42:c1:34:81:82:c5:be: 08:cb:22:28:d9:6c:d1:24:4b:d2:9b:ae:83:55:01:7c:41:d0: ed:18:14:62:d1:84:10:77:77:44:2a:12:43:d7:14:27:b4:22: 1b:d2:51:4e:50:0b:98:6d:e1:16:85:f5:16:e8:57:76:1d:e7: 8e:ff:ab:ee:35:79:77:80:ca:f4:26:45:60:c4:02:31:48:f3: ad:65:ba:1d:02:42:e2:72:f1:cb:3d:50:79:38:30:47:c4:c7: e4:f6:1b:d8:02:86:47:6b:c9:9c:66:22:71:e6:d6:7d:70:31: af:b4:3c:8b:67:a7:a0:52:af:00:d8:07:31:f0:33:ed:db:2a: 4f:2b:a5:38:21:df:14:a5:7b:4d:8c:87:3f:be:da:27:2b:74: 62:cd:d0:5d:e4:8b:ea:e6:b8:6c:d8:0d:68:be:92:c2:08:16: 16:26:bf:14:20:29:e3:58:e7:8c:70:6d:70:d7:eb:cc:d4:72: 4c:26:38:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xx84CsqFmafbJ4nbUSzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjZiYzJkYTNjMmM2NDJiMTRhZTEyOWMxYmZmZjI2Nzg1 MmQ2ZmMwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjgzYTJhNTM3MzA1MTFlNDYxZGVlM2M3NDhjNzRiOThiYTc5MjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/c1a+XqxzfgSddfzYptL2Hpq22D BgoVcgIzfIC6OV8XFIK3WdlmoPXtgbXJssKZICtmc3ANwMW4YOSttxt6agMPa8Ei TWfvvGHfB5QWnYAnFnoCYNn086hnNZa6NTdvzEvm+T8rKbpsCf18XQedmvWaPUrG 2tq+HQMs/xqqAcKl5+H4g6QYuGFGK5k1Zz9GejAYrfSWVZyFNSqGbsEAh5CXVA0S VnJajvg6lDbTWjoPijfWbxPZnyWqeU6QFOVSpXYx2qIe7gQgP/yq0bvgG1vpGYSO B/PzvNyFOTPxu/te32WvpgWTeiRdn+5Q+sxXPORUjBOurH0eICl5wfqshQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCuDoqU3MFEeRh3uPHSMdLmLp5IFMB8GA1UdIwQY MBaAFFr2vC2jwsZCsUrhKcG//yZ4Utb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTkt OWFkYWE0YjJiMTk2LzEvSzRPaXBUY3dVUjVHSGU0OGRJeDB1WXVua2dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTktOWFkYWE0YjJiMTk2 LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8xRMA8E AgACMAkDBwAgAQZ4BaAwDQYJKoZIhvcNAQELBQADggEBAE+vsabWJS1w9fVJy4qG xajuRQkMJBNCDSSn2sOcyuvFhIYdZhdo1zeFzEwYzXoAqyG3KMVD4LTfZAEsgWl3 d2c5QsE0gYLFvgjLIijZbNEkS9KbroNVAXxB0O0YFGLRhBB3d0QqEkPXFCe0IhvS UU5QC5ht4RaF9RboV3Yd547/q+41eXeAyvQmRWDEAjFI861luh0CQuJy8cs9UHk4 MEfEx+T2G9gChkdryZxmInHm1n1wMa+0PItnp6BSrwDYBzHwM+3bKk8rpTgh3xSl e02Mhz++2icrdGLN0F3ki+rmuGzYDWi+ksIIFhYmvxQgKeNY54xwbXDX68zUckwm OA0= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:33 2026 by rpki-client