This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/4fbgFa6GvTqqcjYlurF6zMAbUxU.roa File: 4fbgFa6GvTqqcjYlurF6zMAbUxU.roa (raw, json) Hash identifier: sZPTuK66tBBHQ1AdZaXS66HrSE4SC3JlskXXVG/zbVk= Subject key identifier: E1:F6:E0:15:AE:86:BD:3A:AA:72:36:25:BA:B1:7A:CC:C0:1B:53:15 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6EA079590479124317EF6F0197840 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/4fbgFa6GvTqqcjYlurF6zMAbUxU.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 178.254.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ea:07:95:90:47:91:24:31:7e:f6:f0:19:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1f6e015ae86bd3aaa723625bab17accc01b5315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:f4:56:7e:f3:08:eb:49:88:1b:9f:25:58: 9b:6f:b7:db:ff:b4:d7:b1:b7:4c:10:54:3f:4c:d4: 4b:cf:68:60:18:3d:80:b8:7d:07:47:a4:c0:b3:fe: 76:d2:9f:ac:af:6c:0c:25:e3:1c:e0:d7:58:f1:d6: b0:92:52:9f:31:a9:f2:9a:2d:70:56:46:07:9b:3a: 59:54:8e:0e:4a:82:32:ff:8d:d2:f2:61:6e:f4:0f: 86:73:50:3e:4c:81:df:45:13:98:d7:3e:77:55:9f: d8:c9:d9:03:7e:9d:71:81:56:62:96:83:0f:72:f7: 10:e5:f9:3d:c7:0c:90:ba:6b:11:7d:ca:ad:b2:86: 5c:ff:f3:e3:e0:7a:82:cf:a0:9a:3f:a5:ab:af:8e: 39:e1:de:1d:82:24:b8:55:18:f4:4c:64:7e:81:22: da:59:30:29:3d:3f:6e:fe:f4:e0:a0:eb:a4:1b:f2: 46:cc:d0:15:2c:06:99:d6:97:9e:21:3b:6b:ab:e2: 9f:7f:96:95:42:8d:50:c5:16:32:70:ca:b6:98:ee: 19:0d:d4:0b:00:7e:e9:9b:34:f0:88:64:10:f6:14: 1e:13:c2:da:84:69:e0:f4:b1:db:61:60:e3:ce:be: bb:09:85:86:57:05:e1:74:da:6f:7f:1f:f3:05:da: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F6:E0:15:AE:86:BD:3A:AA:72:36:25:BA:B1:7A:CC:C0:1B:53:15 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/4fbgFa6GvTqqcjYlurF6zMAbUxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.254.168.0/24 Signature Algorithm: sha256WithRSAEncryption 80:82:ea:3a:2d:0b:df:19:43:0f:e2:7d:da:c4:6e:58:1f:8d: 12:59:5f:06:4b:b5:65:e2:7e:11:ba:3a:42:c7:de:ed:d6:bd: ed:a5:1f:3c:db:15:9d:1f:6a:3b:e5:ed:eb:d9:e7:fb:5f:f8: f8:0b:fb:a9:61:e8:b4:bc:18:e6:6d:be:3e:ff:a1:5a:af:50: 44:fa:5c:b2:97:29:f5:d1:ec:9b:5a:16:31:c7:bb:f7:6f:a3: 7b:50:f5:86:f1:3f:c7:c8:a5:c3:d3:60:b7:6d:cf:c4:63:dc: b7:2a:81:44:e6:28:ad:47:83:73:d8:46:5f:6c:06:32:ad:ef: cb:97:d8:c9:57:20:5d:17:28:40:2d:42:3d:e2:a4:1a:76:99: e3:bc:10:cf:34:f9:96:94:7d:b2:62:7c:93:50:10:2f:ae:af: c6:dc:ed:f6:a0:2e:03:eb:e1:f7:36:a0:86:f2:72:02:24:9b: b1:5a:48:d0:c8:f2:e4:0f:86:e9:ed:4c:67:b4:73:b3:0c:31: 53:bc:a4:27:79:6e:93:77:c9:24:c5:98:2e:41:ee:33:23:1a: 9d:88:c3:35:de:e4:0d:46:1d:3c:bd:f3:c8:7d:6c:42:54:ee: db:17:fb:cf:26:5c:3f:63:5f:b1:6a:6c:75:a9:5d:7d:c9:74: 13:2d:62:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+puoHlZBHkSQxfvbwGXhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWY2ZTAxNWFlODZiZDNhYWE3MjM2MjViYWIxN2FjY2MwMWI1MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPz0Vn7zCOtJiBufJVibb7fb/7TX sbdMEFQ/TNRLz2hgGD2AuH0HR6TAs/520p+sr2wMJeMc4NdY8dawklKfManymi1w VkYHmzpZVI4OSoIy/43S8mFu9A+Gc1A+TIHfRROY1z53VZ/YydkDfp1xgVZiloMP cvcQ5fk9xwyQumsRfcqtsoZc//Pj4HqCz6CaP6Wrr4454d4dgiS4VRj0TGR+gSLa WTApPT9u/vTgoOukG/JGzNAVLAaZ1peeITtrq+Kff5aVQo1QxRYycMq2mO4ZDdQL AH7pmzTwiGQQ9hQeE8LahGng9LHbYWDjzr67CYWGVwXhdNpvfx/zBdoMzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOH24BWuhr06qnI2JbqxeszAG1MVMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvNGZiZ0ZhNkd2VHFxY2pZbHVyRjZ6TUFiVXhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv6oMA0G CSqGSIb3DQEBCwUAA4IBAQCAguo6LQvfGUMP4n3axG5YH40SWV8GS7Vl4n4RujpC x97t1r3tpR882xWdH2o75e3r2ef7X/j4C/upYei0vBjmbb4+/6Far1BE+lyylyn1 0eybWhYxx7v3b6N7UPWG8T/HyKXD02C3bc/EY9y3KoFE5iitR4Nz2EZfbAYyre/L l9jJVyBdFyhALUI94qQadpnjvBDPNPmWlH2yYnyTUBAvrq/G3O32oC4D6+H3NqCG 8nICJJuxWkjQyPLkD4bp7UxntHOzDDFTvKQneW6Td8kkxZguQe4zIxqdiMM13uQN Rh08vfPIfWxCVO7bF/vPJlw/Y1+xamx1qV19yXQTLWIf -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:49 2026 by rpki-client