This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa File: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (raw, json) Hash identifier: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I= Subject key identifier: E1:02:18:34:B8:E1:CA:F8:4A:E0:3C:03:D5:C1:EB:F4:F8:F4:47:9F Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019B7B363304D8021557E09969BFC9D9C6B6 Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 195.210.98.0/24 maxlen: 24 195.210.99.0/24 maxlen: 24 195.210.104.0/24 maxlen: 24 195.210.105.0/24 maxlen: 24 195.210.106.0/24 maxlen: 24 195.210.107.0/24 maxlen: 24 195.210.110.0/24 maxlen: 24 195.210.111.0/24 maxlen: 24 195.210.112.0/24 maxlen: 24 195.210.113.0/24 maxlen: 24 195.210.114.0/24 maxlen: 24 195.210.115.0/24 maxlen: 24 195.210.120.0/24 maxlen: 24 195.210.121.0/24 maxlen: 24 195.210.122.0/24 maxlen: 24 195.210.123.0/24 maxlen: 24 195.210.124.0/24 maxlen: 24 195.210.125.0/24 maxlen: 24 195.210.126.0/24 maxlen: 24 195.210.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:33:04:d8:02:15:57:e0:99:69:bf:c9:d9:c6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1021834b8e1caf84ae03c03d5c1ebf4f8f4479f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:6d:7e:67:29:f0:bc:db:28:53:aa:6e:8d: 9c:1c:2f:23:51:b1:a4:5a:73:87:c7:93:db:34:40: 53:d6:4a:b4:cc:1f:77:73:83:ae:49:c0:10:f7:73: 64:bf:76:8f:77:bc:8a:0b:cf:4c:13:ca:0e:7d:d8: cc:d5:ee:d4:3e:21:29:4f:85:cc:34:41:69:76:5b: 04:7a:a2:a6:b3:0d:54:2d:b2:21:4d:73:d1:63:f8: e9:af:a3:a7:0e:01:9e:8a:e5:8c:5b:4d:90:64:f1: e3:64:a1:09:12:b4:8e:3d:2b:b4:56:49:38:e6:93: 26:c7:b2:d1:c2:cd:f2:4d:86:ef:cf:f8:4a:19:ff: 2c:24:01:c2:0a:c8:40:d4:05:fd:f0:c1:e2:0b:9d: fa:ba:87:2f:f9:82:01:f7:8c:9d:77:cb:68:86:c9: ca:4f:cd:1c:cb:99:03:0a:f7:01:cc:6c:c6:37:af: 56:ab:27:8b:92:91:8f:c5:13:a6:03:e7:ac:f2:c0: d7:d6:1b:1c:fb:dc:66:2b:9f:ab:4f:f2:c8:79:4a: 9c:3c:fc:52:d3:79:c3:dc:ef:ae:c3:ec:13:37:d5: 5a:47:23:4e:67:75:2c:95:b1:f0:9f:6e:c2:30:8b: 5d:cb:7c:52:31:1e:e1:5a:30:c0:d4:2b:89:ce:cf: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:02:18:34:B8:E1:CA:F8:4A:E0:3C:03:D5:C1:EB:F4:F8:F4:47:9F X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.98.0/23 195.210.104.0/22 195.210.110.0-195.210.115.255 195.210.120.0/21 Signature Algorithm: sha256WithRSAEncryption b4:90:48:e8:83:0f:85:19:14:57:54:b1:ee:69:2c:41:aa:cb: 97:86:19:8f:da:59:fa:cb:8a:92:c8:09:69:46:a1:23:be:38: b5:75:20:98:bc:37:c5:4d:5f:9e:ce:7d:ea:b9:79:f9:18:17: d7:4f:4d:e4:20:e6:56:fc:4b:83:c3:15:76:11:e3:9c:21:42: 84:ce:c6:52:d7:64:0e:bd:4f:42:5f:b6:3c:93:03:d7:35:87: 99:a6:d6:25:12:bf:59:f6:47:71:77:33:1b:91:ba:4f:06:fc: 48:c9:02:37:33:e0:95:80:4d:fc:60:f8:ab:32:42:3d:64:84: d5:1f:af:c2:c7:3e:0c:e9:24:64:ac:98:4f:51:85:81:54:05: 68:37:99:94:bb:e6:e3:7a:e6:8d:c5:51:fc:53:c7:7e:7e:c7: 2d:e4:1c:05:07:58:5f:32:1b:42:00:a0:42:65:63:13:16:a0: 2f:47:4a:b3:51:17:4f:f0:c8:10:db:02:7e:1a:60:7a:2b:b6: 50:15:ba:48:55:90:ab:a0:aa:88:bf:54:14:d2:22:7c:34:5a: 63:2f:b7:76:9f:ed:26:b7:01:eb:07:ab:4a:32:12:23:76:60: 59:a7:4f:97:4e:66:d8:40:11:62:30:6e:8d:ad:ea:21:df:e4: f4:db:30:b9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NjME2AIVV+CZab/J2ca2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTAyMTgzNGI4ZTFjYWY4NGFlMDNjMDNkNWMxZWJmNGY4ZjQ0NzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAFtfmcp8LzbKFOqbo2cHC8jUbGk WnOHx5PbNEBT1kq0zB93c4OuScAQ93Nkv3aPd7yKC89ME8oOfdjM1e7UPiEpT4XM NEFpdlsEeqKmsw1ULbIhTXPRY/jpr6OnDgGeiuWMW02QZPHjZKEJErSOPSu0Vkk4 5pMmx7LRws3yTYbvz/hKGf8sJAHCCshA1AX98MHiC536uocv+YIB94ydd8tohsnK T80cy5kDCvcBzGzGN69WqyeLkpGPxROmA+es8sDX1hsc+9xmK5+rT/LIeUqcPPxS 03nD3O+uw+wTN9VaRyNOZ3UslbHwn27CMItdy3xSMR7hWjDA1CuJzs+fEwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOECGDS44cr4SuA8A9XB6/T49EefMB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvNFFJWU5Mamh5dmhLNER3RDFjSHI5UGowUjU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5 LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBw9JiAwQC w9JoMAwDBAHD0m4DBALD0nADBAPD0ngwDQYJKoZIhvcNAQELBQADggEBALSQSOiD D4UZFFdUse5pLEGqy5eGGY/aWfrLipLICWlGoSO+OLV1IJi8N8VNX57Ofeq5efkY F9dPTeQg5lb8S4PDFXYR45whQoTOxlLXZA69T0JftjyTA9c1h5mm1iUSv1n2R3F3 MxuRuk8G/EjJAjcz4JWATfxg+KsyQj1khNUfr8LHPgzpJGSsmE9RhYFUBWg3mZS7 5uN65o3FUfxTx35+xy3kHAUHWF8yG0IAoEJlYxMWoC9HSrNRF0/wyBDbAn4aYHor tlAVukhVkKugqoi/VBTSInw0WmMvt3af7Sa3AesHq0oyEiN2YFmnT5dOZthAEWIw bo2t6iHf5PTbMLk= -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:26 2026 by rpki-client