This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa File: 4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa (raw, json) Hash identifier: m7wSLBG3yMM59qxFhuh+wuLPCbDahbo3ByN0pwy2TGw= Subject key identifier: E1:03:24:B1:C6:D2:E8:F7:F7:F4:BC:DE:1F:F3:15:AB:31:BF:F4:09 Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790 Certificate serial: 019B7E3815AA49A9536568A85330D7C5D3B3 Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29329 IP address blocks: 83.243.72.0/21 maxlen: 32 91.151.192.0/20 maxlen: 32 185.16.100.0/22 maxlen: 32 193.84.8.0/24 maxlen: 32 195.135.232.0/22 maxlen: 32 2a0f:6a40::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:15:aa:49:a9:53:65:68:a8:53:30:d7:c5:d3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10324b1c6d2e8f7f7f4bcde1ff315ab31bff409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:a3:2e:6a:25:1e:42:a6:b3:27:da:f4:e1: c6:1b:d2:50:34:12:3b:4e:aa:8e:5a:e0:5b:a0:67: a2:c8:38:55:e3:fa:6e:ae:8e:b4:0c:fe:cc:c9:18: b7:cf:42:18:9d:43:f2:ee:c8:96:41:d1:0d:bf:aa: 10:1c:46:22:44:f4:6e:2d:9d:9d:77:52:b1:3a:65: 5f:f0:3c:bf:7b:d2:da:c2:ac:11:85:72:10:0f:bf: 56:5c:c2:83:b2:db:02:d6:0a:27:ba:ec:fd:95:99: 8e:e2:2b:51:4b:5a:ec:16:fb:b2:2f:0a:ab:ed:10: 93:1e:46:1e:c3:14:98:57:a7:16:4f:11:6c:5c:8b: a6:1c:30:9c:fb:15:3e:b4:b6:c3:e8:96:45:6c:e9: 96:75:b1:7d:68:0b:0d:ce:80:9e:d2:5f:1e:b3:72: ef:7f:7c:71:2a:db:3d:f2:b4:47:7d:73:78:86:e7: 97:95:d2:d7:d1:39:c5:a2:ff:79:70:c6:7f:6a:77: 19:55:bb:09:df:fb:ed:fd:d1:ea:10:e9:bf:f7:e2: e0:5c:90:91:93:ff:63:d6:30:74:ef:a9:6a:05:03: 68:5d:89:3c:c4:54:3e:65:86:dd:8a:ec:d1:ea:04: 47:c0:e9:14:88:61:83:59:29:89:da:76:86:81:fa: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:24:B1:C6:D2:E8:F7:F7:F4:BC:DE:1F:F3:15:AB:31:BF:F4:09 X509v3 Authority Key Identifier: keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/4QMkscbS6Pf39LzeH_MVqzG_9Ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.243.72.0/21 91.151.192.0/20 185.16.100.0/22 193.84.8.0/24 195.135.232.0/22 IPv6: 2a0f:6a40::/29 Signature Algorithm: sha256WithRSAEncryption 37:8c:ad:64:1e:42:f7:de:1c:26:c3:ae:09:98:5a:5a:e2:a0: 23:45:b9:8d:cb:77:cc:66:88:67:51:7c:bf:66:52:96:ec:4d: 16:31:e8:1e:9c:bf:89:34:86:c6:69:00:fe:c8:c2:ee:8e:69: ae:8f:4f:b8:19:37:d0:c3:09:86:6c:ce:33:b8:1e:74:5e:ac: d7:5c:12:f9:ce:1b:24:65:fd:9b:c4:8a:f3:b9:ad:b0:1b:b2: 6c:24:51:d3:20:ff:43:a2:21:2a:3e:d9:f2:a1:fa:f2:62:b6: d6:9d:26:b7:c7:45:06:57:91:5b:d7:55:d6:1d:f7:af:52:93: 36:2a:4c:91:1b:a9:17:02:a7:12:96:9f:6f:28:ee:d3:a1:1b: f2:8f:87:fd:d3:38:ff:17:9a:13:6f:b6:4d:8c:9c:54:53:7e: fb:bf:2b:48:85:98:71:e3:b9:04:dc:68:08:20:a6:a7:7b:91: c8:06:fe:8f:af:16:d2:ba:5d:ab:6d:e1:c7:f8:8c:02:78:61: 85:68:68:04:04:61:ec:fe:98:d9:64:8f:26:d4:f9:97:6f:66: 6f:69:a8:f9:f9:4b:a4:41:6e:34:fb:cf:8f:d1:43:37:d5:b3: 80:83:0a:1c:82:1e:3a:59:e4:a9:05:95:7f:68:0e:5e:1c:18: 4a:23:da:2e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+OBWqSalTZWioUzDXxdOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDhlZTYzZjE5ZDBjMWYyMmM2ZjYxY2U0YTgxZWNlYWJi OGU3OTAwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTAzMjRiMWM2ZDJlOGY3ZjdmNGJjZGUxZmYzMTVhYjMxYmZmNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/WjLmolHkKmsyfa9OHGG9JQNBI7 TqqOWuBboGeiyDhV4/puro60DP7MyRi3z0IYnUPy7siWQdENv6oQHEYiRPRuLZ2d d1KxOmVf8Dy/e9LawqwRhXIQD79WXMKDstsC1gonuuz9lZmO4itRS1rsFvuyLwqr 7RCTHkYewxSYV6cWTxFsXIumHDCc+xU+tLbD6JZFbOmWdbF9aAsNzoCe0l8es3Lv f3xxKts98rRHfXN4hueXldLX0TnFov95cMZ/ancZVbsJ3/vt/dHqEOm/9+LgXJCR k/9j1jB076lqBQNoXYk8xFQ+ZYbdiuzR6gRHwOkUiGGDWSmJ2naGgfr5dwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOEDJLHG0uj39/S83h/zFasxv/QJMB8GA1UdIwQY MBaAFPRI7mPxnQwfIsb2HOSoHs6ruOeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEt NzE5NDAxYmJjYTJlLzEvNFFNa3NjYlM2UGYzOUx6ZUhfTVZxekdfOUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82NDAxZTgtODJkZC00ODExLTgwMTEtNzE5NDAxYmJjYTJl LzEvOUVqdVlfR2REQjhpeHZZYzVLZ2V6cXU0NTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDU/NIAwQE W5fAAwQCuRBkAwQAwVQIAwQCw4foMA0EAgACMAcDBQMqD2pAMA0GCSqGSIb3DQEB CwUAA4IBAQA3jK1kHkL33hwmw64JmFpa4qAjRbmNy3fMZohnUXy/ZlKW7E0WMege nL+JNIbGaQD+yMLujmmuj0+4GTfQwwmGbM4zuB50XqzXXBL5zhskZf2bxIrzua2w G7JsJFHTIP9DoiEqPtnyofryYrbWnSa3x0UGV5Fb11XWHfevUpM2KkyRG6kXAqcS lp9vKO7ToRvyj4f90zj/F5oTb7ZNjJxUU377vytIhZhx47kE3GgIIKane5HIBv6P rxbSul2rbeHH+IwCeGGFaGgEBGHs/pjZZI8m1PmXb2Zvaaj5+UukQW40+8+P0UM3 1bOAgwocgh46WeSpBZV/aA5eHBhKI9ou -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:45 2026 by rpki-client