This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4vBKm8T185zkMBzsAX8woPUCMos.roa File: 4vBKm8T185zkMBzsAX8woPUCMos.roa (raw, json) Hash identifier: FneFCiUlKeBgC8MF6oNmIwzfu5wYJ73w47936oyFZIw= Subject key identifier: E2:F0:4A:9B:C4:F5:F3:9C:E4:30:1C:EC:01:7F:30:A0:F5:02:32:8B Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C13069DFDAD68C93752E67DAC9C3C1A Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4vBKm8T185zkMBzsAX8woPUCMos.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208813 IP address blocks: 194.209.6.0/24 maxlen: 24 2001:918:fff2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:06:9d:fd:ad:68:c9:37:52:e6:7d:ac:9c:3c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2f04a9bc4f5f39ce4301cec017f30a0f502328b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:f8:b7:86:ea:f4:a6:66:43:2c:72:f7:47: 5f:2c:d6:06:ed:22:7d:fe:17:c0:68:66:83:06:a8: fd:ee:c7:3f:5d:5f:12:ae:87:92:2a:e9:30:b1:b7: 65:17:be:fe:63:21:81:b9:51:76:ac:20:ab:03:54: 05:e3:ab:84:09:cf:48:2d:f3:80:2d:a6:ee:f9:fc: 14:6d:3f:f7:b4:48:a9:25:aa:9d:b1:48:34:c8:30: 61:b6:0c:e3:15:2d:a8:b4:3e:0e:7d:a4:2c:9a:71: 46:c0:44:c2:01:5c:0a:41:10:d0:a8:95:1f:bf:45: 74:6a:5f:b4:b1:95:da:eb:55:50:b8:ca:38:78:c8: ef:fc:61:05:68:f8:d4:e9:32:de:f0:5e:3f:cb:f0: 4a:5b:3d:b2:a3:2a:9a:92:df:f9:b3:97:e8:7d:cf: bd:1a:80:83:23:fc:ad:2e:be:22:ec:9b:fb:be:8a: 97:b9:72:f1:d6:af:e7:e9:7b:50:38:05:66:a9:39: dd:85:fb:a1:47:77:bd:3a:54:0e:4e:83:0e:63:0d: 6b:a8:cf:64:fb:ca:6a:fc:7a:4b:db:f2:15:f6:30: fa:44:6c:38:20:fe:a0:f3:a9:08:0b:e4:b4:a3:83: 22:ce:b4:4a:eb:32:f0:69:1b:57:8a:ec:67:8b:cb: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F0:4A:9B:C4:F5:F3:9C:E4:30:1C:EC:01:7F:30:A0:F5:02:32:8B X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/4vBKm8T185zkMBzsAX8woPUCMos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.6.0/24 IPv6: 2001:918:fff2::/48 Signature Algorithm: sha256WithRSAEncryption af:db:fb:5c:4d:57:aa:e7:48:be:f9:e3:c4:60:d1:43:a4:ce: b7:5a:0a:e8:d0:91:72:41:04:91:f1:71:33:a3:18:2f:f9:9d: 50:d5:a9:f0:f6:76:6f:3c:9d:0b:a9:a3:0f:12:07:54:de:7b: 78:ef:3d:c1:00:5d:83:dc:bf:af:ee:f1:1f:a1:fd:30:64:be: e8:83:52:32:87:5a:5e:66:cc:7a:14:9b:50:90:de:f1:a0:ac: 48:62:84:8f:d3:f8:da:7e:94:23:9c:88:07:a6:d1:d3:ec:f8: 4c:02:03:82:c8:ad:94:4f:96:a4:8f:3e:41:f3:f2:d7:d3:56: 7f:47:5e:7c:a6:d2:ed:da:fa:4a:45:66:92:53:bb:1a:0f:35: dd:44:31:d7:fc:0a:18:1d:28:ac:f8:8f:c6:db:04:32:58:50: 62:52:e9:1b:f2:d0:bc:35:4f:be:91:47:f4:6a:6f:88:07:bf: 7d:28:05:d3:c6:1b:23:0f:01:0f:3d:11:da:b0:1a:82:b2:68: 4a:64:d9:b3:4c:49:b1:c0:0a:70:80:42:9a:38:14:fd:ca:0e: b3:8c:5b:03:54:da:95:75:d8:44:ba:92:84:51:e5:3a:58:20: 7c:65:98:17:64:8b:c2:94:9a:a8:e6:c4:e7:85:10:45:a1:81: 99:00:3f:41 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ewad/a1oyTdS5n2snDwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmYwNGE5YmM0ZjVmMzljZTQzMDFjZWMwMTdmMzBhMGY1MDIzMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcb4t4bq9KZmQyxy90dfLNYG7SJ9 /hfAaGaDBqj97sc/XV8SroeSKukwsbdlF77+YyGBuVF2rCCrA1QF46uECc9ILfOA Labu+fwUbT/3tEipJaqdsUg0yDBhtgzjFS2otD4OfaQsmnFGwETCAVwKQRDQqJUf v0V0al+0sZXa61VQuMo4eMjv/GEFaPjU6TLe8F4/y/BKWz2yoyqakt/5s5fofc+9 GoCDI/ytLr4i7Jv7voqXuXLx1q/n6XtQOAVmqTndhfuhR3e9OlQOToMOYw1rqM9k +8pq/HpL2/IV9jD6RGw4IP6g86kIC+S0o4MizrRK6zLwaRtXiuxni8vANwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOLwSpvE9fOc5DAc7AF/MKD1AjKLMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvNHZCS204VDE4NXprTUJ6c0FYOHdvUFVDTW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwtEGMA8E AgACMAkDBwAgAQkY//IwDQYJKoZIhvcNAQELBQADggEBAK/b+1xNV6rnSL7548Rg 0UOkzrdaCujQkXJBBJHxcTOjGC/5nVDVqfD2dm88nQupow8SB1Tee3jvPcEAXYPc v6/u8R+h/TBkvuiDUjKHWl5mzHoUm1CQ3vGgrEhihI/T+Np+lCOciAem0dPs+EwC A4LIrZRPlqSPPkHz8tfTVn9HXnym0u3a+kpFZpJTuxoPNd1EMdf8ChgdKKz4j8bb BDJYUGJS6Rvy0Lw1T76RR/Rqb4gHv30oBdPGGyMPAQ89EdqwGoKyaEpk2bNMSbHA CnCAQpo4FP3KDrOMWwNU2pV12ES6koRR5TpYIHxlmBdki8KUmqjmxOeFEEWhgZkA P0E= -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:39 2026 by rpki-client