This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4RE8TsLT-hvI88s4BvXA4xN_nYs.roa File: 4RE8TsLT-hvI88s4BvXA4xN_nYs.roa (raw, json) Hash identifier: iEF3Z3h//zsLTKKEi6zdbn9xe/YqdwP0A0EuXign/lA= Subject key identifier: E1:11:3C:4E:C2:D3:FA:1B:C8:F3:CB:38:06:F5:C0:E3:13:7F:9D:8B Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F85464D848BCC0B979342BC7B81A0EF Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4RE8TsLT-hvI88s4BvXA4xN_nYs.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206582 IP address blocks: 193.31.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:46:4d:84:8b:cc:0b:97:93:42:bc:7b:81:a0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1113c4ec2d3fa1bc8f3cb3806f5c0e3137f9d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:19:50:00:6f:ea:29:38:3b:ed:e0:75:d3: 3e:cf:b5:b9:49:56:d6:03:fd:93:c8:78:f6:9e:c6: b4:fe:6e:7e:3a:44:03:07:e2:33:05:be:5b:da:b7: b9:89:51:63:06:0e:37:19:8a:45:d7:c7:5b:fb:8a: 04:cc:20:6f:09:ac:15:ce:12:9a:12:64:5c:b0:b2: 98:02:5e:ba:8e:91:e0:54:f3:43:05:ca:00:45:72: 85:a6:f8:a9:e5:9e:01:85:d8:6e:69:33:ff:ea:d1: 9d:bd:40:07:67:0c:08:2f:a1:d2:f3:55:d6:56:bd: d5:33:cc:22:00:ea:ae:7f:a8:a0:6c:26:6b:07:e1: 54:26:05:b3:9c:d0:33:ce:34:19:2a:89:c4:a0:69: 61:65:94:94:03:82:9a:23:49:6b:0b:64:6b:94:68: 35:f6:74:32:ce:8e:05:14:b2:6e:52:fe:94:93:33: b8:40:20:2e:68:7f:da:02:d0:81:c8:84:9c:da:f9: 2d:1d:7a:34:db:7f:4b:c1:ef:4e:e7:ed:1d:ef:f9: 08:07:91:9a:b1:4f:ef:5a:81:42:88:95:4d:0a:63: d5:3d:6b:fc:0c:00:ce:c1:bf:60:45:24:34:e7:aa: 77:d5:aa:c4:b5:e5:d2:dd:a8:63:0b:22:41:83:d8: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:11:3C:4E:C2:D3:FA:1B:C8:F3:CB:38:06:F5:C0:E3:13:7F:9D:8B X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4RE8TsLT-hvI88s4BvXA4xN_nYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.104.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:02:bd:36:7d:14:62:31:c4:c0:30:7f:4d:74:68:e3:d8:f5: 1b:84:67:f0:ad:3e:53:26:f0:36:d2:b8:9a:b1:13:18:47:6b: 2b:89:d1:3f:44:7d:89:06:c8:4a:e2:ef:a6:04:39:10:05:c0: 65:bd:8a:fe:2a:ee:34:89:a4:cc:58:a7:05:35:52:39:fc:f8: d3:ca:91:47:a4:e3:f5:86:12:0c:d0:5e:c4:a3:44:13:98:20: ee:e0:d3:35:62:dc:63:36:2d:13:22:38:25:07:55:af:dc:80: 1a:cc:24:21:0a:0b:68:45:28:1e:3f:ea:76:ec:de:90:94:7d: 26:66:a4:7f:24:b8:ce:2f:71:ae:80:6b:d6:5b:63:74:63:53: 81:f2:0d:f9:fe:6b:22:16:d1:85:6d:d0:73:ce:f1:25:07:10: 77:e5:e3:b7:26:ba:f2:65:bf:3b:4c:1d:ed:df:f3:ea:21:5a: 9c:71:74:d4:f0:18:80:9b:62:0d:d3:f2:8a:f2:89:95:95:1f: f1:7a:0f:e1:54:4e:ed:15:d8:71:2f:5d:8b:d4:fe:7f:e2:f4: 82:3b:5a:95:5f:7d:24:a8:7c:40:de:87:7a:6d:e5:39:cf:71: 44:b4:18:b0:b3:b2:97:cc:20:d3:a0:e7:86:1d:7c:3b:8b:11: 41:86:f3:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUZNhIvMC5eTQrx7gaDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTExM2M0ZWMyZDNmYTFiYzhmM2NiMzgwNmY1YzBlMzEzN2Y5ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lgZUABv6ik4O+3gddM+z7W5SVbW A/2TyHj2nsa0/m5+OkQDB+IzBb5b2re5iVFjBg43GYpF18db+4oEzCBvCawVzhKa EmRcsLKYAl66jpHgVPNDBcoARXKFpvip5Z4BhdhuaTP/6tGdvUAHZwwIL6HS81XW Vr3VM8wiAOquf6igbCZrB+FUJgWznNAzzjQZKonEoGlhZZSUA4KaI0lrC2RrlGg1 9nQyzo4FFLJuUv6UkzO4QCAuaH/aAtCByISc2vktHXo0239Lwe9O5+0d7/kIB5Ga sU/vWoFCiJVNCmPVPWv8DADOwb9gRSQ056p31arEteXS3ahjCyJBg9j4+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOERPE7C0/obyPPLOAb1wOMTf52LMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvNFJFOFRzTFQtaHZJODhzNEJ2WEE0eE5fbllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwR9oMA0G CSqGSIb3DQEBCwUAA4IBAQB/Ar02fRRiMcTAMH9NdGjj2PUbhGfwrT5TJvA20ria sRMYR2sridE/RH2JBshK4u+mBDkQBcBlvYr+Ku40iaTMWKcFNVI5/PjTypFHpOP1 hhIM0F7Eo0QTmCDu4NM1YtxjNi0TIjglB1Wv3IAazCQhCgtoRSgeP+p27N6QlH0m ZqR/JLjOL3GugGvWW2N0Y1OB8g35/msiFtGFbdBzzvElBxB35eO3JrryZb87TB3t 3/PqIVqccXTU8BiAm2IN0/KK8omVlR/xeg/hVE7tFdhxL12L1P5/4vSCO1qVX30k qHxA3od6beU5z3FEtBiws7KXzCDToOeGHXw7ixFBhvNK -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:20 2026 by rpki-client