This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/4l82aU37AqmgAJlyCPGwmnooDcg.roa File: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (raw, json) Hash identifier: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ= Subject key identifier: E2:5F:36:69:4D:FB:02:A9:A0:00:99:72:08:F1:B0:9A:7A:28:0D:C8 Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Certificate serial: 019B7F15F5A3C37FA71CFFA1EB594C7000AD Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/4l82aU37AqmgAJlyCPGwmnooDcg.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8298 IP address blocks: 92.119.38.0/24 maxlen: 24 2a0b:dd80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f5:a3:c3:7f:a7:1c:ff:a1:eb:59:4c:70:00:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25f36694dfb02a9a000997208f1b09a7a280dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:39:26:84:af:40:13:53:55:57:46:7d:b6: 96:ec:99:b4:d2:42:f1:36:c0:94:e4:3d:90:2b:6e: 63:58:be:f8:66:6a:79:41:0a:06:5b:30:64:29:52: 68:0e:dd:79:5d:e1:9a:99:6c:64:05:03:c1:8e:16: f8:fd:d0:01:f1:65:c9:0e:73:e7:3e:75:a2:a2:3a: de:09:00:17:ce:7e:5a:0e:d4:8c:9e:ae:27:66:bf: 98:b6:e2:3e:9d:e8:95:6d:45:23:dc:98:15:38:2d: 8a:2c:f1:b2:e9:00:b9:35:a4:f3:39:43:c3:13:ed: 39:42:33:98:91:5b:53:6c:9a:e0:95:84:33:d9:82: ac:f1:94:e9:78:cf:88:b9:a2:7f:89:b4:bd:8f:df: 86:ab:c7:59:c0:b9:88:7d:cf:e7:2d:d9:f3:c6:5c: 0d:3d:10:0a:76:4a:25:78:0a:be:21:32:09:89:c2: 60:f2:d4:9b:ca:96:db:5d:49:1b:a9:99:f2:52:98: cf:aa:24:e9:af:ae:5b:ef:55:87:92:71:b2:77:a5: 83:3f:cf:3b:2a:54:fa:64:0a:c8:cd:1f:ff:98:6e: 1c:08:0b:87:bd:5f:c6:ae:5b:d6:e8:de:f7:54:c5: 9a:d0:25:b6:f6:82:62:6c:74:40:89:4e:9a:3b:e3: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5F:36:69:4D:FB:02:A9:A0:00:99:72:08:F1:B0:9A:7A:28:0D:C8 X509v3 Authority Key Identifier: keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/4l82aU37AqmgAJlyCPGwmnooDcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.38.0/24 IPv6: 2a0b:dd80::/29 Signature Algorithm: sha256WithRSAEncryption 70:12:cd:fe:5d:1a:9c:77:f6:fc:9a:8d:2f:5e:a2:fe:3d:af: e4:e1:77:30:55:16:7a:ba:82:56:10:40:1c:70:2b:d3:82:51: 38:96:27:cd:f1:87:91:ae:5f:20:3f:c5:2a:ee:e2:e9:45:5c: 5a:d0:77:24:ba:f5:ff:b0:dd:cd:92:7f:27:a4:82:dc:0a:cb: e4:e9:d4:6a:63:7f:05:cb:d3:2c:53:68:83:8d:a8:f1:66:91: 58:e6:26:f7:cb:79:99:6e:f0:b2:84:d6:80:d7:79:87:d7:ff: b2:8a:01:ea:8f:2e:ab:b7:92:e6:16:ee:b2:99:51:ee:aa:3c: ab:97:12:d1:c7:5a:bd:50:4a:b5:67:ee:f9:b4:ca:d1:e2:f7: 7f:06:e8:e5:0f:dc:35:af:fb:3d:db:22:86:63:8a:71:7e:2b: b7:5a:ee:36:40:fe:86:07:94:8c:c5:20:47:23:7b:26:19:91: 98:aa:a7:81:c2:f2:84:b1:d5:1f:a3:e5:4a:c5:a0:e1:7f:08: 62:93:57:e1:cd:85:1d:29:08:fc:d6:b3:ee:9e:9a:1d:e1:f6: 26:6d:3d:8f:66:8c:e0:66:df:f4:03:fc:83:cd:b7:c6:ed:68: 13:5f:5d:df:46:6b:05:96:0e:a0:b8:6e:88:f3:ca:1d:77:69: 09:ca:53:da -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FfWjw3+nHP+h61lMcACtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy YWQ0ODEwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjVmMzY2OTRkZmIwMmE5YTAwMDk5NzIwOGYxYjA5YTdhMjgwZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2A5JoSvQBNTVVdGfbaW7Jm00kLx NsCU5D2QK25jWL74Zmp5QQoGWzBkKVJoDt15XeGamWxkBQPBjhb4/dAB8WXJDnPn PnWiojreCQAXzn5aDtSMnq4nZr+YtuI+neiVbUUj3JgVOC2KLPGy6QC5NaTzOUPD E+05QjOYkVtTbJrglYQz2YKs8ZTpeM+IuaJ/ibS9j9+Gq8dZwLmIfc/nLdnzxlwN PRAKdkoleAq+ITIJicJg8tSbypbbXUkbqZnyUpjPqiTpr65b71WHknGyd6WDP887 KlT6ZArIzR//mG4cCAuHvV/GrlvW6N73VMWa0CW29oJibHRAiU6aO+PC/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOJfNmlN+wKpoACZcgjxsJp6KA3IMB8GA1UdIwQY MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt NDA4NThiOTVmY2Y1LzEvNGw4MmFVMzdBcW1nQUpseUNQR3dtbm9vRGNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1 LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXHcmMA0E AgACMAcDBQMqC92AMA0GCSqGSIb3DQEBCwUAA4IBAQBwEs3+XRqcd/b8mo0vXqL+ Pa/k4XcwVRZ6uoJWEEAccCvTglE4lifN8YeRrl8gP8Uq7uLpRVxa0HckuvX/sN3N kn8npILcCsvk6dRqY38Fy9MsU2iDjajxZpFY5ib3y3mZbvCyhNaA13mH1/+yigHq jy6rt5LmFu6ymVHuqjyrlxLRx1q9UEq1Z+75tMrR4vd/BujlD9w1r/s92yKGY4px fiu3Wu42QP6GB5SMxSBHI3smGZGYqqeBwvKEsdUfo+VKxaDhfwhik1fhzYUdKQj8 1rPunpod4fYmbT2PZozgZt/0A/yDzbfG7WgTX13fRmsFlg6guG6I88odd2kJylPa -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:43 2026 by rpki-client