This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa File: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (raw, json) Hash identifier: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI= Subject key identifier: E0:1B:F9:C5:0D:DE:3A:4B:56:6C:D8:A4:B0:E2:3A:FC:2C:83:63:01 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019B7758DA5AD763C06DDF49204DD2CA5794 Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209985 IP address blocks: 193.160.92.0/22 maxlen: 22 193.160.92.0/24 maxlen: 24 193.160.93.0/24 maxlen: 24 193.160.94.0/24 maxlen: 24 193.160.95.0/24 maxlen: 24 2a0d:ed40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:da:5a:d7:63:c0:6d:df:49:20:4d:d2:ca:57:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e01bf9c50dde3a4b566cd8a4b0e23afc2c836301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:75:9f:49:aa:4f:06:b7:fc:a8:17:25:6e: e5:f7:95:73:21:c1:52:dd:ad:05:52:aa:04:f1:8d: 8b:11:fa:0f:03:92:1d:03:b7:65:9b:29:b1:25:9e: e4:e2:66:1d:11:ee:09:fe:04:f8:3a:db:05:c3:93: d0:3f:57:50:c0:4f:b6:36:44:51:1e:b4:32:7c:91: c4:97:ab:ba:c9:4e:2a:62:b9:43:17:ab:7b:2c:a5: a0:0d:0f:0c:34:78:7e:9d:78:38:d8:ba:0b:4e:9c: c2:e8:d8:dc:bb:72:18:51:ea:05:ba:5e:0e:17:19: 80:27:bc:cd:bc:78:27:47:5f:49:ae:d2:52:e7:44: a0:59:5a:d5:aa:e2:52:f2:b9:23:bb:8c:82:b2:60: 05:ec:8f:92:6d:2b:5d:f2:8e:cc:2f:3d:07:bd:b8: 75:d1:17:d0:f8:4e:37:d2:dc:64:53:15:32:ae:80: 4a:3e:00:96:44:49:c1:03:c1:d1:29:22:65:bb:65: 00:7b:0d:90:11:01:f9:44:eb:56:32:50:a1:cb:7a: 20:4a:ba:1f:b9:60:30:fe:51:09:9f:d0:c2:ff:15: 26:df:8d:ee:75:e5:6a:30:50:4f:52:c1:e4:c3:24: b2:42:8d:e5:21:31:f2:00:4f:19:e9:5c:95:f8:88: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1B:F9:C5:0D:DE:3A:4B:56:6C:D8:A4:B0:E2:3A:FC:2C:83:63:01 X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.92.0/22 IPv6: 2a0d:ed40::/32 Signature Algorithm: sha256WithRSAEncryption 46:b5:05:4a:c9:5a:f4:f0:3d:f9:33:ba:d0:ba:a8:3b:9f:57: bf:9d:b2:dd:06:2a:e0:58:67:72:1d:fe:76:c7:76:f4:9a:e1: ff:c9:d0:4f:d9:94:99:90:17:a5:b7:c3:e2:d2:52:3f:75:e7: 2c:6b:a0:f5:ea:ae:7f:a3:5f:28:5d:2e:e0:75:0b:6a:2d:8c: 17:61:c2:85:76:6a:d6:4b:d6:65:ba:1b:e3:cb:7c:ec:ba:55: 6a:f4:5a:7c:c4:d2:0f:a4:8d:18:ab:3a:ce:b9:fc:f4:c5:e6: 4b:f2:78:0a:62:83:a6:7c:87:a7:d4:60:78:1c:9a:c2:45:85: dd:e7:8d:8b:18:db:c4:fa:60:d9:ef:f0:7c:f7:f0:66:80:c3: 06:64:f3:07:f5:5f:55:2b:f5:66:81:4b:e2:93:69:ba:2a:ac: cd:e3:bd:ca:2f:d6:4a:26:7c:c3:ef:ee:ca:98:e3:8b:95:f2: 77:e0:6e:07:f9:c1:8e:71:d1:27:aa:dd:53:28:da:a6:75:96: aa:2d:54:e5:07:6d:46:37:c7:6b:59:f8:57:5c:b0:7a:22:50: e3:1d:85:7c:58:2e:32:ef:f4:e2:bb:f3:92:de:6a:2e:6a:83: e8:9c:03:1e:69:9d:12:ae:70:12:c9:bc:31:88:a6:7c:6e:47: a7:b6:56:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WNpa12PAbd9JIE3SyleUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDFiZjljNTBkZGUzYTRiNTY2Y2Q4YTRiMGUyM2FmYzJjODM2MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN51n0mqTwa3/KgXJW7l95VzIcFS 3a0FUqoE8Y2LEfoPA5IdA7dlmymxJZ7k4mYdEe4J/gT4OtsFw5PQP1dQwE+2NkRR HrQyfJHEl6u6yU4qYrlDF6t7LKWgDQ8MNHh+nXg42LoLTpzC6Njcu3IYUeoFul4O FxmAJ7zNvHgnR19JrtJS50SgWVrVquJS8rkju4yCsmAF7I+SbStd8o7MLz0Hvbh1 0RfQ+E430txkUxUyroBKPgCWREnBA8HRKSJlu2UAew2QEQH5ROtWMlChy3ogSrof uWAw/lEJn9DC/xUm343udeVqMFBPUsHkwySyQo3lITHyAE8Z6VyV+IiyNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOAb+cUN3jpLVmzYpLDiOvwsg2MBMB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvNEJ2NXhRM2VPa3RXYk5pa3NPSTZfQ3lEWXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwaBcMA0E AgACMAcDBQAqDe1AMA0GCSqGSIb3DQEBCwUAA4IBAQBGtQVKyVr08D35M7rQuqg7 n1e/nbLdBirgWGdyHf52x3b0muH/ydBP2ZSZkBelt8Pi0lI/decsa6D16q5/o18o XS7gdQtqLYwXYcKFdmrWS9Zluhvjy3zsulVq9Fp8xNIPpI0YqzrOufz0xeZL8ngK YoOmfIen1GB4HJrCRYXd542LGNvE+mDZ7/B89/BmgMMGZPMH9V9VK/VmgUvik2m6 KqzN473KL9ZKJnzD7+7KmOOLlfJ34G4H+cGOcdEnqt1TKNqmdZaqLVTlB21GN8dr WfhXXLB6IlDjHYV8WC4y7/Tiu/OS3mouaoPonAMeaZ0SrnASybwxiKZ8bkentlbJ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:19 2026 by rpki-client