This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C4Zrm1uz0u8LXpHzYr2B_7yHnMA.roa File: C4Zrm1uz0u8LXpHzYr2B_7yHnMA.roa (raw, json) Hash identifier: h4u19jt96YR3N4HhMGe38QNO/Z0ZzdjWGePSTEWuQ7E= Subject key identifier: 0B:86:6B:9B:5B:B3:D2:EF:0B:5E:91:F3:62:BD:81:FF:BC:87:9C:C0 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B83D90A8ADCD39B4AA71B913C844F0142 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C4Zrm1uz0u8LXpHzYr2B_7yHnMA.roa Signing time: Sat 03 Jan 2026 12:33:17 +0000 ROA not before: Sat 03 Jan 2026 12:33:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 77.105.61.0/24 maxlen: 24 109.121.33.0/24 maxlen: 24 178.253.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:83:d9:0a:8a:dc:d3:9b:4a:a7:1b:91:3c:84:4f:01:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 3 12:33:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b866b9b5bb3d2ef0b5e91f362bd81ffbc879cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:ab:50:5e:e0:30:75:71:b6:da:4d:62:5e: ca:31:7f:34:63:d5:be:3d:c9:96:00:26:eb:78:e5: 0c:07:7a:97:ee:5a:29:ab:37:d7:e8:24:34:e5:9a: 49:35:9f:92:94:fc:59:e1:bd:c4:45:b8:26:2a:ae: 45:88:cd:41:f9:d6:ea:35:51:2b:2c:f8:5f:c9:fc: f4:a8:fb:cb:6e:cb:9d:89:dd:21:ef:0f:02:48:63: 01:a1:ac:87:1c:2b:de:00:b5:0a:06:f7:12:5e:c8: 8e:52:d9:27:21:af:a8:c1:57:c4:a7:da:90:2f:c4: 5b:ef:45:96:af:7d:a2:6c:69:9c:be:aa:11:41:29: cc:16:92:32:60:9b:fb:08:92:54:07:09:16:75:00: b9:8b:74:5b:ec:76:93:13:07:32:f7:0f:e2:00:2a: 27:ab:1a:b9:b5:38:95:6a:37:be:7a:91:f1:cd:b5: f9:4f:65:26:55:3a:21:15:18:07:40:a7:09:0b:dd: 08:15:e1:2d:8f:ce:76:dc:d6:b9:41:b0:82:da:e4: 01:e9:49:40:a4:9b:69:aa:8a:ca:33:da:52:63:b6: c1:9b:0f:bd:8e:64:46:40:28:7f:ea:f1:09:87:92: 8e:7c:ec:8f:17:49:94:12:0d:59:9c:dc:33:3b:1d: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:86:6B:9B:5B:B3:D2:EF:0B:5E:91:F3:62:BD:81:FF:BC:87:9C:C0 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C4Zrm1uz0u8LXpHzYr2B_7yHnMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.61.0/24 109.121.33.0/24 178.253.221.0/24 Signature Algorithm: sha256WithRSAEncryption 83:84:42:7e:41:2f:07:08:ac:d8:06:64:7a:84:c6:7e:0b:80: 9b:9a:f4:ad:0f:ea:df:7e:24:42:86:0e:69:31:22:dc:63:3c: 7c:a9:df:e8:a2:5f:5d:b6:40:45:27:d9:4f:d8:a8:01:0a:83: 80:86:78:96:b3:fb:70:99:49:6a:35:c4:da:bf:7e:20:84:18: 57:45:61:a4:54:5d:01:2b:93:6c:2f:e8:f5:9d:dd:38:91:45: 0b:eb:18:7b:8b:16:f1:5e:3e:75:fd:ef:95:de:c2:21:02:b0: ca:3b:7a:cc:ce:65:18:c3:35:fd:7b:72:ce:30:ef:be:4b:ec: 59:8a:a5:7e:e7:5e:06:3e:24:07:38:9b:70:b3:a0:96:9f:cf: a5:88:3b:22:fc:f4:a6:74:f6:6e:83:7f:a8:21:ea:10:00:5e: 05:8a:e3:96:23:a9:e2:a2:7f:03:2a:a9:c8:f1:ce:31:a7:a0: 4f:53:79:03:04:9b:5e:62:60:33:90:80:24:fb:7c:62:0c:e2: 1f:40:1e:52:f7:d4:11:8d:ee:3d:b9:23:57:61:2b:d8:1a:be: af:ea:d2:61:b8:f9:b4:c4:09:ab:6f:5d:7c:21:1c:f7:16:78: d2:14:5b:1e:ca:b7:e0:ce:af:fc:51:7d:5a:a6:53:f7:88:df: 5c:43:87:70 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuD2QqK3NObSqcbkTyETwFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAzMTIzMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjg2NmI5YjViYjNkMmVmMGI1ZTkxZjM2MmJkODFmZmJjODc5Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhWrUF7gMHVxttpNYl7KMX80Y9W+ PcmWACbreOUMB3qX7lopqzfX6CQ05ZpJNZ+SlPxZ4b3ERbgmKq5FiM1B+dbqNVEr LPhfyfz0qPvLbsudid0h7w8CSGMBoayHHCveALUKBvcSXsiOUtknIa+owVfEp9qQ L8Rb70WWr32ibGmcvqoRQSnMFpIyYJv7CJJUBwkWdQC5i3Rb7HaTEwcy9w/iACon qxq5tTiVaje+epHxzbX5T2UmVTohFRgHQKcJC90IFeEtj8523Na5QbCC2uQB6UlA pJtpqorKM9pSY7bBmw+9jmRGQCh/6vEJh5KOfOyPF0mUEg1ZnNwzOx37VwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAuGa5tbs9LvC16R82K9gf+8h5zAMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQzRacm0xdXowdThMWHBIellyMkJfN3lIbk1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATWk9AwQA bXkhAwQAsv3dMA0GCSqGSIb3DQEBCwUAA4IBAQCDhEJ+QS8HCKzYBmR6hMZ+C4Cb mvStD+rffiRChg5pMSLcYzx8qd/ool9dtkBFJ9lP2KgBCoOAhniWs/twmUlqNcTa v34ghBhXRWGkVF0BK5NsL+j1nd04kUUL6xh7ixbxXj51/e+V3sIhArDKO3rMzmUY wzX9e3LOMO++S+xZiqV+514GPiQHOJtws6CWn8+liDsi/PSmdPZug3+oIeoQAF4F iuOWI6nion8DKqnI8c4xp6BPU3kDBJteYmAzkIAk+3xiDOIfQB5S99QRje49uSNX YSvYGr6v6tJhuPm0xAmrb118IRz3FnjSFFseyrfgzq/8UX1aplP3iN9cQ4dw -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:03 2026 by rpki-client