This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa File: v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa (raw, json) Hash identifier: gmtuefqcnpBpqJUGEwxDDhZb8NTc6oQgtAx5ttlsZSs= Subject key identifier: BF:81:3C:72:DE:8D:69:06:82:D3:36:1B:CE:FB:A4:7E:95:68:16:54 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2ECFC702BBEF689E8AA4678F21A2 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42115 IP address blocks: 178.155.0.0/22 maxlen: 22 178.155.2.0/24 maxlen: 24 213.87.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2e:cf:c7:02:bb:ef:68:9e:8a:a4:67:8f:21:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf813c72de8d690682d3361bcefba47e95681654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:37:6b:ab:3e:1d:79:e6:3f:cf:7d:56:0d: 65:81:1b:6b:12:ad:83:46:87:e0:4f:19:88:22:0c: c2:bd:17:db:c4:95:e6:eb:c9:24:73:36:a2:50:ba: ee:19:23:ee:92:b4:5a:0b:31:64:5a:55:ac:f5:3a: 26:a7:ed:44:1c:30:3d:2e:ad:c5:03:ae:ef:b1:a2: d4:dd:29:30:4e:3e:f7:d8:94:7e:00:23:53:4c:b5: bf:ae:83:41:7e:d9:7c:16:d2:ea:a3:57:24:2d:53: b3:89:a0:fb:c1:b7:7b:1a:b4:e4:4a:e7:8b:96:bc: 0a:d8:57:ca:dc:64:81:30:4f:a8:02:2d:54:84:d4: aa:e6:59:33:5b:f5:16:a0:ca:6d:00:4e:e4:bf:19: 00:0e:8f:60:17:c7:a3:ad:a2:b1:c3:0d:57:f8:9b: 49:c0:38:f2:e0:e6:14:27:4a:c1:72:c7:e1:eb:72: d6:53:2b:2b:d3:a8:91:b8:d5:f1:5a:ff:0c:fd:86: 74:ed:72:d2:a9:db:a6:98:ed:6c:24:a0:f2:f4:23: 57:44:83:51:62:db:a7:7d:2f:2b:79:4e:1c:1f:a1: a5:06:8c:04:b2:44:b2:d6:9a:64:f1:fb:1e:ce:2c: 01:ba:c3:fc:22:d1:77:4a:ce:fa:be:af:4d:5e:be: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:81:3C:72:DE:8D:69:06:82:D3:36:1B:CE:FB:A4:7E:95:68:16:54 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/v4E8ct6NaQaC0zYbzvukfpVoFlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.155.0.0/22 213.87.192.0/21 Signature Algorithm: sha256WithRSAEncryption 15:24:83:a4:55:ae:f5:42:1c:2e:0a:1f:d9:82:2f:ce:e6:46: ed:9c:7c:37:42:f0:f2:0a:0b:35:ae:9d:23:6d:0f:b7:67:4b: 53:5d:85:0e:c3:9a:ad:3c:a9:27:cb:9d:07:54:5b:53:ab:e4: 3e:75:f0:4a:32:79:91:d7:dd:42:c8:6d:5f:8f:c7:68:58:83: ba:0e:20:16:a7:70:4b:9d:c2:32:f9:f2:7c:0d:4a:8e:5e:01: 27:f7:79:81:5f:8f:b2:f6:f1:f5:c3:27:89:87:d8:88:c5:a3: 7c:84:95:31:28:ab:49:74:c6:c8:27:5b:b8:cc:e9:8d:3b:28: 20:27:3b:a4:8f:57:42:ce:a4:87:89:33:5c:f8:e7:58:98:34: 7e:ae:9f:b9:11:28:1a:d1:29:50:fa:0b:0e:7a:0f:bc:17:16: 2c:d0:4f:f0:ab:4f:27:25:78:bf:46:9c:69:28:a0:0d:ee:58: 55:01:ec:e4:30:53:ac:b4:17:be:36:b4:48:91:72:cd:a9:a1: 04:a8:a6:f5:e6:b1:72:75:08:78:36:dc:82:56:70:17:98:c1: 9f:3e:ea:20:84:48:88:36:87:41:15:e8:55:83:5f:61:9d:21: cb:70:ef:f4:af:8d:45:14:3b:11:f3:e5:fd:8c:27:98:ad:ae: a9:d4:6a:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yi7PxwK772ieiqRnjyGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjgxM2M3MmRlOGQ2OTA2ODJkMzM2MWJjZWZiYTQ3ZTk1NjgxNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/83a6s+HXnmP899Vg1lgRtrEq2D RofgTxmIIgzCvRfbxJXm68kkczaiULruGSPukrRaCzFkWlWs9Tomp+1EHDA9Lq3F A67vsaLU3SkwTj732JR+ACNTTLW/roNBftl8FtLqo1ckLVOziaD7wbd7GrTkSueL lrwK2FfK3GSBME+oAi1UhNSq5lkzW/UWoMptAE7kvxkADo9gF8ejraKxww1X+JtJ wDjy4OYUJ0rBcsfh63LWUysr06iRuNXxWv8M/YZ07XLSqdummO1sJKDy9CNXRINR YtunfS8reU4cH6GlBowEskSy1ppk8fseziwBusP8ItF3Ss76vq9NXr6eYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL+BPHLejWkGgtM2G877pH6VaBZUMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvdjRFOGN0Nk5hUWFDMHpZYnp2dWtmcFZvRmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCspsAAwQD 1VfAMA0GCSqGSIb3DQEBCwUAA4IBAQAVJIOkVa71QhwuCh/Zgi/O5kbtnHw3QvDy Cgs1rp0jbQ+3Z0tTXYUOw5qtPKkny50HVFtTq+Q+dfBKMnmR191CyG1fj8doWIO6 DiAWp3BLncIy+fJ8DUqOXgEn93mBX4+y9vH1wyeJh9iIxaN8hJUxKKtJdMbIJ1u4 zOmNOyggJzukj1dCzqSHiTNc+OdYmDR+rp+5ESga0SlQ+gsOeg+8FxYs0E/wq08n JXi/RpxpKKAN7lhVAezkMFOstBe+NrRIkXLNqaEEqKb15rFydQh4NtyCVnAXmMGf PuoghEiINodBFehVg19hnSHLcO/0r41FFDsR8+X9jCeYra6p1Gog -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:20 2026 by rpki-client