This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4vL0zh739hLCOHMs1fVDHIHUg9w.roa File: 4vL0zh739hLCOHMs1fVDHIHUg9w.roa (raw, json) Hash identifier: O6dbe7DGPdxzRsl45pj55i4B0L0DzS+pJ69Hh+YB5Wg= Subject key identifier: E2:F2:F4:CE:1E:F7:F6:12:C2:38:73:2C:D5:F5:43:1C:81:D4:83:DC Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BED9BABD413D096D79EE535FFD526 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4vL0zh739hLCOHMs1fVDHIHUg9w.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 95.181.160.0/24 maxlen: 24 95.181.162.0/24 maxlen: 24 95.181.167.0/24 maxlen: 24 95.181.173.0/24 maxlen: 24 95.181.174.0/24 maxlen: 24 95.181.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ed:9b:ab:d4:13:d0:96:d7:9e:e5:35:ff:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2f2f4ce1ef7f612c238732cd5f5431c81d483dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:87:56:42:c8:aa:32:5b:bc:e2:ba:02:8d: 05:69:23:aa:4c:a4:3d:91:9e:1f:99:b5:1d:a1:46: 42:79:1c:bd:f9:f9:01:d9:a3:76:15:88:aa:6a:7b: f2:b7:a8:a6:42:4c:df:7a:8b:c2:23:8e:34:fc:e3: a6:6a:21:26:94:f9:1e:13:fc:c5:f8:c8:73:64:74: d8:89:93:09:72:f3:1a:72:ea:02:e7:e4:bd:77:84: f3:f6:90:7b:6a:41:5e:4d:e5:3d:92:71:b5:23:11: 7b:4d:94:8d:88:de:ec:3b:0c:81:5c:dd:22:85:12: 99:0e:44:f6:50:f7:e8:65:0c:c8:73:c5:85:ed:18: 28:a9:73:e0:5e:d9:6d:d7:51:82:37:4b:6b:32:49: fd:89:bd:83:4b:05:18:36:c4:ab:f4:7e:d1:16:0f: 78:21:3e:e8:e9:66:bf:9b:8f:e7:d6:fd:b8:c7:af: 79:c6:26:51:5f:90:a6:93:45:af:43:3f:63:3b:67: 8c:f3:3f:cf:0f:9a:2b:b7:16:03:6d:7d:04:89:1e: db:08:bf:4e:b4:aa:d0:4d:82:42:31:00:e3:38:56: 54:4c:0a:9e:bc:6a:74:d7:1f:b3:d4:61:09:59:2b: 01:81:58:37:3a:84:0c:34:0f:02:b8:48:c7:98:f7: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F2:F4:CE:1E:F7:F6:12:C2:38:73:2C:D5:F5:43:1C:81:D4:83:DC X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4vL0zh739hLCOHMs1fVDHIHUg9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.160.0/24 95.181.162.0/24 95.181.167.0/24 95.181.173.0-95.181.175.255 Signature Algorithm: sha256WithRSAEncryption 13:4f:d0:e9:50:76:af:a7:43:02:af:28:23:d2:23:29:2d:da: 35:f5:22:4b:f2:37:d9:cd:4c:44:9f:75:00:c8:e7:d5:b0:1a: 8d:30:ff:c6:a7:38:bd:a3:af:f7:1f:7c:36:04:77:c5:18:9e: 11:20:fe:92:d4:a9:68:a2:65:52:57:53:b9:57:0b:60:e1:b5: 1a:fd:c1:a0:ab:b2:1f:ad:0f:25:1a:63:a7:4b:f5:6c:64:e7: c8:49:8d:42:18:a0:5a:cb:1a:69:47:10:e4:2c:39:65:1e:47: 79:73:7d:06:24:86:c2:b1:62:3f:ed:c6:40:ba:85:75:03:ed: e6:31:2f:c4:f4:14:e4:df:03:de:eb:97:12:37:6e:3b:d0:eb: 05:75:f2:4e:71:16:ef:79:73:f1:ee:df:e3:88:a0:e2:3b:3d: ba:f2:cd:61:a0:03:48:21:3f:ab:41:f6:5e:41:79:34:66:b2: bf:2f:40:1d:37:e1:8e:1b:7b:2e:49:80:91:82:a5:b3:a7:52: 4a:1c:43:37:cf:5f:ad:4a:e1:92:e0:97:d1:f4:7f:5d:8d:c8: ca:5b:b1:d9:e8:3b:c4:4c:3d:9e:ca:13:0c:1c:f1:62:34:8d: 40:36:52:34:7d:fb:6d:54:4e:cb:48:23:fd:6b:e1:e7:af:6e: be:73:6c:61 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9W+2bq9QT0JbXnuU1/9UmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmYyZjRjZTFlZjdmNjEyYzIzODczMmNkNWY1NDMxYzgxZDQ4M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnauHVkLIqjJbvOK6Ao0FaSOqTKQ9 kZ4fmbUdoUZCeRy9+fkB2aN2FYiqanvyt6imQkzfeovCI440/OOmaiEmlPkeE/zF +MhzZHTYiZMJcvMacuoC5+S9d4Tz9pB7akFeTeU9knG1IxF7TZSNiN7sOwyBXN0i hRKZDkT2UPfoZQzIc8WF7RgoqXPgXtlt11GCN0trMkn9ib2DSwUYNsSr9H7RFg94 IT7o6Wa/m4/n1v24x695xiZRX5Cmk0WvQz9jO2eM8z/PD5ortxYDbX0EiR7bCL9O tKrQTYJCMQDjOFZUTAqevGp01x+z1GEJWSsBgVg3OoQMNA8CuEjHmPcrYQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOLy9M4e9/YSwjhzLNX1QxyB1IPcMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvNHZMMHpoNzM5aExDT0hNczFmVkRISUhVZzl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAX7WgAwQA X7WiAwQAX7WnMAwDBABfta0DBARftaAwDQYJKoZIhvcNAQELBQADggEBABNP0OlQ dq+nQwKvKCPSIykt2jX1IkvyN9nNTESfdQDI59WwGo0w/8anOL2jr/cffDYEd8UY nhEg/pLUqWiiZVJXU7lXC2DhtRr9waCrsh+tDyUaY6dL9Wxk58hJjUIYoFrLGmlH EOQsOWUeR3lzfQYkhsKxYj/txkC6hXUD7eYxL8T0FOTfA97rlxI3bjvQ6wV18k5x Fu95c/Hu3+OIoOI7PbryzWGgA0ghP6tB9l5BeTRmsr8vQB034Y4bey5JgJGCpbOn UkocQzfPX61K4ZLgl9H0f12NyMpbsdnoO8RMPZ7KEwwc8WI0jUA2UjR9+21UTstI I/1r4eevbr5zbGE= -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:14 2026 by rpki-client