This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa File: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (raw, json) Hash identifier: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow= Subject key identifier: E0:C4:84:E1:4C:86:3B:92:F0:39:DF:D4:D8:72:54:01:81:70:F3:22 Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45 Certificate serial: 019B7C7F0C2737DD37C21597586E22F25D1D Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa Signing time: Fri 02 Jan 2026 02:17:39 +0000 ROA not before: Fri 02 Jan 2026 02:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42049 IP address blocks: 188.126.0.0/19 maxlen: 19 188.126.0.0/20 maxlen: 20 188.126.0.0/21 maxlen: 21 188.126.8.0/21 maxlen: 21 188.126.16.0/20 maxlen: 20 188.126.16.0/21 maxlen: 21 188.126.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:0c:27:37:dd:37:c2:15:97:58:6e:22:f2:5d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45 Validity Not Before: Jan 2 02:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c484e14c863b92f039dfd4d87254018170f322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:3d:2e:58:2b:78:41:88:e8:5b:f6:ec:f1: 9d:bc:d9:2a:f5:d3:33:8d:2d:ff:e3:bc:f1:2c:fe: 5a:b4:3f:32:68:83:7b:07:4c:7c:fe:ff:e0:fa:c1: 87:49:cc:5a:c5:c0:42:45:50:28:f0:1e:f2:3a:eb: 44:f4:cf:8e:11:23:6f:2a:77:71:8b:70:3b:75:fe: 3b:b1:4a:31:7b:55:a0:38:8f:a5:ee:43:a7:5a:c6: 76:af:18:72:91:e9:be:de:2b:c2:15:23:19:0e:6b: d9:94:d0:01:e5:51:07:c5:1c:52:5c:e8:14:7d:51: ce:ec:cf:6b:31:29:75:82:76:c3:75:9d:9c:bc:3e: 4d:80:57:ac:61:c7:c7:c6:8d:9d:03:a4:fe:0d:92: 22:da:69:b7:90:90:07:33:d2:b5:e3:dc:bd:e8:20: a8:70:bd:39:3f:d3:44:9b:c6:50:cd:a8:01:15:ee: 6e:24:97:f7:4b:e4:4b:25:42:67:d3:2a:10:b0:75: 8d:d3:c1:f0:40:9d:87:c9:35:79:70:f7:42:f2:f1: 7a:fb:37:d3:41:fc:2d:14:19:8c:58:a6:d2:2e:a7: 6e:34:e3:b4:8b:7c:a5:42:ac:47:19:2e:12:a7:ec: 47:da:ee:e7:27:5a:2f:24:15:6d:06:42:f3:1f:b4: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C4:84:E1:4C:86:3B:92:F0:39:DF:D4:D8:72:54:01:81:70:F3:22 X509v3 Authority Key Identifier: keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.126.0.0/19 Signature Algorithm: sha256WithRSAEncryption 39:11:6f:22:88:99:11:68:a8:7a:88:fa:97:0d:a5:65:15:da: 8d:60:9c:bb:86:8b:59:86:51:7d:0e:5c:c1:fc:38:c5:38:cb: 0f:d7:6d:fc:4e:ee:2a:c3:26:69:fd:0c:e1:7b:c2:cb:fc:24: a6:32:12:91:16:69:ee:e9:61:27:88:f5:1b:8d:54:8b:98:cf: 95:99:15:d5:61:99:a1:f7:3f:43:11:3b:7c:b6:ef:93:92:a8: 24:c0:6d:fe:e9:a0:ba:68:36:0b:4b:a8:6d:05:ee:ba:29:6e: 17:47:b3:60:97:ee:77:eb:43:9c:5c:4a:65:b5:aa:5c:ad:1e: e3:c0:0d:d0:3e:19:9a:24:67:71:90:8b:b1:32:0f:f5:89:3c: a0:68:50:62:6b:18:41:b6:15:a0:5d:bc:f9:08:42:7e:f7:a7: 9f:2f:28:15:ff:8b:92:f7:84:98:81:8c:c2:8c:e3:13:0b:f0: 76:7b:54:44:3c:ad:16:24:25:c6:d0:ce:d8:91:6b:cc:84:1e: bf:8d:70:17:8e:b3:ce:94:3c:78:0a:26:bd:6e:ef:75:09:96: f8:23:ad:1a:51:a9:a7:52:90:42:20:00:10:49:61:42:37:36: c0:9c:6a:3a:fd:95:c4:e8:35:c3:5a:c1:2d:ca:ed:09:22:9c: 7c:79:f9:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fwwnN903whWXWG4i8l0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4 N2RkNDUwHhcNMjYwMTAyMDIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM0ODRlMTRjODYzYjkyZjAzOWRmZDRkODcyNTQwMTgxNzBmMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIw9LlgreEGI6Fv27PGdvNkq9dMz jS3/47zxLP5atD8yaIN7B0x8/v/g+sGHScxaxcBCRVAo8B7yOutE9M+OESNvKndx i3A7df47sUoxe1WgOI+l7kOnWsZ2rxhykem+3ivCFSMZDmvZlNAB5VEHxRxSXOgU fVHO7M9rMSl1gnbDdZ2cvD5NgFesYcfHxo2dA6T+DZIi2mm3kJAHM9K149y96CCo cL05P9NEm8ZQzagBFe5uJJf3S+RLJUJn0yoQsHWN08HwQJ2HyTV5cPdC8vF6+zfT QfwtFBmMWKbSLqduNOO0i3ylQqxHGS4Sp+xH2u7nJ1ovJBVtBkLzH7S+3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODEhOFMhjuS8Dnf1NhyVAGBcPMiMB8GA1UdIwQY MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt MzhjOGRhZmIzZTRmLzEvNE1TRTRVeUdPNUx3T2RfVTJISlVBWUZ3OHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvH4AMA0G CSqGSIb3DQEBCwUAA4IBAQA5EW8iiJkRaKh6iPqXDaVlFdqNYJy7hotZhlF9DlzB /DjFOMsP1238Tu4qwyZp/Qzhe8LL/CSmMhKRFmnu6WEniPUbjVSLmM+VmRXVYZmh 9z9DETt8tu+TkqgkwG3+6aC6aDYLS6htBe66KW4XR7Ngl+5360OcXEpltapcrR7j wA3QPhmaJGdxkIuxMg/1iTygaFBiaxhBthWgXbz5CEJ+96efLygV/4uS94SYgYzC jOMTC/B2e1REPK0WJCXG0M7YkWvMhB6/jXAXjrPOlDx4Cia9bu91CZb4I60aUamn UpBCIAAQSWFCNzbAnGo6/ZXE6DXDWsEtyu0JIpx8efmx -----END CERTIFICATE-----Generated at Wed Jan 21 08:04:13 2026 by rpki-client