This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa File: 4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa (raw, json) Hash identifier: R/FNqp7EeNGMZEea43bk96Q3NZeLFAovdU6R5kUDA+c= Subject key identifier: E0:B7:2B:C6:15:87:9A:19:2F:3D:DA:6E:CE:84:7B:63:60:EF:21:15 Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924 Certificate serial: 019B77C770CB2C56A444820F84101137720C Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 45.152.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:70:cb:2c:56:a4:44:82:0f:84:10:11:37:72:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0b72bc615879a192f3dda6ece847b6360ef2115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:3e:b6:40:7b:ef:71:f6:f2:cf:3d:fc:1a: c0:ba:45:03:b6:a5:20:17:c6:24:41:22:48:c1:6c: 92:d2:ac:f7:62:66:89:14:ba:5a:da:34:f6:71:f0: 1e:59:fa:0c:aa:fe:04:38:b3:d1:d2:8e:ad:79:34: 59:1f:9a:8b:c1:42:fb:9b:ff:5b:0a:c4:bc:6d:39: 4e:3f:6f:1b:66:a1:03:5d:3f:30:88:a7:6f:b3:1b: 62:fb:4d:80:d3:c0:53:04:f3:9c:28:a1:bb:e0:8a: 10:8d:e3:54:93:c3:df:2c:e8:4a:b2:7d:54:57:ee: 9a:64:06:26:df:2e:29:b1:86:9c:80:6e:03:de:da: 0c:da:ea:b3:dc:cd:7a:57:46:a1:05:87:c0:38:a8: d0:18:c6:84:09:99:c0:f7:78:59:d2:66:d3:14:f3: fc:48:a8:61:fa:46:f6:83:9c:14:d3:a6:8e:80:03: 28:94:30:96:56:82:6e:76:97:ed:15:b0:ab:f9:b5: d4:80:7b:d6:9e:3b:5c:68:4e:6b:4a:31:54:51:fb: 11:fc:0b:86:0d:94:0e:94:3f:89:e6:06:c5:c2:9b: 45:d7:da:69:eb:eb:1c:a9:cb:6e:fc:02:ab:8a:fb: df:e0:fd:6a:10:8b:c6:e2:37:a8:ee:aa:a3:aa:c4: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B7:2B:C6:15:87:9A:19:2F:3D:DA:6E:CE:84:7B:63:60:EF:21:15 X509v3 Authority Key Identifier: keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.56.0/22 Signature Algorithm: sha256WithRSAEncryption 63:67:43:84:57:71:18:d9:d6:e3:9a:5c:8f:1a:be:f1:71:a2: ff:73:6f:34:e7:64:f5:34:cc:43:4e:51:ff:6e:f5:65:fe:1f: 27:13:8e:c9:9a:da:85:93:bb:d5:84:56:13:55:27:3d:9e:61: 79:b0:ba:0d:89:eb:45:af:1d:e8:81:dc:20:b9:67:06:84:2f: 07:df:05:29:8d:eb:06:95:0d:32:67:5a:1e:7e:58:61:d3:0c: 20:44:c4:a5:b6:17:bd:5d:25:a7:bc:50:7e:bf:4a:fa:f5:89: 74:19:f4:95:5f:79:e3:86:7f:61:97:28:2a:35:41:ab:3c:cd: e1:f0:e2:aa:3e:df:03:c8:a6:da:c2:0a:93:74:5e:b6:d7:e9: ad:3d:a6:65:21:14:78:36:dc:81:06:b2:cc:97:dc:5f:dc:af: 1d:1b:7e:98:f9:f0:6c:76:ee:fe:a9:2b:2d:44:dc:20:aa:13: d6:94:3c:42:76:39:f0:ed:06:f6:fa:c0:e7:94:12:0b:9e:1c: b0:68:cf:a5:d9:e8:cc:f4:99:1d:c8:c5:3e:7d:61:90:f6:fe: 4a:4d:a1:34:cd:7f:30:ef:8d:10:ba:02:8a:0d:74:c8:9c:fa: 4a:a8:e4:5e:d7:b7:c3:08:05:9d:d2:87:d0:30:58:d7:a7:35: 9c:19:f2:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3DLLFakRIIPhBARN3IMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx OGY5MjQwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGI3MmJjNjE1ODc5YTE5MmYzZGRhNmVjZTg0N2I2MzYwZWYyMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviY+tkB773H28s89/BrAukUDtqUg F8YkQSJIwWyS0qz3YmaJFLpa2jT2cfAeWfoMqv4EOLPR0o6teTRZH5qLwUL7m/9b CsS8bTlOP28bZqEDXT8wiKdvsxti+02A08BTBPOcKKG74IoQjeNUk8PfLOhKsn1U V+6aZAYm3y4psYacgG4D3toM2uqz3M16V0ahBYfAOKjQGMaECZnA93hZ0mbTFPP8 SKhh+kb2g5wU06aOgAMolDCWVoJudpftFbCr+bXUgHvWnjtcaE5rSjFUUfsR/AuG DZQOlD+J5gbFwptF19pp6+scqctu/AKrivvf4P1qEIvG4jeo7qqjqsSVVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOC3K8YVh5oZLz3abs6Ee2Ng7yEVMB8GA1UdIwQY MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct M2U1NWM0OWYyZDRlLzEvNExjcnhoV0htaGt2UGRwdXpvUjdZMkR2SVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZg4MA0G CSqGSIb3DQEBCwUAA4IBAQBjZ0OEV3EY2dbjmlyPGr7xcaL/c28052T1NMxDTlH/ bvVl/h8nE47JmtqFk7vVhFYTVSc9nmF5sLoNietFrx3ogdwguWcGhC8H3wUpjesG lQ0yZ1oeflhh0wwgRMSlthe9XSWnvFB+v0r69Yl0GfSVX3njhn9hlygqNUGrPM3h 8OKqPt8DyKbawgqTdF621+mtPaZlIRR4NtyBBrLMl9xf3K8dG36Y+fBsdu7+qSst RNwgqhPWlDxCdjnw7Qb2+sDnlBILnhywaM+l2ejM9JkdyMU+fWGQ9v5KTaE0zX8w 740QugKKDXTInPpKqORe17fDCAWd0ofQMFjXpzWcGfJB -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:42 2026 by rpki-client