This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/4N1exzvYfH7iE3XY4NkPBimqLIM.roa File: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (raw, json) Hash identifier: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw= Subject key identifier: E0:DD:5E:C7:3B:D8:7C:7E:E2:13:75:D8:E0:D9:0F:06:29:AA:2C:83 Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd Certificate serial: 019B7BA3DC2EE9562537D84238FFF45A1099 Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/4N1exzvYfH7iE3XY4NkPBimqLIM.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40809 IP address blocks: 162.255.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:dc:2e:e9:56:25:37:d8:42:38:ff:f4:5a:10:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0dd5ec73bd87c7ee21375d8e0d90f0629aa2c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:1c:df:40:ad:6e:42:51:1b:7f:48:a0:4b: 4e:d5:fe:e5:db:c5:b9:da:6a:19:9c:f0:50:63:63: 9f:db:c6:f7:8a:e9:4f:ff:48:e3:a0:c0:c7:55:4d: bb:8c:b1:08:95:eb:31:4f:6d:60:09:1a:ae:4b:cd: 8b:b2:b1:cf:4e:a4:69:06:12:fe:63:35:57:25:20: 2c:c2:0a:7b:e5:66:27:9c:7e:bd:a5:88:20:0e:6e: 5f:98:2c:6c:46:16:b2:84:79:ff:8a:1f:87:37:64: 8b:7a:92:61:48:df:ff:c1:b5:d1:6a:23:4a:af:87: 15:fc:fa:89:3f:47:a0:4a:41:8c:e7:51:1d:d9:fa: 9b:f6:4d:93:8b:01:c8:66:61:a0:9c:de:00:b5:3e: 8b:c1:3d:ed:b6:d2:98:db:b2:4c:f0:e0:23:ae:ca: 93:de:26:fe:bf:39:68:ae:7c:43:9c:18:fe:91:2d: 2b:e0:57:2e:15:35:5b:b1:b2:88:32:85:cf:b4:d4: b1:c1:0b:33:04:04:d3:55:a0:d5:b6:61:69:c0:0e: 81:21:d9:1d:d2:66:c2:66:69:99:12:78:02:8e:e7: 48:3f:5b:af:68:55:27:30:b5:ae:a0:4d:bb:2b:44: e1:fb:47:ec:3b:70:26:dd:a6:e7:2c:a1:15:b6:48: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:5E:C7:3B:D8:7C:7E:E2:13:75:D8:E0:D9:0F:06:29:AA:2C:83 X509v3 Authority Key Identifier: keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/4N1exzvYfH7iE3XY4NkPBimqLIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.255.144.0/22 Signature Algorithm: sha256WithRSAEncryption 08:72:ba:0b:8c:09:33:19:9c:33:01:66:f3:14:e0:bb:22:d6: 34:56:ce:15:3c:8f:2f:16:a8:8e:52:e5:53:5e:39:69:d2:47: e1:bc:c2:da:2c:66:64:50:9c:92:81:bc:d2:5b:41:88:f9:5f: 00:8f:f4:a6:4c:38:25:12:6c:8a:16:63:a9:af:f9:ca:8a:e3: a3:1b:69:b8:e0:64:96:c0:98:b5:53:fa:c9:2c:0d:e1:ee:41: eb:b9:aa:73:b3:1a:f8:28:db:8f:28:1d:81:3b:12:be:e7:a4: 72:52:de:7b:5f:f6:b3:ed:40:40:ff:d6:7c:4e:c0:5f:0a:e9: bb:30:4a:2b:e8:06:12:5b:9c:6c:da:f8:05:64:ff:8a:fa:67: 77:57:1a:95:77:4e:3c:f6:de:f6:b8:e3:5e:bb:3b:3a:2a:82: 30:53:1d:6d:0a:a1:77:94:22:46:dc:5d:e9:dc:24:f0:3f:44: 1f:46:dd:80:19:48:f4:77:54:48:7c:fe:c2:47:47:36:b9:95: a4:10:1a:14:1d:95:06:0c:9f:85:69:80:35:56:29:c0:e8:34: 74:0f:0b:13:b0:f6:e4:46:53:56:2b:b0:96:77:ca:93:01:db: 10:0d:e5:f9:8c:2f:80:d0:9a:d4:90:38:50:bd:38:75:67:20: 65:20:06:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9wu6VYlN9hCOP/0WhCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4Mzk3M2JjZTRhMTkyM2E3NTFkMzZhOTFkNDQ3ZTBjNWMx Njk4ZmQwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGRkNWVjNzNiZDg3YzdlZTIxMzc1ZDhlMGQ5MGYwNjI5YWEyYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygsc30CtbkJRG39IoEtO1f7l28W5 2moZnPBQY2Of28b3iulP/0jjoMDHVU27jLEIlesxT21gCRquS82LsrHPTqRpBhL+ YzVXJSAswgp75WYnnH69pYggDm5fmCxsRhayhHn/ih+HN2SLepJhSN//wbXRaiNK r4cV/PqJP0egSkGM51Ed2fqb9k2TiwHIZmGgnN4AtT6LwT3tttKY27JM8OAjrsqT 3ib+vzlornxDnBj+kS0r4FcuFTVbsbKIMoXPtNSxwQszBATTVaDVtmFpwA6BIdkd 0mbCZmmZEngCjudIP1uvaFUnMLWuoE27K0Th+0fsO3Am3abnLKEVtkgAGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODdXsc72Hx+4hN12ODZDwYpqiyDMB8GA1UdIwQY MBaAFLg5c7zkoZI6dR02qR1EfgxcFpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdURsenZPU2hranAxSFRhcEhVUi1ERndXbVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kOTE2ZGEtOGQ4NC00OTM0LTk1ZDct ZDg1MDZjOTVmZWQ4LzEvNE4xZXh6dllmSDdpRTNYWTROa1BCaW1xTElNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kOTE2ZGEtOGQ4NC00OTM0LTk1ZDctZDg1MDZjOTVmZWQ4 LzEvdURsenZPU2hranAxSFRhcEhVUi1ERndXbVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov+QMA0G CSqGSIb3DQEBCwUAA4IBAQAIcroLjAkzGZwzAWbzFOC7ItY0Vs4VPI8vFqiOUuVT Xjlp0kfhvMLaLGZkUJySgbzSW0GI+V8Aj/SmTDglEmyKFmOpr/nKiuOjG2m44GSW wJi1U/rJLA3h7kHruapzsxr4KNuPKB2BOxK+56RyUt57X/az7UBA/9Z8TsBfCum7 MEor6AYSW5xs2vgFZP+K+md3VxqVd0489t72uONeuzs6KoIwUx1tCqF3lCJG3F3p 3CTwP0QfRt2AGUj0d1RIfP7CR0c2uZWkEBoUHZUGDJ+FaYA1VinA6DR0DwsTsPbk RlNWK7CWd8qTAdsQDeX5jC+A0JrUkDhQvTh1ZyBlIAZ1 -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:27 2026 by rpki-client