This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/J576zMYsvhdS1kduYOyMDY6tWBo.roa File: J576zMYsvhdS1kduYOyMDY6tWBo.roa (raw, json) Hash identifier: HQssjrgmFTJtkMHgZxRNGivJgKKVgxjUhkrUCmJCcew= Subject key identifier: 27:9E:FA:CC:C6:2C:BE:17:52:D6:47:6E:60:EC:8C:0D:8E:AD:58:1A Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77 Certificate serial: 019B783553DF8862F38268A8F35A7C9B9B16 Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/J576zMYsvhdS1kduYOyMDY6tWBo.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25460 IP address blocks: 193.161.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:53:df:88:62:f3:82:68:a8:f3:5a:7c:9b:9b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=279efaccc62cbe1752d6476e60ec8c0d8ead581a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:ae:f3:42:0a:c3:b0:1a:0e:d1:8e:14:5a: e8:7e:ce:e3:e4:31:57:99:21:e4:9f:8b:e6:90:f7: 1e:79:bf:e3:3f:58:cb:cf:7a:2b:45:3d:4a:52:1d: dd:9f:03:b3:db:ce:39:55:18:3f:c6:73:fc:6e:38: 8a:d2:91:9c:25:6f:1f:53:d5:11:2e:99:47:20:1c: a0:b3:51:0b:77:c5:46:03:af:95:ab:9f:63:b3:01: 0f:81:ab:4e:53:e8:75:e3:fd:4e:3d:71:1c:32:bb: 14:3a:2d:32:57:2a:c6:e3:39:84:4a:33:e9:96:cf: 3e:70:09:68:cd:f6:35:ac:bf:06:ab:5e:21:2e:54: 73:7d:f3:6d:68:ea:bd:8a:a1:32:aa:76:7b:a7:3f: 75:7f:be:3d:fb:84:c3:22:dd:e4:19:f3:0a:8f:5d: 5a:8b:17:d4:3f:55:b1:fe:dd:64:a6:79:e8:e1:9d: 9a:c9:b9:8d:25:13:c9:a3:a1:77:dc:4f:3d:1e:32: 3a:4e:90:a5:9f:b4:40:03:f6:a7:c0:ae:6a:ec:76: 00:d3:a2:cf:15:c4:d6:90:4d:75:97:9e:8f:d0:23: c4:59:5a:c5:91:86:c4:c3:a4:10:08:2c:7e:91:01: 72:d9:d5:93:52:3c:09:f7:93:8b:a1:92:d4:81:3f: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9E:FA:CC:C6:2C:BE:17:52:D6:47:6E:60:EC:8C:0D:8E:AD:58:1A X509v3 Authority Key Identifier: keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/J576zMYsvhdS1kduYOyMDY6tWBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.4.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:51:ec:b3:9a:ff:54:39:80:f0:cb:e0:89:6b:1b:36:3f:82: 53:87:0c:7f:17:68:69:e4:69:f2:2c:bd:2a:e9:76:68:f6:6c: b2:92:c8:3c:5c:77:44:c6:12:7e:58:54:dc:e3:78:f7:da:b7: 88:38:70:94:de:ed:18:bb:30:fe:32:3b:1c:2e:ab:0f:63:a6: cc:5c:8e:9d:af:89:f1:04:01:2a:ff:0e:21:76:4e:c9:b7:f6: 73:45:de:fd:d4:c5:10:ef:5c:03:4f:3e:44:8a:94:20:ac:02: 77:76:e2:ab:53:2f:c9:db:40:76:50:ab:80:ca:f5:e1:9f:91: 5c:a2:4e:44:ca:b8:8d:a3:de:9e:9d:d9:47:f7:ad:6a:53:a3: c9:2f:6d:4e:72:90:80:3c:07:dd:44:06:bf:b0:df:ac:12:d4: a4:6e:c6:42:5b:ed:59:cf:c8:dc:c7:e6:44:7d:51:b8:94:3a: e7:3e:ac:83:a9:39:49:78:e9:f9:94:b7:99:df:10:3d:f0:b2: 3b:d6:b4:30:33:48:ef:62:2d:a9:4e:bb:c5:9c:f1:3e:63:78: 15:fe:6a:34:fc:e5:d1:f5:34:f7:82:a3:bf:37:22:b9:c9:30: 19:e0:49:d0:28:5d:3b:a9:b6:49:26:9c:97:03:f0:8c:22:fb: d3:d2:d8:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVPfiGLzgmio81p8m5sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMjBkZGE2NDg0M2E0ZWUzNjRiMDg5MzU2Y2E4Nzk5NTgz MGZkNzcwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzllZmFjY2M2MmNiZTE3NTJkNjQ3NmU2MGVjOGMwZDhlYWQ1ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Gu80IKw7AaDtGOFFrofs7j5DFX mSHkn4vmkPceeb/jP1jLz3orRT1KUh3dnwOz2845VRg/xnP8bjiK0pGcJW8fU9UR LplHIBygs1ELd8VGA6+Vq59jswEPgatOU+h14/1OPXEcMrsUOi0yVyrG4zmESjPp ls8+cAlozfY1rL8Gq14hLlRzffNtaOq9iqEyqnZ7pz91f749+4TDIt3kGfMKj11a ixfUP1Wx/t1kpnno4Z2aybmNJRPJo6F33E89HjI6TpCln7RAA/anwK5q7HYA06LP FcTWkE11l56P0CPEWVrFkYbEw6QQCCx+kQFy2dWTUjwJ95OLoZLUgT84gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCee+szGLL4XUtZHbmDsjA2OrVgaMB8GA1UdIwQY MBaAFKIg3aZIQ6TuNksIk1bKh5lYMP13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYt ZjVmODE0NTY1MWQzLzEvSjU3NnpNWXN2aGRTMWtkdVlPeU1EWTZ0V0JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mZmE2ZDQtNTA4OS00NWE3LWEzOGYtZjVmODE0NTY1MWQz LzEvb2lEZHBraERwTzQyU3dpVFZzcUhtVmd3X1hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaEEMA0G CSqGSIb3DQEBCwUAA4IBAQBvUeyzmv9UOYDwy+CJaxs2P4JThwx/F2hp5GnyLL0q 6XZo9myyksg8XHdExhJ+WFTc43j32reIOHCU3u0YuzD+MjscLqsPY6bMXI6dr4nx BAEq/w4hdk7Jt/ZzRd791MUQ71wDTz5EipQgrAJ3duKrUy/J20B2UKuAyvXhn5Fc ok5EyriNo96endlH961qU6PJL21OcpCAPAfdRAa/sN+sEtSkbsZCW+1Zz8jcx+ZE fVG4lDrnPqyDqTlJeOn5lLeZ3xA98LI71rQwM0jvYi2pTrvFnPE+Y3gV/mo0/OXR 9TT3gqO/NyK5yTAZ4EnQKF07qbZJJpyXA/CMIvvT0tgi -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:15 2026 by rpki-client