This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4K0nPcVs7kG37n9kUxhMUwLkAXw.roa File: 4K0nPcVs7kG37n9kUxhMUwLkAXw.roa (raw, json) Hash identifier: yI1/v4bPNPh/ca0vgrWnH03zHs5IInF5h5wp0+JenW8= Subject key identifier: E0:AD:27:3D:C5:6C:EE:41:B7:EE:7F:64:53:18:4C:53:02:E4:01:7C Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79104FB6FB41596FE0EB5270071F15DD Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4K0nPcVs7kG37n9kUxhMUwLkAXw.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44620 IP address blocks: 77.92.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4f:b6:fb:41:59:6f:e0:eb:52:70:07:1f:15:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ad273dc56cee41b7ee7f6453184c5302e4017c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:f2:10:c3:ea:fc:8a:ab:b7:67:c4:23:39: 8d:c6:6c:bc:19:0e:94:87:2b:34:3d:55:20:1f:94: 6f:65:cd:b8:42:18:1d:a6:84:dd:de:cf:ac:a4:b5: f7:11:84:d7:21:39:cf:bb:63:e0:b2:92:7c:e2:45: cb:e0:f3:08:37:a3:f1:c0:38:e1:7f:de:7a:02:31: 06:8b:8b:9e:d2:ab:d6:35:c8:c6:1e:ad:fe:1f:fe: 01:fc:85:22:36:87:c1:cc:c2:4d:aa:9b:16:11:77: f6:e5:11:26:58:76:15:b7:85:70:90:e7:17:1d:a1: fc:b5:b7:c1:33:68:75:42:2c:db:b1:e8:84:bb:ad: d9:55:f7:1c:c5:40:0b:2f:f7:3f:4b:7c:fc:20:eb: c4:95:88:6d:e1:c8:b8:15:f7:5f:eb:81:c1:94:97: 4a:35:34:ab:4e:37:00:6b:a1:9f:5f:fd:9a:59:2d: 84:94:a1:a6:02:ec:63:a9:34:0e:7e:c6:f3:43:95: c1:39:3c:80:51:dd:9d:05:c3:1f:67:43:51:15:8f: b8:02:b9:69:a5:ec:e8:1a:68:81:39:41:26:41:2d: 3e:f2:67:1a:b3:5e:fb:79:5b:a1:a0:43:6e:7d:9f: 69:4e:ac:e7:61:21:86:a1:30:94:b3:61:f3:da:27: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AD:27:3D:C5:6C:EE:41:B7:EE:7F:64:53:18:4C:53:02:E4:01:7C X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4K0nPcVs7kG37n9kUxhMUwLkAXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.151.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:66:1c:23:8b:8b:d4:43:a2:14:59:08:8e:b3:1e:5b:31:e4: c7:d5:76:89:4c:01:cb:86:b3:e8:11:5a:f9:e3:6d:89:d2:2a: 51:b8:b5:8b:8f:c6:b8:0e:74:b4:84:df:7a:7a:fc:01:1f:09: d3:ec:8b:c4:3a:fb:88:96:9b:a6:a1:fa:42:bf:d2:ea:0f:14: c8:66:53:3d:6b:fb:b8:f1:10:e0:9a:30:06:0d:85:c0:d2:07: 86:0c:83:d0:fb:c2:b4:85:6d:eb:8c:c7:18:37:a6:ee:b9:e2: 1c:bd:ad:a9:b5:0e:f0:25:35:bc:03:9a:2e:a8:61:37:13:49: d9:fe:c3:d1:81:a9:88:07:e2:85:ba:98:ed:a1:19:a8:3e:f8: fe:73:1f:e4:0a:09:fb:6a:d5:77:bb:a4:c3:dd:b0:ab:78:d7: 91:3e:54:63:9b:38:56:3e:e5:a4:81:25:83:2c:c7:fa:ea:fe: 33:96:0d:af:ee:06:96:ac:02:d6:62:17:ff:03:29:99:11:7e: 7d:d1:ca:9f:03:e6:4c:86:2c:8b:ea:70:48:27:e5:2e:81:5f: ac:cc:9a:b9:1d:e1:79:49:df:36:97:b5:90:bf:90:95:b7:50: ff:e3:7a:cb:a1:21:4f:be:39:f7:c5:65:7e:a6:7f:94:0f:9c: dd:1b:cf:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EE+2+0FZb+DrUnAHHxXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFkMjczZGM1NmNlZTQxYjdlZTdmNjQ1MzE4NGM1MzAyZTQwMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyHyEMPq/Iqrt2fEIzmNxmy8GQ6U hys0PVUgH5RvZc24QhgdpoTd3s+spLX3EYTXITnPu2PgspJ84kXL4PMIN6PxwDjh f956AjEGi4ue0qvWNcjGHq3+H/4B/IUiNofBzMJNqpsWEXf25REmWHYVt4VwkOcX HaH8tbfBM2h1QizbseiEu63ZVfccxUALL/c/S3z8IOvElYht4ci4Ffdf64HBlJdK NTSrTjcAa6GfX/2aWS2ElKGmAuxjqTQOfsbzQ5XBOTyAUd2dBcMfZ0NRFY+4Arlp pezoGmiBOUEmQS0+8mcas177eVuhoENufZ9pTqznYSGGoTCUs2Hz2ieqsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCtJz3FbO5Bt+5/ZFMYTFMC5AF8MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvNEswblBjVnM3a0czN245a1V4aE1Vd0xrQVh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyXMA0G CSqGSIb3DQEBCwUAA4IBAQCbZhwji4vUQ6IUWQiOsx5bMeTH1XaJTAHLhrPoEVr5 422J0ipRuLWLj8a4DnS0hN96evwBHwnT7IvEOvuIlpumofpCv9LqDxTIZlM9a/u4 8RDgmjAGDYXA0geGDIPQ+8K0hW3rjMcYN6buueIcva2ptQ7wJTW8A5ouqGE3E0nZ /sPRgamIB+KFupjtoRmoPvj+cx/kCgn7atV3u6TD3bCreNeRPlRjmzhWPuWkgSWD LMf66v4zlg2v7gaWrALWYhf/AymZEX590cqfA+ZMhiyL6nBIJ+UugV+szJq5HeF5 Sd82l7WQv5CVt1D/43rLoSFPvjn3xWV+pn+UD5zdG8+0 -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:08 2026 by rpki-client