This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/1-UyB4g1-cmvqpCraiZLvR0iEtJ4.roa File: 1-UyB4g1-cmvqpCraiZLvR0iEtJ4.roa (raw, json) Hash identifier: XMvfp6a9q4gSOZObHK0cOehlAVogxv8AYtQ776Cti90= Subject key identifier: F9:4C:81:E2:0D:7E:72:6B:EA:A4:2A:DA:89:92:EF:47:48:84:B4:9E Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a Certificate serial: 019B76EB57916E6FD1422E5C5C1CFE14A3B4 Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/1-UyB4g1-cmvqpCraiZLvR0iEtJ4.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203680 IP address blocks: 109.237.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:57:91:6e:6f:d1:42:2e:5c:5c:1c:fe:14:a3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f94c81e20d7e726beaa42ada8992ef474884b49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:9c:8e:85:c3:7e:d5:cc:85:0e:24:50:69: 9d:09:88:fd:b2:ef:2c:2c:f5:7b:95:a4:56:24:27: a6:5a:ec:05:9b:de:71:b1:74:24:1b:47:2e:8c:00: 70:c6:d3:60:1a:c1:54:12:28:25:4c:7e:00:ba:69: d7:d0:5a:33:9c:49:60:02:61:27:aa:51:70:16:28: f7:c0:96:0e:57:d0:cd:61:2d:d5:33:6e:89:49:80: 33:e0:71:06:a8:0d:21:d9:21:f6:05:ae:17:ae:7d: 5c:db:5e:da:8c:e2:59:6d:cf:47:5a:0e:0b:30:9c: d6:ea:99:41:7c:d7:28:4b:84:15:dc:5f:c3:b6:3f: b6:67:18:9e:df:57:a5:6e:20:48:7d:e7:38:1b:68: b4:1d:89:64:f7:17:26:62:22:75:7e:06:5a:c3:9c: 74:0c:1d:bb:ef:45:e8:72:0a:d2:19:46:42:7c:30: 6a:90:97:22:75:ec:85:d5:95:bb:6e:06:fa:8f:24: 48:5c:bd:da:cf:7b:f2:9e:5c:43:92:d0:5f:a5:8f: 8a:de:2e:7d:6f:ad:82:1a:b2:bb:90:81:ce:2b:bd: 41:ae:7c:01:4b:e4:4d:af:de:96:42:f5:c0:f6:38: 35:49:9f:0f:2a:67:57:29:0b:94:da:89:d7:f8:18: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4C:81:E2:0D:7E:72:6B:EA:A4:2A:DA:89:92:EF:47:48:84:B4:9E X509v3 Authority Key Identifier: keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/1-UyB4g1-cmvqpCraiZLvR0iEtJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.124.0/22 Signature Algorithm: sha256WithRSAEncryption e2:b5:dd:50:fd:24:d5:cd:44:89:d6:36:66:cd:ab:90:d4:42: d1:09:27:d4:2b:b2:16:b1:92:0e:cd:f8:cf:d4:b4:2f:40:96: e6:a1:25:9b:e0:d0:c6:72:e6:01:04:d8:74:89:0b:5d:ae:c0: 44:07:ab:5f:da:92:77:78:f3:66:4d:3d:0b:fa:3f:e6:7a:c4: fc:36:8f:c3:bf:af:02:c4:ff:9a:f7:2e:41:c9:1e:c6:f5:c7: 24:97:c6:1e:e0:e3:43:3b:5c:e7:3e:70:ba:85:54:70:55:6f: 31:40:c3:3d:83:e7:65:82:2d:83:e7:ee:af:75:01:a9:1a:66: 43:95:70:d4:98:ed:e7:1f:00:ff:ed:f4:8e:6f:b6:2d:a6:21: 23:1e:48:d2:3a:d2:32:26:3d:d6:13:47:09:23:57:49:f4:73: 11:54:b3:96:1c:9c:16:5e:15:0d:53:fa:04:e6:d7:a2:ac:5b: af:b5:e0:c6:93:a5:c7:db:d2:ac:c9:67:f1:2f:20:0c:b7:25: 40:fd:d1:f1:dd:34:b9:65:e0:4d:6c:02:7e:be:a4:58:40:ae: 46:0b:21:b9:b5:1c:98:95:57:89:6d:11:f5:5d:17:e9:44:5d: b3:f5:03:2c:a7:4f:ca:5a:5f:bd:25:dc:85:76:50:a3:4e:3a: a4:bd:bf:87 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt261eRbm/RQi5cXBz+FKO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2 YzUzOGEwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTRjODFlMjBkN2U3MjZiZWFhNDJhZGE4OTkyZWY0NzQ4ODRiNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ecjoXDftXMhQ4kUGmdCYj9su8s LPV7laRWJCemWuwFm95xsXQkG0cujABwxtNgGsFUEiglTH4AumnX0FoznElgAmEn qlFwFij3wJYOV9DNYS3VM26JSYAz4HEGqA0h2SH2Ba4Xrn1c217ajOJZbc9HWg4L MJzW6plBfNcoS4QV3F/Dtj+2Zxie31elbiBIfec4G2i0HYlk9xcmYiJ1fgZaw5x0 DB2770XocgrSGUZCfDBqkJcideyF1ZW7bgb6jyRIXL3az3vynlxDktBfpY+K3i59 b62CGrK7kIHOK71BrnwBS+RNr96WQvXA9jg1SZ8PKmdXKQuU2onX+BjpewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlMgeINfnJr6qQq2omS70dIhLSeMB8GA1UdIwQY MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt MDVmMDkzMzg1YWM4LzEvMS1VeUI0ZzEtY212cXBDcmFpWkx2UjBpRXRKNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvNDY1YWFlLTJhMmMtNDIwMC04ZTVjLTA1ZjA5MzM4NWFj OC8xL0VxWlg4MEpNamRWU0ZhLUZPNU13ZkRac1U0by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm3tfDAN BgkqhkiG9w0BAQsFAAOCAQEA4rXdUP0k1c1EidY2Zs2rkNRC0Qkn1CuyFrGSDs34 z9S0L0CW5qElm+DQxnLmAQTYdIkLXa7ARAerX9qSd3jzZk09C/o/5nrE/DaPw7+v AsT/mvcuQckexvXHJJfGHuDjQztc5z5wuoVUcFVvMUDDPYPnZYItg+fur3UBqRpm Q5Vw1Jjt5x8A/+30jm+2LaYhIx5I0jrSMiY91hNHCSNXSfRzEVSzlhycFl4VDVP6 BObXoqxbr7XgxpOlx9vSrMln8S8gDLclQP3R8d00uWXgTWwCfr6kWECuRgshubUc mJVXiW0R9V0X6URds/UDLKdPylpfvSXchXZQo046pL2/hw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:10 2026 by rpki-client