This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa File: 4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa (raw, json) Hash identifier: fwyySipc+KRVGtJdEtG/OeuQDdMJxdBVXvf+3AzPh0w= Subject key identifier: E2:5D:10:9B:B8:62:05:FE:3D:2C:18:73:35:37:1E:94:D7:29:9E:74 Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98 Certificate serial: 019B7D5C10C3B568CA9ED39417EBE61B6148 Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa Signing time: Fri 02 Jan 2026 06:19:04 +0000 ROA not before: Fri 02 Jan 2026 06:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39957 IP address blocks: 91.199.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:10:c3:b5:68:ca:9e:d3:94:17:eb:e6:1b:61:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39abeb591716e908345d329fffd3700352315b98 Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25d109bb86205fe3d2c187335371e94d7299e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:8c:26:ca:e3:9b:9f:10:4f:36:a0:65:fd: fe:7d:21:c6:52:79:a2:47:14:55:6c:1a:e1:b9:ed: 69:c1:50:a2:a6:43:1f:29:4f:98:29:ed:5c:46:c5: 1f:2d:a0:c1:da:74:cf:7e:52:50:f1:68:dd:94:a1: c2:3c:49:0a:02:6b:a4:ff:cd:e7:a7:b8:41:98:09: 39:e0:7d:33:70:0e:8f:62:67:7e:8a:c8:0d:46:4e: 83:35:76:bf:37:04:4e:9d:8f:12:3e:97:54:8e:9e: f3:22:39:36:18:b0:a0:f4:28:62:83:d5:5e:be:2d: 9c:5f:05:0a:13:0d:20:51:bc:29:fa:14:8d:9b:c0: b1:e1:df:6b:72:3e:27:29:a2:f2:37:53:17:e3:00: 4a:14:29:d5:2c:bb:62:46:77:33:90:e7:48:01:9c: 91:72:d1:70:a7:14:51:77:e3:e6:c3:d3:1c:06:ba: af:d6:9d:10:6a:10:5c:bf:72:8c:a8:97:f1:8e:19: 7e:dd:53:2f:0c:24:78:3e:f0:c1:c8:c4:b2:54:b4: 21:78:16:31:0c:fb:61:dd:e8:95:a6:34:ca:b2:9c: e8:d6:91:9b:d4:01:22:9a:5b:87:ea:56:e3:6e:3d: 26:c2:c0:e1:7a:dc:a7:dc:83:b0:ff:c9:07:a1:42: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5D:10:9B:B8:62:05:FE:3D:2C:18:73:35:37:1E:94:D7:29:9E:74 X509v3 Authority Key Identifier: keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.1.0/24 Signature Algorithm: sha256WithRSAEncryption 25:6d:1d:e6:b4:07:3c:98:a2:67:98:6b:fc:bd:0b:2d:1c:9e: bc:18:a3:7a:4c:21:46:0a:ee:7d:68:da:15:ef:5c:39:39:90: de:86:30:9a:a7:ce:88:ea:ea:c6:ee:08:23:43:be:38:2a:86: a6:45:a9:6e:e5:53:4e:96:8c:1a:0a:08:f8:fe:a8:bd:9c:b4: eb:9e:ff:3f:24:f2:10:9f:f1:fe:09:8e:ef:f1:44:0e:d4:fd: 26:8f:32:3d:41:2b:78:d3:47:9d:f6:43:07:0a:cb:e4:11:b6: 28:c8:0a:d2:6d:0e:7a:1b:fd:0d:86:55:e1:1e:97:9c:f3:f3: 14:85:86:e3:d4:df:5b:58:41:b7:88:36:48:fe:52:0c:47:7f: e3:a3:73:2c:10:52:de:37:86:08:ab:75:12:74:1c:10:53:7c: d0:5e:82:40:1c:35:70:5b:06:e8:6a:73:88:e6:23:2a:7c:50: 94:c0:75:4f:c2:16:98:2e:e1:6a:79:e1:3e:8d:a3:c2:17:a0: 28:37:c4:2f:fa:16:db:89:03:db:9e:44:de:66:b5:d0:89:6e: 66:64:52:2f:b4:a6:87:8e:35:c3:ae:6b:22:38:85:56:84:e7: 5a:46:96:4d:a7:79:3d:08:12:b1:6a:7f:67:db:03:3d:4c:70: 00:70:18:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XBDDtWjKntOUF+vmG2FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz MTViOTgwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjVkMTA5YmI4NjIwNWZlM2QyYzE4NzMzNTM3MWU5NGQ3Mjk5ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+MJsrjm58QTzagZf3+fSHGUnmi RxRVbBrhue1pwVCipkMfKU+YKe1cRsUfLaDB2nTPflJQ8WjdlKHCPEkKAmuk/83n p7hBmAk54H0zcA6PYmd+isgNRk6DNXa/NwROnY8SPpdUjp7zIjk2GLCg9Chig9Ve vi2cXwUKEw0gUbwp+hSNm8Cx4d9rcj4nKaLyN1MX4wBKFCnVLLtiRnczkOdIAZyR ctFwpxRRd+Pmw9McBrqv1p0QahBcv3KMqJfxjhl+3VMvDCR4PvDByMSyVLQheBYx DPth3eiVpjTKspzo1pGb1AEimluH6lbjbj0mwsDhetyn3IOw/8kHoUKIAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJdEJu4YgX+PSwYczU3HpTXKZ50MB8GA1UdIwQY MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt YjdjZDQ0OTBhOTgzLzEvNGwwUW03aGlCZjQ5TEJoek5UY2VsTmNwbm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cBMA0G CSqGSIb3DQEBCwUAA4IBAQAlbR3mtAc8mKJnmGv8vQstHJ68GKN6TCFGCu59aNoV 71w5OZDehjCap86I6urG7ggjQ744KoamRalu5VNOlowaCgj4/qi9nLTrnv8/JPIQ n/H+CY7v8UQO1P0mjzI9QSt400ed9kMHCsvkEbYoyArSbQ56G/0NhlXhHpec8/MU hYbj1N9bWEG3iDZI/lIMR3/jo3MsEFLeN4YIq3USdBwQU3zQXoJAHDVwWwboanOI 5iMqfFCUwHVPwhaYLuFqeeE+jaPCF6AoN8Qv+hbbiQPbnkTeZrXQiW5mZFIvtKaH jjXDrmsiOIVWhOdaRpZNp3k9CBKxan9n2wM9THAAcBie -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:25 2026 by rpki-client