This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4HvB4qFalo_1qqI_rKnfviOYztg.roa File: 4HvB4qFalo_1qqI_rKnfviOYztg.roa (raw, json) Hash identifier: i5sRQ8F3389u+PgOM4VLQhEnQu/uifFpZ69tkzfRmgQ= Subject key identifier: E0:7B:C1:E2:A1:5A:96:8F:F5:AA:A2:3F:AC:A9:DF:BE:23:98:CE:D8 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AD0F17BD583F96F618142E424405 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4HvB4qFalo_1qqI_rKnfviOYztg.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197450 IP address blocks: 195.178.137.0/24 maxlen: 24 195.178.138.0/24 maxlen: 24 195.178.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ad:0f:17:bd:58:3f:96:f6:18:14:2e:42:44:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e07bc1e2a15a968ff5aaa23faca9dfbe2398ced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:c7:90:5d:e7:08:f4:c5:df:8d:77:34:4d: 9e:c3:21:f4:89:78:48:ca:0a:8b:f1:d3:a3:32:86: bd:46:23:9a:20:00:8b:28:03:56:32:23:4c:35:5a: d8:5a:4b:3f:05:11:a8:23:a1:57:69:cb:06:b8:99: 02:e1:e5:b6:0e:f9:53:79:04:e2:45:07:11:ea:43: ba:6a:2e:f5:b2:09:68:40:e9:7b:49:f4:4a:c2:3e: 36:3a:ce:96:b3:17:a4:86:8a:88:13:f5:12:cf:e0: b9:7f:e6:d5:29:9b:3f:e4:49:bd:69:fe:ad:23:e4: bc:8a:9a:be:b5:08:57:14:18:aa:21:f1:ce:0d:68: b5:c4:81:62:67:8a:7c:1f:c1:85:ca:b9:40:a5:c7: 2b:b2:3a:89:dc:6c:ab:6a:4c:5d:c9:e7:2d:6e:48: 2b:46:14:8d:80:c2:7e:24:ec:02:4f:d8:d3:0e:29: 7c:2f:4a:60:56:7e:c5:b6:10:15:05:d9:ea:46:2d: 12:39:5e:90:42:4f:93:c1:46:62:86:7d:e7:9e:0e: c0:2c:f8:aa:54:5d:a7:4e:22:18:99:31:44:45:33: 0c:b1:5f:80:50:63:75:52:93:ed:2b:80:34:60:0a: 8e:87:cb:3f:3a:47:01:e8:15:7c:8e:8e:5f:66:f7: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7B:C1:E2:A1:5A:96:8F:F5:AA:A2:3F:AC:A9:DF:BE:23:98:CE:D8 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4HvB4qFalo_1qqI_rKnfviOYztg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.137.0-195.178.139.255 Signature Algorithm: sha256WithRSAEncryption 68:da:7c:b2:fe:4f:bf:f6:e8:5a:25:09:a8:14:ae:9b:76:dd: 88:c6:69:a2:65:f7:30:c6:20:da:8b:00:be:6f:8a:ce:89:4a: 31:61:bc:b6:98:23:27:a3:39:0b:a2:29:a7:ba:bd:81:4d:91: 08:34:2f:cc:24:5e:d5:c7:b7:86:0c:5b:6c:d7:eb:91:8c:c1: 80:4e:07:ad:93:fb:39:2c:34:e9:b3:d7:b2:3f:c1:36:a9:95: 00:bb:24:1f:2c:4d:bf:e5:7e:42:c2:9d:ff:83:78:45:d4:d9: 0b:49:2e:74:71:85:7d:55:93:fe:64:d1:8b:03:a6:3c:0e:65: 60:11:5b:18:24:8b:4f:fe:b3:6c:cf:7e:c5:ab:aa:91:b9:dd: f7:7d:e0:d2:a6:e0:f6:f4:11:6f:ed:1a:c8:75:f4:f7:f9:67: 9e:e3:8f:dc:42:c9:28:1c:89:2b:31:bf:0c:77:da:20:eb:3b: d5:d9:24:ed:f9:2a:05:77:76:14:a8:6e:f9:69:c8:5f:18:72: f2:9e:d5:bd:99:af:1f:b0:41:09:ac:10:66:58:84:72:57:71: 17:4a:e2:a0:6a:9a:34:9e:e4:fd:9b:2f:7f:1d:f1:00:82:fd: 59:ff:96:2e:41:ec:de:13:de:3f:90:2e:03:e8:0c:7e:38:dc: 8c:d7:c5:ce -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OK0PF71YP5b2GBQuQkQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDdiYzFlMmExNWE5NjhmZjVhYWEyM2ZhY2E5ZGZiZTIzOThjZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdXHkF3nCPTF3413NE2ewyH0iXhI ygqL8dOjMoa9RiOaIACLKANWMiNMNVrYWks/BRGoI6FXacsGuJkC4eW2DvlTeQTi RQcR6kO6ai71sgloQOl7SfRKwj42Os6WsxekhoqIE/USz+C5f+bVKZs/5Em9af6t I+S8ipq+tQhXFBiqIfHODWi1xIFiZ4p8H8GFyrlApccrsjqJ3Gyrakxdyectbkgr RhSNgMJ+JOwCT9jTDil8L0pgVn7FthAVBdnqRi0SOV6QQk+TwUZihn3nng7ALPiq VF2nTiIYmTFERTMMsV+AUGN1UpPtK4A0YAqOh8s/OkcB6BV8jo5fZveyTwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOB7weKhWpaP9aqiP6yp374jmM7YMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvNEh2QjRxRmFsb18xcXFJX3JLbmZ2aU9ZenRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDsokD BALDsogwDQYJKoZIhvcNAQELBQADggEBAGjafLL+T7/26FolCagUrpt23YjGaaJl 9zDGINqLAL5vis6JSjFhvLaYIyejOQuiKae6vYFNkQg0L8wkXtXHt4YMW2zX65GM wYBOB62T+zksNOmz17I/wTaplQC7JB8sTb/lfkLCnf+DeEXU2QtJLnRxhX1Vk/5k 0YsDpjwOZWARWxgki0/+s2zPfsWrqpG53fd94NKm4Pb0EW/tGsh19Pf5Z57jj9xC ySgciSsxvwx32iDrO9XZJO35KgV3dhSobvlpyF8YcvKe1b2Zrx+wQQmsEGZYhHJX cRdK4qBqmjSe5P2bL38d8QCC/Vn/li5B7N4T3j+QLgPoDH443IzXxc4= -----END CERTIFICATE-----Generated at Sat Jan 10 05:02:58 2026 by rpki-client