This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa File: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (raw, json) Hash identifier: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo= Subject key identifier: E1:48:E7:D5:C3:38:D0:0B:8A:ED:DD:CC:F1:56:FF:B6:85:47:62:F7 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D3CD004CF236C9FA37C5D5BB148A Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d3:cd:00:4c:f2:36:c9:fa:37:c5:d5:bb:14:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e148e7d5c338d00b8aedddccf156ffb6854762f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:c5:89:39:33:88:90:20:0a:72:1e:d8:d5: 6d:46:15:34:21:99:3e:26:a0:8e:f4:3a:99:95:7f: bc:b5:9c:dc:64:fc:3c:55:c0:86:93:57:de:c7:16: fd:9f:7a:5c:70:87:cd:72:8a:35:a8:c9:ee:f7:ee: cb:55:2d:bf:c2:df:c9:f6:0c:eb:04:db:16:7c:96: f9:d0:06:c2:c3:3f:24:21:18:3c:6b:58:f9:9e:bd: db:35:1d:41:4b:8c:33:d1:b9:0e:e0:5d:f4:93:26: c4:65:9a:ab:ea:31:bc:b0:a5:7c:01:9a:2f:4a:9b: 84:5c:48:eb:dc:53:68:51:aa:21:ea:8b:87:fd:b7: 2f:60:6c:9a:9e:2e:b3:da:a4:c8:5f:3d:7a:24:72: 67:d6:06:25:c5:81:ba:40:46:8d:d7:64:7f:37:b5: 29:07:bb:72:ac:c5:50:bb:9d:c5:49:bc:1a:1d:05: 65:1c:c5:f8:d4:ad:0d:bf:95:c3:a8:cb:10:a7:16: 0b:7e:f0:7a:60:d8:8d:95:4c:f2:15:18:36:3e:88: 0c:0d:35:1a:4d:17:dd:7a:f6:f5:7b:ad:6b:90:fc: 0a:24:11:19:21:65:a3:1f:e3:68:c7:e1:bb:46:fb: df:24:27:96:f4:7d:4f:27:8f:18:17:79:b1:ef:9d: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:48:E7:D5:C3:38:D0:0B:8A:ED:DD:CC:F1:56:FF:B6:85:47:62:F7 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:a5:ce:d6:79:6e:2f:b9:53:2e:cb:ab:de:ec:f9:e2:21:45: d7:65:c7:fb:7b:98:ea:25:e9:9c:66:1d:42:14:4c:d7:5e:fb: 39:54:f6:61:bc:57:e0:51:57:56:7b:94:21:99:d6:02:a1:ae: e8:13:65:11:41:f8:30:89:4b:b8:de:d0:0b:8c:f6:76:23:08: 8b:fe:1d:7d:f5:50:a0:e3:d5:4f:9f:37:32:f0:77:57:03:2a: 3c:ee:bf:80:c7:f2:4d:7f:e9:fd:9a:aa:04:33:91:28:d4:46: a7:d1:79:13:86:f4:76:4f:51:ef:18:e4:a9:be:75:3d:c5:69: ce:45:d5:b5:96:23:b8:b6:c8:03:d8:2c:b3:17:44:a5:24:31: 3a:1c:54:cd:3a:b5:67:28:ab:7b:35:d5:96:45:25:97:52:ce: 28:aa:bf:77:92:52:f0:8d:80:ea:6f:1b:8b:07:0a:1d:fb:05: 2f:d3:ef:b6:4c:2a:e0:e6:94:cc:73:f4:7c:00:47:7b:65:dd: 1f:24:39:e7:3e:bb:92:c6:f4:c2:47:c7:2b:e5:73:ad:9b:d3: 34:86:f1:eb:f5:06:b1:45:71:11:20:f2:6d:48:da:a1:87:03: 61:b2:7f:46:84:94:2c:36:d3:e4:47:a6:c7:32:cf:78:0c:d6: c3:94:42:f8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONPNAEzyNsn6N8XVuxSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTQ4ZTdkNWMzMzhkMDBiOGFlZGRkY2NmMTU2ZmZiNjg1NDc2MmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5DFiTkziJAgCnIe2NVtRhU0IZk+ JqCO9DqZlX+8tZzcZPw8VcCGk1fexxb9n3pccIfNcoo1qMnu9+7LVS2/wt/J9gzr BNsWfJb50AbCwz8kIRg8a1j5nr3bNR1BS4wz0bkO4F30kybEZZqr6jG8sKV8AZov SpuEXEjr3FNoUaoh6ouH/bcvYGyani6z2qTIXz16JHJn1gYlxYG6QEaN12R/N7Up B7tyrMVQu53FSbwaHQVlHMX41K0Nv5XDqMsQpxYLfvB6YNiNlUzyFRg2PogMDTUa TRfdevb1e61rkPwKJBEZIWWjH+Nox+G7RvvfJCeW9H1PJ48YF3mx750KsQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOFI59XDONALiu3dzPFW/7aFR2L3MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvNFVqbjFjTTQwQXVLN2QzTThWYl90b1ZIWXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBfpc7WeW4vuVMuy6ve 7PniIUXXZcf7e5jqJemcZh1CFEzXXvs5VPZhvFfgUVdWe5QhmdYCoa7oE2URQfgw iUu43tALjPZ2IwiL/h199VCg49VPnzcy8HdXAyo87r+Ax/JNf+n9mqoEM5Eo1Ean 0XkThvR2T1HvGOSpvnU9xWnORdW1liO4tsgD2CyzF0SlJDE6HFTNOrVnKKt7NdWW RSWXUs4oqr93klLwjYDqbxuLBwod+wUv0++2TCrg5pTMc/R8AEd7Zd0fJDnnPruS xvTCR8cr5XOtm9M0hvHr9QaxRXERIPJtSNqhhwNhsn9GhJQsNtPkR6bHMs94DNbD lEL4 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:06 2026 by rpki-client