This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa File: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (raw, json) Hash identifier: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI= Subject key identifier: E3:05:8B:66:F0:C2:9B:F1:6C:F1:15:EB:B2:1E:3F:9D:7D:44:30:3F Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA711D0FF182A7D42316D46B9870ABE Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 141.98.45.0/24 maxlen: 24 2a07:6f46:4500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:11:d0:ff:18:2a:7d:42:31:6d:46:b9:87:0a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3058b66f0c29bf16cf115ebb21e3f9d7d44303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:55:3b:c0:25:f4:d7:b7:0b:2f:e6:72:5f: 13:27:a5:12:bf:50:b7:74:25:00:4c:52:c7:e2:5a: 26:3e:3e:de:39:e2:95:a7:5f:5c:f2:e6:85:42:53: 3f:e2:52:b9:9d:6d:c1:91:c4:19:83:fb:26:fc:73: 1a:cc:13:f5:8a:f1:b0:5d:65:9c:94:80:ac:47:95: 39:40:be:cd:3a:07:de:2d:96:d0:2f:01:3c:13:47: 38:0c:c6:25:06:87:ad:e1:ff:1d:16:72:2c:f5:a0: 1f:7c:36:a9:ac:40:65:9c:ac:f4:fd:5a:e3:f1:50: fe:87:6c:1e:d6:01:fb:02:7a:c8:e6:cb:69:58:aa: f5:b7:53:44:c5:2b:11:11:54:01:d8:db:20:80:55: ab:c7:d4:f4:d5:67:41:03:82:3f:64:9f:3b:e4:9e: ed:5d:e2:fb:7e:5e:a4:af:21:bf:19:2a:cd:a7:4d: 99:9b:6f:e8:59:12:a7:00:36:6a:02:78:c4:5e:2a: 59:f5:67:c5:5b:25:50:c6:3c:6b:50:01:b4:b5:43: 4d:50:72:f8:46:d9:72:5f:de:41:04:e4:11:e9:6b: f0:64:fe:35:d4:82:28:14:9f:7e:f1:14:4b:9f:12: 47:18:88:e5:b5:96:bf:8b:f5:83:a4:7a:e4:7b:68: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:8B:66:F0:C2:9B:F1:6C:F1:15:EB:B2:1E:3F:9D:7D:44:30:3F X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.45.0/24 IPv6: 2a07:6f46:4500::/40 Signature Algorithm: sha256WithRSAEncryption a3:b3:fb:6f:6e:e8:63:73:16:66:f6:55:4c:bc:7d:33:64:67: 3c:0b:30:99:f6:8f:94:0f:1e:37:f1:ff:c9:68:fc:49:bc:a0: 00:32:f6:84:ac:09:ac:ce:97:14:d1:d0:0a:af:d1:1b:a7:88: cf:13:20:40:b9:af:52:6d:96:ac:73:ab:31:90:a7:f2:c3:9d: ec:12:9d:ba:42:29:b4:8c:db:37:70:cb:d4:4b:0c:9f:c1:3d: e3:0e:97:fd:89:e3:2b:5c:40:bd:dc:15:48:08:74:f4:38:0a: 48:d5:46:08:88:34:17:05:ce:70:bd:a8:20:0d:ff:cb:80:c6: 97:91:1e:92:82:8a:92:f0:f7:23:8a:70:a3:04:8c:a5:aa:ad: 17:e9:8c:fa:b4:99:cd:18:51:7b:03:46:55:86:db:8e:78:1c: 06:f9:97:f7:ee:a4:1d:36:98:21:19:43:ba:0d:6d:4c:14:aa: 4d:84:fc:0e:b5:f4:b1:d8:d3:a9:79:af:49:93:d6:7e:04:70: 3e:21:da:40:56:5a:1c:ea:c9:c1:ba:78:16:82:f2:b6:78:ad: ab:a0:9e:b1:be:6e:d5:24:ce:63:a3:41:47:38:9a:80:51:3e: 09:2c:1e:e6:c7:dd:34:f7:8e:90:9a:58:93:f1:9c:53:d2:80: 4c:20:ef:eb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pxHQ/xgqfUIxbUa5hwq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzA1OGI2NmYwYzI5YmYxNmNmMTE1ZWJiMjFlM2Y5ZDdkNDQzMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/9VO8Al9Ne3Cy/mcl8TJ6USv1C3 dCUATFLH4lomPj7eOeKVp19c8uaFQlM/4lK5nW3BkcQZg/sm/HMazBP1ivGwXWWc lICsR5U5QL7NOgfeLZbQLwE8E0c4DMYlBoet4f8dFnIs9aAffDaprEBlnKz0/Vrj 8VD+h2we1gH7AnrI5stpWKr1t1NExSsREVQB2NsggFWrx9T01WdBA4I/ZJ875J7t XeL7fl6kryG/GSrNp02Zm2/oWRKnADZqAnjEXipZ9WfFWyVQxjxrUAG0tUNNUHL4 RtlyX95BBOQR6WvwZP411IIoFJ9+8RRLnxJHGIjltZa/i/WDpHrke2hnVQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOMFi2bwwpvxbPEV67IeP519RDA/MB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNHdXTFp2RENtX0ZzOFJYcnNoNF9uWDFFTUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAjWItMA4E AgACMAgDBgAqB29GRTANBgkqhkiG9w0BAQsFAAOCAQEAo7P7b27oY3MWZvZVTLx9 M2RnPAswmfaPlA8eN/H/yWj8SbygADL2hKwJrM6XFNHQCq/RG6eIzxMgQLmvUm2W rHOrMZCn8sOd7BKdukIptIzbN3DL1EsMn8E94w6X/YnjK1xAvdwVSAh09DgKSNVG CIg0FwXOcL2oIA3/y4DGl5EekoKKkvD3I4pwowSMpaqtF+mM+rSZzRhRewNGVYbb jngcBvmX9+6kHTaYIRlDug1tTBSqTYT8DrX0sdjTqXmvSZPWfgRwPiHaQFZaHOrJ wbp4FoLytnitq6Cesb5u1STOY6NBRziagFE+CSwe5sfdNPeOkJpYk/GcU9KATCDv 6w== -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:02 2026 by rpki-client