This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/c4DyAsvFXbG5o7jFYYQSHpcqttU.roa File: c4DyAsvFXbG5o7jFYYQSHpcqttU.roa (raw, json) Hash identifier: 4O/PlJ6tXg3HjZe3texYnbvtJFDsgoqM8xcWPLuCcns= Subject key identifier: 73:80:F2:02:CB:C5:5D:B1:B9:A3:B8:C5:61:84:12:1E:97:2A:B6:D5 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105E13FC64E0933453255A11A11FFB Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/c4DyAsvFXbG5o7jFYYQSHpcqttU.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 188.191.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:13:fc:64:e0:93:34:53:25:5a:11:a1:1f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7380f202cbc55db1b9a3b8c56184121e972ab6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:4f:7c:f5:50:59:44:7b:8c:86:43:34:5a: 52:71:63:2f:6d:20:9a:92:f6:be:28:2b:44:f8:37: d1:6e:cb:e2:6e:e1:4b:9a:88:d4:97:a0:df:e2:34: ae:80:e5:be:8d:d0:5b:ee:81:83:9d:a6:3c:e2:15: 63:4f:a3:9f:00:19:f1:32:38:1b:ed:cc:cc:3c:4d: bc:1d:e3:3e:0f:85:ac:a0:54:c6:da:9d:06:ac:1d: 99:37:92:61:e5:80:54:55:04:ca:d0:7e:c2:8f:52: ce:df:cd:73:49:f9:08:9a:67:69:d6:57:13:90:5c: 83:17:fc:c7:11:37:ab:7d:d8:a2:0b:c9:f1:2c:58: 00:7e:af:9c:08:bd:a5:04:c5:65:19:c1:aa:48:3a: c9:3c:15:d4:2d:54:e1:54:b9:da:f1:f4:48:d2:37: 85:61:87:d2:02:bf:49:c5:6f:d3:74:e5:28:41:5b: fa:17:3d:3b:a8:9b:a7:a3:b5:48:9e:ee:d1:3b:bd: f0:bd:b6:e8:5f:50:d2:3c:04:36:89:81:cd:a2:81: f2:76:b4:f7:31:17:8a:67:96:3b:48:f0:8e:44:c3: 79:73:bb:d1:9f:9e:95:ff:b4:d4:24:cd:c9:68:d2: fd:c0:96:6b:12:30:92:a0:5f:58:b8:b9:5e:d8:13: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:F2:02:CB:C5:5D:B1:B9:A3:B8:C5:61:84:12:1E:97:2A:B6:D5 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/c4DyAsvFXbG5o7jFYYQSHpcqttU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.108.0/24 Signature Algorithm: sha256WithRSAEncryption 29:bb:59:76:d0:b9:f1:c3:10:d9:2a:93:51:73:62:a2:5b:06: d7:4b:de:98:26:ff:c5:5a:3c:47:07:54:82:d2:03:a0:35:1b: 9d:04:13:d5:af:0d:9a:5b:ec:4a:97:3b:cd:1e:c6:b3:33:f4: 45:07:52:86:88:b0:d5:a4:4f:f1:be:94:94:b3:e0:07:9a:9e: a8:e4:32:03:5e:17:41:d7:fe:08:6f:a3:0d:9c:26:11:62:e7: a4:f4:cf:62:a7:78:32:66:2d:0d:d0:57:d0:18:1b:6a:b1:dc: 9a:2e:ca:7a:5a:35:26:24:84:2b:c1:21:c8:09:27:a7:07:2d: 0f:7b:d5:53:3c:1c:0e:55:6f:ba:9f:b8:d4:61:3b:82:2d:fb: ab:d8:bc:21:b7:22:2a:28:2f:54:2c:c3:f8:bf:75:0b:23:e9: a4:82:9a:a3:9e:d0:89:b4:b9:71:fd:a8:a4:bb:72:8b:95:92: 9f:17:67:11:85:8c:99:bd:58:24:84:bc:48:45:8a:64:93:f2: 9c:6b:6c:29:af:b4:26:d1:25:ec:a5:7b:2e:9d:f1:b5:97:7c: 53:fb:a9:06:bb:7f:5e:fd:80:86:d9:95:77:23:f5:0a:95:71: b8:93:30:9c:fe:96:06:c0:be:ca:f0:66:97:b7:73:5d:a0:ff: a5:93:fa:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF4T/GTgkzRTJVoRoR/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzgwZjIwMmNiYzU1ZGIxYjlhM2I4YzU2MTg0MTIxZTk3MmFiNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzxPfPVQWUR7jIZDNFpScWMvbSCa kva+KCtE+DfRbsvibuFLmojUl6Df4jSugOW+jdBb7oGDnaY84hVjT6OfABnxMjgb 7czMPE28HeM+D4WsoFTG2p0GrB2ZN5Jh5YBUVQTK0H7Cj1LO381zSfkImmdp1lcT kFyDF/zHETerfdiiC8nxLFgAfq+cCL2lBMVlGcGqSDrJPBXULVThVLna8fRI0jeF YYfSAr9JxW/TdOUoQVv6Fz07qJuno7VInu7RO73wvbboX1DSPAQ2iYHNooHydrT3 MReKZ5Y7SPCORMN5c7vRn56V/7TUJM3JaNL9wJZrEjCSoF9YuLle2BPuEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOA8gLLxV2xuaO4xWGEEh6XKrbVMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvYzREeUFzdkZYYkc1bzdqRllZUVNIcGNxdHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9sMA0G CSqGSIb3DQEBCwUAA4IBAQApu1l20LnxwxDZKpNRc2KiWwbXS96YJv/FWjxHB1SC 0gOgNRudBBPVrw2aW+xKlzvNHsazM/RFB1KGiLDVpE/xvpSUs+AHmp6o5DIDXhdB 1/4Ib6MNnCYRYuek9M9ip3gyZi0N0FfQGBtqsdyaLsp6WjUmJIQrwSHICSenBy0P e9VTPBwOVW+6n7jUYTuCLfur2LwhtyIqKC9ULMP4v3ULI+mkgpqjntCJtLlx/aik u3KLlZKfF2cRhYyZvVgkhLxIRYpkk/Kca2wpr7Qm0SXspXsunfG1l3xT+6kGu39e /YCG2ZV3I/UKlXG4kzCc/pYGwL7K8GaXt3NdoP+lk/rG -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:35 2026 by rpki-client