This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/4MiAJwzR0PPxr-dliGFjke8_QaQ.roa File: 4MiAJwzR0PPxr-dliGFjke8_QaQ.roa (raw, json) Hash identifier: ZxnOdzgWsAp09tFBm2XqBvLkxANnIjozT0brrxAIWL4= Subject key identifier: E0:C8:80:27:0C:D1:D0:F3:F1:AF:E7:65:88:61:63:91:EF:3F:41:A4 Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb Certificate serial: 019B7F1385C3BFB7ED77B735DB0B00C05D75 Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/4MiAJwzR0PPxr-dliGFjke8_QaQ.roa Signing time: Fri 02 Jan 2026 14:19:04 +0000 ROA not before: Fri 02 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39794 IP address blocks: 194.50.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:85:c3:bf:b7:ed:77:b7:35:db:0b:00:c0:5d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb Validity Not Before: Jan 2 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c880270cd1d0f3f1afe76588616391ef3f41a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:4b:e8:97:fb:48:b4:4b:cf:d7:48:cb:ac: 88:65:7f:41:87:25:2b:95:26:ae:6c:1f:87:e4:6d: 53:e0:04:c1:74:a5:ef:24:33:00:41:23:ca:5d:57: b5:67:c0:12:d3:97:f2:a1:3c:f0:48:4b:c7:3f:bf: c6:54:c0:e9:09:ab:91:12:a4:8b:26:90:a4:02:e6: 89:2d:69:d7:e0:05:4b:d3:d0:12:e1:d4:c0:6a:e8: 5e:89:b4:6c:8f:1b:48:d9:35:b3:1f:78:bf:ad:07: 51:3a:18:26:da:c5:99:04:ff:94:54:47:86:c9:01: 32:cf:1a:0c:4b:be:84:c7:59:90:ed:be:2d:fc:e6: 69:83:69:49:08:fe:fe:49:fe:97:5f:90:b1:dc:3f: 8f:b5:cb:ac:db:a1:e9:e8:34:64:ba:85:7c:70:4d: 17:7b:ab:87:e4:fe:d2:0c:f3:53:f4:36:25:57:ae: b6:0b:60:d6:29:03:31:58:5b:50:ab:45:ce:b8:d0: 53:60:d6:fa:3b:b5:ca:f7:3b:aa:2c:90:a4:6e:b5: a2:d8:6e:16:d6:c7:3f:5b:9c:fb:ac:db:2a:7d:39: bb:6c:c9:48:39:92:eb:a3:2d:03:a9:ab:ce:ff:d2: 6a:a9:1d:dc:92:07:4c:b1:9c:1e:66:31:ee:d7:2d: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C8:80:27:0C:D1:D0:F3:F1:AF:E7:65:88:61:63:91:EF:3F:41:A4 X509v3 Authority Key Identifier: keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/4MiAJwzR0PPxr-dliGFjke8_QaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.214.0/24 Signature Algorithm: sha256WithRSAEncryption 64:e7:35:1a:e8:da:3e:65:fb:26:af:ca:5c:27:84:af:f0:9c: ee:41:38:9b:46:96:b2:f2:7d:11:ba:09:92:17:0b:01:bb:ac: 84:66:99:cc:b9:aa:7e:e8:de:7b:fd:fd:cf:44:6f:3e:15:71: d7:06:31:f9:5a:c3:9f:56:5b:91:f4:1b:b9:92:d0:ba:01:41: d2:69:c7:e9:1f:48:78:71:62:3e:e0:b8:9c:1a:90:25:9d:10: 04:6a:49:aa:9f:ba:e1:b9:a6:2d:0a:79:56:5e:90:bb:91:37: b4:4a:80:dc:15:a4:07:2c:d6:8f:43:77:35:e2:66:c6:ea:a0: 52:27:1c:94:af:20:c8:d3:4e:8e:d8:1c:95:be:e9:3e:ea:42: 63:cc:a7:84:f1:e9:89:1d:ba:6d:e1:62:8e:92:9e:8c:c4:02: c5:80:fa:1a:1b:89:5f:8c:b6:90:33:d0:1c:22:dc:38:e6:05: af:ca:4b:55:3c:a3:e6:ac:98:27:1c:0b:59:68:47:53:19:da: 4c:eb:53:06:fd:34:ac:03:00:d3:83:0f:56:cf:16:fe:32:7d: 24:02:85:7d:2f:6b:a3:54:97:83:0e:ff:64:42:62:b4:61:14: 79:36:5a:47:59:61:c3:99:a4:29:f4:ec:eb:b7:52:3c:12:86: 61:d9:bf:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4XDv7ftd7c12wsAwF11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk OTMwZWIwHhcNMjYwMTAyMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM4ODAyNzBjZDFkMGYzZjFhZmU3NjU4ODYxNjM5MWVmM2Y0MWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UNL6Jf7SLRLz9dIy6yIZX9BhyUr lSaubB+H5G1T4ATBdKXvJDMAQSPKXVe1Z8AS05fyoTzwSEvHP7/GVMDpCauREqSL JpCkAuaJLWnX4AVL09AS4dTAauheibRsjxtI2TWzH3i/rQdROhgm2sWZBP+UVEeG yQEyzxoMS76Ex1mQ7b4t/OZpg2lJCP7+Sf6XX5Cx3D+Ptcus26Hp6DRkuoV8cE0X e6uH5P7SDPNT9DYlV662C2DWKQMxWFtQq0XOuNBTYNb6O7XK9zuqLJCkbrWi2G4W 1sc/W5z7rNsqfTm7bMlIOZLroy0DqavO/9JqqR3ckgdMsZweZjHu1y3BwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODIgCcM0dDz8a/nZYhhY5HvP0GkMB8GA1UdIwQY MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt MzI3OTEzN2ZkZTQ0LzEvNE1pQUp3elIwUFB4ci1kbGlHRmprZThfUWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0 LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjLWMA0G CSqGSIb3DQEBCwUAA4IBAQBk5zUa6No+Zfsmr8pcJ4Sv8JzuQTibRpay8n0RugmS FwsBu6yEZpnMuap+6N57/f3PRG8+FXHXBjH5WsOfVluR9Bu5ktC6AUHSacfpH0h4 cWI+4LicGpAlnRAEakmqn7rhuaYtCnlWXpC7kTe0SoDcFaQHLNaPQ3c14mbG6qBS JxyUryDI006O2ByVvuk+6kJjzKeE8emJHbpt4WKOkp6MxALFgPoaG4lfjLaQM9Ac Itw45gWvyktVPKPmrJgnHAtZaEdTGdpM61MG/TSsAwDTgw9Wzxb+Mn0kAoV9L2uj VJeDDv9kQmK0YRR5NlpHWWHDmaQp9Ozrt1I8EoZh2b/x -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:00 2026 by rpki-client