This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/4KN1agjGCetNojWRsDbUJbjhQKs.roa File: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (raw, json) Hash identifier: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0= Subject key identifier: E0:A3:75:6A:08:C6:09:EB:4D:A2:35:91:B0:36:D4:25:B8:E1:40:AB Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Certificate serial: 019B76EAAED6348A1AAFD67A79FF85BF75C3 Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/4KN1agjGCetNojWRsDbUJbjhQKs.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12363 IP address blocks: 195.110.96.0/19 maxlen: 24 195.110.96.0/24 maxlen: 24 195.110.97.0/24 maxlen: 24 195.110.99.0/24 maxlen: 24 2a0e:f080:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ae:d6:34:8a:1a:af:d6:7a:79:ff:85:bf:75:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a3756a08c609eb4da23591b036d425b8e140ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:4c:51:a0:83:fc:3c:41:80:b1:70:85:cb: 81:cb:a6:be:63:85:79:c4:a7:17:43:73:96:65:5a: a5:89:1f:93:73:b5:11:e0:46:5a:e8:ee:24:64:19: 06:e8:d4:42:48:ae:2f:d3:81:cd:57:a3:c3:92:e9: e4:2e:88:15:d5:a6:f3:bc:10:10:97:75:a9:37:cf: 4c:24:60:00:ac:66:9e:8a:e6:c2:d6:ac:b3:23:44: c0:5f:d5:e9:47:a8:03:ac:ec:2a:64:11:03:c1:e7: f2:12:59:0a:87:e5:68:2e:07:dd:53:98:b0:ff:d8: d3:12:56:88:58:b9:c2:e1:03:d6:94:26:c0:e4:55: b4:b3:aa:1d:c6:59:f7:bd:6f:5b:59:4e:bd:e9:b4: 82:4b:b1:86:83:0a:e3:0a:d3:09:dc:02:c6:19:25: e8:b1:f7:36:fc:4e:98:26:3f:99:4b:bf:c0:25:27: 56:f0:3f:37:b7:79:a8:21:88:63:bc:17:6d:6d:7e: 4c:f3:d3:16:8f:d8:e8:95:d7:e5:ae:58:e6:6c:09: 4f:0b:9a:7d:64:ff:82:8c:64:f2:4c:b1:39:fb:50: 19:0c:ad:1e:53:4f:bd:54:c8:c8:74:74:15:14:d6: 02:ca:ac:f1:0e:07:11:4e:a8:63:47:c5:54:98:6c: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A3:75:6A:08:C6:09:EB:4D:A2:35:91:B0:36:D4:25:B8:E1:40:AB X509v3 Authority Key Identifier: keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/4KN1agjGCetNojWRsDbUJbjhQKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.110.96.0/19 IPv6: 2a0e:f080:1::/48 Signature Algorithm: sha256WithRSAEncryption 05:8a:4b:68:95:41:7e:6b:cd:13:03:97:ab:6a:02:a1:b3:ae: 54:16:16:b8:78:64:2c:1f:59:f4:5d:be:a5:82:64:34:4c:c9: 3b:f3:de:00:64:0e:87:52:0b:2a:fd:64:e6:09:9e:d0:d2:23: ce:c6:05:ea:f6:ab:56:e7:ea:55:93:49:12:44:af:70:f4:98: 8e:62:7b:0b:6e:55:0c:8f:39:2a:db:63:c2:51:47:ad:a8:c4: 39:44:9e:72:ff:c6:0f:99:de:3d:7e:04:69:72:c3:19:be:05: 76:12:90:8d:37:e9:57:07:cd:5b:ff:55:57:93:be:dc:94:e4: 27:84:09:e4:59:aa:3a:b8:0d:36:43:da:81:16:a6:69:2c:9f: f6:44:de:53:2d:4c:46:47:3d:ba:36:44:c0:62:ab:3a:b3:0d: 39:d0:fe:81:88:74:6d:49:fb:0b:0c:73:6e:55:e5:1a:f0:20: 1f:89:c6:52:6e:a7:49:a4:1f:7e:be:ee:1e:9d:c3:ba:0a:0f: 06:5f:1a:7a:81:bd:ac:3d:43:84:7d:08:9d:b5:9d:20:dc:9d: d4:5a:ea:3f:ed:09:58:06:ae:1d:d7:1c:e4:1d:1a:17:89:91: 69:68:e1:d2:5e:95:5d:3b:ce:d5:d7:a4:cb:b2:12:76:df:b7: dc:3b:b6:5e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26q7WNIoar9Z6ef+Fv3XDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZGI3NDdiMjg5NzE3YTA2ODRjZDZhYzgyMzA3YWE2N2Ji MmQ3YmIwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGEzNzU2YTA4YzYwOWViNGRhMjM1OTFiMDM2ZDQyNWI4ZTE0MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojFMUaCD/DxBgLFwhcuBy6a+Y4V5 xKcXQ3OWZVqliR+Tc7UR4EZa6O4kZBkG6NRCSK4v04HNV6PDkunkLogV1abzvBAQ l3WpN89MJGAArGaeiubC1qyzI0TAX9XpR6gDrOwqZBEDwefyElkKh+VoLgfdU5iw /9jTElaIWLnC4QPWlCbA5FW0s6odxln3vW9bWU696bSCS7GGgwrjCtMJ3ALGGSXo sfc2/E6YJj+ZS7/AJSdW8D83t3moIYhjvBdtbX5M89MWj9joldflrljmbAlPC5p9 ZP+CjGTyTLE5+1AZDK0eU0+9VMjIdHQVFNYCyqzxDgcRTqhjR8VUmGyLuQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOCjdWoIxgnrTaI1kbA21CW44UCrMB8GA1UdIwQY MBaAFITbdHsolxegaEzWrIIweqZ7ste7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQt OWZlN2VlOWMwMzY4LzEvNEtOMWFnakdDZXROb2pXUnNEYlVKYmpoUUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQtOWZlN2VlOWMwMzY4 LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQFw25gMA8E AgACMAkDBwAqDvCAAAEwDQYJKoZIhvcNAQELBQADggEBAAWKS2iVQX5rzRMDl6tq AqGzrlQWFrh4ZCwfWfRdvqWCZDRMyTvz3gBkDodSCyr9ZOYJntDSI87GBer2q1bn 6lWTSRJEr3D0mI5iewtuVQyPOSrbY8JRR62oxDlEnnL/xg+Z3j1+BGlywxm+BXYS kI036VcHzVv/VVeTvtyU5CeECeRZqjq4DTZD2oEWpmksn/ZE3lMtTEZHPbo2RMBi qzqzDTnQ/oGIdG1J+wsMc25V5RrwIB+JxlJup0mkH36+7h6dw7oKDwZfGnqBvaw9 Q4R9CJ21nSDcndRa6j/tCVgGrh3XHOQdGheJkWlo4dJelV07ztXXpMuyEnbft9w7 tl4= -----END CERTIFICATE-----Generated at Tue Jan 27 20:36:08 2026 by rpki-client