This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/4xhhokGYPFsmhBRT1vQea8P0Hn8.roa File: 4xhhokGYPFsmhBRT1vQea8P0Hn8.roa (raw, json) Hash identifier: 0+HSxndFh8kDQtQnDwZD2bYMHa+v2whr10ZvzoQDNlg= Subject key identifier: E3:18:61:A2:41:98:3C:5B:26:84:14:53:D6:F4:1E:6B:C3:F4:1E:7F Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b Certificate serial: 019B7F821C7D0DE1C839C0B3F6BC6163E4BE Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/4xhhokGYPFsmhBRT1vQea8P0Hn8.roa Signing time: Fri 02 Jan 2026 16:19:51 +0000 ROA not before: Fri 02 Jan 2026 16:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 91.241.48.0/22 maxlen: 24 91.241.48.0/24 maxlen: 24 194.5.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:1c:7d:0d:e1:c8:39:c0:b3:f6:bc:61:63:e4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b Validity Not Before: Jan 2 16:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31861a241983c5b26841453d6f41e6bc3f41e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:af:06:89:af:8a:11:f6:a9:6d:eb:29:b4: b2:3a:b8:ac:42:ee:2c:74:8c:d6:b4:5f:ee:55:d0: b2:ff:61:16:86:b3:33:56:5a:9b:1d:4a:be:e2:1b: 72:1f:a0:fd:3a:84:45:45:72:69:fd:ef:5c:50:6c: 13:41:cb:51:6d:fe:ea:f6:9d:ff:24:4c:b6:0d:37: 8b:5d:be:e5:b3:d5:23:19:16:49:07:f9:bd:4c:86: 9d:b4:64:42:42:cf:91:43:76:bc:82:d3:cd:6e:cb: 15:55:7b:22:68:32:5f:20:40:24:a6:b7:57:52:1d: f9:b8:53:92:b7:5f:3d:7e:63:3f:b9:c9:4c:61:19: 1f:35:de:1c:8c:2c:ac:70:c1:1f:0c:f2:9e:a9:98: 43:4d:c8:a1:6a:8b:fb:50:08:ac:49:18:fd:08:63: 18:e2:0c:e6:61:e7:9b:b1:e1:c6:0a:9f:5d:4e:24: 81:5a:3b:56:ab:28:6f:c7:7a:54:9e:8f:8e:d7:3d: ac:0b:9f:80:57:87:8f:95:78:cd:a1:25:d6:26:54: be:3b:f1:ac:af:a1:ac:eb:84:d7:48:45:5b:ba:29: 22:c8:bf:13:cc:b9:c7:37:fc:f2:97:b5:16:e3:f8: e9:07:c6:bd:ee:56:80:f6:e6:8e:ae:1a:c7:59:29: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:18:61:A2:41:98:3C:5B:26:84:14:53:D6:F4:1E:6B:C3:F4:1E:7F X509v3 Authority Key Identifier: keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/4xhhokGYPFsmhBRT1vQea8P0Hn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.48.0/22 194.5.236.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:8f:5d:1c:38:f8:e9:dc:23:e2:e6:49:a8:fb:82:80:e0:4c: 11:68:18:53:9e:ec:07:fc:cd:e8:f1:f5:86:72:bc:ec:09:6e: 0c:43:07:b3:79:6b:f1:c4:24:86:aa:bc:94:3e:82:a9:59:5e: b9:d2:c8:d1:ac:1d:c5:af:60:66:6f:f9:6d:d4:a1:94:e3:77: a9:04:a4:c7:d5:31:3a:44:7d:df:a5:ea:8d:0d:32:3f:65:79: c8:35:c2:e8:e6:82:bd:23:7c:2e:a7:7e:13:a2:22:37:e1:fb: 98:88:cc:1a:bd:2a:ad:0a:a5:c3:6b:9e:4f:46:3f:d0:7b:4b: 02:5d:58:8b:b1:c0:27:a8:55:42:4f:8a:45:1c:b6:87:c7:ef: 0c:56:e5:c3:0c:74:aa:7c:27:d0:4c:30:5e:19:49:9e:cf:f9: af:16:28:a0:70:07:b0:b1:7f:0e:50:dc:a6:b7:47:04:ad:61: 15:d3:e5:8f:ba:71:86:0c:b9:b4:29:29:b5:17:a3:46:a4:95: 4d:73:2f:49:16:5b:23:61:5b:00:50:42:01:ee:13:7d:49:a4: ba:bb:37:7e:47:7b:c4:20:40:c3:3d:c3:a4:72:22:47:92:90: 30:fe:68:99:aa:c9:5a:aa:f0:9c:40:04:bd:ff:61:90:ea:0c: cc:47:92:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/ghx9DeHIOcCz9rxhY+S+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz YzcxMWIwHhcNMjYwMTAyMTYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE4NjFhMjQxOTgzYzViMjY4NDE0NTNkNmY0MWU2YmMzZjQxZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRyvBomvihH2qW3rKbSyOrisQu4s dIzWtF/uVdCy/2EWhrMzVlqbHUq+4htyH6D9OoRFRXJp/e9cUGwTQctRbf7q9p3/ JEy2DTeLXb7ls9UjGRZJB/m9TIadtGRCQs+RQ3a8gtPNbssVVXsiaDJfIEAkprdX Uh35uFOSt189fmM/uclMYRkfNd4cjCyscMEfDPKeqZhDTcihaov7UAisSRj9CGMY 4gzmYeebseHGCp9dTiSBWjtWqyhvx3pUno+O1z2sC5+AV4ePlXjNoSXWJlS+O/Gs r6Gs64TXSEVbuikiyL8TzLnHN/zyl7UW4/jpB8a97laA9uaOrhrHWSkozwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOMYYaJBmDxbJoQUU9b0HmvD9B5/MB8GA1UdIwQY MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt NTE4Y2QxNDcxM2ViLzEvNHhoaG9rR1lQRnNtaEJSVDF2UWVhOFAwSG44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/EwAwQB wgXsMA0GCSqGSIb3DQEBCwUAA4IBAQCOj10cOPjp3CPi5kmo+4KA4EwRaBhTnuwH /M3o8fWGcrzsCW4MQwezeWvxxCSGqryUPoKpWV650sjRrB3Fr2Bmb/lt1KGU43ep BKTH1TE6RH3fpeqNDTI/ZXnINcLo5oK9I3wup34ToiI34fuYiMwavSqtCqXDa55P Rj/Qe0sCXViLscAnqFVCT4pFHLaHx+8MVuXDDHSqfCfQTDBeGUmez/mvFiigcAew sX8OUNymt0cErWEV0+WPunGGDLm0KSm1F6NGpJVNcy9JFlsjYVsAUEIB7hN9SaS6 uzd+R3vEIEDDPcOkciJHkpAw/miZqslaqvCcQAS9/2GQ6gzMR5IJ -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:43 2026 by rpki-client