This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4gNMkZwMrrIrONhxPcj5kIxuYVo.roa File: 4gNMkZwMrrIrONhxPcj5kIxuYVo.roa (raw, json) Hash identifier: U9OfOqXUmG1mXao3Mm0oiv6aXUXy9X2OeaKROUSRnTs= Subject key identifier: E2:03:4C:91:9C:0C:AE:B2:2B:38:D8:71:3D:C8:F9:90:8C:6E:61:5A Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDDC64483AEC92B2EC9F941D93FCF3 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4gNMkZwMrrIrONhxPcj5kIxuYVo.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19437 IP address blocks: 176.57.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:dc:64:48:3a:ec:92:b2:ec:9f:94:1d:93:fc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2034c919c0caeb22b38d8713dc8f9908c6e615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:8e:73:d8:af:57:fe:2e:5b:c9:37:ab:eb: ec:54:62:93:94:9c:ad:cd:ad:f2:23:31:a4:14:c4: c4:0c:a0:cc:6d:97:51:32:ac:72:ea:14:a3:b4:55: 79:b4:6e:ae:25:fe:03:d1:d1:02:76:ba:5b:4a:27: 0c:7a:2a:89:c4:7f:6a:8d:d2:b1:3d:46:82:c6:b6: df:2d:b1:c2:e7:37:91:2b:90:12:34:ab:df:62:49: 46:e2:a6:98:73:28:f3:17:b2:b1:c2:7d:b3:21:7b: 5e:c9:5d:66:3c:db:22:dc:b3:ee:35:c9:e9:10:78: 53:7a:6a:e4:9e:ef:5e:82:c3:85:f3:3d:cd:55:d2: 91:90:b3:38:2f:7e:a1:21:d1:ee:73:2d:e5:92:66: a8:fc:c5:43:e0:71:65:88:6e:33:6c:e2:49:69:76: 36:9f:6c:6d:39:f6:fc:ca:3f:76:a6:d7:fc:a4:e2: bd:fe:06:e7:63:53:68:7f:32:5a:b7:35:6d:71:60: df:98:7d:e3:f0:01:90:34:ce:43:b2:1b:9e:27:0d: 78:b3:79:fb:f9:b8:c0:62:65:18:3f:5a:2c:4e:b4: 3e:47:b8:bc:35:fb:a6:a9:44:04:d7:dc:8a:ac:af: ab:68:b3:dc:cf:9d:a6:a3:6a:99:96:ba:f9:2c:c8: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:03:4C:91:9C:0C:AE:B2:2B:38:D8:71:3D:C8:F9:90:8C:6E:61:5A X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4gNMkZwMrrIrONhxPcj5kIxuYVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.61.0/24 Signature Algorithm: sha256WithRSAEncryption 50:1f:1f:a4:d6:5e:a1:c1:ae:1f:54:77:31:f2:0d:1e:1c:11: a7:dc:b1:55:1e:02:1d:54:be:72:43:5e:69:a8:25:fd:4e:81: 0a:8a:2b:50:eb:3b:33:89:be:8e:d5:96:11:a6:d9:48:69:2e: 5c:b2:eb:d1:99:65:01:3c:48:58:06:f7:f7:62:8f:76:34:68: aa:64:7b:2f:a7:99:21:4f:d7:60:89:f1:90:6e:00:53:81:ba: d2:ca:c6:18:6c:d4:49:52:f0:42:fe:c9:dd:4f:8d:8f:1d:f8: d7:5c:37:9e:3d:f2:ae:94:26:35:83:27:80:81:c9:7a:60:40: 27:29:67:92:2b:b0:82:8b:6f:4a:b3:a5:90:ca:61:d1:a4:2b: 59:ac:1c:8b:bc:92:71:ab:0f:00:93:02:af:e5:22:37:e1:56: b5:b1:cf:a2:3c:7e:7a:96:7b:42:69:2e:1a:01:a1:5d:c0:a1: 4a:12:2f:ba:dc:41:9c:ad:7f:08:d4:2e:70:f0:09:bf:70:4c: 25:ae:05:d1:69:d3:0e:82:07:b9:04:2b:9a:9c:83:f5:32:44: 44:9e:7f:1a:b6:71:ef:82:ed:4e:b1:7a:7c:d4:64:98:dd:f7: 03:92:ad:04:b2:68:d8:f4:cb:af:9d:7a:30:a4:93:69:2a:59: 79:41:d7:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dxkSDrskrLsn5Qdk/zzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjAzNGM5MTljMGNhZWIyMmIzOGQ4NzEzZGM4Zjk5MDhjNmU2MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3yOc9ivV/4uW8k3q+vsVGKTlJyt za3yIzGkFMTEDKDMbZdRMqxy6hSjtFV5tG6uJf4D0dECdrpbSicMeiqJxH9qjdKx PUaCxrbfLbHC5zeRK5ASNKvfYklG4qaYcyjzF7Kxwn2zIXteyV1mPNsi3LPuNcnp EHhTemrknu9egsOF8z3NVdKRkLM4L36hIdHucy3lkmao/MVD4HFliG4zbOJJaXY2 n2xtOfb8yj92ptf8pOK9/gbnY1NofzJatzVtcWDfmH3j8AGQNM5DshueJw14s3n7 +bjAYmUYP1osTrQ+R7i8NfumqUQE19yKrK+raLPcz52mo2qZlrr5LMg5aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIDTJGcDK6yKzjYcT3I+ZCMbmFaMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvNGdOTWtad01ycklyT05oeFBjajVrSXh1WVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk9MA0G CSqGSIb3DQEBCwUAA4IBAQBQHx+k1l6hwa4fVHcx8g0eHBGn3LFVHgIdVL5yQ15p qCX9ToEKiitQ6zszib6O1ZYRptlIaS5csuvRmWUBPEhYBvf3Yo92NGiqZHsvp5kh T9dgifGQbgBTgbrSysYYbNRJUvBC/sndT42PHfjXXDeePfKulCY1gyeAgcl6YEAn KWeSK7CCi29Ks6WQymHRpCtZrByLvJJxqw8AkwKv5SI34Va1sc+iPH56lntCaS4a AaFdwKFKEi+63EGcrX8I1C5w8Am/cEwlrgXRadMOgge5BCuanIP1MkREnn8atnHv gu1OsXp81GSY3fcDkq0EsmjY9MuvnXowpJNpKll5Qdd1 -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:16 2026 by rpki-client