This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/4uCW8KDL5eygnSjCYi7-Nukptjw.roa File: 4uCW8KDL5eygnSjCYi7-Nukptjw.roa (raw, json) Hash identifier: Lz95AsDo4OKSWuKZICMJRolQCwkNIP0tKUYk7qYQ5RA= Subject key identifier: E2:E0:96:F0:A0:CB:E5:EC:A0:9D:28:C2:62:2E:FE:36:E9:29:B6:3C Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065 Certificate serial: 019B7CEDC0B144937C114FC087A8AA213B79 Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/4uCW8KDL5eygnSjCYi7-Nukptjw.roa Signing time: Fri 02 Jan 2026 04:18:34 +0000 ROA not before: Fri 02 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62121 IP address blocks: 91.209.39.0/24 maxlen: 24 193.46.69.0/24 maxlen: 24 195.242.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c0:b1:44:93:7c:11:4f:c0:87:a8:aa:21:3b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e096f0a0cbe5eca09d28c2622efe36e929b63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:1c:72:7a:35:f2:4d:20:a8:5e:ce:37:b3: be:03:88:bb:35:55:09:00:16:82:5b:ee:bb:27:dc: 2a:c5:c4:6d:cc:33:15:72:90:31:b3:d3:bc:59:b0: bd:03:6c:90:42:28:88:a0:d0:7d:5f:32:89:86:9e: 19:12:e4:d8:12:6d:fa:b0:4b:0f:fe:fb:91:77:2c: 50:20:0c:50:c5:e2:d8:9e:fa:d2:d6:c0:f5:5a:ef: 80:3d:6b:90:14:89:72:b4:0b:1f:33:02:db:c1:c1: e4:30:39:32:0e:3e:f3:89:0b:a8:14:84:88:74:24: 8b:ce:ff:79:c0:6a:87:c4:f5:02:a4:17:46:92:ce: 62:5b:6e:77:5e:7a:80:cc:23:f1:a7:a6:a8:5a:0d: 71:f6:13:32:78:50:06:fe:88:6d:cc:83:a4:13:e3: 37:e9:82:af:6e:74:45:2e:17:b4:52:69:f9:a4:d3: c4:aa:ca:31:ba:81:f2:55:f0:c0:0c:db:b7:b3:68: 58:d5:fe:28:1b:11:e6:f4:bb:fa:53:95:72:97:2b: e2:0e:3d:78:a4:d2:81:02:64:27:50:ac:27:9f:ac: 2f:dd:d3:4e:63:b0:5e:1c:4b:b7:d8:49:b8:7a:f4: 13:12:01:8c:6a:c2:06:2f:fb:83:94:a9:01:f1:f5: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E0:96:F0:A0:CB:E5:EC:A0:9D:28:C2:62:2E:FE:36:E9:29:B6:3C X509v3 Authority Key Identifier: keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/4uCW8KDL5eygnSjCYi7-Nukptjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.39.0/24 193.46.69.0/24 195.242.130.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:e2:5f:4f:19:e9:6a:c4:8c:41:1c:5c:ac:8a:99:95:30:69: 37:2f:8e:d2:ef:f3:d9:3a:46:64:6f:d7:28:eb:fe:ce:58:60: 13:41:ef:1e:92:e9:55:4d:4f:b6:c1:4a:c7:07:82:fb:6a:98: aa:7b:f2:52:a2:3f:12:d0:d0:b4:98:32:36:37:e6:3f:0c:3b: 4a:8d:06:68:45:a4:00:70:17:b1:55:0c:67:72:a2:71:fc:22: ff:76:8f:a0:ea:25:29:ff:04:9f:9e:05:5d:1e:b3:e5:84:2c: df:ec:01:30:4f:03:87:79:d0:e0:95:f8:d4:c2:e5:8b:6d:ed: 9f:b6:09:fe:a8:ac:ea:52:f0:5d:a4:d7:a6:f0:f7:53:9c:a2: 3a:10:b9:de:a4:57:5b:26:9d:52:f3:a8:64:42:6d:49:45:94: c6:86:0b:4b:e1:67:1f:bf:50:5f:33:e3:7d:ab:ae:ea:56:6d: 45:71:1b:95:73:56:2c:eb:fa:1f:6d:3a:74:93:51:5a:af:30: fa:50:f7:ae:ba:90:c9:41:96:57:8d:9b:d0:e9:d1:e7:61:f4: c2:c4:fe:b5:f4:c2:45:32:ac:4a:1b:10:b2:e6:fc:b8:b6:b9: d6:5b:4d:07:0d:48:53:70:9e:be:f9:f0:f2:8e:c4:b9:41:b5: 26:e4:27:05 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87cCxRJN8EU/Ah6iqITt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDMwYjc3NGIyODBjMzdlMWM1ZWQ1ZDhhNjljYjlhZjY0 OGIwNjUwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmUwOTZmMGEwY2JlNWVjYTA5ZDI4YzI2MjJlZmUzNmU5MjliNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mwccno18k0gqF7ON7O+A4i7NVUJ ABaCW+67J9wqxcRtzDMVcpAxs9O8WbC9A2yQQiiIoNB9XzKJhp4ZEuTYEm36sEsP /vuRdyxQIAxQxeLYnvrS1sD1Wu+APWuQFIlytAsfMwLbwcHkMDkyDj7ziQuoFISI dCSLzv95wGqHxPUCpBdGks5iW253XnqAzCPxp6aoWg1x9hMyeFAG/ohtzIOkE+M3 6YKvbnRFLhe0Umn5pNPEqsoxuoHyVfDADNu3s2hY1f4oGxHm9Lv6U5VylyviDj14 pNKBAmQnUKwnn6wv3dNOY7BeHEu32Em4evQTEgGMasIGL/uDlKkB8fVZKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOLglvCgy+XsoJ0owmIu/jbpKbY8MB8GA1UdIwQY MBaAFNHTC3dLKAw34cXtXYppy5r2SLBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMDY5ZjktZjE0Ni00MjQ3LWJhY2Mt YmU2MzA0YzI1MmM3LzEvNHVDVzhLREw1ZXlnblNqQ1lpNy1OdWtwdGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iMDY5ZjktZjE0Ni00MjQ3LWJhY2MtYmU2MzA0YzI1MmM3 LzEvMGRNTGQwc29ERGZoeGUxZGltbkxtdlpJc0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9EnAwQA wS5FAwQBw/KCMA0GCSqGSIb3DQEBCwUAA4IBAQB+4l9PGelqxIxBHFysipmVMGk3 L47S7/PZOkZkb9co6/7OWGATQe8ekulVTU+2wUrHB4L7apiqe/JSoj8S0NC0mDI2 N+Y/DDtKjQZoRaQAcBexVQxncqJx/CL/do+g6iUp/wSfngVdHrPlhCzf7AEwTwOH edDglfjUwuWLbe2ftgn+qKzqUvBdpNem8PdTnKI6ELnepFdbJp1S86hkQm1JRZTG hgtL4Wcfv1BfM+N9q67qVm1FcRuVc1Ys6/ofbTp0k1FarzD6UPeuupDJQZZXjZvQ 6dHnYfTCxP619MJFMqxKGxCy5vy4trnWW00HDUhTcJ6++fDyjsS5QbUm5CcF -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:16 2026 by rpki-client