This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/4x52VzYQnWKO_ybg9X988TnYMsg.roa File: 4x52VzYQnWKO_ybg9X988TnYMsg.roa (raw, json) Hash identifier: P/+424hxb13nk4lYvoJNoDe5orzU5YP9hjQuy88CbIw= Subject key identifier: E3:1E:76:57:36:10:9D:62:8E:FF:26:E0:F5:7F:7C:F1:39:D8:32:C8 Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Certificate serial: 019B77C6E5112EDDC84E487EBD9882D3B8C0 Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/4x52VzYQnWKO_ybg9X988TnYMsg.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49051 IP address blocks: 94.143.229.0/24 maxlen: 24 193.186.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e5:11:2e:dd:c8:4e:48:7e:bd:98:82:d3:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31e765736109d628eff26e0f57f7cf139d832c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:e8:10:13:3b:f8:f5:74:cf:90:a3:45:e7: a0:53:0b:61:8d:ee:5c:09:9f:91:10:c9:4a:b3:e1: 43:48:af:26:77:fc:04:1f:65:3f:42:32:d9:b0:08: ec:b2:52:b6:83:f5:56:7c:64:d4:30:00:54:b1:d6: 06:3c:21:98:70:dd:b6:a4:26:03:ab:3e:3d:bd:3f: 05:58:4a:9b:97:17:c2:0a:dd:b9:32:cb:30:b7:a7: a2:de:7b:ad:15:17:c8:d3:c2:8a:7e:c8:3b:51:d4: ca:a0:bd:b7:ae:b1:ce:7e:4d:54:81:61:b6:c6:35: b3:2f:15:04:41:76:96:25:83:3d:49:e7:2a:cb:d4: d7:99:f7:fe:96:d1:9b:24:8d:e6:ef:6d:23:04:97: 7c:8a:98:20:f5:a6:2c:91:af:78:e6:66:0c:5f:4d: 71:ce:df:c7:b8:da:fd:b6:16:30:b7:03:85:97:78: 42:bf:ad:55:92:b2:da:51:5f:f3:70:ed:bd:91:5d: b2:dd:ad:c3:21:a5:f2:96:7e:31:15:f8:fb:64:a1: b2:ce:1b:38:df:aa:92:1c:37:f1:10:22:59:81:8e: b3:e6:aa:3a:33:76:c9:18:d6:0d:0a:f2:1a:ac:8a: ae:7a:c8:2a:fc:84:ee:ca:7f:a5:82:77:11:eb:ea: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1E:76:57:36:10:9D:62:8E:FF:26:E0:F5:7F:7C:F1:39:D8:32:C8 X509v3 Authority Key Identifier: keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/4x52VzYQnWKO_ybg9X988TnYMsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.229.0/24 193.186.211.0/24 Signature Algorithm: sha256WithRSAEncryption 78:da:87:7f:a9:e3:3e:13:1d:5b:fa:54:e8:fb:11:1b:67:58: 4f:83:d4:8b:e6:14:7e:34:6b:f5:06:94:cc:1f:74:0d:ed:85: ba:b6:09:c7:b1:e8:48:dc:43:88:1a:3c:c1:eb:0d:f8:88:51: 4f:48:7b:7e:b7:13:06:9c:44:02:e9:30:7c:3c:a5:64:79:6e: 69:ca:bf:33:80:cf:2b:f7:e5:b3:9b:5f:da:9d:0e:3f:25:a6: 8c:0e:a4:95:3e:d4:93:64:e9:f9:21:18:99:a3:70:95:40:d4: 74:5f:8d:41:76:4a:f8:9f:e3:9a:ba:19:29:96:89:c0:8c:9e: 6f:9f:93:3f:a1:2d:61:a9:16:f0:23:80:6c:6d:4f:76:17:19: e4:3e:5c:48:15:67:87:65:bd:27:13:c6:a3:1d:ca:b5:f0:1e: 29:fd:69:55:75:4e:3c:d2:0d:dc:8a:79:0b:99:69:dc:0b:bf: 2e:7f:03:30:16:a4:25:a8:c4:1c:27:8e:74:3b:66:2b:ef:68: 2e:80:05:a6:c1:c7:e2:50:9f:18:2d:b9:ae:35:d5:14:8e:5b: b2:e3:1a:d1:d9:5e:1c:a4:2a:ed:a4:81:98:11:97:63:f4:38: a9:dc:e1:b3:ac:14:00:96:52:09:15:62:d5:27:45:25:f2:b4: 7a:2e:5b:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuURLt3ITkh+vZiC07jAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0 M2E5YjcwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzFlNzY1NzM2MTA5ZDYyOGVmZjI2ZTBmNTdmN2NmMTM5ZDgzMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1APoEBM7+PV0z5CjReegUwthje5c CZ+REMlKs+FDSK8md/wEH2U/QjLZsAjsslK2g/VWfGTUMABUsdYGPCGYcN22pCYD qz49vT8FWEqblxfCCt25Msswt6ei3nutFRfI08KKfsg7UdTKoL23rrHOfk1UgWG2 xjWzLxUEQXaWJYM9Secqy9TXmff+ltGbJI3m720jBJd8ipgg9aYska945mYMX01x zt/HuNr9thYwtwOFl3hCv61VkrLaUV/zcO29kV2y3a3DIaXyln4xFfj7ZKGyzhs4 36qSHDfxECJZgY6z5qo6M3bJGNYNCvIarIquesgq/ITuyn+lgncR6+rpgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOMedlc2EJ1ijv8m4PV/fPE52DLIMB8GA1UdIwQY MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt NTEzOGYzNDJlOWY1LzEvNHg1MlZ6WVFuV0tPX3liZzlYOTg4VG5ZTXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1 LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXo/lAwQA wbrTMA0GCSqGSIb3DQEBCwUAA4IBAQB42od/qeM+Ex1b+lTo+xEbZ1hPg9SL5hR+ NGv1BpTMH3QN7YW6tgnHsehI3EOIGjzB6w34iFFPSHt+txMGnEQC6TB8PKVkeW5p yr8zgM8r9+Wzm1/anQ4/JaaMDqSVPtSTZOn5IRiZo3CVQNR0X41Bdkr4n+Oauhkp lonAjJ5vn5M/oS1hqRbwI4BsbU92FxnkPlxIFWeHZb0nE8ajHcq18B4p/WlVdU48 0g3cinkLmWncC78ufwMwFqQlqMQcJ450O2Yr72gugAWmwcfiUJ8YLbmuNdUUjluy 4xrR2V4cpCrtpIGYEZdj9Dip3OGzrBQAllIJFWLVJ0Ul8rR6Llvm -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:08 2026 by rpki-client