This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/4o-NW_B5FSFDZ4gKE1tWJ-v7s-g.roa File: 4o-NW_B5FSFDZ4gKE1tWJ-v7s-g.roa (raw, json) Hash identifier: ouFB/UvxDiRbon15aN+SKttXHEnMEz2wiPSDtRRfD6o= Subject key identifier: E2:8F:8D:5B:F0:79:15:21:43:67:88:0A:13:5B:56:27:EB:FB:B3:E8 Certificate issuer: /CN=8fbc1063a6efb45e27b111e9207827c9f732502b Certificate serial: 019B7D5BC5B2EF3377AC2AA11AF4D67E6B55 Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/4o-NW_B5FSFDZ4gKE1tWJ-v7s-g.roa Signing time: Fri 02 Jan 2026 06:18:44 +0000 ROA not before: Fri 02 Jan 2026 06:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29434 IP address blocks: 93.94.192.0/21 maxlen: 24 93.94.194.0/24 maxlen: 24 93.94.199.0/24 maxlen: 24 193.200.170.0/24 maxlen: 24 195.85.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c5:b2:ef:33:77:ac:2a:a1:1a:f4:d6:7e:6b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b Validity Not Before: Jan 2 06:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e28f8d5bf07915214367880a135b5627ebfbb3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:eb:07:c3:8c:4a:34:2d:a4:17:1a:3a:31: bb:20:a0:93:bd:91:dd:3d:14:e3:16:c6:1b:47:c0: 41:f0:88:d9:c1:79:12:b2:fc:6d:c6:e6:45:75:0f: b1:f1:8a:22:c9:e9:83:b6:67:0b:88:10:a8:51:30: b4:4a:f8:71:73:a6:a7:37:52:cf:2c:13:05:ee:75: 06:4c:38:08:47:f2:56:fc:20:65:cd:5a:07:8c:4a: 14:01:01:b6:7b:49:e1:c8:24:e2:6c:ab:c8:85:01: f8:ee:b8:c0:3f:13:7a:bf:94:18:60:4e:de:fe:69: 78:56:cf:c5:16:50:8b:af:1a:0c:8e:8c:03:82:8b: fe:e8:b6:04:12:3e:e7:22:8c:55:34:10:fb:5e:e7: aa:13:02:74:12:84:50:ef:43:ba:8b:65:a3:1a:5d: 29:e3:dc:3b:71:56:a5:b6:29:d7:9f:21:60:e2:9d: 8e:c0:f8:dd:29:cc:9b:a6:2f:9b:c9:87:80:a5:07: 56:1d:a9:fb:8e:81:6e:dd:c3:13:6e:40:c8:77:3a: b4:6d:4d:44:ed:20:b4:03:e9:60:0e:ce:de:21:91: d1:35:b6:97:ab:a8:f0:54:9f:4a:47:0a:17:71:ab: 11:a1:e9:8b:a6:70:a0:7f:87:bb:c5:51:55:4d:f5: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8F:8D:5B:F0:79:15:21:43:67:88:0A:13:5B:56:27:EB:FB:B3:E8 X509v3 Authority Key Identifier: keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/4o-NW_B5FSFDZ4gKE1tWJ-v7s-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.192.0/21 193.200.170.0/24 195.85.255.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d9:a5:d0:09:bb:7c:9b:f7:01:b3:d6:5b:9d:70:84:e7:a8: 50:bc:73:3a:21:c2:8c:6b:92:02:6b:9b:c9:e9:2f:f2:9c:2b: 23:36:55:6c:50:c9:28:65:e2:4d:37:e6:cf:d3:3f:85:52:28: ad:e8:0c:1b:ad:33:84:80:f0:03:55:6b:a6:d9:a9:f9:aa:d1: 0c:8c:fe:d0:5f:74:78:10:8f:50:cc:b4:b1:84:c1:96:51:7c: 55:d0:7e:d6:3e:4b:93:c8:24:1a:c8:aa:37:c8:eb:f4:0f:1c: 46:21:fd:e5:7f:5e:40:d6:a8:79:7d:aa:15:ab:6a:61:01:c2: d9:82:87:51:b3:b1:62:24:fc:36:87:53:02:9a:c4:97:87:b2: d6:71:a3:46:ea:a2:c3:dd:85:b4:0c:31:33:50:ca:24:ed:ef: c4:0a:01:1b:17:17:76:97:7d:48:d8:f1:ef:80:d6:59:f7:1d: 97:f4:70:28:46:86:11:78:26:9e:04:66:69:80:e0:db:dc:ca: f1:9d:5e:79:d9:3c:dc:fe:df:5c:76:28:f3:cc:fe:81:43:0c: 76:c7:af:f0:4f:93:45:89:fb:d6:ec:0c:9f:2b:1a:1e:31:fb: 28:8d:cc:f9:85:ac:44:a2:7c:e7:04:04:07:ca:b7:5b:a9:63: 21:eb:b0:63 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W8Wy7zN3rCqhGvTWfmtVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYmMxMDYzYTZlZmI0NWUyN2IxMTFlOTIwNzgyN2M5Zjcz MjUwMmIwHhcNMjYwMTAyMDYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjhmOGQ1YmYwNzkxNTIxNDM2Nzg4MGExMzViNTYyN2ViZmJiM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsunrB8OMSjQtpBcaOjG7IKCTvZHd PRTjFsYbR8BB8IjZwXkSsvxtxuZFdQ+x8YoiyemDtmcLiBCoUTC0Svhxc6anN1LP LBMF7nUGTDgIR/JW/CBlzVoHjEoUAQG2e0nhyCTibKvIhQH47rjAPxN6v5QYYE7e /ml4Vs/FFlCLrxoMjowDgov+6LYEEj7nIoxVNBD7XueqEwJ0EoRQ70O6i2WjGl0p 49w7cValtinXnyFg4p2OwPjdKcybpi+byYeApQdWHan7joFu3cMTbkDIdzq0bU1E 7SC0A+lgDs7eIZHRNbaXq6jwVJ9KRwoXcasRoemLpnCgf4e7xVFVTfXoEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOKPjVvweRUhQ2eIChNbVifr+7PoMB8GA1UdIwQY MBaAFI+8EGOm77ReJ7ER6SB4J8n3MlArMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajd3UVk2YnZ0RjRuc1JIcElIZ255ZmN5VUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8xZDhlODAtMzNhOC00ZDU1LWEzZDYt NWVjZGVmMmZiNjhkLzEvNG8tTldfQjVGU0ZEWjRnS0UxdFdKLXY3cy1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8xZDhlODAtMzNhOC00ZDU1LWEzZDYtNWVjZGVmMmZiNjhk LzEvajd3UVk2YnZ0RjRuc1JIcElIZ255ZmN5VUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXV7AAwQA wciqAwQAw1X/MA0GCSqGSIb3DQEBCwUAA4IBAQCI2aXQCbt8m/cBs9ZbnXCE56hQ vHM6IcKMa5ICa5vJ6S/ynCsjNlVsUMkoZeJNN+bP0z+FUiit6AwbrTOEgPADVWum 2an5qtEMjP7QX3R4EI9QzLSxhMGWUXxV0H7WPkuTyCQayKo3yOv0DxxGIf3lf15A 1qh5faoVq2phAcLZgodRs7FiJPw2h1MCmsSXh7LWcaNG6qLD3YW0DDEzUMok7e/E CgEbFxd2l31I2PHvgNZZ9x2X9HAoRoYReCaeBGZpgODb3MrxnV552Tzc/t9cdijz zP6BQwx2x6/wT5NFifvW7AyfKxoeMfsojcz5haxEonznBAQHyrdbqWMh67Bj -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:26 2026 by rpki-client