This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa File: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (raw, json) Hash identifier: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY= Subject key identifier: E0:C7:37:DD:B2:0F:A9:73:6D:D1:60:4A:4D:8E:88:59:B8:59:87:22 Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Certificate serial: 019B7F835092079AAB76CCC45AB43F7A5E89 Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa Signing time: Fri 02 Jan 2026 16:21:10 +0000 ROA not before: Fri 02 Jan 2026 16:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59965 IP address blocks: 193.200.249.0/24 maxlen: 24 2a0c:15c0:3::/64 maxlen: 64 2a0c:15c0:b3::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:50:92:07:9a:ab:76:cc:c4:5a:b4:3f:7a:5e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Validity Not Before: Jan 2 16:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c737ddb20fa9736dd1604a4d8e8859b8598722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:6b:0c:43:63:b2:55:0e:15:1a:98:f1:0a: d0:48:65:c7:28:47:f6:79:11:9b:ce:99:21:07:10: 1f:2d:71:f9:fb:55:15:81:02:1b:19:07:90:56:a7: 45:a4:d8:98:e5:76:7d:86:61:23:99:7e:36:5f:05: b0:30:44:0d:2c:fe:35:f9:04:dd:41:f2:fd:76:fc: 60:73:f8:1d:af:bd:41:1a:65:e4:16:50:54:07:3a: 89:a5:a1:6b:bc:5c:e3:80:1d:a4:7a:f9:48:74:03: 23:e5:20:a4:96:8a:2f:c3:3a:74:b5:f6:94:b3:3d: 2b:d9:f4:f5:f9:3a:37:1f:b0:e5:a0:f0:2f:1f:47: 81:27:e4:71:53:1b:3a:46:d3:22:af:62:63:e6:33: f8:f8:0a:bb:85:f5:58:83:0e:4f:2c:61:f3:6e:0e: 8c:bb:2e:b6:8c:6c:d1:61:e5:b2:f6:cf:2a:65:56: b4:b3:a5:b7:36:88:67:ad:18:87:21:8f:e5:64:e6: f2:93:98:84:c8:54:6d:55:5b:93:88:b0:9d:cf:bf: df:7d:53:cf:f6:13:de:19:ba:0b:b8:fb:34:0f:33: 07:87:7d:52:b9:b6:3c:57:a3:0d:a5:d2:6f:9f:3d: fd:64:c5:6b:09:66:a5:37:b7:b9:ac:40:a2:ed:29: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:37:DD:B2:0F:A9:73:6D:D1:60:4A:4D:8E:88:59:B8:59:87:22 X509v3 Authority Key Identifier: keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.249.0/24 IPv6: 2a0c:15c0:3::/64 2a0c:15c0:b3::/48 Signature Algorithm: sha256WithRSAEncryption 77:29:08:6d:a8:16:1d:cb:ca:39:b9:f3:a8:4e:ea:24:19:f9: 5f:2f:ef:27:d1:8b:cf:f3:a1:f2:64:9c:34:9a:81:16:66:4f: 1d:11:a7:41:43:ce:58:fe:89:1c:f0:d8:43:69:6e:32:43:f5: 87:60:39:af:ef:7d:a4:ca:08:34:53:97:d4:67:0d:cc:56:af: 2f:55:95:db:91:66:03:10:74:2c:9a:2f:60:c9:bd:b5:e9:f6: 3f:c6:72:6c:98:5d:72:0a:c2:c9:29:01:db:71:bf:55:b1:e6: 32:24:a0:37:a5:35:e3:47:7c:59:d8:9a:cd:c4:ac:20:38:62: 30:93:85:90:91:e9:72:dd:09:cd:9e:c5:22:dd:a6:ae:23:6a: e7:ac:fa:8d:b4:79:ea:c5:4f:5c:26:51:9b:31:2d:21:6b:7d: 04:f9:4d:a1:b1:a2:02:40:45:de:4f:a9:6a:20:59:bb:44:a9: f9:8f:b7:24:ff:79:1d:04:1c:dd:d7:d7:25:ce:24:6f:12:9f: c3:2a:cf:c3:52:7a:0e:18:c9:d4:f3:03:c5:94:21:21:bd:5b: 04:5c:a1:51:4f:71:65:5d:c2:48:5a:13:fb:81:12:6a:c1:dc: 87:d6:5b:13:f8:b0:6d:7b:17:4b:d7:44:c1:36:3e:0c:65:46: a0:c0:a8:cc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/g1CSB5qrdszEWrQ/el6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh YWNhN2IwHhcNMjYwMTAyMTYyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGM3MzdkZGIyMGZhOTczNmRkMTYwNGE0ZDhlODg1OWI4NTk4NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBdrDENjslUOFRqY8QrQSGXHKEf2 eRGbzpkhBxAfLXH5+1UVgQIbGQeQVqdFpNiY5XZ9hmEjmX42XwWwMEQNLP41+QTd QfL9dvxgc/gdr71BGmXkFlBUBzqJpaFrvFzjgB2kevlIdAMj5SCkloovwzp0tfaU sz0r2fT1+To3H7DloPAvH0eBJ+RxUxs6RtMir2Jj5jP4+Aq7hfVYgw5PLGHzbg6M uy62jGzRYeWy9s8qZVa0s6W3NohnrRiHIY/lZObyk5iEyFRtVVuTiLCdz7/ffVPP 9hPeGboLuPs0DzMHh31SubY8V6MNpdJvnz39ZMVrCWalN7e5rECi7SlvlQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFODHN92yD6lzbdFgSk2OiFm4WYciMB8GA1UdIwQY MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt ODFjOGNlNzUwMTI0LzEvNE1jMzNiSVBxWE50MFdCS1RZNklXYmhaaHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0 LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAwcj5MBoE AgACMBQDCQAqDBXAAAMAAAMHACoMFcAAszANBgkqhkiG9w0BAQsFAAOCAQEAdykI bagWHcvKObnzqE7qJBn5Xy/vJ9GLz/Oh8mScNJqBFmZPHRGnQUPOWP6JHPDYQ2lu MkP1h2A5r+99pMoINFOX1GcNzFavL1WV25FmAxB0LJovYMm9ten2P8ZybJhdcgrC ySkB23G/VbHmMiSgN6U140d8WdiazcSsIDhiMJOFkJHpct0JzZ7FIt2mriNq56z6 jbR56sVPXCZRmzEtIWt9BPlNobGiAkBF3k+paiBZu0Sp+Y+3JP95HQQc3dfXJc4k bxKfwyrPw1J6DhjJ1PMDxZQhIb1bBFyhUU9xZV3CSFoT+4ESasHch9ZbE/iwbXsX S9dEwTY+DGVGoMCozA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:20 2026 by rpki-client