This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa File: 4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa (raw, json) Hash identifier: eq8is2mM85ya95EGP40Q8n1JwKPY2Okwq8fFsHrSk/0= Subject key identifier: E0:91:75:AA:DD:3E:41:B3:75:27:EB:C3:C2:37:28:AB:79:16:6D:0D Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Certificate serial: 019B7A5A0D49E50B65967BFF28AB46FCB4CE Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa Signing time: Thu 01 Jan 2026 16:18:00 +0000 ROA not before: Thu 01 Jan 2026 16:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 195.88.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0d:49:e5:0b:65:96:7b:ff:28:ab:46:fc:b4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e09175aadd3e41b37527ebc3c23728ab79166d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:65:ff:3f:9d:8a:5c:6a:34:27:2e:d4:13: df:cd:e7:88:41:68:c6:86:f2:99:59:40:a6:4e:62: 9d:38:b3:72:53:e0:5a:69:82:ff:45:06:7b:d7:12: 39:45:9c:f7:2e:8f:47:87:d7:97:4c:7d:3b:ae:4b: 8d:12:c4:84:c5:7d:12:68:f8:d7:a4:a5:83:58:2f: f8:df:bb:a0:31:50:6c:39:52:c4:01:cd:cf:d2:d4: 56:1d:02:06:34:6d:77:36:1a:d6:c8:8a:4e:d0:f9: d1:08:02:c1:5c:e6:48:be:d6:64:7d:70:32:06:ec: 00:f1:be:1e:23:21:82:67:b0:36:cf:fa:dc:71:57: 7b:49:e8:f8:5b:9e:cd:90:6a:bd:d8:e6:80:80:25: 81:54:b7:49:08:d8:2e:ab:bf:e9:7f:01:9d:57:62: d1:a3:41:0b:c3:c0:1a:ee:78:5f:3c:30:5d:84:4b: cf:21:1e:75:fa:c2:98:88:ba:c6:04:fe:4f:6c:05: 06:d7:cd:6b:4c:9e:4c:0b:76:51:4e:c4:7a:33:08: 99:37:94:78:13:56:c6:b8:3f:0f:ac:2b:37:8f:8b: 96:f7:95:16:b7:76:d8:3b:c1:12:99:9d:bf:d6:29: 33:20:ce:63:e6:b3:1b:66:9f:19:b6:67:69:b8:5d: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:91:75:AA:DD:3E:41:B3:75:27:EB:C3:C2:37:28:AB:79:16:6D:0D X509v3 Authority Key Identifier: keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/4JF1qt0-QbN1J-vDwjcoq3kWbQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.20.0/24 Signature Algorithm: sha256WithRSAEncryption 31:7a:01:b7:86:41:5d:12:9d:c1:d9:57:af:0c:f8:83:7a:6e: 59:a3:3a:86:63:8a:56:89:48:ed:c5:cd:3e:87:0d:9f:2d:56: 32:5f:b7:b7:d2:94:b6:8f:3d:4f:aa:69:a0:c6:40:c1:21:da: 45:9b:ff:b7:0c:79:63:d9:dc:1f:70:b8:f2:a0:2c:5e:14:da: a9:59:87:42:dd:54:29:8d:f2:20:d7:8f:1a:9d:05:99:d2:8b: ce:a6:3b:1e:36:e9:85:90:6f:86:61:2b:f2:9f:1d:9e:cd:f5: cd:68:cf:c5:0a:20:81:36:e8:79:6c:47:0c:9b:09:81:00:a2: bb:e4:1a:0f:4e:4a:84:45:5a:20:b3:f7:b0:f7:44:b7:bc:21: b0:72:1f:58:f1:4b:d5:42:03:36:27:64:53:d5:68:35:97:24: 9d:05:73:f6:27:19:65:f2:04:66:19:a1:54:f0:0f:9a:71:ee: 88:f3:65:67:02:c9:44:a0:77:a9:11:91:f4:5d:f2:df:66:e1: b3:d6:3b:63:51:51:0f:01:ee:4a:3c:1c:32:69:0f:96:05:2b: 3e:08:8a:38:99:0e:ff:52:18:58:60:08:6e:ca:fe:e4:81:9e: 40:d4:ee:7a:7e:2c:4a:40:cc:1d:d1:28:ea:3f:df:b5:5e:e8: 6e:a2:60:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wg1J5Qtllnv/KKtG/LTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4 MTA3ZjYwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDkxNzVhYWRkM2U0MWIzNzUyN2ViYzNjMjM3MjhhYjc5MTY2ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LVl/z+dilxqNCcu1BPfzeeIQWjG hvKZWUCmTmKdOLNyU+BaaYL/RQZ71xI5RZz3Lo9Hh9eXTH07rkuNEsSExX0SaPjX pKWDWC/437ugMVBsOVLEAc3P0tRWHQIGNG13NhrWyIpO0PnRCALBXOZIvtZkfXAy BuwA8b4eIyGCZ7A2z/rccVd7Sej4W57NkGq92OaAgCWBVLdJCNguq7/pfwGdV2LR o0ELw8Aa7nhfPDBdhEvPIR51+sKYiLrGBP5PbAUG181rTJ5MC3ZRTsR6MwiZN5R4 E1bGuD8PrCs3j4uW95UWt3bYO8ESmZ2/1ikzIM5j5rMbZp8ZtmdpuF0IMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCRdardPkGzdSfrw8I3KKt5Fm0NMB8GA1UdIwQY MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt MjZjNjdjZDAxMjhjLzEvNEpGMXF0MC1RYk4xSi12RHdqY29xM2tXYlEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1gUMA0G CSqGSIb3DQEBCwUAA4IBAQAxegG3hkFdEp3B2VevDPiDem5ZozqGY4pWiUjtxc0+ hw2fLVYyX7e30pS2jz1PqmmgxkDBIdpFm/+3DHlj2dwfcLjyoCxeFNqpWYdC3VQp jfIg148anQWZ0ovOpjseNumFkG+GYSvynx2ezfXNaM/FCiCBNuh5bEcMmwmBAKK7 5BoPTkqERVogs/ew90S3vCGwch9Y8UvVQgM2J2RT1Wg1lySdBXP2Jxll8gRmGaFU 8A+ace6I82VnAslEoHepEZH0XfLfZuGz1jtjUVEPAe5KPBwyaQ+WBSs+CIo4mQ7/ UhhYYAhuyv7kgZ5A1O56fixKQMwd0SjqP9+1XuhuomD4 -----END CERTIFICATE-----Generated at Thu Jan 8 17:35:00 2026 by rpki-client