This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa File: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (raw, json) Hash identifier: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8= Subject key identifier: 37:86:35:D1:46:B5:7B:AF:97:50:D8:28:6A:64:5D:E2:12:6E:1C:CD Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Certificate serial: 019B7BA3571A76E4D74C32815F1F6577EB8D Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.46.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:57:1a:76:e4:d7:4c:32:81:5f:1f:65:77:eb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=378635d146b57baf9750d8286a645de2126e1ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:fd:8f:6e:1b:76:a3:60:4c:49:31:c8:5f: 20:d8:8a:91:d4:36:26:b4:b3:57:e6:4d:04:89:51: 2c:a8:50:06:f2:ff:ef:36:62:ab:55:34:9d:fb:54: 8a:28:bf:b5:76:23:bb:be:98:ad:bd:78:99:01:83: c8:10:1a:4d:b9:30:2d:42:10:f4:c9:08:38:e4:5b: d0:e6:c8:85:df:32:42:46:e6:7d:52:b1:4a:1b:ca: cb:c6:ad:f3:9e:86:5d:fa:01:7c:b5:35:90:12:df: fb:f1:14:c1:9c:32:d8:98:97:7e:3d:8a:b1:e4:38: 30:b5:d6:7a:3a:11:fc:b5:3f:89:dc:02:93:f2:af: b2:c4:31:a0:4b:67:00:00:a6:c1:bf:18:96:a9:fc: eb:3a:0d:a1:bc:f2:20:58:3b:a6:55:e3:8f:c6:49: ce:f9:57:4a:e6:f9:72:99:1d:38:ca:fe:d8:d9:fa: dc:68:dd:c4:ec:10:16:84:10:3f:53:6a:22:ef:bd: 2a:bb:97:8e:2c:1f:d1:6f:35:50:01:c0:16:ef:3f: 40:9d:eb:34:6b:ec:de:16:e9:3f:0a:ef:be:59:38: 7f:5d:00:33:d4:1e:2d:86:c3:82:58:5b:9f:c2:bc: 07:94:c4:cf:d2:c3:9a:02:0b:51:9d:29:cc:b4:5b: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:86:35:D1:46:B5:7B:AF:97:50:D8:28:6A:64:5D:E2:12:6E:1C:CD X509v3 Authority Key Identifier: keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.62.0/24 Signature Algorithm: sha256WithRSAEncryption a4:1d:71:b9:01:34:af:ed:c4:fd:83:5c:71:4f:96:7b:c9:50: 59:5c:1b:99:ea:36:e3:3c:ef:28:81:7c:e1:96:01:84:3c:b4: 29:5a:e3:d3:77:80:0c:59:50:b4:e8:f1:de:1a:6b:4c:42:b7: e3:9a:24:71:50:eb:3d:c6:e8:7b:ac:21:18:c7:26:66:9f:c3: 9e:3d:84:b4:27:60:41:c4:3b:a8:8a:19:e0:da:e5:bf:b9:9d: f2:45:32:85:da:45:61:e1:d7:02:06:b7:b0:13:e0:0b:38:e8: 7b:1c:24:2b:89:70:d6:37:a8:40:12:71:a5:c6:69:36:49:1a: 40:5c:9b:8f:16:c4:49:75:a3:79:d3:6a:72:69:96:cc:c6:b2: 6c:34:8f:03:56:89:8a:1f:6e:75:8b:ce:91:82:8e:6b:75:ba: 45:46:bb:05:c4:c3:67:bc:e2:ca:70:c1:ba:9d:81:e2:c4:ad: 98:4d:5c:b1:3d:6c:91:14:bc:c9:13:4d:f9:5d:9f:b4:78:46: 77:d8:7a:e7:7f:b6:ec:ea:56:0e:63:55:21:94:ed:4d:ad:a4: bc:da:fc:f5:b5:1f:66:7c:98:a6:17:5f:49:38:f5:85:bf:36: 62:38:af:16:bb:fa:c8:81:54:84:74:70:72:96:c6:83:f4:95: e5:a5:6a:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1caduTXTDKBXx9ld+uNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2 YThkMmUwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzg2MzVkMTQ2YjU3YmFmOTc1MGQ4Mjg2YTY0NWRlMjEyNmUxY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9b9j24bdqNgTEkxyF8g2IqR1DYm tLNX5k0EiVEsqFAG8v/vNmKrVTSd+1SKKL+1diO7vpitvXiZAYPIEBpNuTAtQhD0 yQg45FvQ5siF3zJCRuZ9UrFKG8rLxq3znoZd+gF8tTWQEt/78RTBnDLYmJd+PYqx 5DgwtdZ6OhH8tT+J3AKT8q+yxDGgS2cAAKbBvxiWqfzrOg2hvPIgWDumVeOPxknO +VdK5vlymR04yv7Y2frcaN3E7BAWhBA/U2oi770qu5eOLB/RbzVQAcAW7z9Anes0 a+zeFuk/Cu++WTh/XQAz1B4thsOCWFufwrwHlMTP0sOaAgtRnSnMtFtguwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeGNdFGtXuvl1DYKGpkXeISbhzNMB8GA1UdIwQY MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt OTMzN2YzNzQxNjhlLzEvTjRZMTBVYTFlNi1YVU5nb2FtUmQ0aEp1SE0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS4+MA0G CSqGSIb3DQEBCwUAA4IBAQCkHXG5ATSv7cT9g1xxT5Z7yVBZXBuZ6jbjPO8ogXzh lgGEPLQpWuPTd4AMWVC06PHeGmtMQrfjmiRxUOs9xuh7rCEYxyZmn8OePYS0J2BB xDuoihng2uW/uZ3yRTKF2kVh4dcCBrewE+ALOOh7HCQriXDWN6hAEnGlxmk2SRpA XJuPFsRJdaN502pyaZbMxrJsNI8DVomKH251i86Rgo5rdbpFRrsFxMNnvOLKcMG6 nYHixK2YTVyxPWyRFLzJE035XZ+0eEZ32Hrnf7bs6lYOY1UhlO1NraS82vz1tR9m fJimF19JOPWFvzZiOK8Wu/rIgVSEdHBylsaD9JXlpWo+ -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:03 2026 by rpki-client