This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4POuqb9ZffirgExj9ULX2eJY4Zw.roa File: 4POuqb9ZffirgExj9ULX2eJY4Zw.roa (raw, json) Hash identifier: f5LqoTgAIWvWpNUFiJOaJtMefEu6y03ltTzhNYHxzl0= Subject key identifier: E0:F3:AE:A9:BF:59:7D:F8:AB:80:4C:63:F5:42:D7:D9:E2:58:E1:9C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A8FEBB07AB4E3EE893E226A7135AD Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4POuqb9ZffirgExj9ULX2eJY4Zw.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 109.176.210.0/24 maxlen: 24 109.176.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:eb:b0:7a:b4:e3:ee:89:3e:22:6a:71:35:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f3aea9bf597df8ab804c63f542d7d9e258e19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:36:8b:f0:8f:33:da:34:c7:93:19:ef:b5: 09:b0:ae:43:8c:b9:95:74:31:fa:51:ef:cd:f9:cd: 58:6c:3e:de:b6:d8:68:62:cb:7f:82:6e:7a:31:ca: ab:4a:23:9f:17:dc:df:b5:18:6a:6b:ed:69:b2:c3: 6a:be:06:3e:a4:cb:a6:16:44:73:fd:ce:84:b0:8e: 84:61:9e:6b:5a:94:f1:38:71:56:74:9d:ca:d7:66: 0c:27:bb:c0:e3:5a:21:8e:6e:b4:10:28:85:3f:e7: 57:3f:85:e1:28:ae:c5:ad:84:a7:36:83:fc:0b:75: 7c:a9:f5:93:7a:1c:3a:09:ad:36:5d:56:53:e8:2c: 27:c6:f4:90:1a:09:15:6f:15:38:e4:02:07:65:18: 64:2d:c6:75:7e:5d:62:ef:84:16:26:ae:9f:fe:d0: fb:99:92:e7:83:98:bd:cc:67:6b:92:72:4e:6e:aa: 95:c5:95:b5:39:4e:17:8a:8e:cc:94:74:66:42:e7: b6:2e:da:65:c2:b7:9c:56:35:93:1c:ea:9d:33:8c: bf:be:c9:d5:01:b8:ec:e7:4f:b8:da:0b:16:da:24: 4d:f1:cb:35:a2:67:b6:1c:e4:6c:63:c0:15:d0:c9: 40:af:d3:c6:86:7c:89:62:cd:b3:fc:58:36:72:2a: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F3:AE:A9:BF:59:7D:F8:AB:80:4C:63:F5:42:D7:D9:E2:58:E1:9C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4POuqb9ZffirgExj9ULX2eJY4Zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.210.0/24 109.176.241.0/24 Signature Algorithm: sha256WithRSAEncryption 68:29:97:0c:0d:ae:8b:35:19:5d:97:7e:4f:02:0f:5d:cf:12: 9a:ba:82:10:8b:07:e7:29:ae:d3:58:3b:37:c1:7c:c0:b3:f1: 92:15:1a:7c:df:49:80:14:2f:35:6f:bd:f6:fd:25:34:51:5b: 2a:f8:08:b5:44:cf:9b:34:22:b2:f8:e6:f3:fc:42:80:86:5a: 88:05:b2:7e:5b:10:d0:01:12:ac:01:f1:e9:db:d5:a4:56:96: 99:a5:e1:21:dc:64:5b:96:e1:cd:32:2a:8c:e5:7a:5d:70:1d: 7d:4e:5b:11:c4:43:d0:d7:d3:9f:d4:51:75:2e:b4:06:a6:62: 30:ec:a6:bf:27:b6:b5:ec:2e:19:2f:9f:f2:13:91:a5:c6:16: 7b:da:74:cc:8c:72:d4:12:0b:00:f7:4f:91:67:f8:56:31:32: 60:3c:02:19:e1:15:8d:2e:6e:a0:bb:3a:ba:d7:8a:c2:3c:6b: 08:a6:45:88:17:31:bc:b9:a4:91:9d:78:21:38:1d:b5:04:cf: 34:2d:de:61:71:84:e0:7c:98:26:3e:90:50:82:78:cb:97:3e: df:6f:db:8a:18:7a:1c:5a:b6:0c:79:64:97:0b:05:63:3e:3d: b1:28:12:d8:e4:d3:05:61:a6:d9:24:7b:b3:ea:5f:f1:98:5e: 3f:09:71:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wo/rsHq04+6JPiJqcTWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGYzYWVhOWJmNTk3ZGY4YWI4MDRjNjNmNTQyZDdkOWUyNThlMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGA2i/CPM9o0x5MZ77UJsK5DjLmV dDH6Ue/N+c1YbD7etthoYst/gm56McqrSiOfF9zftRhqa+1pssNqvgY+pMumFkRz /c6EsI6EYZ5rWpTxOHFWdJ3K12YMJ7vA41ohjm60ECiFP+dXP4XhKK7FrYSnNoP8 C3V8qfWTehw6Ca02XVZT6CwnxvSQGgkVbxU45AIHZRhkLcZ1fl1i74QWJq6f/tD7 mZLng5i9zGdrknJObqqVxZW1OU4Xio7MlHRmQue2LtplwrecVjWTHOqdM4y/vsnV Abjs50+42gsW2iRN8cs1ome2HORsY8AV0MlAr9PGhnyJYs2z/Fg2cirMpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFODzrqm/WX34q4BMY/VC19niWOGcMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvNFBPdXFiOVpmZmlyZ0V4ajlVTFgyZUpZNFp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbDSAwQA bbDxMA0GCSqGSIb3DQEBCwUAA4IBAQBoKZcMDa6LNRldl35PAg9dzxKauoIQiwfn Ka7TWDs3wXzAs/GSFRp830mAFC81b732/SU0UVsq+Ai1RM+bNCKy+Obz/EKAhlqI BbJ+WxDQARKsAfHp29WkVpaZpeEh3GRbluHNMiqM5XpdcB19TlsRxEPQ19Of1FF1 LrQGpmIw7Ka/J7a17C4ZL5/yE5GlxhZ72nTMjHLUEgsA90+RZ/hWMTJgPAIZ4RWN Lm6guzq614rCPGsIpkWIFzG8uaSRnXghOB21BM80Ld5hcYTgfJgmPpBQgnjLlz7f b9uKGHocWrYMeWSXCwVjPj2xKBLY5NMFYabZJHuz6l/xmF4/CXGi -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:12 2026 by rpki-client