This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/4tnEl1SMuQMQMWTOXvpKPQW7cfw.roa File: 4tnEl1SMuQMQMWTOXvpKPQW7cfw.roa (raw, json) Hash identifier: kx51H4YiIMkrkv3bmKTZf2aC2hnzQeWD1CDbPstHJs0= Subject key identifier: E2:D9:C4:97:54:8C:B9:03:10:31:64:CE:5E:FA:4A:3D:05:BB:71:FC Certificate issuer: /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56 Certificate serial: 019B7A5B1A98FAF09F9927B2499B53CDA226 Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/4tnEl1SMuQMQMWTOXvpKPQW7cfw.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33813 IP address blocks: 193.242.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1a:98:fa:f0:9f:99:27:b2:49:9b:53:cd:a2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d9c497548cb903103164ce5efa4a3d05bb71fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:4f:fb:34:df:1b:85:70:40:28:30:c4:d6: 23:e6:33:0d:de:a0:a8:94:f0:13:2c:28:e4:1a:67: f0:21:e9:b1:d0:d2:ac:2b:5b:c1:d3:78:c5:d2:12: a2:cc:b7:eb:28:18:80:06:9c:1f:84:6e:3b:cf:33: cb:35:0a:67:5d:9c:7a:8b:59:ea:c3:0f:6a:74:70: 3e:82:fb:2b:ff:d8:26:ec:1b:fc:25:7e:47:4e:0c: 2d:dd:d5:57:ea:68:82:18:34:ba:75:89:97:52:b1: c5:e1:d8:f0:e7:03:09:f9:23:a8:d2:c9:5a:ca:d5: a0:bf:aa:06:2e:68:d8:14:b3:09:5f:13:7f:38:51: 40:32:5b:83:e3:1b:92:42:a8:7c:96:e3:34:a5:a8: 57:ef:fd:76:13:60:10:3f:bf:71:e8:ae:dc:37:75: be:6b:95:97:59:91:7e:e5:9a:fb:b0:0f:67:8f:b4: b8:56:28:37:bb:94:21:01:33:58:e9:58:2c:1e:96: 7d:81:f4:18:c5:7e:fb:24:49:64:d5:7a:36:a2:b5: 6c:6d:5c:91:de:8f:68:64:d3:f4:bc:56:99:a7:0e: c0:78:28:4e:0f:5b:94:dd:a3:36:23:ac:11:2d:e1: 15:83:33:17:fe:e8:4e:93:b0:7b:02:8d:24:85:1d: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D9:C4:97:54:8C:B9:03:10:31:64:CE:5E:FA:4A:3D:05:BB:71:FC X509v3 Authority Key Identifier: keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/4tnEl1SMuQMQMWTOXvpKPQW7cfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.124.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:af:c3:24:28:0a:58:dd:dd:fe:62:52:df:f1:f6:7e:8c:7a: 3d:14:0d:1e:ee:0f:9e:9d:7a:c0:53:0f:c0:52:91:dd:4a:79: 12:35:f8:8f:ee:65:aa:dc:dd:94:e4:70:ad:15:16:2b:e9:92: 4c:2f:4b:bf:1b:12:8a:b9:cc:70:64:47:66:5b:46:65:bc:d7: a6:fe:d2:fe:fd:20:7a:77:66:92:0f:03:4f:97:b1:ad:0b:9c: 19:61:86:7d:61:00:ae:02:97:a2:b6:18:66:75:78:b6:27:16: 77:c5:76:21:f5:0a:e6:39:8a:9f:b3:cf:ee:e7:d8:bd:fa:6c: b1:4b:eb:89:13:97:85:ea:3f:02:39:e5:dc:12:47:38:13:b3: 4a:37:88:66:62:f5:22:8d:73:60:d2:eb:99:14:66:70:96:1a: 55:71:e7:74:06:03:05:f5:c8:f7:a6:eb:4c:cf:15:00:4f:68: 6b:ed:67:2b:c4:c6:8e:46:03:75:d1:2c:0b:6d:e8:de:37:66: 56:2d:e3:62:7a:71:10:b7:b4:f0:e8:7d:75:b0:c5:b4:15:9b: b4:8a:95:b8:7d:2a:9e:4e:75:11:da:30:e8:45:bc:3b:64:d1: 46:6b:b0:47:bf:8b:f2:6c:6b:de:8c:d6:48:ce:ff:8b:be:cd: 7e:65:69:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxqY+vCfmSeySZtTzaImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDE1MjhjMmEyZTJjNDY5MTNjMGIyOGNhMzU3MGYzODgw ZjFhNTYwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQ5YzQ5NzU0OGNiOTAzMTAzMTY0Y2U1ZWZhNGEzZDA1YmI3MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPdP+zTfG4VwQCgwxNYj5jMN3qCo lPATLCjkGmfwIemx0NKsK1vB03jF0hKizLfrKBiABpwfhG47zzPLNQpnXZx6i1nq ww9qdHA+gvsr/9gm7Bv8JX5HTgwt3dVX6miCGDS6dYmXUrHF4djw5wMJ+SOo0sla ytWgv6oGLmjYFLMJXxN/OFFAMluD4xuSQqh8luM0pahX7/12E2AQP79x6K7cN3W+ a5WXWZF+5Zr7sA9nj7S4Vig3u5QhATNY6VgsHpZ9gfQYxX77JElk1Xo2orVsbVyR 3o9oZNP0vFaZpw7AeChOD1uU3aM2I6wRLeEVgzMX/uhOk7B7Ao0khR0aIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLZxJdUjLkDEDFkzl76Sj0Fu3H8MB8GA1UdIwQY MBaAFFcBUowqLixGkTwLKMo1cPOIDxpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNDFjNmQtZjE0Mi00YzI1LTg5OTct NjNmYWUzODlhNGRiLzEvNHRuRWwxU011UU1RTVdUT1h2cEtQUVc3Y2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hNDFjNmQtZjE0Mi00YzI1LTg5OTctNjNmYWUzODlhNGRi LzEvVndGU2pDb3VMRWFSUEFzb3lqVnc4NGdQR2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfJ8MA0G CSqGSIb3DQEBCwUAA4IBAQAsr8MkKApY3d3+YlLf8fZ+jHo9FA0e7g+enXrAUw/A UpHdSnkSNfiP7mWq3N2U5HCtFRYr6ZJML0u/GxKKucxwZEdmW0ZlvNem/tL+/SB6 d2aSDwNPl7GtC5wZYYZ9YQCuApeithhmdXi2JxZ3xXYh9QrmOYqfs8/u59i9+myx S+uJE5eF6j8COeXcEkc4E7NKN4hmYvUijXNg0uuZFGZwlhpVced0BgMF9cj3putM zxUAT2hr7WcrxMaORgN10SwLbejeN2ZWLeNienEQt7Tw6H11sMW0FZu0ipW4fSqe TnUR2jDoRbw7ZNFGa7BHv4vybGvejNZIzv+Lvs1+ZWmA -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:39 2026 by rpki-client