This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa File: 4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa (raw, json) Hash identifier: 0jso45NlBZKrRKZeACFspDxL58QZmOoRo1b0JCMIPZ4= Subject key identifier: E3:0C:74:30:EB:B5:99:97:0D:82:38:0B:56:E1:D9:E4:A0:CF:8C:0F Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109 Certificate serial: 019B79ED3978854992CF213C47A79BC564E8 Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209928 IP address blocks: 94.231.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:39:78:85:49:92:cf:21:3c:47:a7:9b:c5:64:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e30c7430ebb599970d82380b56e1d9e4a0cf8c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:56:d4:36:80:9e:e6:16:f8:b2:e0:57:ae: 87:47:48:ad:fa:dd:da:09:59:fc:69:ff:1a:50:40: 21:5c:f4:9d:d7:e3:fc:1a:c3:bc:79:e5:48:d5:03: 17:f2:b8:dc:07:c3:74:3a:7e:f7:bc:2d:8e:4c:98: 89:e1:f9:00:26:76:09:10:32:5e:f5:03:ba:04:86: e3:24:d3:ae:54:91:09:fa:02:34:2d:50:d4:52:92: 92:bc:19:8f:fa:7e:f0:54:ce:47:93:99:71:be:50: ca:35:7a:8e:29:f3:49:be:c9:8e:91:aa:5d:2c:29: 16:3c:2b:d8:f7:df:f9:ba:9a:b2:3d:36:eb:33:2f: a9:bf:ae:c1:99:2c:c7:f2:17:e8:8f:bc:af:d1:97: 5c:06:e1:19:3c:0d:3f:d5:f6:39:dc:bd:0e:e0:0c: e0:90:83:74:b1:a7:18:8d:3b:ba:0c:ce:e4:38:48: 5f:92:3c:23:ef:03:03:42:bc:91:45:cc:cb:1b:14: ad:61:15:b2:52:ee:32:59:5f:2b:6b:03:6d:98:b2: ab:1b:39:1e:f8:6e:96:a2:47:a9:0e:9d:53:dd:c4: 7d:eb:ec:79:1b:19:57:78:49:89:6b:d8:1d:b3:74: f4:40:6c:bc:97:1f:7c:4c:4e:26:b0:9a:37:65:02: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0C:74:30:EB:B5:99:97:0D:82:38:0B:56:E1:D9:E4:A0:CF:8C:0F X509v3 Authority Key Identifier: keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/4wx0MOu1mZcNgjgLVuHZ5KDPjA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.40.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:11:c1:77:f0:5b:e8:93:9b:b1:33:d4:50:80:0f:8f:32:d1: 29:0d:cc:0b:46:3c:0b:e4:cc:4f:24:84:d3:36:da:62:04:7d: d3:87:b7:6b:ec:df:59:8f:3c:90:71:fd:38:45:19:76:bb:cc: 46:1e:a2:e5:4d:2f:e1:02:45:77:b0:7c:e3:0b:3d:a2:9d:89: e6:d1:71:25:b4:6a:71:83:ee:e6:69:76:9a:e9:a1:be:01:cf: 80:4a:b4:e3:5a:45:37:0e:0a:07:20:bc:3f:ec:4b:ab:a0:3c: 01:7a:bc:88:42:3f:ff:0c:b9:d5:6f:5e:e6:41:13:8d:48:49: 16:e0:f3:1b:8f:94:a6:35:cd:1a:9a:83:2e:ef:9e:33:b9:d3: d2:6e:c9:ca:b1:b8:1f:96:c9:8c:a4:15:c5:19:93:fa:df:6e: 6e:f7:e8:1b:41:7e:2d:51:fd:d9:f6:ed:f4:45:af:fe:63:16: e6:af:2f:a0:df:2f:df:58:ed:eb:51:1e:61:ac:5b:11:5d:4c: 30:32:d6:0b:f1:1d:4d:bd:da:ea:d3:a1:c8:32:01:99:26:64: cc:a7:eb:2f:e5:f5:ca:6f:98:7a:cc:da:10:a4:cf:db:35:29: cc:83:fe:75:26:89:10:47:f6:fb:5e:0d:b9:46:2e:8f:ab:35: 9e:42:48:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Tl4hUmSzyE8R6ebxWToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOTU0MzMwMzQ5ZjU3NTAyYTc2YWU2ZTk5OTg3ZWZjM2Uz YjgxMDkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzBjNzQzMGViYjU5OTk3MGQ4MjM4MGI1NmUxZDllNGEwY2Y4YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+pW1DaAnuYW+LLgV66HR0it+t3a CVn8af8aUEAhXPSd1+P8GsO8eeVI1QMX8rjcB8N0On73vC2OTJiJ4fkAJnYJEDJe 9QO6BIbjJNOuVJEJ+gI0LVDUUpKSvBmP+n7wVM5Hk5lxvlDKNXqOKfNJvsmOkapd LCkWPCvY99/5upqyPTbrMy+pv67BmSzH8hfoj7yv0ZdcBuEZPA0/1fY53L0O4Azg kIN0sacYjTu6DM7kOEhfkjwj7wMDQryRRczLGxStYRWyUu4yWV8rawNtmLKrGzke +G6WokepDp1T3cR96+x5GxlXeEmJa9gds3T0QGy8lx98TE4msJo3ZQKAPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMMdDDrtZmXDYI4C1bh2eSgz4wPMB8GA1UdIwQY MBaAFDOVQzA0n1dQKnaubpmYfvw+O4EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEt ZmRmODRmODNhMjc0LzEvNHd4ME1PdTFtWmNOZ2pnTFZ1SFo1S0RQakE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZjE5ZTktMWIyYi00ODEyLWFiNWEtZmRmODRmODNhMjc0 LzEvTTVWRE1EU2ZWMUFxZHE1dW1aaC1fRDQ3Z1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXucoMA0G CSqGSIb3DQEBCwUAA4IBAQAOEcF38Fvok5uxM9RQgA+PMtEpDcwLRjwL5MxPJITT NtpiBH3Th7dr7N9ZjzyQcf04RRl2u8xGHqLlTS/hAkV3sHzjCz2inYnm0XEltGpx g+7maXaa6aG+Ac+ASrTjWkU3DgoHILw/7EuroDwBeryIQj//DLnVb17mQRONSEkW 4PMbj5SmNc0amoMu754zudPSbsnKsbgflsmMpBXFGZP6325u9+gbQX4tUf3Z9u30 Ra/+Yxbmry+g3y/fWO3rUR5hrFsRXUwwMtYL8R1Nvdrq06HIMgGZJmTMp+sv5fXK b5h6zNoQpM/bNSnMg/51JokQR/b7Xg25Ri6PqzWeQkjR -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:18 2026 by rpki-client