This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa File: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (raw, json) Hash identifier: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs= Subject key identifier: A7:8A:75:3E:4D:6A:7D:4F:D2:5B:D5:5E:F2:4F:11:22:2E:B7:25:67 Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Certificate serial: 019B77C7210F258ACEF61AFC81F97D560031 Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 94.127.58.0/24 maxlen: 24 94.127.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:21:0f:25:8a:ce:f6:1a:fc:81:f9:7d:56:00:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a78a753e4d6a7d4fd25bd55ef24f11222eb72567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:d9:f4:f5:5a:83:f4:a9:d8:a9:92:5b:7a: 88:48:c2:4c:25:d1:85:07:17:66:98:7b:55:5e:46: 10:d4:3d:45:b6:b4:00:4a:06:0c:e3:b4:09:20:2c: 7c:f9:fe:4c:24:43:74:9a:01:63:a1:e7:96:cb:76: 4c:39:70:0a:13:7d:f4:6d:85:cb:1a:dd:b7:28:63: 3d:34:e3:57:b7:c4:14:6a:e8:b2:17:d7:4e:2b:18: 1d:3a:88:02:51:30:b3:2d:a1:d7:52:39:4d:50:af: 08:f7:7f:db:5f:56:52:db:ba:20:9a:6d:a2:e8:64: 55:f6:ea:50:27:47:71:af:46:16:e2:5b:8f:6a:27: d8:8a:5a:c1:ee:43:1c:3a:f3:d2:8a:b2:9a:4f:ba: ae:39:98:3f:91:d2:21:01:4f:09:7c:82:37:4b:e2: d4:32:b5:81:86:1f:e2:8f:8d:44:6c:b1:7f:aa:51: 37:69:1f:2d:4c:ec:a7:2d:cf:f4:56:21:d2:30:b1: 1d:af:e1:b9:f8:15:92:ca:6f:5c:76:f8:1f:b1:ca: 4f:01:8b:9b:72:ed:e5:62:39:00:e0:18:4f:cf:21: d4:f3:2f:bf:ac:29:5a:7e:29:eb:80:c5:1f:6d:76: 6d:67:1c:01:81:00:95:e0:0b:67:a4:67:0f:73:e7: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:75:3E:4D:6A:7D:4F:D2:5B:D5:5E:F2:4F:11:22:2E:B7:25:67 X509v3 Authority Key Identifier: keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.58.0/23 Signature Algorithm: sha256WithRSAEncryption 47:a3:0a:d1:48:e0:3c:40:9a:04:67:cb:0b:81:98:43:23:9d: 5e:1c:a4:ca:89:62:ac:c4:b3:ee:43:36:6a:09:35:82:ba:41: 6c:4f:5c:57:f7:b7:83:cd:01:0b:6c:21:47:f1:4b:2e:95:39: 31:b9:0e:30:ae:f6:69:96:f1:7c:a1:3c:ae:20:ad:93:75:62: 10:12:0d:ff:0c:61:52:f5:6e:e6:ed:d8:06:a7:48:53:a5:ff: 11:a0:9d:39:80:e9:48:34:f1:83:cc:1f:1e:4b:a3:7f:e9:5c: 97:c6:c6:12:98:28:ec:27:09:7a:6e:cb:eb:d8:80:a7:80:4b: 44:11:c6:92:da:1c:8c:83:83:63:fa:2b:dc:86:b7:95:82:84: 52:2e:46:98:d1:82:ec:a8:0f:e1:aa:0d:ef:54:b8:4b:5f:0f: 9d:7b:1f:f4:20:36:4c:79:93:4e:b8:82:63:c7:a7:94:c3:ff: ca:0e:d0:a7:d8:3c:8c:ed:cd:c3:8b:00:f4:81:57:5a:5b:ae: 09:3c:8b:10:12:10:24:85:9b:a3:fa:fa:fd:51:0a:2e:fb:bd: 9e:7b:0a:75:83:a7:df:28:89:2d:94:da:55:70:f5:bf:5e:44: da:64:8a:e5:77:17:77:31:74:03:b6:e1:59:a8:9f:56:78:f6: 1e:9c:1c:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyEPJYrO9hr8gfl9VgAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0 YzhiYzcwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzhhNzUzZTRkNmE3ZDRmZDI1YmQ1NWVmMjRmMTEyMjJlYjcyNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfrZ9PVag/Sp2KmSW3qISMJMJdGF BxdmmHtVXkYQ1D1FtrQASgYM47QJICx8+f5MJEN0mgFjoeeWy3ZMOXAKE330bYXL Gt23KGM9NONXt8QUauiyF9dOKxgdOogCUTCzLaHXUjlNUK8I93/bX1ZS27ogmm2i 6GRV9upQJ0dxr0YW4luPaifYilrB7kMcOvPSirKaT7quOZg/kdIhAU8JfII3S+LU MrWBhh/ij41EbLF/qlE3aR8tTOynLc/0ViHSMLEdr+G5+BWSym9cdvgfscpPAYub cu3lYjkA4BhPzyHU8y+/rClafinrgMUfbXZtZxwBgQCV4AtnpGcPc+cDTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeKdT5Nan1P0lvVXvJPESIutyVnMB8GA1UdIwQY MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt MjNjMzM4NjgwNzcxLzEvcDRwMVBrMXFmVV9TVzlWZThrOFJJaTYzSldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXn86MA0G CSqGSIb3DQEBCwUAA4IBAQBHowrRSOA8QJoEZ8sLgZhDI51eHKTKiWKsxLPuQzZq CTWCukFsT1xX97eDzQELbCFH8UsulTkxuQ4wrvZplvF8oTyuIK2TdWIQEg3/DGFS 9W7m7dgGp0hTpf8RoJ05gOlINPGDzB8eS6N/6VyXxsYSmCjsJwl6bsvr2ICngEtE EcaS2hyMg4Nj+ivchreVgoRSLkaY0YLsqA/hqg3vVLhLXw+dex/0IDZMeZNOuIJj x6eUw//KDtCn2DyM7c3DiwD0gVdaW64JPIsQEhAkhZuj+vr9UQou+72eewp1g6ff KIktlNpVcPW/XkTaZIrldxd3MXQDtuFZqJ9WePYenBzN -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:39 2026 by rpki-client