This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/R4WyxNHLfKVec7YTSt41OkBc2-I.roa File: R4WyxNHLfKVec7YTSt41OkBc2-I.roa (raw, json) Hash identifier: UvwJJ1IYolylQX/6J5pFwnIJ6bg+W6t5KGekM66aRL8= Subject key identifier: 47:85:B2:C4:D1:CB:7C:A5:5E:73:B6:13:4A:DE:35:3A:40:5C:DB:E2 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D16AE5EACB9144739927991C3DB9B Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/R4WyxNHLfKVec7YTSt41OkBc2-I.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 84.1.236.0/24 maxlen: 24 84.2.54.0/24 maxlen: 24 195.56.199.0/24 maxlen: 24 195.228.4.0/24 maxlen: 24 195.228.31.0/24 maxlen: 24 195.228.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:ae:5e:ac:b9:14:47:39:92:79:91:c3:db:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4785b2c4d1cb7ca55e73b6134ade353a405cdbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:97:a2:42:b6:07:92:07:19:b9:f0:bc:7e: 71:91:58:97:34:3d:91:6f:e4:48:08:ff:1c:01:2c: 8c:0c:77:77:4b:c4:14:56:da:6f:79:4b:d6:e5:db: f9:fa:40:2d:73:fc:a4:1a:c8:8d:84:50:c8:ae:5a: f6:5d:ad:d0:95:c9:a0:30:39:92:b3:63:ba:25:00: 0c:d6:d6:a4:75:db:6c:17:04:8d:a3:4f:75:48:52: 64:ab:bb:f3:18:77:3b:24:81:04:ef:70:d8:32:5b: d2:05:68:f1:35:17:1b:08:d4:8d:7e:1e:7d:c3:d1: c4:4c:d6:4e:47:a2:0f:61:31:d6:b3:69:8e:14:33: 94:23:03:46:36:4d:e5:21:28:52:93:c7:d8:75:5d: 1a:1a:58:c9:5e:2e:9c:53:93:ba:b6:87:c3:dc:a0: be:e1:71:54:28:48:02:1a:6c:08:ff:3d:70:b1:68: e4:c5:cc:fd:80:1e:5b:ff:60:3b:bf:a0:7a:9b:1d: 48:35:41:fa:0f:55:34:e2:c6:c3:bf:f7:81:d5:b6: 24:a6:fb:b9:27:50:21:30:a0:63:12:95:f8:44:eb: 5e:3d:87:2f:92:8b:11:78:4b:66:45:6b:ea:6a:b7: 8d:d1:35:90:a2:d4:94:33:23:2d:25:a0:58:68:0e: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:85:B2:C4:D1:CB:7C:A5:5E:73:B6:13:4A:DE:35:3A:40:5C:DB:E2 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/R4WyxNHLfKVec7YTSt41OkBc2-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.1.236.0/24 84.2.54.0/24 195.56.199.0/24 195.228.4.0/24 195.228.31.0/24 195.228.112.0/24 Signature Algorithm: sha256WithRSAEncryption 05:84:a2:0e:ee:c4:a1:10:f5:5d:cb:01:12:2d:41:6d:30:fc: a8:83:69:b7:81:13:90:65:c4:26:7d:eb:d3:20:4a:38:63:00: c6:8b:d3:92:fb:07:f5:8d:76:f2:9d:20:d0:01:71:85:f9:46: 22:89:f7:92:f4:a0:65:92:66:e0:c7:57:b7:71:2f:8f:c4:5a: 0a:92:d4:33:be:c5:75:d4:81:d9:a0:0d:2e:8b:9b:86:50:0d: 48:a7:67:7f:93:f1:62:3e:f3:fe:b4:15:e9:46:4f:c4:f0:33: ff:bc:87:b5:cc:cb:22:37:7f:48:02:23:23:0d:78:48:40:15: 38:c7:e5:89:15:1c:bb:22:cb:ed:30:61:78:48:9d:9c:28:7b: df:0f:28:a4:89:8a:a5:a7:99:46:a8:42:9b:fb:e9:16:ab:13: f6:9e:4d:16:be:c9:bf:95:0a:f0:d8:ad:5a:2c:5c:ef:0a:86: 71:c3:26:49:c7:ae:b1:69:70:28:e3:66:a0:a4:65:f9:c3:2c: d7:76:3e:9e:c3:fb:6a:dd:9e:cd:bf:99:99:1d:0f:15:1c:a7: 94:d5:5e:eb:cb:ee:98:3e:df:d1:84:61:34:0d:34:95:fa:4e: 0b:73:92:a0:6f:37:46:a1:1b:1f:cc:0c:1e:e3:de:d9:d4:35: c6:08:cb:42 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XRauXqy5FEc5knmRw9ubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzg1YjJjNGQxY2I3Y2E1NWU3M2I2MTM0YWRlMzUzYTQwNWNkYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkOXokK2B5IHGbnwvH5xkViXND2R b+RICP8cASyMDHd3S8QUVtpveUvW5dv5+kAtc/ykGsiNhFDIrlr2Xa3QlcmgMDmS s2O6JQAM1takddtsFwSNo091SFJkq7vzGHc7JIEE73DYMlvSBWjxNRcbCNSNfh59 w9HETNZOR6IPYTHWs2mOFDOUIwNGNk3lIShSk8fYdV0aGljJXi6cU5O6tofD3KC+ 4XFUKEgCGmwI/z1wsWjkxcz9gB5b/2A7v6B6mx1INUH6D1U04sbDv/eB1bYkpvu5 J1AhMKBjEpX4ROtePYcvkosReEtmRWvqareN0TWQotSUMyMtJaBYaA6hCwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEeFssTRy3ylXnO2E0reNTpAXNviMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvUjRXeXhOSExmS1ZlYzdZVFN0NDFPa0JjMi1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVAHsAwQA VAI2AwQAwzjHAwQAw+QEAwQAw+QfAwQAw+RwMA0GCSqGSIb3DQEBCwUAA4IBAQAF hKIO7sShEPVdywESLUFtMPyog2m3gROQZcQmfevTIEo4YwDGi9OS+wf1jXbynSDQ AXGF+UYiifeS9KBlkmbgx1e3cS+PxFoKktQzvsV11IHZoA0ui5uGUA1Ip2d/k/Fi PvP+tBXpRk/E8DP/vIe1zMsiN39IAiMjDXhIQBU4x+WJFRy7IsvtMGF4SJ2cKHvf DyikiYqlp5lGqEKb++kWqxP2nk0Wvsm/lQrw2K1aLFzvCoZxwyZJx66xaXAo42ag pGX5wyzXdj6ew/tq3Z7Nv5mZHQ8VHKeU1V7ry+6YPt/RhGE0DTSV+k4Lc5KgbzdG oRsfzAwe497Z1DXGCMtC -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:50 2026 by rpki-client