This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4wRJ4A0N_ZR6XbihNj3dFnmEBJE.roa File: 4wRJ4A0N_ZR6XbihNj3dFnmEBJE.roa (raw, json) Hash identifier: uv52rh3avRQkaY793gT85Kgt8foeUDyXHO+v07hnu08= Subject key identifier: E3:04:49:E0:0D:0D:FD:94:7A:5D:B8:A1:36:3D:DD:16:79:84:04:91 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5386E761DB48F2F69E1A5D7DE315 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4wRJ4A0N_ZR6XbihNj3dFnmEBJE.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142401 IP address blocks: 151.242.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:53:86:e7:61:db:48:f2:f6:9e:1a:5d:7d:e3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e30449e00d0dfd947a5db8a1363ddd1679840491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:9c:2a:8f:3c:57:d1:0b:22:1e:11:42:d6: fa:3a:d6:ba:f3:2b:09:21:7b:ec:ef:74:bc:86:2b: 9b:2a:9c:ed:23:2c:3d:ea:b3:0f:18:86:86:e4:4c: 6d:7a:6f:00:18:74:91:73:2b:91:e9:e9:24:a2:4e: 67:78:7f:08:27:21:71:9f:fc:af:f4:d8:c2:2a:ec: 2c:51:29:46:88:0b:7d:83:c5:d6:75:cd:44:92:e0: ea:46:44:23:d3:36:ac:28:38:0c:cd:f3:d1:73:5b: 30:85:0e:06:18:44:11:8c:f4:11:6c:06:7b:7b:52: e6:f2:b1:2b:5a:b1:a1:97:6c:1d:90:0c:26:f5:0b: 41:67:3d:3e:20:06:87:15:a9:e5:01:45:de:de:b9: 3b:f3:1c:55:70:ac:de:91:34:a4:0e:66:02:cc:7b: 97:9d:ce:94:3e:f0:a2:9e:6f:3d:0a:fc:e1:9f:a9: 2d:51:ef:86:1c:48:77:d1:11:f3:54:39:7e:94:d0: 21:2b:c1:b3:f4:b0:fd:75:21:19:14:96:70:44:16: 96:65:0f:35:53:4b:08:bb:7d:76:be:32:5b:b6:11: 5d:85:9d:dd:b4:b5:73:fa:b0:e9:3d:17:a2:b4:ff: d0:0d:38:2c:0d:2a:cd:c6:20:b8:7b:ba:eb:39:24: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:04:49:E0:0D:0D:FD:94:7A:5D:B8:A1:36:3D:DD:16:79:84:04:91 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4wRJ4A0N_ZR6XbihNj3dFnmEBJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.55.0/24 Signature Algorithm: sha256WithRSAEncryption 01:93:27:70:60:84:a2:0a:64:78:f7:9d:19:9b:11:cd:8f:43: 5b:8e:dd:2c:5a:e8:6d:65:b2:10:c8:4f:af:ef:f6:7c:53:27: 99:53:d0:a4:ca:a8:fa:69:ba:27:b5:51:31:54:fb:79:06:c7: f4:d2:f1:5d:63:fc:f3:96:a6:9f:1a:7e:c6:4c:7c:30:39:40: f4:62:e8:dc:a2:62:15:a9:de:2c:38:3a:5f:b0:1a:c5:d2:42: 88:90:11:b1:b4:25:c4:a3:2f:c7:51:ea:ed:6c:37:3d:2e:21: 52:23:4e:28:2f:da:21:0e:94:e6:b3:5b:0f:61:0a:14:b8:ca: cc:16:c7:b8:fe:e5:04:c4:1c:80:38:d1:3b:c6:e7:a6:65:67: e3:75:55:85:c4:40:ac:73:ab:e1:81:e4:a1:cb:5f:48:84:ed: 75:76:14:b5:ca:5c:e8:a8:72:05:71:4d:39:d8:cc:32:27:ee: 99:a6:84:d6:40:78:d6:99:fe:1f:2d:6d:1d:5a:b8:98:a0:f5: 79:e0:2c:8e:ce:92:b0:69:d4:9c:20:cd:45:6b:4a:92:d9:a3: 34:cf:fd:91:d5:e2:3c:18:ad:ad:0f:04:25:df:95:49:e4:33: be:5a:b7:25:99:de:32:37:7a:b7:5f:73:38:86:34:ca:86:86: 7d:3b:8f:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1OG52HbSPL2nhpdfeMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzA0NDllMDBkMGRmZDk0N2E1ZGI4YTEzNjNkZGQxNjc5ODQwNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQucKo88V9ELIh4RQtb6Ota68ysJ IXvs73S8hiubKpztIyw96rMPGIaG5Extem8AGHSRcyuR6ekkok5neH8IJyFxn/yv 9NjCKuwsUSlGiAt9g8XWdc1EkuDqRkQj0zasKDgMzfPRc1swhQ4GGEQRjPQRbAZ7 e1Lm8rErWrGhl2wdkAwm9QtBZz0+IAaHFanlAUXe3rk78xxVcKzekTSkDmYCzHuX nc6UPvCinm89Cvzhn6ktUe+GHEh30RHzVDl+lNAhK8Gz9LD9dSEZFJZwRBaWZQ81 U0sIu312vjJbthFdhZ3dtLVz+rDpPReitP/QDTgsDSrNxiC4e7rrOSSsrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMESeANDf2Uel24oTY93RZ5hASRMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNHdSSjRBME5fWlI2WGJpaE5qM2RGbm1FQkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/I3MA0G CSqGSIb3DQEBCwUAA4IBAQABkydwYISiCmR4950ZmxHNj0Nbjt0sWuhtZbIQyE+v 7/Z8UyeZU9Ckyqj6abontVExVPt5Bsf00vFdY/zzlqafGn7GTHwwOUD0YujcomIV qd4sODpfsBrF0kKIkBGxtCXEoy/HUertbDc9LiFSI04oL9ohDpTms1sPYQoUuMrM Fse4/uUExByAONE7xuemZWfjdVWFxECsc6vhgeShy19IhO11dhS1ylzoqHIFcU05 2MwyJ+6ZpoTWQHjWmf4fLW0dWriYoPV54CyOzpKwadScIM1Fa0qS2aM0z/2R1eI8 GK2tDwQl35VJ5DO+Wrclmd4yN3q3X3M4hjTKhoZ9O496 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:03 2026 by rpki-client