This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/4TGnLYEk2o84EXSVHZJsKs8eOYU.roa File: 4TGnLYEk2o84EXSVHZJsKs8eOYU.roa (raw, json) Hash identifier: zS90q7pX+aMNCZ23RTm2yQdhsha5/tNAAscjexUhpvA= Subject key identifier: E1:31:A7:2D:81:24:DA:8F:38:11:74:95:1D:92:6C:2A:CF:1E:39:85 Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b Certificate serial: 019B7C127D4223C03D9C08AC8895E0B2BF8D Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/4TGnLYEk2o84EXSVHZJsKs8eOYU.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41480 IP address blocks: 193.25.96.0/24 maxlen: 24 193.25.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7d:42:23:c0:3d:9c:08:ac:88:95:e0:b2:bf:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e131a72d8124da8f381174951d926c2acf1e3985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:16:9e:f9:09:ce:bf:e7:19:dc:7a:c3:66: 58:45:f4:8c:c7:85:f6:4c:ac:b8:8d:ea:e5:67:45: 9a:7e:58:8b:fc:5c:51:f4:ad:7d:60:63:1f:47:f2: a0:a6:2a:80:fa:63:9c:9b:57:05:95:c7:bd:55:a6: d7:bd:00:9f:e5:0f:2d:1a:96:a8:0a:6d:5d:ba:8e: e2:46:63:af:c1:11:4e:05:14:2e:8c:a4:4a:8b:5d: 89:9b:74:78:df:fb:04:b1:e0:27:a4:47:bc:05:50: c4:d5:17:a7:a0:1e:a5:fe:51:9f:00:9a:2c:df:b1: 27:8c:39:f1:4d:b8:35:cd:e5:88:29:75:aa:a9:38: f7:3f:bb:ea:36:04:97:5f:12:a9:6d:b9:88:ee:49: 82:90:5b:40:55:c9:a5:87:89:60:f1:8a:9e:0a:66: 15:a5:d5:37:52:c3:f3:c0:73:58:0c:02:7b:d1:bc: 13:ec:93:58:cc:cb:12:71:21:b7:2d:dd:ad:2d:04: d0:79:8c:89:a9:3a:c2:9f:85:5d:1b:1b:cf:5b:0d: 6f:5f:70:a3:6b:53:8d:da:8f:d4:b9:ff:28:15:f0: f8:7e:f9:24:5c:10:84:cd:f6:ba:b1:0c:1b:70:a1: ed:10:4f:0f:20:23:0c:a8:c5:28:83:fc:e4:09:03: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:31:A7:2D:81:24:DA:8F:38:11:74:95:1D:92:6C:2A:CF:1E:39:85 X509v3 Authority Key Identifier: keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/4TGnLYEk2o84EXSVHZJsKs8eOYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.96.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:ab:7e:36:bc:ad:e4:77:c4:f6:d3:58:be:f1:0d:f1:0d:2d: 7e:3f:d2:16:d6:6d:a6:cc:f5:39:e4:3b:07:02:71:ef:f4:6b: ff:8f:fe:72:ff:0e:34:90:63:7c:9b:58:8a:12:b9:49:fd:fe: b9:c7:9f:b1:9c:9f:78:03:b0:07:1e:1e:49:e0:29:4d:2e:e2: 34:c9:ba:f5:d7:43:2c:f0:ad:79:0d:a2:bc:12:93:53:e2:ef: 47:b2:90:b9:57:03:fc:28:7d:ed:b0:07:b0:17:31:7b:09:53: 28:d7:b9:44:4b:ed:fd:80:cb:1f:9d:e9:6d:b5:59:fb:c9:c8: 34:16:4c:5e:8a:ee:24:4c:19:b5:e3:0f:8a:5c:ec:1a:ac:b7: c3:53:56:c5:d9:79:cd:cf:9e:d6:c1:11:d3:bb:25:f6:1d:55: 3f:f8:0e:fa:8b:57:6b:6f:4f:ad:e6:f2:67:f6:3d:e9:dd:bc: e8:10:45:c6:1b:63:dd:0b:7b:3a:a8:b7:08:1f:01:9e:25:29: b9:59:31:90:af:fb:36:1a:53:d0:f7:ae:ab:35:cd:13:ae:b0: 1f:0b:6f:64:15:4a:43:c8:3d:d7:1d:3e:05:f5:32:93:67:4d: 32:c0:ae:4d:f1:11:cb:6a:08:af:db:6c:9f:43:3d:a6:8c:09: f0:0b:b4:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8En1CI8A9nAisiJXgsr+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj ZjNkM2IwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTMxYTcyZDgxMjRkYThmMzgxMTc0OTUxZDkyNmMyYWNmMWUzOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKoWnvkJzr/nGdx6w2ZYRfSMx4X2 TKy4jerlZ0WafliL/FxR9K19YGMfR/KgpiqA+mOcm1cFlce9VabXvQCf5Q8tGpao Cm1duo7iRmOvwRFOBRQujKRKi12Jm3R43/sEseAnpEe8BVDE1RenoB6l/lGfAJos 37EnjDnxTbg1zeWIKXWqqTj3P7vqNgSXXxKpbbmI7kmCkFtAVcmlh4lg8YqeCmYV pdU3UsPzwHNYDAJ70bwT7JNYzMsScSG3Ld2tLQTQeYyJqTrCn4VdGxvPWw1vX3Cj a1ON2o/Uuf8oFfD4fvkkXBCEzfa6sQwbcKHtEE8PICMMqMUog/zkCQOlGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOExpy2BJNqPOBF0lR2SbCrPHjmFMB8GA1UdIwQY MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct ZjM4YjI4OWZmOTY5LzEvNFRHbkxZRWsybzg0RVhTVkhaSnNLczhlT1lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5 LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRlgMA0G CSqGSIb3DQEBCwUAA4IBAQBaq342vK3kd8T201i+8Q3xDS1+P9IW1m2mzPU55DsH AnHv9Gv/j/5y/w40kGN8m1iKErlJ/f65x5+xnJ94A7AHHh5J4ClNLuI0ybr110Ms 8K15DaK8EpNT4u9HspC5VwP8KH3tsAewFzF7CVMo17lES+39gMsfnelttVn7ycg0 Fkxeiu4kTBm14w+KXOwarLfDU1bF2XnNz57WwRHTuyX2HVU/+A76i1drb0+t5vJn 9j3p3bzoEEXGG2PdC3s6qLcIHwGeJSm5WTGQr/s2GlPQ966rNc0TrrAfC29kFUpD yD3XHT4F9TKTZ00ywK5N8RHLagiv22yfQz2mjAnwC7SC -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:42 2026 by rpki-client