This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa File: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (raw, json) Hash identifier: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk= Subject key identifier: 13:82:5B:2A:38:7D:77:85:7E:B6:44:B6:D9:CE:18:DB:13:02:90:58 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D686F866148CC0A58B60078E8EB2 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa Signing time: Fri 02 Jan 2026 16:18:28 +0000 ROA not before: Fri 02 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 195.39.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d6:86:f8:66:14:8c:c0:a5:8b:60:07:8e:8e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13825b2a387d77857eb644b6d9ce18db13029058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:d2:44:5f:68:e5:0a:ea:f8:d4:a0:0d:16: 43:f5:49:6f:a5:ff:00:41:8a:31:21:35:4d:97:6f: b8:bb:20:72:d4:5f:e5:f4:f0:49:3d:3d:5b:ef:ab: 64:97:80:c6:6e:db:ec:94:9b:87:88:61:e4:2c:2e: 66:c0:b3:cd:20:4d:89:d5:21:32:da:20:65:3d:88: a4:48:53:68:e4:d3:3a:3f:71:d9:92:23:cc:5c:79: 93:4b:ec:01:66:7b:07:4b:4a:cc:eb:e3:e1:0e:8e: ab:f6:f2:b1:1d:98:9e:0c:92:84:67:90:6b:68:9e: 7c:b7:36:1a:93:c4:71:2b:20:c0:9c:47:c2:df:0b: c1:d0:73:ff:b0:65:22:29:e4:8e:a1:0e:69:5b:c7: 9f:10:e8:62:b4:e7:f5:51:ea:b6:23:db:3e:f3:53: d4:86:0c:dc:7d:c3:fc:55:43:a5:e9:56:58:2f:6f: 90:b5:88:8f:ab:66:85:57:91:54:3b:5b:8c:42:16: 1e:3c:5a:ab:b8:b7:fb:49:40:54:11:42:10:90:4b: 31:e2:58:6b:6b:90:27:c7:0f:7b:30:92:76:e1:9b: b1:7b:0b:fa:ce:9d:c8:23:bd:05:c2:fe:ea:3e:ee: 85:dc:a0:19:5d:a5:39:9e:ec:e1:c1:7c:76:de:52: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:82:5B:2A:38:7D:77:85:7E:B6:44:B6:D9:CE:18:DB:13:02:90:58 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.215.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e4:87:35:32:28:04:b9:cc:54:9d:57:08:89:ed:e7:b5:53: 8a:d9:60:b4:3d:f8:09:9e:45:0a:ae:b4:c7:c1:ec:12:c5:41: 10:e6:17:4b:72:64:83:d8:08:56:2a:be:2b:a5:ad:4f:0b:96: f5:3d:a0:5c:34:d1:40:9e:91:7f:80:9c:61:3b:b2:61:b2:09: 07:82:17:87:e3:e5:d0:7a:2a:95:05:fa:0b:df:00:b2:7d:c6: c2:16:61:dd:32:95:03:fb:84:3b:00:62:67:1f:97:22:9a:e8: 25:43:5e:6d:1f:e6:74:0b:08:e8:e3:57:98:1a:22:46:6b:6c: 85:44:85:bc:28:d2:a6:92:5c:81:f6:49:36:ed:3e:b1:1c:fa: 8c:9f:85:7d:1d:62:fc:97:7f:27:ce:32:80:fa:59:d8:0d:34: 58:e7:2b:42:6b:d8:b0:67:72:69:bd:56:db:4e:c3:11:5c:e9: ac:63:ab:ae:aa:de:d0:7b:e6:61:22:dc:2f:4f:bd:ea:9f:aa: 22:ba:5b:33:13:d1:8c:18:0f:9c:b1:20:86:82:e2:87:80:23: fa:94:88:08:23:80:51:3e:0b:b8:7b:f7:16:a7:98:37:85:90: 54:11:f0:56:c1:5e:16:bd:8c:d3:85:1c:df:18:96:98:e9:18: 75:c6:17:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gNaG+GYUjMCli2AHjo6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzgyNWIyYTM4N2Q3Nzg1N2ViNjQ0YjZkOWNlMThkYjEzMDI5MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUzSRF9o5Qrq+NSgDRZD9Ulvpf8A QYoxITVNl2+4uyBy1F/l9PBJPT1b76tkl4DGbtvslJuHiGHkLC5mwLPNIE2J1SEy 2iBlPYikSFNo5NM6P3HZkiPMXHmTS+wBZnsHS0rM6+PhDo6r9vKxHZieDJKEZ5Br aJ58tzYak8RxKyDAnEfC3wvB0HP/sGUiKeSOoQ5pW8efEOhitOf1Ueq2I9s+81PU hgzcfcP8VUOl6VZYL2+QtYiPq2aFV5FUO1uMQhYePFqruLf7SUBUEUIQkEsx4lhr a5Anxw97MJJ24Zuxewv6zp3II70Fwv7qPu6F3KAZXaU5nuzhwXx23lJ3mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBOCWyo4fXeFfrZEttnOGNsTApBYMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvRTRKYktqaDlkNFYtdGtTMjJjNFkyeE1Da0ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfXMA0G CSqGSIb3DQEBCwUAA4IBAQB35Ic1MigEucxUnVcIie3ntVOK2WC0PfgJnkUKrrTH wewSxUEQ5hdLcmSD2AhWKr4rpa1PC5b1PaBcNNFAnpF/gJxhO7JhsgkHgheH4+XQ eiqVBfoL3wCyfcbCFmHdMpUD+4Q7AGJnH5cimuglQ15tH+Z0Cwjo41eYGiJGa2yF RIW8KNKmklyB9kk27T6xHPqMn4V9HWL8l38nzjKA+lnYDTRY5ytCa9iwZ3JpvVbb TsMRXOmsY6uuqt7Qe+ZhItwvT73qn6oiulszE9GMGA+csSCGguKHgCP6lIgII4BR Pgu4e/cWp5g3hZBUEfBWwV4WvYzThRzfGJaY6Rh1xhej -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client