This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/k4W9beDnEX8J9xZWZPSwEeOlv6o.roa File: k4W9beDnEX8J9xZWZPSwEeOlv6o.roa (raw, json) Hash identifier: TjAwypyiA3bieTIcPBxF1m7fjkxNuFzLWUD66RasjmA= Subject key identifier: 93:85:BD:6D:E0:E7:11:7F:09:F7:16:56:64:F4:B0:11:E3:A5:BF:AA Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a Certificate serial: 019B77C6E6CAFB0B9F1FBAB91DCF886125DA Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/k4W9beDnEX8J9xZWZPSwEeOlv6o.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.176.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e6:ca:fb:0b:9f:1f:ba:b9:1d:cf:88:61:25:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9385bd6de0e7117f09f7165664f4b011e3a5bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:0a:b1:a9:9f:12:2f:83:42:ea:c4:42:ff: c0:43:fa:cf:04:d4:39:f0:8f:23:01:cd:cf:3a:ab: 87:74:61:11:53:a4:7e:58:dc:61:38:17:a2:c0:0a: d9:88:ae:1b:2f:fd:c8:6a:f1:3a:3c:ee:d4:e8:19: 72:d4:33:c6:f0:18:16:9d:78:34:60:63:b4:09:b5: 7b:f9:31:2d:64:83:b6:41:6a:21:36:87:6f:3a:24: b2:1c:03:b2:a2:88:3e:ee:6d:2f:86:7e:07:4e:c9: 0a:1f:55:81:31:e2:47:94:dd:cb:11:5c:6b:79:de: 52:95:03:ac:e1:35:c5:7c:95:8b:5f:70:85:b5:a9: 4d:87:07:1f:14:88:05:a5:d8:a4:8a:73:09:62:84: 9e:76:93:a5:91:ab:7b:ca:79:0e:ee:58:81:35:7a: 02:fc:3f:cb:14:e5:51:1e:82:9e:fb:3d:8b:9b:13: 97:b6:7f:80:03:8c:9c:79:cb:1f:6f:d4:5c:45:b0: 23:92:64:7e:4c:28:4d:4c:2e:0c:28:b6:8b:e7:0c: ae:56:63:b1:a8:bb:95:36:d8:2b:ad:62:74:b7:e3: ea:ec:64:30:ca:9f:a9:ed:31:41:63:dd:2d:ea:41: ce:66:e1:fe:c6:b3:24:b2:85:da:59:9f:c4:f2:9f: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:BD:6D:E0:E7:11:7F:09:F7:16:56:64:F4:B0:11:E3:A5:BF:AA X509v3 Authority Key Identifier: keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/k4W9beDnEX8J9xZWZPSwEeOlv6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 09:6b:01:be:2f:8b:64:60:72:22:ef:6a:67:f8:9f:bf:35:fc: ba:9d:75:c4:e8:68:dc:5a:07:1f:88:c4:2f:dc:78:6f:71:c3: 6e:ac:3d:f6:75:53:12:ce:66:e8:a0:e7:ca:44:68:cd:38:fb: 88:59:a0:0d:cf:88:7f:dc:37:88:3a:1a:46:9c:52:72:a5:30: ce:31:8b:da:1b:43:9e:63:13:1a:82:b4:cb:87:20:87:cb:9c: 83:81:cf:af:c8:02:bd:0b:77:b3:e4:e5:59:bb:f3:38:62:f6: 2e:b3:cf:17:fe:39:33:3c:b1:a1:cb:0f:9b:0c:e3:02:70:6b: 3e:23:b8:a3:b7:82:9c:e3:4f:fb:17:ec:d0:51:27:c1:81:54: ca:39:72:b4:0f:08:d0:17:14:a8:e3:4c:70:cb:c7:5a:d0:97: ac:c5:c6:e1:72:c9:46:3d:91:00:01:9d:f8:8b:06:28:48:8e: 76:ba:06:09:5c:c9:56:a0:3a:0d:01:33:69:b9:be:79:5f:f3: 7b:16:d5:08:46:25:e7:6f:87:f4:2f:94:7f:f5:65:58:47:68: 58:ad:d9:0d:8a:8e:fe:8b:7a:91:4f:4a:ff:46:22:4f:8e:ce: d1:02:f1:29:6f:f4:4e:ce:4a:e9:86:62:c9:c1:1a:49:9e:6f: b9:9a:1a:d9 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3xubK+wufH7q5Hc+IYSXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2M5YzFiZGQxZTE1Mjg4YWI5MzBkNDAwNTFiMzY1M2Ni MDllN2EwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzg1YmQ2ZGUwZTcxMTdmMDlmNzE2NTY2NGY0YjAxMWUzYTViZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFIKsamfEi+DQurEQv/AQ/rPBNQ5 8I8jAc3POquHdGERU6R+WNxhOBeiwArZiK4bL/3IavE6PO7U6Bly1DPG8BgWnXg0 YGO0CbV7+TEtZIO2QWohNodvOiSyHAOyoog+7m0vhn4HTskKH1WBMeJHlN3LEVxr ed5SlQOs4TXFfJWLX3CFtalNhwcfFIgFpdikinMJYoSedpOlkat7ynkO7liBNXoC /D/LFOVRHoKe+z2LmxOXtn+AA4ycecsfb9RcRbAjkmR+TChNTC4MKLaL5wyuVmOx qLuVNtgrrWJ0t+Pq7GQwyp+p7TFBY90t6kHOZuH+xrMksoXaWZ/E8p9saQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJOFvW3g5xF/CfcWVmT0sBHjpb+qMB8GA1UdIwQY MBaAFLQ8nBvdHhUoirkw1ABRs2U8sJ56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUt OWM1ZDM1MTUyNmIzLzEvazRXOWJlRG5FWDhKOXhaV1pQU3dFZU9sdjZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUtOWM1ZDM1MTUyNmIz LzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhrAwDQYJ KoZIhvcNAQELBQADggEBAAlrAb4vi2RgciLvamf4n781/LqddcToaNxaBx+IxC/c eG9xw26sPfZ1UxLOZuig58pEaM04+4hZoA3PiH/cN4g6GkacUnKlMM4xi9obQ55j ExqCtMuHIIfLnIOBz6/IAr0Ld7Pk5Vm78zhi9i6zzxf+OTM8saHLD5sM4wJwaz4j uKO3gpzjT/sX7NBRJ8GBVMo5crQPCNAXFKjjTHDLx1rQl6zFxuFyyUY9kQABnfiL BihIjna6BglcyVagOg0BM2m5vnlf83sW1QhGJedvh/QvlH/1ZVhHaFit2Q2Kjv6L epFPSv9GIk+OztEC8Slv9E7OSumGYsnBGkmeb7maGtk= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:45 2026 by rpki-client