This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa File: 4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa (raw, json) Hash identifier: NGm7oj0oNNHffCOXmAY3fJHH7vgq8EjhCAsgIYkz9sk= Subject key identifier: E1:E1:90:F9:40:46:36:CF:F8:5C:03:F5:A6:1C:72:E5:E0:EC:38:45 Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608 Certificate serial: 019B7BA545908A0E8EE6FCE145C73A286520 Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 91.240.78.0/24 maxlen: 24 91.240.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:45:90:8a:0e:8e:e6:fc:e1:45:c7:3a:28:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1e190f9404636cff85c03f5a61c72e5e0ec3845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:e5:8c:20:27:c3:ed:16:ba:54:1e:1b:12: f6:68:d9:3b:6f:be:4d:e4:ea:87:5c:d9:86:74:ef: 58:5f:3d:8b:b4:f1:15:77:5a:57:ca:81:ee:e1:29: b3:f3:33:1c:0c:f3:fe:f9:e6:89:7b:0d:56:27:0b: 3b:b1:71:15:b6:e3:3c:99:49:df:c5:53:e5:ad:f9: c8:88:77:d5:93:0d:cb:9c:19:11:b9:70:cb:f2:4a: f2:70:1d:1c:81:aa:a7:b8:10:2e:15:c2:bd:66:d4: 34:7e:87:3c:64:3f:1e:19:d0:41:38:07:98:8a:ca: 8a:9b:21:b0:73:08:24:df:47:73:ce:69:ed:fb:08: 4b:f6:63:c5:c9:35:6d:d5:f6:ee:a1:18:d0:b3:e9: 25:db:67:7b:b6:ac:ba:f4:18:2d:ad:97:50:7b:ac: 2f:25:b8:8e:58:51:3a:da:43:eb:93:fc:50:43:48: 12:99:97:3c:2c:1c:81:0b:7a:d4:66:de:0c:aa:21: 8a:6b:a7:9d:01:a2:2f:30:f7:bb:13:4a:ba:18:04: 27:4e:bf:59:d1:85:4c:45:ef:04:56:7d:1a:cc:5a: 5f:26:5e:7e:66:cd:7c:35:48:83:6a:98:14:96:66: c8:14:39:6a:49:7d:c2:63:ba:05:34:07:93:66:3b: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E1:90:F9:40:46:36:CF:F8:5C:03:F5:A6:1C:72:E5:E0:EC:38:45 X509v3 Authority Key Identifier: keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.78.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:50:25:94:25:c2:3b:73:02:aa:c2:a4:f1:f8:62:af:fa:31: 33:dd:51:b2:af:f5:15:6c:a7:78:31:fd:24:ba:54:be:e5:6f: 3e:c7:f0:4b:0c:3a:4b:17:63:69:b2:14:fb:d6:f6:de:d0:b6: 3d:f7:75:e3:7a:d6:22:5b:83:72:69:7d:6c:44:d4:68:56:63: ab:fa:b8:fb:85:c1:35:69:d9:63:45:d0:66:82:d1:5c:6f:ae: 42:e8:f8:0b:94:ba:41:c1:51:a7:9c:1c:e3:0a:83:cf:8a:87: d5:f3:92:21:10:fb:66:ba:26:53:81:a0:42:51:05:57:fa:1b: 01:66:20:75:95:d1:3b:88:0c:b1:1e:bf:43:cd:b6:b5:01:42: 23:63:66:84:5b:fc:1a:f6:d4:86:4d:60:5f:f7:15:29:11:c2: 94:9f:86:e3:b2:7c:fb:bd:c5:42:ad:15:1f:f5:5f:8a:a9:c5: 71:22:18:8b:33:67:5e:f8:51:a4:30:97:b4:27:9b:40:2e:ee: 51:64:8f:52:0f:67:cc:2c:b1:13:e4:3a:64:99:bf:fd:0a:a9: 6d:b6:54:37:07:e7:9a:15:77:1f:4f:f3:8b:d8:aa:2e:a3:0a: 54:9e:2d:16:bb:dc:0c:a5:bd:0a:0c:64:13:f1:2a:9a:92:a4: 7a:78:5a:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUWQig6O5vzhRcc6KGUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDBhMGM2OGEyMDM5ZmYwY2E1MTQwMjQxMTUyNzFjOGEw NDY2MDgwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWUxOTBmOTQwNDYzNmNmZjg1YzAzZjVhNjFjNzJlNWUwZWMzODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkbljCAnw+0WulQeGxL2aNk7b75N 5OqHXNmGdO9YXz2LtPEVd1pXyoHu4Smz8zMcDPP++eaJew1WJws7sXEVtuM8mUnf xVPlrfnIiHfVkw3LnBkRuXDL8krycB0cgaqnuBAuFcK9ZtQ0foc8ZD8eGdBBOAeY isqKmyGwcwgk30dzzmnt+whL9mPFyTVt1fbuoRjQs+kl22d7tqy69BgtrZdQe6wv JbiOWFE62kPrk/xQQ0gSmZc8LByBC3rUZt4MqiGKa6edAaIvMPe7E0q6GAQnTr9Z 0YVMRe8EVn0azFpfJl5+Zs18NUiDapgUlmbIFDlqSX3CY7oFNAeTZju8EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHhkPlARjbP+FwD9aYccuXg7DhFMB8GA1UdIwQY MBaAFLLQoMaKIDn/DKUUAkEVJxyKBGYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iM2QwZDctZTEwYS00ODZmLTg4NWQt NDFhYjdjODcyZmVhLzEvNGVHUS1VQkdOc180WEFQMXBoeHk1ZURzT0VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iM2QwZDctZTEwYS00ODZmLTg4NWQtNDFhYjdjODcyZmVh LzEvc3RDZ3hvb2dPZjhNcFJRQ1FSVW5ISW9FWmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/BOMA0G CSqGSIb3DQEBCwUAA4IBAQBtUCWUJcI7cwKqwqTx+GKv+jEz3VGyr/UVbKd4Mf0k ulS+5W8+x/BLDDpLF2NpshT71vbe0LY993XjetYiW4NyaX1sRNRoVmOr+rj7hcE1 adljRdBmgtFcb65C6PgLlLpBwVGnnBzjCoPPiofV85IhEPtmuiZTgaBCUQVX+hsB ZiB1ldE7iAyxHr9Dzba1AUIjY2aEW/wa9tSGTWBf9xUpEcKUn4bjsnz7vcVCrRUf 9V+KqcVxIhiLM2de+FGkMJe0J5tALu5RZI9SD2fMLLET5Dpkmb/9CqlttlQ3B+ea FXcfT/OL2KouowpUni0Wu9wMpb0KDGQT8SqakqR6eFrD -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:51 2026 by rpki-client