This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/C4QPEpSpw3t5fGPgvzarVGPFeoU.roa File: C4QPEpSpw3t5fGPgvzarVGPFeoU.roa (raw, json) Hash identifier: sZmWqujKvyfknDjomNZFVZ00FVqvptB5ow8TW0Spc+s= Subject key identifier: 0B:84:0F:12:94:A9:C3:7B:79:7C:63:E0:BF:36:AB:54:63:C5:7A:85 Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb Certificate serial: 019B7F152D446439E3D212E7FBE8102F56A5 Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/C4QPEpSpw3t5fGPgvzarVGPFeoU.roa Signing time: Fri 02 Jan 2026 14:20:52 +0000 ROA not before: Fri 02 Jan 2026 14:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49136 IP address blocks: 81.162.32.0/20 maxlen: 20 94.231.128.0/20 maxlen: 20 94.231.133.0/24 maxlen: 24 94.231.135.0/24 maxlen: 24 94.231.136.0/24 maxlen: 24 94.231.139.0/24 maxlen: 24 109.229.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2d:44:64:39:e3:d2:12:e7:fb:e8:10:2f:56:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b840f1294a9c37b797c63e0bf36ab5463c57a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:3e:63:10:59:b8:6b:bd:f4:0f:3d:22:2e: bc:a4:c2:75:1b:79:6b:87:52:60:54:64:34:72:12: 89:53:7f:d4:8f:29:0d:d6:4a:89:e8:86:4f:28:89: 48:59:55:60:59:da:09:31:f8:db:0a:44:7b:d0:73: d2:0b:26:c1:02:48:05:e7:3a:48:f0:42:a7:b0:14: 3b:f4:eb:6f:81:60:0e:be:ad:97:e6:94:34:17:3b: 3e:be:e3:73:a2:d6:a7:7a:ff:69:63:63:fc:ef:12: 22:44:17:f3:65:6c:47:ba:c7:0e:77:a7:11:c6:fc: 0a:c5:b9:52:86:f4:dc:88:24:28:d3:47:70:4a:d1: 6e:c8:26:37:20:43:b7:52:2e:49:d9:ce:d9:45:20: da:30:6e:09:02:fe:40:fd:6d:ae:30:76:a6:dd:2e: 09:4d:56:87:25:4b:09:36:67:0d:f6:fa:61:6f:90: 77:91:13:c3:e3:34:4f:f3:da:15:a7:b7:28:bf:12: 79:4b:af:a7:38:d4:08:66:b1:a7:2b:74:63:76:4c: 36:59:91:e5:bb:b0:38:ed:82:83:28:b8:b4:79:51: 27:a2:c8:0e:66:9e:f3:cb:81:f0:24:56:0c:0d:f0: 9e:b4:0c:9e:11:c8:58:93:cb:53:36:36:bf:de:b6: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:0F:12:94:A9:C3:7B:79:7C:63:E0:BF:36:AB:54:63:C5:7A:85 X509v3 Authority Key Identifier: keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/C4QPEpSpw3t5fGPgvzarVGPFeoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.162.32.0/20 94.231.128.0/20 109.229.96.0/19 Signature Algorithm: sha256WithRSAEncryption 20:cb:0f:02:c7:12:80:b4:94:ea:74:64:78:9a:b4:fd:ad:f5: 50:3d:a3:26:21:5c:fb:2d:bc:e9:d4:fd:67:79:35:98:ab:55: 37:08:31:6b:98:ae:c8:cc:47:21:90:c0:57:b8:c8:65:c5:7b: 8b:79:4b:12:c9:79:4e:2d:a2:27:14:5c:bf:89:68:e1:b8:21: df:ff:51:44:64:68:21:c7:19:cb:99:e3:11:34:70:cc:18:e1: 64:8f:64:b4:e7:23:55:77:eb:be:cd:1a:22:6e:55:a0:9a:4d: ab:85:61:0e:5a:a4:c5:02:ed:df:88:ff:1d:2e:4c:64:15:95: 80:42:c0:bb:dd:a2:29:39:28:23:77:43:22:42:2b:05:61:2a: 09:c8:07:1d:70:b9:02:6e:f1:a4:b7:6f:02:d8:6d:93:b8:96: 8d:d5:c5:72:54:e5:2b:38:fd:4b:9f:55:14:03:03:3a:0a:bb: 2a:ec:43:30:a6:dd:c0:4e:4c:89:f6:57:61:54:91:45:75:85: a9:d6:84:27:49:94:e6:dd:68:2d:f5:10:2c:25:2d:57:50:ca: 16:70:7c:19:4c:2c:73:e5:c0:19:d0:e1:95:f8:6b:1d:26:51: 96:86:b6:ec:be:3e:31:91:85:2b:f6:88:17:3e:51:bb:a4:bd: 53:ea:3a:80 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FS1EZDnj0hLn++gQL1alMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MWM5NjUyNTU3OTg3YTJhMDU4MGNjNWM2NWUzNjQ2YjAx ZGEzYmIwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjg0MGYxMjk0YTljMzdiNzk3YzYzZTBiZjM2YWI1NDYzYzU3YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXw+YxBZuGu99A89Ii68pMJ1G3lr h1JgVGQ0chKJU3/UjykN1kqJ6IZPKIlIWVVgWdoJMfjbCkR70HPSCybBAkgF5zpI 8EKnsBQ79OtvgWAOvq2X5pQ0Fzs+vuNzotanev9pY2P87xIiRBfzZWxHuscOd6cR xvwKxblShvTciCQo00dwStFuyCY3IEO3Ui5J2c7ZRSDaMG4JAv5A/W2uMHam3S4J TVaHJUsJNmcN9vphb5B3kRPD4zRP89oVp7covxJ5S6+nONQIZrGnK3Rjdkw2WZHl u7A47YKDKLi0eVEnosgOZp7zy4HwJFYMDfCetAyeEchYk8tTNja/3rYGyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAuEDxKUqcN7eXxj4L82q1RjxXqFMB8GA1UdIwQY MBaAFLgcllJVeYeioFgMxcZeNkawHaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUt ZmEwZDJlNDdlNmYxLzEvQzRRUEVwU3B3M3Q1ZkdQZ3Z6YXJWR1BGZW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hYWIwNTQtZWQ1MC00YWE2LWFjZWUtZmEwZDJlNDdlNmYx LzEvdUJ5V1VsVjVoNktnV0F6RnhsNDJSckFkbzdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEUaIgAwQE XueAAwQFbeVgMA0GCSqGSIb3DQEBCwUAA4IBAQAgyw8CxxKAtJTqdGR4mrT9rfVQ PaMmIVz7Lbzp1P1neTWYq1U3CDFrmK7IzEchkMBXuMhlxXuLeUsSyXlOLaInFFy/ iWjhuCHf/1FEZGghxxnLmeMRNHDMGOFkj2S05yNVd+u+zRoiblWgmk2rhWEOWqTF Au3fiP8dLkxkFZWAQsC73aIpOSgjd0MiQisFYSoJyAcdcLkCbvGkt28C2G2TuJaN 1cVyVOUrOP1Ln1UUAwM6Crsq7EMwpt3ATkyJ9ldhVJFFdYWp1oQnSZTm3Wgt9RAs JS1XUMoWcHwZTCxz5cAZ0OGV+GsdJlGWhrbsvj4xkYUr9ogXPlG7pL1T6jqA -----END CERTIFICATE-----Generated at Mon Jan 26 19:41:59 2026 by rpki-client