This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4CL6t5FOVShlNUEsIY4_BvpjdH0.roa File: 4CL6t5FOVShlNUEsIY4_BvpjdH0.roa (raw, json) Hash identifier: DX2yR2Pv7C2+18J2A6/c0GiSLMZTrtB68A9Uo2RPhLs= Subject key identifier: E0:22:FA:B7:91:4E:55:28:65:35:41:2C:21:8E:3F:06:FA:63:74:7D Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C73571F454D83729AEC234ACE33FB2 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4CL6t5FOVShlNUEsIY4_BvpjdH0.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44597 IP address blocks: 193.232.225.0/24 maxlen: 24 2a0c:a9c7:225::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:35:71:f4:54:d8:37:29:ae:c2:34:ac:e3:3f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e022fab7914e55286535412c218e3f06fa63747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:40:aa:a1:71:0d:28:45:78:36:17:7c:b7:81: 74:63:08:e7:a1:a8:9c:df:ae:6f:84:2d:95:de:56: d6:98:13:b9:b0:63:25:cc:9e:6f:99:9f:a1:60:db: 8b:33:02:4c:69:35:4a:14:a9:b5:17:b3:6d:bc:cc: a1:27:b4:6b:e9:94:a5:19:ce:41:c8:40:e1:12:89: fa:a7:cd:a4:25:cf:0f:48:bf:a1:c0:6f:9d:94:30: bd:c6:67:e4:c3:7d:f7:51:c1:73:c2:3d:d5:ae:ba: 5b:3d:be:08:a8:ae:90:5a:b8:18:de:56:03:17:ec: f7:13:e9:b0:f4:18:d3:72:b1:86:21:eb:03:d0:a5: 19:95:ec:e0:bc:13:05:06:c5:08:d1:b9:27:31:2f: a3:36:d7:7a:6a:67:5b:1a:02:22:0a:8f:48:6b:45: 58:63:1a:74:65:f5:4a:2c:d2:96:07:80:dc:42:d0: c4:1f:6a:b6:64:4c:61:49:d3:fa:b7:97:48:77:cb: 14:d0:8c:b6:ea:f4:22:4f:5f:4d:f4:5a:58:d5:fc: 35:04:83:ee:d5:1d:df:c1:fe:63:9c:2b:83:92:73: ea:f5:d2:46:9d:9d:12:91:cd:5f:6a:f9:81:06:cb: 89:16:5d:56:3b:1e:83:50:9c:d5:47:67:23:fb:17: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:22:FA:B7:91:4E:55:28:65:35:41:2C:21:8E:3F:06:FA:63:74:7D X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/4CL6t5FOVShlNUEsIY4_BvpjdH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.225.0/24 IPv6: 2a0c:a9c7:225::/48 Signature Algorithm: sha256WithRSAEncryption 6c:ba:65:c3:fd:fd:88:20:70:0a:8c:bc:1d:1a:7d:03:90:3b: f8:ea:4b:5b:68:db:74:fb:50:a4:93:0b:59:6d:0e:4b:cc:10: 8e:16:01:77:81:c7:bf:9c:17:fd:92:ea:4a:7b:b1:27:ea:da: e3:c5:7b:3b:90:6e:ac:41:30:74:b1:16:75:f9:22:83:f1:76: f3:40:02:c3:2a:3c:51:f9:aa:9c:76:4a:81:a0:f5:ae:91:30: be:2e:1f:ea:cc:4c:ce:4d:ec:0a:31:fa:f9:3c:ee:9a:e2:47: 10:1a:6f:77:cc:4d:a1:8a:86:5e:f2:10:ff:a2:a3:0c:95:fc: 90:1a:c8:9b:5f:44:f6:05:67:f1:21:12:5b:46:1b:11:94:33: 60:cb:dd:8f:98:ae:62:10:cb:f8:5e:98:0b:28:bf:11:27:ac: 3b:84:0d:9d:70:7a:0b:a9:71:85:ed:88:57:57:74:51:02:14: 43:6a:eb:d3:4b:83:23:ae:c9:d3:3d:68:02:ba:87:2a:32:0c: c9:22:e9:05:c8:77:93:07:0e:d9:a3:16:54:a2:08:42:de:ce: 71:5b:04:98:0b:02:5e:cf:c1:d5:8e:97:d2:47:73:3f:ae:d8: 8e:6b:77:06:51:97:ed:af:9b:a5:2d:5f:84:c3:af:6a:27:4b: 1f:2e:15:d2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xzVx9FTYNymuwjSs4z+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDIyZmFiNzkxNGU1NTI4NjUzNTQxMmMyMThlM2YwNmZhNjM3NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kCqoXENKEV4Nhd8t4F0Ywjnoaic 365vhC2V3lbWmBO5sGMlzJ5vmZ+hYNuLMwJMaTVKFKm1F7NtvMyhJ7Rr6ZSlGc5B yEDhEon6p82kJc8PSL+hwG+dlDC9xmfkw333UcFzwj3VrrpbPb4IqK6QWrgY3lYD F+z3E+mw9BjTcrGGIesD0KUZlezgvBMFBsUI0bknMS+jNtd6amdbGgIiCo9Ia0VY Yxp0ZfVKLNKWB4DcQtDEH2q2ZExhSdP6t5dId8sU0Iy26vQiT19N9FpY1fw1BIPu 1R3fwf5jnCuDknPq9dJGnZ0Skc1favmBBsuJFl1WOx6DUJzVR2cj+xft9wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOAi+reRTlUoZTVBLCGOPwb6Y3R9MB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvNENMNnQ1Rk9WU2hsTlVFc0lZNF9CdnBqZEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwejhMA8E AgACMAkDBwAqDKnHAiUwDQYJKoZIhvcNAQELBQADggEBAGy6ZcP9/YggcAqMvB0a fQOQO/jqS1to23T7UKSTC1ltDkvMEI4WAXeBx7+cF/2S6kp7sSfq2uPFezuQbqxB MHSxFnX5IoPxdvNAAsMqPFH5qpx2SoGg9a6RML4uH+rMTM5N7Aox+vk87priRxAa b3fMTaGKhl7yEP+iowyV/JAayJtfRPYFZ/EhEltGGxGUM2DL3Y+YrmIQy/hemAso vxEnrDuEDZ1wegupcYXtiFdXdFECFENq69NLgyOuydM9aAK6hyoyDMki6QXId5MH DtmjFlSiCELeznFbBJgLAl7PwdWOl9JHcz+u2I5rdwZRl+2vm6UtX4TDr2onSx8u FdI= -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:16 2026 by rpki-client