This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/m4F8w6pz_KxIvqFaK5wsSwbeQWU.roa File: m4F8w6pz_KxIvqFaK5wsSwbeQWU.roa (raw, json) Hash identifier: pjG/pyniD6sCx+Foir3iHY9Rz2O11SJ8u+uOaiXOtJ8= Subject key identifier: 9B:81:7C:C3:AA:73:FC:AC:48:BE:A1:5A:2B:9C:2C:4B:06:DE:41:65 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C7441C1D1682B7E0D6804748367A1E Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/m4F8w6pz_KxIvqFaK5wsSwbeQWU.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61265 IP address blocks: 212.192.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:1c:1d:16:82:b7:e0:d6:80:47:48:36:7a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b817cc3aa73fcac48bea15a2b9c2c4b06de4165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:89:d4:93:79:b5:a9:c9:81:37:72:ff:6e: 86:eb:51:a0:89:60:14:f9:16:97:46:26:7d:d5:b8: b0:4d:f2:f7:51:3c:b5:aa:c9:93:1b:a9:c0:43:24: 37:64:a3:1c:1b:be:55:4b:b4:a5:6c:1b:88:d6:a2: f7:92:90:14:4c:36:e5:ff:93:05:84:3a:79:a6:4b: 24:65:7c:c9:f2:5c:f6:0b:3c:ee:0c:4f:22:d9:42: 88:c7:f3:8c:1f:12:21:e0:ab:da:bb:87:1b:87:33: 99:a6:f8:e2:a6:d7:a7:0c:7e:21:a1:56:ba:d2:94: fb:1f:f9:7c:2f:15:66:2e:e8:86:c9:7c:50:35:fa: dc:ab:d8:04:89:50:61:9e:f7:b4:bc:4e:85:1d:9c: bd:9b:c3:ea:5e:43:f5:2f:e5:75:a5:7d:80:34:5e: 68:80:0f:1c:83:9c:c8:4c:37:86:5a:2b:f7:f2:6d: c9:8a:a2:e7:df:0e:18:9c:a3:a2:73:c8:8a:9a:47: 9c:27:5c:f7:0f:ba:36:1c:0a:6d:59:e2:c6:e5:85: 45:06:b8:92:89:36:e6:81:01:25:1f:8e:f5:34:5e: a1:4a:5f:5a:99:fd:03:f8:57:6b:f9:8d:96:0b:12: c5:27:61:42:e4:e0:8e:86:e6:22:e4:bb:a1:03:92: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:81:7C:C3:AA:73:FC:AC:48:BE:A1:5A:2B:9C:2C:4B:06:DE:41:65 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/m4F8w6pz_KxIvqFaK5wsSwbeQWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.226.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b8:82:00:e1:12:67:6c:ed:4b:39:c9:f7:4e:95:da:b4:4c: b6:a3:f6:4c:98:8c:3e:d8:e9:41:81:eb:66:af:53:e0:36:76: 74:18:51:0a:fe:e4:51:6a:7f:89:15:82:8c:c3:4b:b4:83:62: f8:5e:6e:6c:31:f1:46:c8:f5:f5:71:5c:ba:a7:df:61:29:61: d0:7d:7c:a4:f7:d2:15:b5:cb:e5:93:0d:42:cd:64:ef:d9:87: 90:5e:25:31:94:b2:1c:9d:f9:25:cd:76:0e:69:36:ee:88:54: 10:42:f7:4d:e1:b5:88:43:83:e9:55:3c:a4:53:60:83:25:38: f9:9d:e8:c1:3e:5c:58:ea:de:a7:3c:15:93:6e:9a:ef:03:63: ff:8f:2f:1c:42:d0:09:1b:31:9f:9b:af:14:6b:32:b7:70:f7: bc:41:e1:1b:50:8c:75:a2:bd:3b:ff:08:2d:0b:8e:ad:b1:32: 31:ea:42:ff:7f:0f:fd:49:c5:c9:e3:1d:ae:3b:2e:a6:59:23: c2:28:3a:29:46:4e:ad:83:70:f4:4b:fd:f2:3f:69:1f:22:c4: b9:d0:1a:ad:cd:53:f1:50:e9:6f:34:c4:d4:c1:12:21:9d:8b: 0f:87:2c:78:e9:64:e2:54:c9:a5:ea:78:df:b7:8f:00:94:0e: c8:37:be:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0QcHRaCt+DWgEdINnoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjgxN2NjM2FhNzNmY2FjNDhiZWExNWEyYjljMmM0YjA2ZGU0MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gGJ1JN5tanJgTdy/26G61GgiWAU +RaXRiZ91biwTfL3UTy1qsmTG6nAQyQ3ZKMcG75VS7SlbBuI1qL3kpAUTDbl/5MF hDp5pkskZXzJ8lz2CzzuDE8i2UKIx/OMHxIh4Kvau4cbhzOZpvjiptenDH4hoVa6 0pT7H/l8LxVmLuiGyXxQNfrcq9gEiVBhnve0vE6FHZy9m8PqXkP1L+V1pX2ANF5o gA8cg5zITDeGWiv38m3JiqLn3w4YnKOic8iKmkecJ1z3D7o2HAptWeLG5YVFBriS iTbmgQElH471NF6hSl9amf0D+Fdr+Y2WCxLFJ2FC5OCOhuYi5LuhA5Ib9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJuBfMOqc/ysSL6hWiucLEsG3kFlMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvbTRGOHc2cHpfS3hJdnFGYUs1d3NTd2JlUVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDiMA0G CSqGSIb3DQEBCwUAA4IBAQAIuIIA4RJnbO1LOcn3TpXatEy2o/ZMmIw+2OlBgetm r1PgNnZ0GFEK/uRRan+JFYKMw0u0g2L4Xm5sMfFGyPX1cVy6p99hKWHQfXyk99IV tcvlkw1CzWTv2YeQXiUxlLIcnfklzXYOaTbuiFQQQvdN4bWIQ4PpVTykU2CDJTj5 nejBPlxY6t6nPBWTbprvA2P/jy8cQtAJGzGfm68UazK3cPe8QeEbUIx1or07/wgt C46tsTIx6kL/fw/9ScXJ4x2uOy6mWSPCKDopRk6tg3D0S/3yP2kfIsS50BqtzVPx UOlvNMTUwRIhnYsPhyx46WTiVMml6njft48AlA7IN74Q -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:15 2026 by rpki-client