This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/4CyWJIUeYGWCwYxRLRiNxvCsI_c.roa File: 4CyWJIUeYGWCwYxRLRiNxvCsI_c.roa (raw, json) Hash identifier: 1S9b9gO2RHxi1hHY0qURqTrLj6do1xSRfB5h3sgfncg= Subject key identifier: E0:2C:96:24:85:1E:60:65:82:C1:8C:51:2D:18:8D:C6:F0:AC:23:F7 Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92 Certificate serial: 019B7CEE27955A44F0AE7D5D7BB62F7BC2CC Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/4CyWJIUeYGWCwYxRLRiNxvCsI_c.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197482 IP address blocks: 91.221.198.0/23 maxlen: 23 91.221.198.0/24 maxlen: 24 91.221.199.0/24 maxlen: 24 91.236.48.0/22 maxlen: 22 91.236.48.0/24 maxlen: 24 91.236.49.0/24 maxlen: 24 91.236.50.0/24 maxlen: 24 91.236.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:27:95:5a:44:f0:ae:7d:5d:7b:b6:2f:7b:c2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e02c9624851e606582c18c512d188dc6f0ac23f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:37:2b:6d:dd:72:d1:6c:08:19:fc:10:d1: 86:3d:7b:cf:23:bc:fa:83:2b:c2:c9:8c:9f:74:2b: eb:e8:c7:30:7b:61:2d:1b:3e:85:e2:04:1b:6b:b1: 2d:64:84:89:72:06:0b:e4:e6:9d:0e:cf:36:0b:17: 64:65:a9:1a:51:5e:5b:ab:d3:ef:a4:3c:39:16:66: 20:a8:b1:57:d1:f2:26:34:f0:22:5c:24:bc:e0:38: 78:ec:32:2b:39:33:2b:2b:c1:53:12:1a:27:2f:a8: e7:90:c0:f2:00:17:ca:e5:1e:35:1d:20:13:30:82: 21:37:45:5c:20:8a:78:e5:0d:6c:b5:77:b5:39:53: 83:1c:80:1f:74:53:47:3c:50:9f:cb:4c:e1:85:1b: 46:c4:70:bc:2d:78:12:b7:40:bb:71:7b:e4:8a:39: 2e:9a:74:ca:c7:61:4d:f6:c5:ab:61:f4:a0:70:50: 86:4d:21:78:a3:5c:dd:ed:ae:84:b3:1d:2f:51:5b: 78:0b:f2:ea:a4:66:6a:46:fe:df:c9:42:d3:eb:b9: 64:3c:00:c4:9b:b6:bb:26:29:77:19:31:3e:1f:de: 34:02:f4:1b:68:d9:56:d2:3f:b6:a8:8d:17:d8:29: 55:40:61:c8:55:aa:f2:22:0a:ee:a2:79:4e:b8:be: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:96:24:85:1E:60:65:82:C1:8C:51:2D:18:8D:C6:F0:AC:23:F7 X509v3 Authority Key Identifier: keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/4CyWJIUeYGWCwYxRLRiNxvCsI_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.198.0/23 91.236.48.0/22 Signature Algorithm: sha256WithRSAEncryption 78:58:78:cb:2b:bd:23:12:d0:a8:06:9b:6f:3d:f2:1a:ba:dd: ab:cd:42:6a:6f:71:56:a3:f9:57:33:d6:72:87:66:80:f2:fe: b1:da:35:a0:c6:1b:87:e8:78:7d:24:f1:3e:36:f2:01:e6:2e: 44:f4:3e:3f:0a:41:70:27:0c:2c:00:6e:f3:b7:ee:6c:a1:61: 19:39:73:9c:7e:cb:ff:16:fa:81:67:a8:d7:2b:98:fe:c9:95: f7:e2:a0:43:9c:21:cd:81:ea:39:54:82:0c:74:06:3b:de:6f: d6:76:51:fc:a6:78:4d:f3:57:79:c3:2d:8f:6a:d9:04:30:cc: cc:d4:26:3a:06:aa:36:4a:fe:a5:ef:86:d3:31:12:ad:59:ac: 62:a2:b2:aa:ef:07:d6:d3:78:5b:86:2f:2c:66:72:92:b5:03: fa:25:a2:c9:54:d4:2a:df:fd:9a:00:c6:4f:ee:60:ad:77:26: 67:1a:91:7a:6c:61:23:0b:f4:b1:73:ad:72:95:a5:1b:46:7b: 9e:33:46:7e:08:4b:b2:c6:8b:b9:ff:01:f8:dc:9e:3f:ae:52: 9c:74:d5:00:13:0b:f9:dc:63:73:97:47:f9:f1:41:69:c6:7d: 3b:48:2c:f7:81:e6:28:0d:8a:26:fa:a7:87:88:37:19:c4:3a: 3e:d1:8e:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ieVWkTwrn1de7Yve8LMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMjU0ZTFiNWNkNDUyODY4ZGYyZTE5OTJkODhkMDc2MDlm YzRjOTIwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDJjOTYyNDg1MWU2MDY1ODJjMThjNTEyZDE4OGRjNmYwYWMyM2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgQ3K23dctFsCBn8ENGGPXvPI7z6 gyvCyYyfdCvr6Mcwe2EtGz6F4gQba7EtZISJcgYL5OadDs82CxdkZakaUV5bq9Pv pDw5FmYgqLFX0fImNPAiXCS84Dh47DIrOTMrK8FTEhonL6jnkMDyABfK5R41HSAT MIIhN0VcIIp45Q1stXe1OVODHIAfdFNHPFCfy0zhhRtGxHC8LXgSt0C7cXvkijku mnTKx2FN9sWrYfSgcFCGTSF4o1zd7a6Esx0vUVt4C/LqpGZqRv7fyULT67lkPADE m7a7Jil3GTE+H940AvQbaNlW0j+2qI0X2ClVQGHIVaryIgruonlOuL5IXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOAsliSFHmBlgsGMUS0YjcbwrCP3MB8GA1UdIwQY MBaAFL4lThtc1FKGjfLhmS2I0HYJ/EySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDIt NDJjZjVkNTFlNDE4LzEvNEN5V0pJVWVZR1dDd1l4UkxSaU54dkNzSV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDItNDJjZjVkNTFlNDE4 LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW93GAwQC W+wwMA0GCSqGSIb3DQEBCwUAA4IBAQB4WHjLK70jEtCoBptvPfIaut2rzUJqb3FW o/lXM9Zyh2aA8v6x2jWgxhuH6Hh9JPE+NvIB5i5E9D4/CkFwJwwsAG7zt+5soWEZ OXOcfsv/FvqBZ6jXK5j+yZX34qBDnCHNgeo5VIIMdAY73m/WdlH8pnhN81d5wy2P atkEMMzM1CY6Bqo2Sv6l74bTMRKtWaxiorKq7wfW03hbhi8sZnKStQP6JaLJVNQq 3/2aAMZP7mCtdyZnGpF6bGEjC/Sxc61ylaUbRnueM0Z+CEuyxou5/wH43J4/rlKc dNUAEwv53GNzl0f58UFpxn07SCz3geYoDYom+qeHiDcZxDo+0Y6/ -----END CERTIFICATE-----Generated at Tue Feb 10 05:53:59 2026 by rpki-client