This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa File: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (raw, json) Hash identifier: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE= Subject key identifier: E1:3A:8F:E1:5C:ED:0F:EA:D8:6D:9D:7A:A2:26:54:BC:43:F4:0F:54 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDD0AF78FCE7258C4FD0EF5063AAD8 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400866 IP address blocks: 194.79.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d0:af:78:fc:e7:25:8c:4f:d0:ef:50:63:aa:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e13a8fe15ced0fead86d9d7aa22654bc43f40f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:51:0a:45:46:16:16:a3:5e:a9:82:73:2f: 42:58:fd:b8:99:43:6d:cb:06:ed:b5:84:23:bf:75: 14:f3:f9:ad:32:de:75:c1:5f:9b:c1:28:47:da:37: 91:e8:bf:45:47:2a:01:38:6d:f9:7d:09:d4:09:38: 01:59:fe:cd:65:d1:17:3f:ad:fc:2f:0c:ec:78:d8: 33:8b:4b:7c:3a:90:03:37:5a:57:0b:5d:67:fb:0c: d2:61:bd:1d:f0:cd:bc:28:c6:7d:92:21:64:02:5f: c3:db:28:7d:75:66:78:ca:86:bd:f7:70:8f:3f:1b: 53:55:4d:a1:5d:f6:33:a2:41:ba:8e:03:3b:a6:b1: 00:85:c4:42:11:fb:4a:ff:cf:75:d1:74:9c:e3:5c: bf:f4:58:55:0d:85:2f:2b:26:6d:0f:91:60:e7:9e: 1b:fc:2b:a4:65:0f:16:df:79:dc:f1:b9:7c:21:90: 36:17:1c:ab:71:99:37:72:a8:94:da:0f:97:4a:af: 1c:7e:dc:7d:24:ed:fb:23:1a:6d:5b:2d:ff:5b:8f: 19:1f:56:ca:19:d8:ba:16:2e:7b:f3:c2:7e:a7:43: 45:59:06:43:d8:cc:4f:6d:59:42:cd:dc:eb:9d:61: d0:97:b7:23:36:df:c2:01:96:68:67:36:94:25:25: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:8F:E1:5C:ED:0F:EA:D8:6D:9D:7A:A2:26:54:BC:43:F4:0F:54 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.79.15.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ed:47:14:2c:13:53:91:75:97:15:85:a8:84:85:20:c7:23: 9f:4a:65:55:60:52:07:d0:5e:b7:2f:87:54:5f:68:27:6b:02: ed:ae:71:67:1f:70:86:81:ad:0c:8f:3d:10:0d:6b:a9:69:fd: ca:cf:38:ae:5c:47:bd:7f:ce:f8:e9:2e:ab:6f:31:68:af:00: b1:99:ed:76:e6:57:bb:02:8d:1c:9f:4e:70:27:81:f9:ae:98: f0:0d:ec:e3:95:f1:bb:08:44:d4:1b:3f:92:92:5b:f3:fe:fc: a9:1d:c7:ca:15:ad:bb:4a:36:30:8a:2d:6e:a4:5d:6f:dd:da: d5:93:04:b2:0c:da:0d:89:d6:04:e3:c0:03:b6:46:5d:15:a6: 63:05:e3:b3:a2:aa:88:16:cb:1a:2d:75:03:4e:58:bf:4e:b7: 2c:03:7d:78:6b:8d:24:97:be:9b:8f:8f:8a:fb:fc:15:09:c7: b3:c8:8c:1b:30:22:72:54:27:1d:9f:82:e5:fc:dd:22:a2:f9: 26:f3:ec:bb:61:49:65:6f:f7:c3:60:e5:fb:0c:c3:a8:3b:40: 40:db:b6:be:ba:6b:22:b9:1a:65:a9:3f:c1:f9:8a:89:1e:b2: e7:66:af:a0:c0:25:65:46:57:e5:f0:93:1a:e4:e2:79:79:8c: 60:91:3c:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dCvePznJYxP0O9QY6rYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTNhOGZlMTVjZWQwZmVhZDg2ZDlkN2FhMjI2NTRiYzQzZjQwZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVlRCkVGFhajXqmCcy9CWP24mUNt ywbttYQjv3UU8/mtMt51wV+bwShH2jeR6L9FRyoBOG35fQnUCTgBWf7NZdEXP638 LwzseNgzi0t8OpADN1pXC11n+wzSYb0d8M28KMZ9kiFkAl/D2yh9dWZ4yoa993CP PxtTVU2hXfYzokG6jgM7prEAhcRCEftK/8910XSc41y/9FhVDYUvKyZtD5Fg554b /CukZQ8W33nc8bl8IZA2FxyrcZk3cqiU2g+XSq8cftx9JO37IxptWy3/W48ZH1bK Gdi6Fi5788J+p0NFWQZD2MxPbVlCzdzrnWHQl7cjNt/CAZZoZzaUJSUQQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOE6j+Fc7Q/q2G2deqImVLxD9A9UMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvNFRxUDRWenRELXJZYloxNm9pWlV2RVAwRDFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwk8PMA0G CSqGSIb3DQEBCwUAA4IBAQAI7UcULBNTkXWXFYWohIUgxyOfSmVVYFIH0F63L4dU X2gnawLtrnFnH3CGga0Mjz0QDWupaf3KzziuXEe9f8746S6rbzForwCxme125le7 Ao0cn05wJ4H5rpjwDezjlfG7CETUGz+Sklvz/vypHcfKFa27SjYwii1upF1v3drV kwSyDNoNidYE48ADtkZdFaZjBeOzoqqIFssaLXUDTli/TrcsA314a40kl76bj4+K +/wVCcezyIwbMCJyVCcdn4Ll/N0iovkm8+y7YUllb/fDYOX7DMOoO0BA27a+umsi uRplqT/B+YqJHrLnZq+gwCVlRlfl8JMa5OJ5eYxgkTzN -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:32 2026 by rpki-client