This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/4RhMZahyPAwo146TEpPKu9ePT2I.roa File: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (raw, json) Hash identifier: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk= Subject key identifier: E1:18:4C:65:A8:72:3C:0C:28:D7:8E:93:12:93:CA:BB:D7:8F:4F:62 Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Certificate serial: 019B76EACFB07ECE48C2E91C61436775D898 Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/4RhMZahyPAwo146TEpPKu9ePT2I.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41241 IP address blocks: 193.16.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cf:b0:7e:ce:48:c2:e9:1c:61:43:67:75:d8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1184c65a8723c0c28d78e931293cabbd78f4f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:b7:a7:a1:6a:75:7b:d5:1d:80:40:8b:e3: ee:63:0b:37:1f:37:78:48:04:b5:91:c7:57:4c:8d: 6d:5c:4c:90:57:44:a5:c8:17:b6:5d:93:b0:1b:88: 12:99:e7:ae:72:17:7e:86:e7:87:23:3a:ee:f8:dc: a8:4a:f2:bf:d2:3d:87:80:b2:20:15:be:aa:68:c3: 31:c1:90:94:00:cd:32:19:8a:7a:af:71:93:41:2b: db:35:af:67:16:0b:53:3a:78:8b:b0:77:08:29:1f: 5c:d3:e0:37:16:05:9b:90:f3:c7:44:0f:90:8f:c7: b4:03:c6:dd:33:93:c2:61:0f:6b:41:ef:09:7b:8c: 4a:11:3c:b5:7b:7d:00:05:93:18:29:f0:af:02:e6: a6:90:bc:42:6f:e7:7b:e5:86:02:13:2f:02:d5:1e: 2d:42:ce:41:b2:f6:bf:1a:f3:45:ba:3a:5d:c7:6f: a1:27:57:ad:71:f7:cc:f6:db:62:b5:8b:ad:66:18: b7:b2:99:ed:e9:c8:4a:98:d1:00:ff:7c:68:d8:87: 82:76:78:49:bc:cc:24:65:b2:1d:e0:6d:9f:38:47: 8c:45:49:23:28:b6:ae:8e:02:57:a5:c0:d2:c3:a2: 23:c4:3c:25:b6:61:67:9a:fd:e2:8d:fb:70:12:69: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:18:4C:65:A8:72:3C:0C:28:D7:8E:93:12:93:CA:BB:D7:8F:4F:62 X509v3 Authority Key Identifier: keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/4RhMZahyPAwo146TEpPKu9ePT2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.234.0/24 Signature Algorithm: sha256WithRSAEncryption 58:04:be:e3:5a:e4:65:b2:4a:e1:58:f7:c5:e4:dd:46:29:c4: 08:02:95:93:62:37:46:d8:64:e0:14:95:bc:2a:b7:d2:c5:9f: 49:1f:f3:cb:78:60:72:04:07:d4:e8:e9:88:41:48:e8:6f:13: df:79:12:04:c1:1e:89:ab:09:6b:3a:3d:11:43:f9:b6:ce:e6: 77:63:93:67:ea:25:e5:17:38:f2:cf:89:4b:14:56:71:7a:a2: f0:e0:94:13:52:0b:2f:3f:a2:b9:68:2d:7f:46:19:f0:48:d7: 8c:c3:2e:c3:67:28:29:73:cd:0b:aa:6d:8c:9a:3b:5d:ee:f1: 73:9a:44:3b:11:5d:c5:72:0f:42:95:1c:ef:96:8c:e9:f3:5a: f7:ef:c0:b9:93:2a:f2:17:a3:9d:d4:ae:72:70:a4:02:e4:60: 2e:a5:3f:6a:94:34:4e:21:18:68:7d:58:6e:d2:33:24:a4:41: a8:1f:1d:df:0d:bb:cc:3e:70:bf:dc:a3:c5:af:1a:c7:d5:e2: 6c:2f:9f:49:59:f4:bb:ff:37:88:34:f2:44:d8:92:66:58:93: cd:7e:83:ce:96:55:c8:95:da:27:7c:b1:9f:24:96:d4:b5:af: d2:ed:b6:8a:22:da:3b:15:6e:75:22:fa:3f:2c:e2:7b:63:eb: 0b:e1:9e:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26s+wfs5IwukcYUNnddiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm ODdjMDAwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTE4NGM2NWE4NzIzYzBjMjhkNzhlOTMxMjkzY2FiYmQ3OGY0ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2K3p6FqdXvVHYBAi+PuYws3Hzd4 SAS1kcdXTI1tXEyQV0SlyBe2XZOwG4gSmeeuchd+hueHIzru+NyoSvK/0j2HgLIg Fb6qaMMxwZCUAM0yGYp6r3GTQSvbNa9nFgtTOniLsHcIKR9c0+A3FgWbkPPHRA+Q j8e0A8bdM5PCYQ9rQe8Je4xKETy1e30ABZMYKfCvAuamkLxCb+d75YYCEy8C1R4t Qs5Bsva/GvNFujpdx2+hJ1etcffM9ttitYutZhi3spnt6chKmNEA/3xo2IeCdnhJ vMwkZbId4G2fOEeMRUkjKLaujgJXpcDSw6IjxDwltmFnmv3ijftwEmnOKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEYTGWocjwMKNeOkxKTyrvXj09iMB8GA1UdIwQY MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt OTNiM2EzNjk2ZDk2LzEvNFJoTVphaHlQQXdvMTQ2VEVwUEt1OWVQVDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2 LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRDqMA0G CSqGSIb3DQEBCwUAA4IBAQBYBL7jWuRlskrhWPfF5N1GKcQIApWTYjdG2GTgFJW8 KrfSxZ9JH/PLeGByBAfU6OmIQUjobxPfeRIEwR6JqwlrOj0RQ/m2zuZ3Y5Nn6iXl Fzjyz4lLFFZxeqLw4JQTUgsvP6K5aC1/RhnwSNeMwy7DZygpc80Lqm2Mmjtd7vFz mkQ7EV3Fcg9ClRzvlozp81r378C5kyryF6Od1K5ycKQC5GAupT9qlDROIRhofVhu 0jMkpEGoHx3fDbvMPnC/3KPFrxrH1eJsL59JWfS7/zeINPJE2JJmWJPNfoPOllXI ldonfLGfJJbUta/S7baKIto7FW51Ivo/LOJ7Y+sL4Z6i -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:04 2026 by rpki-client