This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4K8SYe2kIcvne1_Zm74oxY9WqAM.roa File: 4K8SYe2kIcvne1_Zm74oxY9WqAM.roa (raw, json) Hash identifier: ucLUJjyJU3V8yzW4xQgWeZY2GC+C1Tlx/M1dFpBdi18= Subject key identifier: E0:AF:12:61:ED:A4:21:CB:E7:7B:5F:D9:9B:BE:28:C5:8F:56:A8:03 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5429D7E352F16FDDDC714972D5FC4 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4K8SYe2kIcvne1_Zm74oxY9WqAM.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197929 IP address blocks: 212.5.152.0/23 maxlen: 24 212.5.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:9d:7e:35:2f:16:fd:dd:c7:14:97:2d:5f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0af1261eda421cbe77b5fd99bbe28c58f56a803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:01:b2:0c:17:af:11:5c:3a:3d:fb:65:69: 1b:d2:aa:73:8f:ff:98:67:c9:7e:0a:da:51:04:63: 9f:6c:bf:67:2a:a5:5e:59:20:7f:fb:20:e1:e4:ee: 7b:f9:14:40:c0:3f:53:4d:b0:6b:d2:72:5c:35:9f: 4b:d7:e9:05:de:e6:2e:41:b5:4d:8f:57:79:66:db: ce:e0:1e:a5:18:33:af:92:79:62:d1:7f:79:31:8d: 7c:6e:27:1a:6d:a5:b5:2f:51:a5:1e:ab:2c:bd:75: c7:73:8f:b3:ab:dc:a6:3f:fc:67:b2:e9:21:2c:87: 21:d7:4c:6a:62:d6:d2:c7:41:83:73:74:69:6a:87: a8:55:55:1c:ea:d8:aa:07:d5:51:b0:c8:9f:69:56: be:c5:bf:80:2e:2a:01:9c:62:b2:33:c3:20:45:9f: fa:72:70:75:10:87:ee:55:eb:5a:ef:c0:27:20:24: 2f:c4:bc:70:b9:bb:bf:1a:fc:67:30:6a:f1:f2:6e: b4:c3:65:c4:f1:3e:41:fc:5e:5a:f8:20:17:cd:5e: 2f:3e:bd:7c:4e:3d:f2:0f:1c:f1:4b:79:0f:46:26: 88:27:f0:dc:d7:8b:a7:39:0f:f1:b2:0b:e3:ac:b9: 36:31:dc:40:70:80:a4:c9:f2:5c:1d:53:34:a8:25: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:12:61:ED:A4:21:CB:E7:7B:5F:D9:9B:BE:28:C5:8F:56:A8:03 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4K8SYe2kIcvne1_Zm74oxY9WqAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.5.152.0/22 Signature Algorithm: sha256WithRSAEncryption 24:26:11:a1:07:d9:33:9a:c9:83:ab:2c:43:74:c7:86:3f:b9: 2b:b1:de:7c:d7:32:0f:d0:d0:b1:93:4e:33:2d:5c:ec:06:9d: 69:3c:5d:bc:c1:d5:ba:14:88:49:22:9d:d6:8f:0e:a9:6f:08: 53:6f:9d:93:23:e8:f4:98:db:1e:9a:67:bf:f8:6e:dd:24:3f: 8e:94:31:e0:57:91:2b:7e:50:8d:65:ce:d5:53:1b:82:4d:86: c7:c0:fb:83:c9:78:c1:8a:c0:e2:d4:09:51:f1:ad:2b:b0:34: ae:0f:8c:2f:9a:ec:62:74:26:a9:9a:6c:5c:97:ad:f8:48:8f: 4c:e0:06:e9:b5:e6:05:14:0c:56:a8:c2:93:81:af:e2:90:d5: 15:a3:f7:2d:4c:40:1a:40:b6:07:be:c0:da:44:fd:16:0d:4e: 8e:e2:0a:92:32:9a:b2:22:9c:2d:36:6c:8b:e0:d1:5b:11:3e: ef:94:f6:c8:e9:14:9d:0e:d7:95:0b:ea:cf:05:17:6a:ad:17: 90:fb:3f:d1:dc:10:8f:15:a4:5f:6d:09:a7:44:c0:4f:20:3e: 87:53:ca:e8:05:bd:5e:b6:89:50:95:00:4e:ad:39:89:f3:5c: 31:2e:e9:7d:fa:7d:2c:d8:af:c7:5c:33:dd:07:c4:a6:77:19: f4:a2:e8:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUKdfjUvFv3dxxSXLV/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFmMTI2MWVkYTQyMWNiZTc3YjVmZDk5YmJlMjhjNThmNTZhODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTABsgwXrxFcOj37ZWkb0qpzj/+Y Z8l+CtpRBGOfbL9nKqVeWSB/+yDh5O57+RRAwD9TTbBr0nJcNZ9L1+kF3uYuQbVN j1d5ZtvO4B6lGDOvknli0X95MY18bicabaW1L1GlHqssvXXHc4+zq9ymP/xnsukh LIch10xqYtbSx0GDc3RpaoeoVVUc6tiqB9VRsMifaVa+xb+ALioBnGKyM8MgRZ/6 cnB1EIfuVeta78AnICQvxLxwubu/GvxnMGrx8m60w2XE8T5B/F5a+CAXzV4vPr18 Tj3yDxzxS3kPRiaIJ/Dc14unOQ/xsgvjrLk2MdxAcICkyfJcHVM0qCVIVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCvEmHtpCHL53tf2Zu+KMWPVqgDMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvNEs4U1llMmtJY3ZuZTFfWm03NG94WTlXcUFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1AWYMA0G CSqGSIb3DQEBCwUAA4IBAQAkJhGhB9kzmsmDqyxDdMeGP7krsd581zIP0NCxk04z LVzsBp1pPF28wdW6FIhJIp3Wjw6pbwhTb52TI+j0mNsemme/+G7dJD+OlDHgV5Er flCNZc7VUxuCTYbHwPuDyXjBisDi1AlR8a0rsDSuD4wvmuxidCapmmxcl634SI9M 4AbpteYFFAxWqMKTga/ikNUVo/ctTEAaQLYHvsDaRP0WDU6O4gqSMpqyIpwtNmyL 4NFbET7vlPbI6RSdDteVC+rPBRdqrReQ+z/R3BCPFaRfbQmnRMBPID6HU8roBb1e tolQlQBOrTmJ81wxLul9+n0s2K/HXDPdB8Smdxn0oujS -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:51 2026 by rpki-client