This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/4GUElnAPOkrPLe4DgpHfnLNp6J0.roa File: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (raw, json) Hash identifier: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k= Subject key identifier: E0:65:04:96:70:0F:3A:4A:CF:2D:EE:03:82:91:DF:9C:B3:69:E8:9D Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A379A592E09903ACB22F5878BF2BE4 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/4GUElnAPOkrPLe4DgpHfnLNp6J0.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57171 IP address blocks: 194.170.172.0/23 maxlen: 23 195.229.132.0/23 maxlen: 23 195.229.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:79:a5:92:e0:99:03:ac:b2:2f:58:78:bf:2b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0650496700f3a4acf2dee038291df9cb369e89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:4b:cc:a8:f8:b4:20:6a:17:71:0c:49:58: f8:6a:f4:ed:09:c2:33:ec:97:99:2b:6e:2d:80:31: 61:9a:15:70:02:be:7d:34:14:75:9f:00:6b:05:66: 21:0c:fd:f2:e4:ac:8b:0e:2e:01:1b:a8:69:58:bf: 7e:bc:8f:43:fb:93:c8:17:9c:b0:cf:fb:2d:33:64: 58:38:9b:73:f4:d0:23:1a:3f:66:79:9a:12:1d:fd: 5e:df:3c:00:c5:08:c8:63:34:4e:e6:4f:d8:b5:d5: 9e:e9:59:4b:14:59:60:67:e9:59:49:31:30:4e:f6: 87:40:b4:7e:16:29:c0:78:ec:21:de:dc:94:bd:74: 0f:82:4b:23:2b:a1:8c:49:0b:0f:c6:fd:01:04:9b: 31:b6:c6:66:c8:11:7f:6c:3f:90:c3:b4:95:4e:08: 18:9c:72:da:b2:12:9d:39:c3:9c:dd:d6:7f:06:5f: ea:ae:9f:a6:06:a8:d1:22:32:cf:b4:a9:10:43:96: dd:c9:0b:55:49:eb:60:17:0f:5f:2a:4f:49:c0:75: d8:03:a8:3d:b1:b8:57:68:cb:9e:dd:1e:e3:d2:f0: 10:7f:68:0e:04:e9:81:6a:a9:be:20:0b:7f:5f:4b: 0d:aa:5b:3e:2d:48:48:58:a9:6e:88:7f:62:04:8a: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:04:96:70:0F:3A:4A:CF:2D:EE:03:82:91:DF:9C:B3:69:E8:9D X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/4GUElnAPOkrPLe4DgpHfnLNp6J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.170.172.0/23 195.229.132.0/23 195.229.156.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:94:e3:56:77:d5:50:65:fb:8d:6f:a4:98:6b:3e:ca:1b:39: ab:d0:54:b2:0d:fa:9d:f9:52:14:ea:21:e4:5a:c9:a2:45:14: 5f:74:db:d8:be:c1:c4:d3:77:b8:a2:bb:47:6b:c6:19:37:37: 98:de:d4:35:32:91:ef:a5:a0:ab:1c:c2:9c:b2:58:08:af:38: c2:f2:b6:19:3d:d4:42:1e:b7:02:60:8c:01:c8:22:ab:65:98: 28:10:6c:1a:a6:ad:30:af:ed:fb:50:90:e7:c4:e8:3f:ca:aa: c8:3f:8d:fc:30:9d:e9:29:0f:ee:01:08:4e:05:65:3a:de:29: 5d:1e:f3:e3:48:53:e0:2b:99:df:5f:99:68:be:9f:ee:67:60: e0:8b:4c:8a:d5:b5:35:d2:65:b5:15:98:a9:12:a5:9e:2e:66: 8b:5b:17:f6:c6:08:67:08:b2:a5:7e:cf:ae:fb:03:11:e3:6e: 53:5e:83:41:0e:dc:ab:53:19:e5:03:c8:9c:43:18:5f:02:7f: 13:c0:f5:8b:cb:53:6f:e2:a8:42:20:c1:2b:81:20:9b:33:7f: 1e:f2:65:a5:b0:8f:e3:45:d7:dc:06:0d:c7:9f:c3:50:be:b7: 4b:89:a7:98:5f:45:d2:52:fb:10:f4:9d:7b:fb:d1:67:97:4f: 68:75:f0:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4o3mlkuCZA6yyL1h4vyvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDY1MDQ5NjcwMGYzYTRhY2YyZGVlMDM4MjkxZGY5Y2IzNjllODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFLzKj4tCBqF3EMSVj4avTtCcIz 7JeZK24tgDFhmhVwAr59NBR1nwBrBWYhDP3y5KyLDi4BG6hpWL9+vI9D+5PIF5yw z/stM2RYOJtz9NAjGj9meZoSHf1e3zwAxQjIYzRO5k/YtdWe6VlLFFlgZ+lZSTEw TvaHQLR+FinAeOwh3tyUvXQPgksjK6GMSQsPxv0BBJsxtsZmyBF/bD+Qw7SVTggY nHLashKdOcOc3dZ/Bl/qrp+mBqjRIjLPtKkQQ5bdyQtVSetgFw9fKk9JwHXYA6g9 sbhXaMue3R7j0vAQf2gOBOmBaqm+IAt/X0sNqls+LUhIWKluiH9iBIpR5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOBlBJZwDzpKzy3uA4KR35yzaeidMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvNEdVRWxuQVBPa3JQTGU0RGdwSGZuTE5wNkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwqqsAwQB w+WEAwQCw+WcMA0GCSqGSIb3DQEBCwUAA4IBAQAOlONWd9VQZfuNb6SYaz7KGzmr 0FSyDfqd+VIU6iHkWsmiRRRfdNvYvsHE03e4ortHa8YZNzeY3tQ1MpHvpaCrHMKc slgIrzjC8rYZPdRCHrcCYIwByCKrZZgoEGwapq0wr+37UJDnxOg/yqrIP438MJ3p KQ/uAQhOBWU63ildHvPjSFPgK5nfX5lovp/uZ2Dgi0yK1bU10mW1FZipEqWeLmaL Wxf2xghnCLKlfs+u+wMR425TXoNBDtyrUxnlA8icQxhfAn8TwPWLy1Nv4qhCIMEr gSCbM38e8mWlsI/jRdfcBg3Hn8NQvrdLiaeYX0XSUvsQ9J17+9Fnl09odfAN -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:05 2026 by rpki-client