This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/4FtzsbmBRCz-KN7S54pRuO4IZrM.roa File: 4FtzsbmBRCz-KN7S54pRuO4IZrM.roa (raw, json) Hash identifier: GUqsJWH9+kzctFjpZP6HQaUNoQFv8yqD7sokvUur02k= Subject key identifier: E0:5B:73:B1:B9:81:44:2C:FE:28:DE:D2:E7:8A:51:B8:EE:08:66:B3 Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c Certificate serial: 019B7BA4D6BBEF1892109F3AEC6EBF80A18B Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/4FtzsbmBRCz-KN7S54pRuO4IZrM.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21087 IP address blocks: 91.210.160.0/22 maxlen: 22 178.217.64.0/21 maxlen: 21 194.176.114.0/24 maxlen: 24 195.93.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d6:bb:ef:18:92:10:9f:3a:ec:6e:bf:80:a1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e05b73b1b981442cfe28ded2e78a51b8ee0866b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:ef:1f:dd:74:39:ee:a0:8a:b8:2a:78:65: 35:51:1b:d9:ba:f7:8f:82:8c:53:2b:a1:f5:7c:1b: 27:92:db:65:5a:2d:58:54:6e:af:9b:b4:b5:64:3c: 69:ae:3c:c2:f9:06:7a:56:66:5a:ae:99:97:e9:57: dc:d2:61:df:3b:25:9f:d7:be:14:15:c2:1b:a2:25: 3e:37:c9:80:aa:42:32:0f:f8:0c:6b:7b:59:58:c3: 86:f5:d4:68:2f:01:33:fd:46:b9:cc:ff:83:c5:74: f6:11:7f:c9:36:a5:20:6d:4a:19:66:5b:d8:da:94: b0:10:7b:70:05:d0:50:08:05:a9:bd:a8:dc:28:0e: 0d:53:03:4f:64:1a:81:1f:9d:c8:68:58:8b:ac:7c: 7e:a7:b2:2e:41:b5:5b:e0:c8:e9:ee:66:73:26:60: e9:20:44:27:23:a8:93:fb:cb:6a:5b:c9:1c:89:c4: d0:42:a4:1f:0a:b4:68:5f:74:65:81:97:b3:11:c6: db:59:f5:a5:bb:30:11:9e:bf:50:21:4b:a6:94:0d: c6:e1:18:c5:ce:5b:ba:fe:a1:d2:03:58:33:35:3a: 26:26:e8:62:f7:2e:85:53:2c:97:1d:7e:50:bb:50: f1:c3:6d:79:03:b0:53:12:7d:f6:eb:41:e4:3b:c5: 83:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5B:73:B1:B9:81:44:2C:FE:28:DE:D2:E7:8A:51:B8:EE:08:66:B3 X509v3 Authority Key Identifier: keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/4FtzsbmBRCz-KN7S54pRuO4IZrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.160.0/22 178.217.64.0/21 194.176.114.0/24 195.93.128.0/23 Signature Algorithm: sha256WithRSAEncryption 12:dd:df:68:e3:28:04:c9:b9:95:6b:ea:21:9b:23:d6:dd:e9: ac:f0:f9:56:11:79:95:9c:b2:52:0a:c0:ff:aa:c1:7e:a5:93: 10:d2:d5:24:53:81:d6:0b:eb:b5:46:89:b2:58:8d:15:68:c0: 23:96:af:cb:65:d1:40:62:0f:a5:e8:60:8e:e0:95:0a:4f:88: c8:9b:56:57:cd:f6:3e:6b:58:57:4c:e6:57:82:11:08:b8:09: de:f2:3f:05:24:75:41:9b:e9:77:6f:e7:f6:df:a6:5e:f7:db: c6:39:4b:27:9c:a3:76:4f:1a:9b:6d:f8:52:84:9b:54:1c:3a: 8e:a1:0c:cf:e2:fc:85:31:90:88:78:c6:35:39:25:01:72:9e: 69:53:85:8b:7f:1b:67:ed:7a:92:32:1e:d5:6d:2e:ca:07:3e: 2a:7a:39:a4:0b:0a:60:d3:da:e3:98:ca:1e:ef:ed:fc:49:46: f1:62:f1:d4:3f:54:f6:c4:de:40:37:7c:d2:99:bf:b4:c9:10: 7b:30:48:27:54:3c:13:ab:8d:a1:16:e0:cc:a0:ff:cb:5b:37: 9c:51:83:d4:9f:2e:53:97:be:ee:0c:00:a3:4d:aa:6e:1e:cc: cb:61:65:5e:63:92:f1:f7:45:8e:b3:c8:da:05:83:69:7f:a9: 6e:91:6a:75 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pNa77xiSEJ867G6/gKGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMWE2YjNmNWVkNWZiNzRkMDM1MTIyMTY1MTNjNGM4MWVm ZTFlNWMwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDViNzNiMWI5ODE0NDJjZmUyOGRlZDJlNzhhNTFiOGVlMDg2NmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1InvH910Oe6girgqeGU1URvZuveP goxTK6H1fBsnkttlWi1YVG6vm7S1ZDxprjzC+QZ6VmZarpmX6Vfc0mHfOyWf174U FcIboiU+N8mAqkIyD/gMa3tZWMOG9dRoLwEz/Ua5zP+DxXT2EX/JNqUgbUoZZlvY 2pSwEHtwBdBQCAWpvajcKA4NUwNPZBqBH53IaFiLrHx+p7IuQbVb4Mjp7mZzJmDp IEQnI6iT+8tqW8kcicTQQqQfCrRoX3RlgZezEcbbWfWluzARnr9QIUumlA3G4RjF zlu6/qHSA1gzNTomJuhi9y6FUyyXHX5Qu1Dxw215A7BTEn3260HkO8WDtQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOBbc7G5gUQs/ije0ueKUbjuCGazMB8GA1UdIwQY MBaAFHIaaz9e1ft00DUSIWUTxMge/h5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQt ODBjMzFkYjIwYWM1LzEvNEZ0enNibUJSQ3otS043UzU0cFJ1TzRJWnJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQtODBjMzFkYjIwYWM1 LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW9KgAwQD stlAAwQAwrByAwQBw12AMA0GCSqGSIb3DQEBCwUAA4IBAQAS3d9o4ygEybmVa+oh myPW3ems8PlWEXmVnLJSCsD/qsF+pZMQ0tUkU4HWC+u1RomyWI0VaMAjlq/LZdFA Yg+l6GCO4JUKT4jIm1ZXzfY+a1hXTOZXghEIuAne8j8FJHVBm+l3b+f236Ze99vG OUsnnKN2TxqbbfhShJtUHDqOoQzP4vyFMZCIeMY1OSUBcp5pU4WLfxtn7XqSMh7V bS7KBz4qejmkCwpg09rjmMoe7+38SUbxYvHUP1T2xN5AN3zSmb+0yRB7MEgnVDwT q42hFuDMoP/LWzecUYPUny5Tl77uDACjTapuHszLYWVeY5Lx90WOs8jaBYNpf6lu kWp1 -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:27 2026 by rpki-client