This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/bEtxOVFEe6RgofyeDUv0F4MuQwg.roa File: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (raw, json) Hash identifier: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I= Subject key identifier: 6C:4B:71:39:51:44:7B:A4:60:A1:FC:9E:0D:4B:F4:17:83:2E:43:08 Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019B7BA52727CBA01880657200B8E218F943 Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/bEtxOVFEe6RgofyeDUv0F4MuQwg.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34704 IP address blocks: 37.208.48.0/24 maxlen: 24 37.208.49.0/24 maxlen: 24 37.208.50.0/24 maxlen: 24 37.208.51.0/24 maxlen: 24 37.208.52.0/24 maxlen: 24 37.208.53.0/24 maxlen: 24 37.208.54.0/24 maxlen: 24 37.208.55.0/24 maxlen: 24 93.174.32.0/24 maxlen: 24 93.174.33.0/24 maxlen: 24 93.174.34.0/24 maxlen: 24 93.174.35.0/24 maxlen: 24 93.174.36.0/24 maxlen: 24 93.174.37.0/24 maxlen: 24 93.174.38.0/24 maxlen: 24 93.174.39.0/24 maxlen: 24 213.232.80.0/24 maxlen: 24 213.232.81.0/24 maxlen: 24 213.232.82.0/24 maxlen: 24 213.232.83.0/24 maxlen: 24 2a07:5e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:27:27:cb:a0:18:80:65:72:00:b8:e2:18:f9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c4b713951447ba460a1fc9e0d4bf417832e4308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:0b:24:97:5b:00:c7:53:9e:69:df:48:22: a2:81:e7:b1:75:61:43:3a:90:ea:ef:01:a1:a6:0b: 28:98:33:da:86:d5:5b:b5:38:fe:3d:3f:ce:a9:36: fc:81:09:37:a7:78:55:38:ec:84:f9:85:5c:15:a7: 2f:b7:3b:69:5f:f0:f1:38:64:e1:dc:f9:5b:8a:e4: 72:22:be:f2:94:f2:69:fb:3d:e9:6b:c2:b4:0f:95: 86:c3:7b:6a:d9:3e:08:b1:80:60:ec:6e:07:4c:25: 7f:c9:c1:e1:dc:92:12:29:fb:ba:27:ae:63:91:8d: b2:9b:b1:39:37:f3:12:22:46:73:90:cd:5c:be:ab: 19:7f:d0:b4:35:43:d4:75:4d:72:8b:e1:98:dd:d1: 83:34:29:06:d8:46:ce:12:06:e5:db:c2:b3:5b:1c: 94:8d:a3:68:8b:7e:0f:7d:1c:50:3b:ff:51:f2:64: b4:e6:c8:bc:8d:e2:4f:22:c9:2e:71:a4:74:13:f4: e1:8b:5a:51:3b:65:20:b4:04:4c:18:2a:30:f2:4d: ab:d3:fe:08:ba:04:d5:54:5e:ce:e3:d9:db:80:91: fe:3a:dc:5b:d8:13:e5:94:86:fe:02:1f:87:46:98: 0f:58:44:e1:9f:7f:b0:34:0a:c9:e8:82:c0:ad:9c: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:71:39:51:44:7B:A4:60:A1:FC:9E:0D:4B:F4:17:83:2E:43:08 X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/bEtxOVFEe6RgofyeDUv0F4MuQwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.48.0/21 93.174.32.0/21 213.232.80.0/22 IPv6: 2a07:5e40::/29 Signature Algorithm: sha256WithRSAEncryption 79:6a:73:ce:3b:f3:9e:3d:74:86:98:cf:54:75:b3:f4:fc:28: ad:9a:4f:a2:6c:a6:19:81:1f:79:85:98:c3:d2:41:1e:3a:d5: 81:f8:3e:f3:23:9d:76:d0:cb:92:8f:63:66:40:24:6e:f6:18: 66:26:2d:be:98:f1:33:ac:3e:a2:5c:f4:98:db:ce:9c:d6:8b: f9:49:cb:e5:2e:c2:f9:37:87:8e:c8:d9:e1:d5:ac:d0:f4:5f: f9:26:87:3c:8e:3e:cc:66:5e:ea:c7:a2:67:ef:c7:7f:5d:ad: 57:b7:5b:ce:6d:b7:c4:b7:4e:a8:c9:3a:e8:3b:d5:31:fb:74: 4b:3a:11:2c:fc:64:62:00:82:38:32:21:47:cc:2c:43:71:76: c1:53:f8:b4:99:1e:9a:47:f4:99:31:c0:99:19:20:7d:31:2a: cd:42:b6:94:28:f6:22:ba:cb:5d:1a:ca:43:a3:51:ed:4a:2f: df:72:db:6d:6b:03:6f:26:ad:ba:d7:d9:28:28:19:e9:f1:91: b2:79:32:30:60:5a:cb:96:c0:ca:0c:20:85:9c:c5:85:41:1d: a6:5a:81:51:f6:ff:a2:05:ff:0d:46:18:43:f3:cb:7e:47:26: b3:01:f8:ab:60:d3:3d:ed:20:53:c2:91:05:ff:6c:43:7c:a9: d7:fa:c2:01 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pScny6AYgGVyALjiGPlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzRiNzEzOTUxNDQ3YmE0NjBhMWZjOWUwZDRiZjQxNzgzMmU0MzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwLJJdbAMdTnmnfSCKigeexdWFD OpDq7wGhpgsomDPahtVbtTj+PT/OqTb8gQk3p3hVOOyE+YVcFacvtztpX/DxOGTh 3PlbiuRyIr7ylPJp+z3pa8K0D5WGw3tq2T4IsYBg7G4HTCV/ycHh3JISKfu6J65j kY2ym7E5N/MSIkZzkM1cvqsZf9C0NUPUdU1yi+GY3dGDNCkG2EbOEgbl28KzWxyU jaNoi34PfRxQO/9R8mS05si8jeJPIskucaR0E/Thi1pRO2UgtARMGCow8k2r0/4I ugTVVF7O49nbgJH+Otxb2BPllIb+Ah+HRpgPWEThn3+wNArJ6ILArZzpDwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGxLcTlRRHukYKH8ng1L9BeDLkMIMB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvYkV0eE9WRkVlNlJnb2Z5ZURVdjBGNE11UXdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJdAwAwQD Xa4gAwQC1ehQMA0EAgACMAcDBQMqB15AMA0GCSqGSIb3DQEBCwUAA4IBAQB5anPO O/OePXSGmM9UdbP0/Citmk+ibKYZgR95hZjD0kEeOtWB+D7zI5120MuSj2NmQCRu 9hhmJi2+mPEzrD6iXPSY286c1ov5ScvlLsL5N4eOyNnh1azQ9F/5Joc8jj7MZl7q x6Jn78d/Xa1Xt1vObbfEt06oyTroO9Ux+3RLOhEs/GRiAII4MiFHzCxDcXbBU/i0 mR6aR/SZMcCZGSB9MSrNQraUKPYiustdGspDo1HtSi/fctttawNvJq2619koKBnp 8ZGyeTIwYFrLlsDKDCCFnMWFQR2mWoFR9v+iBf8NRhhD88t+RyazAfirYNM97SBT wpEF/2xDfKnX+sIB -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:22 2026 by rpki-client