This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/c41PHXrEKruszXNLFEI1zYmbfro.roa File: c41PHXrEKruszXNLFEI1zYmbfro.roa (raw, json) Hash identifier: 5pkY88oxOJ99H5C+AS8KfYWXy9tqZhIeZmCmtuqMkt0= Subject key identifier: 73:8D:4F:1D:7A:C4:2A:BB:AC:CD:73:4B:14:42:35:CD:89:9B:7E:BA Certificate issuer: /CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed Certificate serial: 019C0E34F1AA7DCD38C76B42B6ED2D991637 Authority key identifier: 2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/c41PHXrEKruszXNLFEI1zYmbfro.roa Signing time: Fri 30 Jan 2026 09:21:16 +0000 ROA not before: Fri 30 Jan 2026 09:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47588 IP address blocks: 94.100.48.0/24 maxlen: 24 94.100.49.0/24 maxlen: 24 94.100.50.0/24 maxlen: 24 94.100.51.0/24 maxlen: 24 94.100.52.0/24 maxlen: 24 94.100.53.0/24 maxlen: 24 94.100.54.0/24 maxlen: 24 94.100.55.0/24 maxlen: 24 94.100.56.0/24 maxlen: 24 94.100.57.0/24 maxlen: 24 94.100.58.0/24 maxlen: 24 94.100.59.0/24 maxlen: 24 94.100.60.0/24 maxlen: 24 94.100.61.0/24 maxlen: 24 94.100.62.0/24 maxlen: 24 94.100.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:34:f1:aa:7d:cd:38:c7:6b:42:b6:ed:2d:99:16:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed Validity Not Before: Jan 30 09:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=738d4f1d7ac42abbaccd734b144235cd899b7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:bb:04:63:66:3c:4e:fd:bc:21:a6:7e:50: 52:f6:0e:13:48:89:82:f1:72:22:46:c0:c1:da:c9: 0c:65:ae:b4:c5:fa:66:e6:cd:0f:30:05:f2:b6:34: f3:ec:69:64:f2:bb:a8:14:0b:3e:6c:f9:e3:c0:a2: 8b:11:be:73:e1:15:c6:07:0a:1f:2a:9c:47:4b:33: b1:da:c5:86:6a:a6:9a:56:d3:71:24:3d:b2:5e:cb: 42:84:ab:34:0f:ba:aa:64:24:4e:45:ed:8e:f0:3d: 0b:82:bc:6b:28:a7:d6:e5:b1:7b:47:b0:33:b1:06: fe:45:7c:11:09:17:04:d2:cc:a7:6b:15:50:10:c4: 67:12:e9:bc:69:ec:80:e4:3b:fd:78:73:19:89:83: e0:59:4d:f8:b9:90:25:39:81:07:bc:22:9a:cf:57: 56:f2:bd:c2:98:18:ef:b8:8c:fd:78:48:23:33:5a: 5d:64:cd:26:b3:90:8e:1f:9d:74:ea:18:31:22:d3: 4a:c1:e5:3e:be:14:d3:7c:77:3b:84:bc:d7:6c:c5: 4e:bf:29:d9:c0:43:c4:61:79:d8:37:f4:25:95:51: 51:d8:49:8a:ba:ed:20:22:6f:ca:d4:b4:93:55:3e: 23:fe:cf:5d:53:28:80:33:47:ce:10:ec:a9:53:8e: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:4F:1D:7A:C4:2A:BB:AC:CD:73:4B:14:42:35:CD:89:9B:7E:BA X509v3 Authority Key Identifier: keyid:2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/c41PHXrEKruszXNLFEI1zYmbfro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.100.48.0/20 Signature Algorithm: sha256WithRSAEncryption 38:5c:bc:24:ab:27:a8:8c:94:0c:09:cb:e0:72:54:03:f7:a1: 55:1b:21:90:1b:c5:24:51:71:d8:0e:38:f0:5f:2e:43:09:4e: 59:1a:67:d6:58:f9:96:4b:35:23:c9:54:3b:f3:53:93:f9:7b: 27:af:77:3b:48:5c:8d:3c:70:41:cc:fd:a5:25:15:e8:61:06: bb:7c:69:f0:a1:09:7d:66:ac:37:be:d8:94:99:37:aa:ff:10: 0d:c3:b0:bd:e9:68:d4:75:05:23:66:68:ff:5a:e1:5f:55:c6: f1:54:53:7a:87:11:d8:22:c8:40:c9:96:cb:35:b7:6b:70:e4: 63:06:c4:13:ea:3f:b8:31:87:64:e5:25:64:0e:a4:5c:62:e0: dc:ff:41:0d:64:6d:c3:a5:80:64:5f:40:6e:a7:68:3e:96:08: ed:ee:ef:37:9e:1a:68:f0:56:92:f9:0e:6b:1b:0c:f8:8e:7e: db:92:62:4a:7d:51:81:ec:75:ac:39:f7:f9:c4:aa:e1:97:08: 0a:47:32:83:ca:8f:72:2d:ca:10:9c:77:a8:97:ca:08:fe:2a: 27:e3:e6:56:3c:32:13:62:bb:a9:ad:0e:6c:7a:7a:09:b8:25: 0f:a1:fc:0a:73:36:16:16:26:ec:b1:33:47:f2:cf:0b:f9:11: cf:68:81:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwONPGqfc04x2tCtu0tmRY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODE5NTE1ZjM5OWViNDJjODAzMWYzYmVhNGE5OGM4ZTI4 OWUxZWQwHhcNMjYwMTMwMDkyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzhkNGYxZDdhYzQyYWJiYWNjZDczNGIxNDQyMzVjZDg5OWI3ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxW7BGNmPE79vCGmflBS9g4TSImC 8XIiRsDB2skMZa60xfpm5s0PMAXytjTz7Glk8ruoFAs+bPnjwKKLEb5z4RXGBwof KpxHSzOx2sWGaqaaVtNxJD2yXstChKs0D7qqZCRORe2O8D0LgrxrKKfW5bF7R7Az sQb+RXwRCRcE0synaxVQEMRnEum8aeyA5Dv9eHMZiYPgWU34uZAlOYEHvCKaz1dW 8r3CmBjvuIz9eEgjM1pdZM0ms5COH5106hgxItNKweU+vhTTfHc7hLzXbMVOvynZ wEPEYXnYN/QllVFR2EmKuu0gIm/K1LSTVT4j/s9dUyiAM0fOEOypU452BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHONTx16xCq7rM1zSxRCNc2Jm366MB8GA1UdIwQY MBaAFCuBlRXzmetCyAMfO+pKmMjiieHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRHVkZmT1o2MExJQXg4NzZrcVl5T0tKNGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MWY3ZGMtMDBmMi00ZDMxLWE3NTct MDcxNmRlYzczMWFiLzEvYzQxUEhYckVLcnVzelhOTEZFSTF6WW1iZnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82MWY3ZGMtMDBmMi00ZDMxLWE3NTctMDcxNmRlYzczMWFi LzEvSzRHVkZmT1o2MExJQXg4NzZrcVl5T0tKNGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXmQwMA0G CSqGSIb3DQEBCwUAA4IBAQA4XLwkqyeojJQMCcvgclQD96FVGyGQG8UkUXHYDjjw Xy5DCU5ZGmfWWPmWSzUjyVQ781OT+Xsnr3c7SFyNPHBBzP2lJRXoYQa7fGnwoQl9 Zqw3vtiUmTeq/xANw7C96WjUdQUjZmj/WuFfVcbxVFN6hxHYIshAyZbLNbdrcORj BsQT6j+4MYdk5SVkDqRcYuDc/0ENZG3DpYBkX0Bup2g+lgjt7u83nhpo8FaS+Q5r Gwz4jn7bkmJKfVGB7HWsOff5xKrhlwgKRzKDyo9yLcoQnHeol8oI/ion4+ZWPDIT YruprQ5senoJuCUPofwKczYWFibssTNH8s8L+RHPaIE2 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:42 2026 by rpki-client