This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/4XcJfnMEQwRMn36H0whqZmqgRz0.roa File: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (raw, json) Hash identifier: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k= Subject key identifier: E1:77:09:7E:73:04:43:04:4C:9F:7E:87:D3:08:6A:66:6A:A0:47:3D Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Certificate serial: 019B77C6D2B7EDD94EBF117132FA31D494FC Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/4XcJfnMEQwRMn36H0whqZmqgRz0.roa Signing time: Thu 01 Jan 2026 04:17:57 +0000 ROA not before: Thu 01 Jan 2026 04:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 193.42.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d2:b7:ed:d9:4e:bf:11:71:32:fa:31:d4:94:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60 Validity Not Before: Jan 1 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e177097e730443044c9f7e87d3086a666aa0473d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:ab:97:4d:54:43:71:70:f6:fd:61:8a:38: 83:79:13:61:c0:46:02:47:4b:9c:0b:6f:5e:ee:0d: c9:61:34:37:a2:e9:31:19:fa:0a:86:3a:01:cb:ee: 46:1c:d7:39:95:18:82:fc:43:f1:d6:e0:39:02:86: a9:56:cd:14:cc:83:cc:9a:70:86:d1:a1:91:5e:1d: 4b:af:d7:cb:81:3d:46:c3:0b:86:51:45:1b:41:1f: b3:a8:e2:7c:da:df:d7:5b:26:2e:b4:49:ce:27:ba: cc:18:9c:ab:c1:52:fd:ca:72:17:97:12:e4:56:90: 7d:7e:16:97:e8:10:d8:c1:ea:bd:2a:3a:a8:d9:3e: 82:4f:2d:35:7f:f7:2b:f1:e5:74:1f:92:ac:a6:c7: 36:56:ad:0f:cc:e8:0c:21:93:31:97:38:39:bd:2c: 9b:57:fa:17:d2:0d:99:88:4c:f0:f4:21:db:05:0d: fb:58:ad:89:8c:ea:de:4d:b4:63:b0:7c:3c:bd:07: 3a:5b:cb:2d:29:e5:bb:4c:b3:b5:5a:fa:db:1f:4c: 58:d3:d0:cc:3a:dd:98:63:d1:44:70:f2:30:c0:53: 49:1c:26:0b:ad:c0:7f:5b:15:1f:9b:e2:8f:73:1e: eb:42:8c:5c:9f:ea:09:f1:80:29:26:72:be:5f:43: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:77:09:7E:73:04:43:04:4C:9F:7E:87:D3:08:6A:66:6A:A0:47:3D X509v3 Authority Key Identifier: keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/4XcJfnMEQwRMn36H0whqZmqgRz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.139.0/24 Signature Algorithm: sha256WithRSAEncryption 06:4c:c5:af:93:b5:54:d0:71:d1:8a:b3:30:5c:1a:54:a5:5a: 43:a7:ee:d7:ce:68:50:6c:20:1f:cd:03:cb:7c:c3:c6:30:c7: ac:c0:2a:06:6a:d9:5d:04:ba:ce:9c:5d:e6:d5:b0:34:d7:09: f6:6c:2b:e9:ff:84:f3:fb:d0:73:d6:5c:25:ff:17:79:8e:50: 7a:7e:9d:9d:d9:78:68:5b:42:04:6a:77:e9:67:3b:83:fd:b3: fb:4b:62:61:a9:5f:f1:62:7d:8c:8c:b2:c9:13:38:b3:5c:d6: 65:ce:61:a4:26:b7:5b:6a:74:df:ac:36:b8:57:28:c6:4b:39: 9b:d4:9c:2b:8b:23:6e:86:8e:41:95:5e:b5:5f:26:ac:71:f4: e2:91:c1:61:9f:bd:0d:29:b4:05:f3:d3:3a:04:af:23:cb:2b: 98:e3:ef:98:b1:ab:61:89:e4:b7:af:2d:e5:ba:64:b0:05:0e: ba:ec:1a:6f:27:98:f8:66:e3:a1:6e:fa:c9:df:37:99:e5:91: c1:61:d3:98:b2:c8:6d:0f:db:cf:23:de:49:e8:8b:d7:95:cb: 7e:be:d9:7c:8e:f0:3f:d9:ed:8d:52:d2:54:c4:d7:f2:0a:7a: fc:e8:7a:21:32:dd:18:d2:6e:0e:9a:59:f2:b6:07:54:c3:b0: 52:b3:e9:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtK37dlOvxFxMvox1JT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx ZTJiNjAwHhcNMjYwMTAxMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTc3MDk3ZTczMDQ0MzA0NGM5ZjdlODdkMzA4NmE2NjZhYTA0NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lirl01UQ3Fw9v1hijiDeRNhwEYC R0ucC29e7g3JYTQ3oukxGfoKhjoBy+5GHNc5lRiC/EPx1uA5AoapVs0UzIPMmnCG 0aGRXh1Lr9fLgT1GwwuGUUUbQR+zqOJ82t/XWyYutEnOJ7rMGJyrwVL9ynIXlxLk VpB9fhaX6BDYweq9Kjqo2T6CTy01f/cr8eV0H5Kspsc2Vq0PzOgMIZMxlzg5vSyb V/oX0g2ZiEzw9CHbBQ37WK2JjOreTbRjsHw8vQc6W8stKeW7TLO1WvrbH0xY09DM Ot2YY9FEcPIwwFNJHCYLrcB/WxUfm+KPcx7rQoxcn+oJ8YApJnK+X0NbnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOF3CX5zBEMETJ9+h9MIamZqoEc9MB8GA1UdIwQY MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt OTA1NDA3ZWIwZjUzLzEvNFhjSmZuTUVRd1JNbjM2SDB3aHFabXFnUnowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSqLMA0G CSqGSIb3DQEBCwUAA4IBAQAGTMWvk7VU0HHRirMwXBpUpVpDp+7XzmhQbCAfzQPL fMPGMMeswCoGatldBLrOnF3m1bA01wn2bCvp/4Tz+9Bz1lwl/xd5jlB6fp2d2Xho W0IEanfpZzuD/bP7S2JhqV/xYn2MjLLJEzizXNZlzmGkJrdbanTfrDa4VyjGSzmb 1JwriyNuho5BlV61XyascfTikcFhn70NKbQF89M6BK8jyyuY4++YsathieS3ry3l umSwBQ667BpvJ5j4ZuOhbvrJ3zeZ5ZHBYdOYsshtD9vPI95J6IvXlct+vtl8jvA/ 2e2NUtJUxNfyCnr86HohMt0Y0m4OmlnytgdUw7BSs+n4 -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:43 2026 by rpki-client