This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/4TurvPB_ohFcEmoz-eVrTSXPuRI.roa File: 4TurvPB_ohFcEmoz-eVrTSXPuRI.roa (raw, json) Hash identifier: gkcJydL0EzTSV6KSKCn0sG/zjtNhD9jooKJCUpapYy8= Subject key identifier: E1:3B:AB:BC:F0:7F:A2:11:5C:12:6A:33:F9:E5:6B:4D:25:CF:B9:12 Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Certificate serial: 019B797F4AD863DF0D266E6965DBD063E123 Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/4TurvPB_ohFcEmoz-eVrTSXPuRI.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209733 IP address blocks: 31.24.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4a:d8:63:df:0d:26:6e:69:65:db:d0:63:e1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e13babbcf07fa2115c126a33f9e56b4d25cfb912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:55:38:8a:54:d3:52:52:84:4e:4b:3f:2a: 19:f6:7d:a3:b3:bd:44:4a:f0:bb:5e:ea:dc:45:c7: b5:d7:ae:73:c3:ff:49:11:5b:26:db:95:07:bf:f3: 3a:76:4e:1c:4f:3b:d5:e6:60:f8:0c:56:38:fc:d8: 15:a9:07:61:a3:43:a1:94:d9:95:b3:29:85:ca:7a: 34:73:a7:69:6b:f5:cd:96:97:29:00:75:45:1a:73: bc:0b:8b:5e:79:af:b0:01:15:5f:3b:1f:19:21:16: 45:fd:d5:77:8b:97:d9:18:bc:96:2e:e3:7e:77:29: a0:b3:97:ce:df:69:a6:73:98:cd:c9:69:30:7c:56: c4:3c:cb:ca:17:c6:8e:6b:72:02:35:0e:d1:5b:0a: a1:f4:96:b1:07:a7:e7:fa:a8:45:bd:67:68:a3:1d: fe:3d:fd:df:e1:f8:3a:82:33:d6:7c:30:89:08:14: b2:f2:2e:13:bb:50:63:06:e3:44:70:79:4a:62:9c: e6:4b:f6:06:30:46:85:33:77:5d:6f:ad:b3:1a:8d: 42:b1:b9:3a:7f:d1:85:a0:20:aa:8f:17:80:2d:11: da:b8:26:55:2d:9d:d3:00:d2:3e:a5:ef:a1:52:ab: fc:cd:db:5e:71:20:5d:c8:60:8f:ec:c2:64:e7:90: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:AB:BC:F0:7F:A2:11:5C:12:6A:33:F9:E5:6B:4D:25:CF:B9:12 X509v3 Authority Key Identifier: keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/4TurvPB_ohFcEmoz-eVrTSXPuRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.252.0/24 Signature Algorithm: sha256WithRSAEncryption a4:83:67:97:1e:8d:d7:63:f9:e2:12:3b:bf:61:68:9b:33:31: 49:8c:6c:13:52:fc:1f:4d:82:22:29:b0:8f:a8:85:77:ba:aa: 8f:1d:89:2b:ba:69:f2:a0:44:24:fe:af:08:0f:2a:92:ce:3d: 73:48:f2:85:63:02:36:a9:8f:41:f1:a3:98:41:c3:9b:59:23: 0d:50:69:47:9e:3f:44:40:7c:d4:4a:75:cd:9d:8f:61:d7:ea: fe:79:27:37:fb:74:c8:a0:41:8b:37:90:9c:77:ce:58:56:b2: 11:13:d3:90:bf:5f:ed:06:b5:9b:ba:2f:4d:17:fd:bb:e0:f0: 4d:56:c1:b5:82:0f:ce:be:62:17:0c:79:6d:33:46:7e:5a:af: 33:6d:60:70:82:a9:98:49:2f:d5:81:4f:fa:3f:d2:5c:c2:fe: 90:ea:d4:f5:18:55:90:e6:64:88:91:b2:12:a6:95:fa:62:09: 28:d8:ff:87:e8:06:88:ad:c3:22:80:1a:d2:8b:4b:2f:0d:76: 2d:de:3d:74:37:02:3d:7a:d0:b1:d2:b3:de:da:7c:c3:dc:37: fd:59:40:88:fb:f0:e7:32:88:f8:43:9d:7e:9b:d8:23:0f:87: 7b:52:ee:60:31:83:8f:ca:e5:45:f3:88:ef:fd:12:64:03:68: 69:89:9a:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0rYY98NJm5pZdvQY+EjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl ZTJjZmYwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTNiYWJiY2YwN2ZhMjExNWMxMjZhMzNmOWU1NmI0ZDI1Y2ZiOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszVVOIpU01JShE5LPyoZ9n2js71E SvC7XurcRce1165zw/9JEVsm25UHv/M6dk4cTzvV5mD4DFY4/NgVqQdho0OhlNmV symFyno0c6dpa/XNlpcpAHVFGnO8C4teea+wARVfOx8ZIRZF/dV3i5fZGLyWLuN+ dymgs5fO32mmc5jNyWkwfFbEPMvKF8aOa3ICNQ7RWwqh9JaxB6fn+qhFvWdoox3+ Pf3f4fg6gjPWfDCJCBSy8i4Tu1BjBuNEcHlKYpzmS/YGMEaFM3ddb62zGo1Csbk6 f9GFoCCqjxeALRHauCZVLZ3TANI+pe+hUqv8zdtecSBdyGCP7MJk55BjNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOE7q7zwf6IRXBJqM/nla00lz7kSMB8GA1UdIwQY MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt NGZlM2Y2MTExMGRlLzEvNFR1cnZQQl9vaEZjRW1vei1lVnJUU1hQdVJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxj8MA0G CSqGSIb3DQEBCwUAA4IBAQCkg2eXHo3XY/niEju/YWibMzFJjGwTUvwfTYIiKbCP qIV3uqqPHYkrumnyoEQk/q8IDyqSzj1zSPKFYwI2qY9B8aOYQcObWSMNUGlHnj9E QHzUSnXNnY9h1+r+eSc3+3TIoEGLN5Ccd85YVrIRE9OQv1/tBrWbui9NF/274PBN VsG1gg/OvmIXDHltM0Z+Wq8zbWBwgqmYSS/VgU/6P9Jcwv6Q6tT1GFWQ5mSIkbIS ppX6Ygko2P+H6AaIrcMigBrSi0svDXYt3j10NwI9etCx0rPe2nzD3Df9WUCI+/Dn Moj4Q51+m9gjD4d7Uu5gMYOPyuVF84jv/RJkA2hpiZr6 -----END CERTIFICATE-----Generated at Tue Jan 20 07:29:40 2026 by rpki-client