This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/4L_3KrprYTwmc6F0VK5YpQh7-ng.roa File: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (raw, json) Hash identifier: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU= Subject key identifier: E0:BF:F7:2A:BA:6B:61:3C:26:73:A1:74:54:AE:58:A5:08:7B:FA:78 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 019B7B35AD9F77555C05DA0A211E1AA6B211 Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/4L_3KrprYTwmc6F0VK5YpQh7-ng.roa Signing time: Thu 01 Jan 2026 20:17:54 +0000 ROA not before: Thu 01 Jan 2026 20:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34305 IP address blocks: 81.171.75.0/24 maxlen: 24 2001:4de0:2101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ad:9f:77:55:5c:05:da:0a:21:1e:1a:a6:b2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0bff72aba6b613c2673a17454ae58a5087bfa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:e0:14:cb:35:b8:bc:7d:c6:7e:fe:b9:16: 5a:12:cf:7e:35:0e:ce:4d:8b:6c:e8:c7:56:9b:bc: 7f:e9:8a:5f:f8:b8:1b:a4:9d:f5:9b:cb:bb:ff:5c: 74:fc:11:3a:80:77:ed:10:86:78:aa:e9:55:a5:a0: 16:f1:6a:96:36:2b:78:c0:df:38:c3:27:0a:57:30: 13:74:94:12:43:48:6d:cb:87:41:0f:c4:f0:60:5f: d3:9d:8a:77:c5:79:19:73:04:29:58:96:9e:1a:65: dc:ab:6e:66:08:9f:20:8f:f1:6b:db:de:6f:e8:80: 3b:6d:c9:2b:b1:b3:25:a2:40:ba:7b:72:a0:08:3d: 56:0e:93:30:f3:f2:71:82:29:27:07:b4:58:79:0a: 56:19:b8:81:41:82:46:e4:18:60:c8:c1:fc:47:73: 88:2c:2c:1d:e4:f1:88:1b:d6:3d:6e:d4:b9:be:fd: 96:0e:1f:17:9a:12:50:29:52:d8:19:a3:58:50:1a: 12:ad:ed:98:30:98:5d:68:1c:5d:16:93:eb:be:e7: d1:89:39:65:85:78:00:f3:f5:80:26:b6:c1:16:d2: 4d:6c:92:7d:97:92:4d:1c:df:03:18:64:f1:b3:9f: fe:ee:22:d3:6c:a6:98:2a:ed:00:ec:a5:e9:2a:e1: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BF:F7:2A:BA:6B:61:3C:26:73:A1:74:54:AE:58:A5:08:7B:FA:78 X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/4L_3KrprYTwmc6F0VK5YpQh7-ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.171.75.0/24 IPv6: 2001:4de0:2101::/48 Signature Algorithm: sha256WithRSAEncryption 02:d9:7f:19:22:c5:d6:60:53:76:bc:a7:1b:0a:96:86:57:1f: e2:e5:65:21:64:33:42:0e:89:08:1c:0a:84:1d:1e:a7:f4:3d: 4b:6f:74:d8:8c:5a:06:dc:04:76:3b:08:d9:fd:e7:31:b4:32: 1e:32:71:a9:d3:5d:df:38:b5:e4:bd:5c:e0:ca:fe:c3:9a:da: 2e:69:12:ce:f9:ad:45:2c:f0:18:a7:d2:9d:88:1e:20:3b:e6: 4c:a7:3d:c8:ac:0a:5f:fa:9d:ee:3d:57:c7:15:5e:f0:4c:c7: a2:e1:f1:c9:1e:f8:96:3b:cb:da:be:af:93:fd:a1:64:6c:df: 70:d6:a1:f6:72:6c:aa:0d:57:cf:70:af:a1:1e:d8:af:94:94: 50:c3:a7:91:0e:81:ba:bd:8c:ba:3a:2c:c6:a5:b2:2b:c5:87: 46:c3:12:e9:e4:d7:46:3d:12:24:45:b1:5f:79:af:79:99:d0: 71:6c:5a:82:0a:06:9a:a4:26:3b:6f:ba:16:a2:ef:65:1c:7a: 07:5b:72:e2:cc:4c:a6:2e:d7:67:c5:f4:11:fa:f6:5a:66:16: fa:ee:12:8c:8e:84:cc:a3:03:a0:fe:66:a5:a6:1f:d0:26:1b: 0e:f9:ec:56:d6:f5:84:6a:9f:41:04:6e:b4:c1:0b:58:8c:81: 45:51:4c:1b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Na2fd1VcBdoKIR4aprIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGJmZjcyYWJhNmI2MTNjMjY3M2ExNzQ1NGFlNThhNTA4N2JmYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41XgFMs1uLx9xn7+uRZaEs9+NQ7O TYts6MdWm7x/6Ypf+LgbpJ31m8u7/1x0/BE6gHftEIZ4qulVpaAW8WqWNit4wN84 wycKVzATdJQSQ0hty4dBD8TwYF/TnYp3xXkZcwQpWJaeGmXcq25mCJ8gj/Fr295v 6IA7bckrsbMlokC6e3KgCD1WDpMw8/JxgiknB7RYeQpWGbiBQYJG5BhgyMH8R3OI LCwd5PGIG9Y9btS5vv2WDh8XmhJQKVLYGaNYUBoSre2YMJhdaBxdFpPrvufRiTll hXgA8/WAJrbBFtJNbJJ9l5JNHN8DGGTxs5/+7iLTbKaYKu0A7KXpKuGQBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOC/9yq6a2E8JnOhdFSuWKUIe/p4MB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvNExfM0tycHJZVHdtYzZGMFZLNVlwUWg3LW5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUatLMA8E AgACMAkDBwAgAU3gIQEwDQYJKoZIhvcNAQELBQADggEBAALZfxkixdZgU3a8pxsK loZXH+LlZSFkM0IOiQgcCoQdHqf0PUtvdNiMWgbcBHY7CNn95zG0Mh4ycanTXd84 teS9XODK/sOa2i5pEs75rUUs8Bin0p2IHiA75kynPcisCl/6ne49V8cVXvBMx6Lh 8cke+JY7y9q+r5P9oWRs33DWofZybKoNV89wr6Ee2K+UlFDDp5EOgbq9jLo6LMal sivFh0bDEunk10Y9EiRFsV95r3mZ0HFsWoIKBpqkJjtvuhai72UcegdbcuLMTKYu 12fF9BH69lpmFvruEoyOhMyjA6D+ZqWmH9AmGw757FbW9YRqn0EEbrTBC1iMgUVR TBs= -----END CERTIFICATE-----Generated at Sun Jan 11 22:26:34 2026 by rpki-client