This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/4zn72bRe20a9LWBauf9Jwg2zBPE.roa File: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (raw, json) Hash identifier: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw= Subject key identifier: E3:39:FB:D9:B4:5E:DB:46:BD:2D:60:5A:B9:FF:49:C2:0D:B3:04:F1 Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c Certificate serial: 019B7DCB48501D0E225189F4ECC77BBEADFF Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/4zn72bRe20a9LWBauf9Jwg2zBPE.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.68.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:48:50:1d:0e:22:51:89:f4:ec:c7:7b:be:ad:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e339fbd9b45edb46bd2d605ab9ff49c20db304f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:c2:4c:76:01:4d:9d:ea:ba:2d:79:a9:f1: 5f:90:f7:85:8e:ae:af:e5:49:10:7a:92:81:e8:5a: bf:0b:0b:30:0a:33:9f:c2:4c:92:a2:d8:f9:c3:ec: 6f:a7:81:38:a2:02:5a:55:d4:3a:1a:3d:14:25:cc: 17:05:13:d8:d6:3a:22:94:ee:b9:e0:f7:32:66:05: 13:41:0f:e7:40:9a:26:40:46:aa:4e:2b:29:e9:e6: 80:c7:f4:a7:6c:b0:c4:34:09:c6:66:c4:85:de:af: 4f:25:bc:cd:85:a0:b4:c4:9c:d2:fe:d2:bf:17:e9: 2b:32:34:c5:ba:ab:b7:79:1e:9f:cd:1d:33:91:19: 02:db:c1:da:4c:21:a5:4a:cb:33:b8:27:03:49:b7: 26:94:38:9e:18:5c:e7:59:ea:9a:6e:21:93:e9:97: 09:20:92:72:28:28:07:1d:02:63:2c:62:41:11:24: af:65:3c:d1:dd:50:53:3c:8b:0e:68:89:78:a0:a8: e7:3a:06:b0:8a:bc:12:21:bd:39:b7:ac:41:43:2a: 53:77:33:c6:a2:ab:19:de:c9:76:9c:41:b0:81:4a: ed:d5:e2:71:c3:9c:e0:6e:ca:69:78:af:92:e1:fe: 3c:7f:04:ba:29:0e:36:6f:f8:65:9e:06:5f:8a:c0: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:FB:D9:B4:5E:DB:46:BD:2D:60:5A:B9:FF:49:C2:0D:B3:04:F1 X509v3 Authority Key Identifier: keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/4zn72bRe20a9LWBauf9Jwg2zBPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.68.216.0/24 Signature Algorithm: sha256WithRSAEncryption b3:e4:75:c2:46:0c:66:67:62:fe:02:b1:d1:34:ab:30:6d:4b: bb:a9:82:46:3a:21:e5:9c:09:60:76:ba:ff:87:29:ef:60:3a: 18:fc:40:b5:aa:ec:2f:8b:1a:0a:37:9c:18:f3:15:b9:4b:08: 3e:d8:09:c3:f4:9e:8d:91:fb:2c:86:b7:2e:77:cb:49:06:91: f9:17:db:a1:13:59:06:f4:20:01:30:3b:5d:34:16:98:cc:e3: 5f:c3:15:fa:4e:94:e9:af:9f:5a:00:e0:a1:f8:b2:c0:f0:58: 46:e0:37:a3:c3:52:2d:65:f5:aa:dc:1c:83:54:bc:d6:85:19: 93:e2:ec:59:03:05:0c:04:a2:c2:13:6a:ee:c9:53:ea:e5:1c: 4a:31:92:62:c9:59:08:34:47:12:91:b9:bd:80:d5:af:28:0e: 7e:dc:35:c6:e5:89:bf:a6:ca:a9:5d:1a:b8:18:2d:99:53:e2: 53:42:78:0c:8f:fe:82:6c:48:af:6e:6b:9e:fb:ad:62:5e:b4: ae:0e:cf:e4:17:5d:00:3c:d8:53:ee:3c:1a:cd:47:57:ea:5a: e6:90:01:3e:f9:4d:8e:4e:36:c9:04:25:00:f7:00:2f:24:c6: 39:75:14:04:ce:c0:b1:fe:33:f5:b7:18:87:cc:7b:6a:d6:93: 37:ec:07:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0hQHQ4iUYn07Md7vq3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTJiMzQxN2MzOWMwZmUzYmJiYmM0ZDUyM2VkNDM3YjI5 YzVhMWMwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzM5ZmJkOWI0NWVkYjQ2YmQyZDYwNWFiOWZmNDljMjBkYjMwNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOPCTHYBTZ3qui15qfFfkPeFjq6v 5UkQepKB6Fq/CwswCjOfwkySotj5w+xvp4E4ogJaVdQ6Gj0UJcwXBRPY1joilO65 4PcyZgUTQQ/nQJomQEaqTisp6eaAx/SnbLDENAnGZsSF3q9PJbzNhaC0xJzS/tK/ F+krMjTFuqu3eR6fzR0zkRkC28HaTCGlSsszuCcDSbcmlDieGFznWeqabiGT6ZcJ IJJyKCgHHQJjLGJBESSvZTzR3VBTPIsOaIl4oKjnOgawirwSIb05t6xBQypTdzPG oqsZ3sl2nEGwgUrt1eJxw5zgbsppeK+S4f48fwS6KQ42b/hlngZfisB9vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOM5+9m0XttGvS1gWrn/ScINswTxMB8GA1UdIwQY MBaAFHDis0F8OcD+O7u8TVI+1DeynFocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYt ZGMzYjYzMmU5ZTJiLzEvNHpuNzJiUmUyMGE5TFdCYXVmOUp3ZzJ6QlBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYtZGMzYjYzMmU5ZTJi LzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwETYMA0G CSqGSIb3DQEBCwUAA4IBAQCz5HXCRgxmZ2L+ArHRNKswbUu7qYJGOiHlnAlgdrr/ hynvYDoY/EC1quwvixoKN5wY8xW5Swg+2AnD9J6Nkfsshrcud8tJBpH5F9uhE1kG 9CABMDtdNBaYzONfwxX6TpTpr59aAOCh+LLA8FhG4Dejw1ItZfWq3ByDVLzWhRmT 4uxZAwUMBKLCE2ruyVPq5RxKMZJiyVkINEcSkbm9gNWvKA5+3DXG5Ym/psqpXRq4 GC2ZU+JTQngMj/6CbEivbmue+61iXrSuDs/kF10APNhT7jwazUdX6lrmkAE++U2O TjbJBCUA9wAvJMY5dRQEzsCx/jP1txiHzHtq1pM37AcM -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:57 2026 by rpki-client