This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/4EDArNOkG9t_0drf9CtWRkAhPjQ.roa File: 4EDArNOkG9t_0drf9CtWRkAhPjQ.roa (raw, json) Hash identifier: phvxGgDMB6MgrvAkeQunZHUKlxxS4J2n/S+31+NbGrQ= Subject key identifier: E0:40:C0:AC:D3:A4:1B:DB:7F:D1:DA:DF:F4:2B:56:46:40:21:3E:34 Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf Certificate serial: 019B7758EA288DD61D629A61A3089C6F7261 Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/4EDArNOkG9t_0drf9CtWRkAhPjQ.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42723 IP address blocks: 91.193.80.0/22 maxlen: 22 194.28.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ea:28:8d:d6:1d:62:9a:61:a3:08:9c:6f:72:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e040c0acd3a41bdb7fd1dadff42b564640213e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8b:7c:56:45:14:28:f7:a0:00:61:b1:17:65: ba:c5:bb:9c:4d:26:c6:f9:f1:c0:8b:69:46:43:00: 50:f5:b7:47:98:83:0d:a0:45:34:6a:6f:dc:92:8f: 81:59:26:df:5e:1b:9e:d4:3d:8d:55:e5:40:4f:b7: 4c:63:01:12:99:5f:25:36:78:9b:93:6d:d3:3b:7b: 40:b7:9a:ee:c5:df:e1:74:1c:54:8d:5b:6b:8e:f8: c2:05:5e:5b:fd:26:2d:25:1b:f1:74:64:a9:74:af: 0f:34:76:4f:4a:63:30:90:66:49:d1:98:26:34:58: d1:c9:4b:f9:7d:c2:d2:19:44:87:fc:2d:b5:8d:ff: a4:6c:87:7d:dc:e8:95:bb:0e:3b:2c:99:58:c3:33: 20:e7:ed:3a:dd:96:7e:e6:70:a9:e0:88:81:2f:f2: 77:6c:fe:cc:08:88:df:3c:30:62:2b:aa:25:ab:8e: 2f:a6:b6:30:6b:cc:0f:96:b6:7b:17:cb:22:c4:a4: a4:6e:8b:ec:34:7c:74:4b:e3:61:e2:92:19:87:08: 6d:8f:d9:5e:82:50:2c:81:e0:59:ef:0c:dd:e1:d4: 0d:cc:8e:52:a6:ce:20:ae:d0:2e:3d:d5:82:7f:5e: 16:e9:6f:7b:ad:78:c3:66:f4:2f:bc:b9:98:04:ed: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:40:C0:AC:D3:A4:1B:DB:7F:D1:DA:DF:F4:2B:56:46:40:21:3E:34 X509v3 Authority Key Identifier: keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/4EDArNOkG9t_0drf9CtWRkAhPjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.80.0/22 194.28.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:84:51:ba:d8:e6:b1:ad:0a:94:1f:88:74:df:b2:ec:43:5c: aa:69:ff:f2:eb:67:2c:8c:50:ea:be:d3:ff:8c:fb:87:3e:47: e1:db:38:4f:73:35:fc:de:62:91:9d:40:6f:db:67:9f:c1:2d: cc:c9:f9:e4:1a:cc:c6:77:65:64:e1:bc:c8:af:19:fb:6e:d1: 59:3b:ad:e4:8c:17:6c:07:fe:b6:7e:98:18:16:af:f7:58:fa: da:24:90:f0:cd:14:ba:90:3c:57:d6:6d:70:39:f8:bc:03:69: 2e:60:2c:3e:82:6c:31:17:59:4f:3b:4b:4e:f9:43:71:9b:dc: 38:ea:17:01:6a:90:82:10:1a:c8:00:6d:d9:87:da:bd:28:94: 50:ec:56:d1:e7:fc:cf:d6:dd:fb:ff:b0:40:64:62:0d:3e:51: 94:7c:bd:fc:b3:92:5e:14:26:8e:b3:75:cd:4e:05:c2:5d:ed: 33:89:c6:2f:a2:a2:4b:4f:69:ba:73:3a:14:c9:f3:f9:83:6d: be:d2:b9:47:d2:cc:c0:9d:6a:9f:8e:6f:17:03:7e:33:a6:1b: ed:81:a9:e2:12:14:cb:2a:aa:f5:54:01:28:21:2c:fb:e6:3f: 44:b5:1c:15:c2:5f:79:88:4d:81:2c:56:ea:2a:7f:92:8f:8c: 75:92:1a:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WOoojdYdYpphowicb3JhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1OGZmNzM5MjVhMjM2OTI4NDdlZDkyYmM2NjYxM2ZkNDcw NjhkY2YwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDQwYzBhY2QzYTQxYmRiN2ZkMWRhZGZmNDJiNTY0NjQwMjEzZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ot8VkUUKPegAGGxF2W6xbucTSbG +fHAi2lGQwBQ9bdHmIMNoEU0am/cko+BWSbfXhue1D2NVeVAT7dMYwESmV8lNnib k23TO3tAt5ruxd/hdBxUjVtrjvjCBV5b/SYtJRvxdGSpdK8PNHZPSmMwkGZJ0Zgm NFjRyUv5fcLSGUSH/C21jf+kbId93OiVuw47LJlYwzMg5+063ZZ+5nCp4IiBL/J3 bP7MCIjfPDBiK6olq44vprYwa8wPlrZ7F8sixKSkbovsNHx0S+Nh4pIZhwhtj9le glAsgeBZ7wzd4dQNzI5Sps4grtAuPdWCf14W6W97rXjDZvQvvLmYBO2BgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOBAwKzTpBvbf9Ha3/QrVkZAIT40MB8GA1UdIwQY MBaAFOWP9zklojaShH7ZK8ZmE/1HBo3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUt N2I0N2I1YmE2YWVkLzEvNEVEQXJOT2tHOXRfMGRyZjlDdFdSa0FoUGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUtN2I0N2I1YmE2YWVk LzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8FQAwQC whxAMA0GCSqGSIb3DQEBCwUAA4IBAQCNhFG62OaxrQqUH4h037LsQ1yqaf/y62cs jFDqvtP/jPuHPkfh2zhPczX83mKRnUBv22efwS3MyfnkGszGd2Vk4bzIrxn7btFZ O63kjBdsB/62fpgYFq/3WPraJJDwzRS6kDxX1m1wOfi8A2kuYCw+gmwxF1lPO0tO +UNxm9w46hcBapCCEBrIAG3Zh9q9KJRQ7FbR5/zP1t37/7BAZGINPlGUfL38s5Je FCaOs3XNTgXCXe0zicYvoqJLT2m6czoUyfP5g22+0rlH0szAnWqfjm8XA34zphvt ganiEhTLKqr1VAEoISz75j9EtRwVwl95iE2BLFbqKn+Sj4x1khqC -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:48 2026 by rpki-client