This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/t4a_vp8lFfYuPnrFd74HGQFrjpA.roa File: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (raw, json) Hash identifier: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ= Subject key identifier: B7:86:BF:BE:9F:25:15:F6:2E:3E:7A:C5:77:BE:07:19:01:6B:8E:90 Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Certificate serial: 019B7BA38D10C32FD346F3F55C369A33982B Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/t4a_vp8lFfYuPnrFd74HGQFrjpA.roa Signing time: Thu 01 Jan 2026 22:17:54 +0000 ROA not before: Thu 01 Jan 2026 22:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49206 IP address blocks: 185.41.48.0/24 maxlen: 24 185.41.49.0/24 maxlen: 24 185.41.50.0/24 maxlen: 24 185.41.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8d:10:c3:2f:d3:46:f3:f5:5c:36:9a:33:98:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b786bfbe9f2515f62e3e7ac577be0719016b8e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:83:2e:21:6f:76:a3:d6:df:84:c0:f9:c0: 9a:eb:85:ec:06:52:3e:fa:38:21:eb:ec:dc:58:cb: 1c:07:6f:3a:db:19:dd:03:2c:bc:1e:a3:3a:2d:f8: ee:7d:d2:03:9e:f8:12:8a:1b:08:86:55:b7:0d:19: 99:e4:4a:b9:59:bd:21:f3:f7:fd:2b:d7:7d:41:ea: 52:5f:fe:09:a1:30:b3:a3:bb:87:87:28:fa:cf:f1: b1:2b:01:ab:aa:e3:2b:9f:05:a1:01:47:41:00:4d: 0b:b7:d9:f7:02:45:28:dd:81:a7:17:83:7c:9d:2e: 18:5c:ea:1b:90:0d:4f:9d:48:51:b4:e6:94:a2:8f: f4:a8:24:2d:80:16:94:0c:25:31:19:54:ff:b1:78: df:77:b2:d1:57:19:78:28:9f:21:32:a8:50:36:29: d2:70:9e:62:64:98:16:35:51:88:56:90:02:2f:df: cc:42:11:f8:6e:77:27:b4:97:2b:d3:e5:82:44:c4: 50:1c:f9:55:39:51:79:52:5b:8f:88:fb:da:a5:8a: a9:69:c8:1e:cf:f6:e9:52:16:4a:80:d0:80:f4:9f: 1e:2c:1f:9f:11:b3:53:4e:6e:df:96:3e:36:c9:41: d6:0d:97:9d:76:74:4d:39:57:be:92:92:8f:bc:a6: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:86:BF:BE:9F:25:15:F6:2E:3E:7A:C5:77:BE:07:19:01:6B:8E:90 X509v3 Authority Key Identifier: keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/t4a_vp8lFfYuPnrFd74HGQFrjpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.48.0/22 Signature Algorithm: sha256WithRSAEncryption 90:9f:71:88:86:8b:1f:d0:c6:62:d0:17:12:93:4d:53:6b:ad: 5d:22:86:77:08:35:5a:1b:d7:15:25:74:c8:89:46:b1:c4:39: 29:2d:df:3a:3d:57:32:7e:dc:9d:19:1f:6a:80:d8:91:7c:25: 63:b3:e2:f7:b8:29:55:60:c0:c2:b5:3e:80:ab:5b:42:9e:ff: 70:95:f0:47:e2:16:34:c5:d4:ea:61:83:34:de:ca:a9:fd:e7: 50:dd:6e:3a:b0:89:da:e1:86:86:dc:75:94:de:48:48:8d:c7: a6:ae:9a:fb:ef:93:52:fc:2a:b3:6c:01:32:4a:35:dc:0b:e2: 66:82:6a:c3:92:c1:f0:61:dc:bd:cb:b9:d6:28:3b:79:06:4a: 80:49:2d:b6:01:a9:a5:2c:8c:37:c7:5b:a5:0e:72:b4:f9:fe: 74:59:40:62:de:3c:c7:7e:35:f6:7d:5d:bc:9b:3f:07:c5:00: 60:cb:f4:bf:05:5f:c3:60:6d:e0:a1:c8:01:f5:95:41:d9:2d: 58:1a:97:e8:7c:74:58:c5:91:4b:a1:8d:d3:80:12:b7:29:15: 13:2a:2e:d4:f6:47:84:df:ca:62:64:13:2a:be:5d:b7:67:25: e3:ec:eb:71:4a:1f:9f:45:b2:4a:82:d1:ce:46:94:47:37:5a: e0:a1:f7:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o40Qwy/TRvP1XDaaM5grMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli YzAxY2UwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzg2YmZiZTlmMjUxNWY2MmUzZTdhYzU3N2JlMDcxOTAxNmI4ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuuDLiFvdqPW34TA+cCa64XsBlI+ +jgh6+zcWMscB2862xndAyy8HqM6LfjufdIDnvgSihsIhlW3DRmZ5Eq5Wb0h8/f9 K9d9QepSX/4JoTCzo7uHhyj6z/GxKwGrquMrnwWhAUdBAE0Lt9n3AkUo3YGnF4N8 nS4YXOobkA1PnUhRtOaUoo/0qCQtgBaUDCUxGVT/sXjfd7LRVxl4KJ8hMqhQNinS cJ5iZJgWNVGIVpACL9/MQhH4bncntJcr0+WCRMRQHPlVOVF5UluPiPvapYqpacge z/bpUhZKgNCA9J8eLB+fEbNTTm7flj42yUHWDZeddnRNOVe+kpKPvKZPzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLeGv76fJRX2Lj56xXe+BxkBa46QMB8GA1UdIwQY MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt ZTVkZGQyYmI1MWM1LzEvdDRhX3ZwOGxGZll1UG5yRmQ3NEhHUUZyanBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1 LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSkwMA0G CSqGSIb3DQEBCwUAA4IBAQCQn3GIhosf0MZi0BcSk01Ta61dIoZ3CDVaG9cVJXTI iUaxxDkpLd86PVcyftydGR9qgNiRfCVjs+L3uClVYMDCtT6Aq1tCnv9wlfBH4hY0 xdTqYYM03sqp/edQ3W46sIna4YaG3HWU3khIjcemrpr775NS/CqzbAEySjXcC+Jm gmrDksHwYdy9y7nWKDt5BkqASS22AamlLIw3x1ulDnK0+f50WUBi3jzHfjX2fV28 mz8HxQBgy/S/BV/DYG3gocgB9ZVB2S1YGpfofHRYxZFLoY3TgBK3KRUTKi7U9keE 38piZBMqvl23ZyXj7OtxSh+fRbJKgtHORpRHN1rgofdG -----END CERTIFICATE-----Generated at Mon Jan 12 12:34:26 2026 by rpki-client