This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/S4cOm5eDZspURLWbEjjfUiB2w9A.roa File: S4cOm5eDZspURLWbEjjfUiB2w9A.roa (raw, json) Hash identifier: WT7udJa3v1pG5JhWMUlVe+UmSzwa9B/DLth0MoSpo+c= Subject key identifier: 4B:87:0E:9B:97:83:66:CA:54:44:B5:9B:12:38:DF:52:20:76:C3:D0 Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e Certificate serial: 019B797E53D5AA59B0D796A64AA703915DEC Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/S4cOm5eDZspURLWbEjjfUiB2w9A.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 84.254.134.0/24 maxlen: 24 84.254.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:53:d5:aa:59:b0:d7:96:a6:4a:a7:03:91:5d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b870e9b978366ca5444b59b1238df522076c3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:b8:db:56:f7:cb:ea:8c:1a:ac:93:7f:2b: 5c:ec:66:e5:1d:46:a5:4f:b6:e7:29:ee:a6:95:c2: 32:7e:ac:d6:34:63:ff:b3:6a:eb:f3:70:91:48:b8: fd:7f:4e:85:12:d0:ca:35:86:d5:08:98:53:31:9e: 17:d9:b5:b8:e8:6e:a7:b0:48:84:94:31:ae:f4:cb: ce:e8:f5:eb:64:24:8f:37:f1:4b:86:ec:4e:4d:cc: 06:29:ae:70:b8:a0:26:6f:c6:99:50:22:98:94:ea: 32:0c:21:57:de:ee:19:1a:0a:70:de:f5:2b:be:d3: ba:68:2c:d6:c5:1a:ee:8b:56:69:6c:43:b3:db:0b: 5f:68:39:85:81:e3:dd:08:55:54:62:b4:c4:63:c5: 0d:a6:95:55:84:58:f4:a3:5a:33:e5:8a:9c:e3:43: 6e:1d:7e:26:dc:49:9c:31:23:a1:fd:59:8a:d6:85: e6:f8:ac:02:d6:ae:cf:71:1b:3f:67:5e:9c:b6:69: 9a:0f:be:a1:5b:fb:d1:0c:20:39:a1:37:57:8e:18: 7d:7b:e5:db:1b:be:85:2e:87:bf:2b:a0:0c:aa:b1: c1:88:fe:65:76:84:7d:a3:80:76:24:8b:31:e8:e5: c7:6e:9b:7f:b6:c1:4e:24:5a:91:20:48:12:aa:2b: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:87:0E:9B:97:83:66:CA:54:44:B5:9B:12:38:DF:52:20:76:C3:D0 X509v3 Authority Key Identifier: keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/S4cOm5eDZspURLWbEjjfUiB2w9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.254.134.0/24 84.254.136.0/24 Signature Algorithm: sha256WithRSAEncryption 27:92:e1:d0:47:60:46:a9:9f:c0:80:85:e6:55:b6:82:f8:84: f3:59:dc:6a:cf:2c:24:cd:da:27:18:b1:4c:26:6f:5d:ba:9b: 2d:4c:90:e2:d2:24:43:88:7b:b7:1e:46:7a:90:3b:9b:bb:7f: b6:2c:c3:2a:0f:5e:75:1b:9c:2c:dc:44:5d:dc:d7:3f:64:80: ef:1a:57:51:e0:a4:69:3e:0e:5e:84:81:e0:1c:15:dd:1e:a9: 05:5e:80:6a:c8:4c:e4:36:fc:1b:5d:a2:4d:6d:bc:87:b5:ce: a8:56:a6:4a:c2:89:ab:b0:9a:51:54:96:6b:5d:11:8d:fd:30: 21:a2:05:16:36:8c:bc:21:20:cc:4c:e7:a3:39:90:10:05:8a: 65:e5:f0:3d:66:78:c5:76:b0:a1:66:39:a6:32:44:34:6e:fd: b8:47:3a:18:9d:bc:46:24:4c:30:b3:1b:7d:b0:e1:f4:55:e2: 25:42:ae:7c:a6:74:d3:87:29:cf:12:49:26:16:22:10:0a:b1: 63:a9:86:dd:c6:d0:55:22:ea:75:12:02:11:9f:5b:c4:dc:37: 87:82:6a:1e:65:41:42:1a:04:d2:41:67:6c:0f:f0:6b:e6:47: c4:7e:23:0e:03:0b:8f:f7:a9:14:3e:6a:82:82:b2:31:2f:df: 57:ff:ee:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5flPVqlmw15amSqcDkV3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi NDE1M2UwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjg3MGU5Yjk3ODM2NmNhNTQ0NGI1OWIxMjM4ZGY1MjIwNzZjM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul2421b3y+qMGqyTfytc7GblHUal T7bnKe6mlcIyfqzWNGP/s2rr83CRSLj9f06FEtDKNYbVCJhTMZ4X2bW46G6nsEiE lDGu9MvO6PXrZCSPN/FLhuxOTcwGKa5wuKAmb8aZUCKYlOoyDCFX3u4ZGgpw3vUr vtO6aCzWxRrui1ZpbEOz2wtfaDmFgePdCFVUYrTEY8UNppVVhFj0o1oz5Yqc40Nu HX4m3EmcMSOh/VmK1oXm+KwC1q7PcRs/Z16ctmmaD76hW/vRDCA5oTdXjhh9e+Xb G76FLoe/K6AMqrHBiP5ldoR9o4B2JIsx6OXHbpt/tsFOJFqRIEgSqiuI/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEuHDpuXg2bKVES1mxI431IgdsPQMB8GA1UdIwQY MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt MWQzNzM0OTk5MjRlLzEvUzRjT201ZURac3BVUkxXYkVqamZVaUIydzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVP6GAwQA VP6IMA0GCSqGSIb3DQEBCwUAA4IBAQAnkuHQR2BGqZ/AgIXmVbaC+ITzWdxqzywk zdonGLFMJm9dupstTJDi0iRDiHu3HkZ6kDubu3+2LMMqD151G5ws3ERd3Nc/ZIDv GldR4KRpPg5ehIHgHBXdHqkFXoBqyEzkNvwbXaJNbbyHtc6oVqZKwomrsJpRVJZr XRGN/TAhogUWNoy8ISDMTOejOZAQBYpl5fA9ZnjFdrChZjmmMkQ0bv24RzoYnbxG JEwwsxt9sOH0VeIlQq58pnTThynPEkkmFiIQCrFjqYbdxtBVIup1EgIRn1vE3DeH gmoeZUFCGgTSQWdsD/Br5kfEfiMOAwuP96kUPmqCgrIxL99X/+7u -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:28 2026 by rpki-client