This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/4tpo1Gl_kKGlssXQpUCA20ux1cU.roa File: 4tpo1Gl_kKGlssXQpUCA20ux1cU.roa (raw, json) Hash identifier: CFLR+pPNIC4UykPbvbGXgtxx3GyZkaDKKHVPe5aTauk= Subject key identifier: E2:DA:68:D4:69:7F:90:A1:A5:B2:C5:D0:A5:40:80:DB:4B:B1:D5:C5 Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357 Certificate serial: 019B78A26D9ADC7B60EAA56629D94CB5260B Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/4tpo1Gl_kKGlssXQpUCA20ux1cU.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43060 IP address blocks: 91.196.76.0/23 maxlen: 24 91.196.77.0/24 maxlen: 24 94.158.48.0/20 maxlen: 20 94.158.48.0/21 maxlen: 21 94.158.56.0/24 maxlen: 24 94.158.57.0/24 maxlen: 24 94.158.58.0/24 maxlen: 24 94.158.59.0/24 maxlen: 24 94.158.60.0/24 maxlen: 24 94.158.61.0/24 maxlen: 24 94.158.62.0/24 maxlen: 24 94.158.63.0/24 maxlen: 24 109.207.243.0/24 maxlen: 24 185.196.216.0/22 maxlen: 22 2a04:1b80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6d:9a:dc:7b:60:ea:a5:66:29:d9:4c:b5:26:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2da68d4697f90a1a5b2c5d0a54080db4bb1d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:6d:f3:d0:db:04:a4:5e:0d:39:de:03:b1: de:4e:c5:67:e1:f9:b0:8a:4a:70:49:12:56:b4:74: 6f:0b:73:d7:cd:ea:55:77:f1:4b:e3:fa:46:ef:34: ee:24:60:27:f1:90:9a:10:cd:55:05:41:b8:5b:8c: 6b:65:c3:48:36:10:bb:f7:e8:1b:fb:63:3d:cf:7c: 38:7c:d5:d9:13:3d:8d:b7:64:51:05:fb:67:1f:85: 71:c8:26:15:1f:37:af:20:98:42:b1:3f:c9:8e:c2: 3a:8a:2f:01:d8:77:10:83:2f:c3:aa:95:4a:de:25: 84:84:e3:c3:9f:d4:ad:6a:6f:fe:8c:5f:4f:3a:93: 64:23:55:64:74:ec:07:99:8e:21:b1:97:82:66:a7: 8c:74:67:ae:a5:3b:33:69:fb:2e:e3:39:f7:07:91: 9b:52:e9:64:35:fd:7a:86:4e:5d:f8:07:8c:90:bd: 4a:f1:02:b4:c9:c1:01:d6:1e:ef:e5:56:2b:a7:d6: 71:e6:57:b7:ac:f7:ef:fc:fc:db:18:de:75:ec:e6: be:be:87:36:ba:a8:7c:2f:fc:f3:c0:ad:16:b6:fa: 16:e7:81:5a:1c:27:8a:00:d9:67:87:c6:c0:44:db: 58:d5:4f:2f:e2:8c:5c:11:01:3d:77:e8:49:11:60: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:68:D4:69:7F:90:A1:A5:B2:C5:D0:A5:40:80:DB:4B:B1:D5:C5 X509v3 Authority Key Identifier: keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/4tpo1Gl_kKGlssXQpUCA20ux1cU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.76.0/23 94.158.48.0/20 109.207.243.0/24 185.196.216.0/22 IPv6: 2a04:1b80::/32 Signature Algorithm: sha256WithRSAEncryption cb:0a:0b:f4:ec:fb:f6:ea:1d:41:77:97:c3:e4:c7:17:4c:22: 1a:bd:18:5a:5a:6a:f4:cc:53:2f:db:0f:05:2e:32:47:5d:a9: 49:32:29:6f:0f:90:09:92:b6:6b:5b:09:de:2e:67:39:cc:6e: 61:cf:94:7f:1d:ac:b9:40:f8:09:55:f6:98:38:61:d3:f2:f9: c9:92:1f:d1:cc:4e:2a:7f:a1:38:78:a0:57:b6:33:e7:0b:14: 86:ec:f7:1e:ab:0d:1b:71:52:ae:13:f8:47:29:59:5e:d1:b8: 10:bd:69:97:79:82:d3:38:ce:18:22:33:5f:5c:0a:77:9c:48: b6:c2:ca:42:b1:3b:10:bc:b3:9c:3a:77:a7:bf:f5:d4:8f:17: 96:0e:e7:35:28:3d:75:50:c6:ad:04:a6:9a:ee:b1:9d:7f:06: f5:ef:bf:fd:8e:23:ef:f4:f6:8a:89:c1:a9:a9:37:f4:ec:67: fa:5e:d3:20:21:2a:f1:04:6a:b6:ed:63:b6:ae:04:9f:3a:1f: 9b:df:d9:95:b1:f1:2d:9c:76:fe:ac:a0:6c:3b:77:3b:32:7a: 2f:35:90:1b:35:7b:56:b7:46:3b:58:ca:8c:8e:39:fb:ac:ea: 15:5b:a5:41:dc:69:10:d6:06:51:fc:1b:45:2f:a9:d6:aa:82: 5e:dd:56:a5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4om2a3Htg6qVmKdlMtSYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjRhOGI5M2FmOWVhOWNmMThhYWNhNGU3M2YxMTZlYzI2 ZWIzNTcwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmRhNjhkNDY5N2Y5MGExYTViMmM1ZDBhNTQwODBkYjRiYjFkNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Nt89DbBKReDTneA7HeTsVn4fmw ikpwSRJWtHRvC3PXzepVd/FL4/pG7zTuJGAn8ZCaEM1VBUG4W4xrZcNINhC79+gb +2M9z3w4fNXZEz2Nt2RRBftnH4VxyCYVHzevIJhCsT/JjsI6ii8B2HcQgy/DqpVK 3iWEhOPDn9Stam/+jF9POpNkI1VkdOwHmY4hsZeCZqeMdGeupTszafsu4zn3B5Gb UulkNf16hk5d+AeMkL1K8QK0ycEB1h7v5VYrp9Zx5le3rPfv/PzbGN517Oa+voc2 uqh8L/zzwK0WtvoW54FaHCeKANlnh8bARNtY1U8v4oxcEQE9d+hJEWA32wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOLaaNRpf5ChpbLF0KVAgNtLsdXFMB8GA1UdIwQY MBaAFJ+0qLk6+eqc8YqspOc/EW7CbrNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYt OGQ2OGViMjBmYmRkLzEvNHRwbzFHbF9rS0dsc3NYUXBVQ0EyMHV4MWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OTg3NDEtZWRhNC00YzVkLWFmOWYtOGQ2OGViMjBmYmRk LzEvbjdTb3VUcjU2cHp4aXF5azV6OFJic0p1czFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW8RMAwQE Xp4wAwQAbc/zAwQCucTYMA0EAgACMAcDBQAqBBuAMA0GCSqGSIb3DQEBCwUAA4IB AQDLCgv07Pv26h1Bd5fD5McXTCIavRhaWmr0zFMv2w8FLjJHXalJMilvD5AJkrZr WwneLmc5zG5hz5R/Hay5QPgJVfaYOGHT8vnJkh/RzE4qf6E4eKBXtjPnCxSG7Pce qw0bcVKuE/hHKVle0bgQvWmXeYLTOM4YIjNfXAp3nEi2wspCsTsQvLOcOnenv/XU jxeWDuc1KD11UMatBKaa7rGdfwb177/9jiPv9PaKicGpqTf07Gf6XtMgISrxBGq2 7WO2rgSfOh+b39mVsfEtnHb+rKBsO3c7MnovNZAbNXtWt0Y7WMqMjjn7rOoVW6VB 3GkQ1gZR/BtFL6nWqoJe3Val -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:19 2026 by rpki-client