This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/Ex4sydFNNb9e9IlWuLzuPazLU44.roa File: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (raw, json) Hash identifier: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I= Subject key identifier: 13:1E:2C:C9:D1:4D:35:BF:5E:F4:89:56:B8:BC:EE:3D:AC:CB:53:8E Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B36742BFFEBC965EF1A2F7A6DD9E84F Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/Ex4sydFNNb9e9IlWuLzuPazLU44.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197746 IP address blocks: 62.1.216.0/24 maxlen: 24 194.219.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:74:2b:ff:eb:c9:65:ef:1a:2f:7a:6d:d9:e8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=131e2cc9d14d35bf5ef48956b8bcee3daccb538e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0b:e1:3b:6e:66:c6:46:f8:11:23:73:4a:c0: 40:1e:1c:75:80:dc:19:2f:7f:02:d1:f2:75:6d:f3: ae:1f:78:5a:83:de:6f:70:cc:3e:a7:c8:d7:97:bc: ff:d5:37:63:2f:71:41:65:71:cd:19:bf:a7:dd:83: c5:f3:7d:94:a0:20:b2:91:e2:38:bf:75:5e:0b:51: 89:17:19:66:51:82:09:1a:1b:ae:7d:74:89:c5:63: 11:e0:dc:61:55:bd:b4:90:5c:6b:ec:91:1a:c5:b4: c1:82:3b:7f:8d:b2:a5:7b:64:f1:9f:b3:40:7e:77: ac:91:83:56:92:2c:b4:6a:f4:64:d7:90:35:01:f1: d9:12:6a:61:60:05:0f:33:61:92:a7:c1:88:db:e6: 6b:16:24:69:5d:11:af:20:da:48:dd:57:fe:ae:2b: 40:c5:e7:a9:87:93:0b:90:10:8c:a2:b6:9b:7d:80: f4:83:1f:51:d7:e9:af:cf:eb:ad:a6:96:43:ba:84: 75:09:7a:44:6d:5c:93:2a:47:ac:c5:d0:cf:ed:06: 38:e1:f3:92:9d:4f:58:9d:d8:ec:c3:cb:7b:c2:9b: c3:2d:65:8e:f7:07:82:d1:ab:b1:71:59:ad:42:67: 88:6e:c0:30:95:bc:e4:73:00:05:cf:53:db:c8:ac: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1E:2C:C9:D1:4D:35:BF:5E:F4:89:56:B8:BC:EE:3D:AC:CB:53:8E X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/Ex4sydFNNb9e9IlWuLzuPazLU44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.1.216.0/24 194.219.79.0/24 Signature Algorithm: sha256WithRSAEncryption 55:eb:21:5f:8d:14:95:2e:bd:aa:cd:2b:1e:a8:dc:9d:24:3e: 57:52:37:e0:d9:94:02:ea:f0:bb:4d:03:d8:14:cb:a3:ad:fd: f1:ff:99:17:2c:de:20:d6:34:51:10:af:cb:4f:6d:fb:e5:09: 65:1a:34:ed:f1:d3:dc:22:55:66:47:14:3e:3f:cd:cb:0f:5c: fc:ab:da:d2:56:59:07:a7:07:a5:4e:c2:f0:80:40:d9:ef:1c: 73:5a:9a:c8:d3:76:02:cc:fa:b2:af:a3:66:08:d2:4a:db:97: 97:48:ad:a4:20:72:44:6f:cc:af:3b:02:ea:a9:eb:44:5b:13: 47:e9:e8:a3:8c:a8:f3:48:c3:ed:04:20:1e:c5:cd:3a:5e:26: 7e:6a:b9:b1:09:fa:60:40:16:5b:88:20:52:28:f0:c4:84:fe: c0:3c:12:98:65:2a:08:9f:01:8f:6f:80:bb:3f:dd:8c:51:de: d1:5b:ea:36:4b:29:4f:42:62:56:a9:94:79:02:36:a2:c2:30: 91:7f:11:68:de:29:54:66:16:ff:87:fd:ce:1d:ee:3c:72:2a: 9f:3b:a7:b9:09:da:27:f2:8f:18:d5:a3:fb:32:c2:fb:d6:03: cf:c3:6c:dc:6b:15:22:63:dc:21:bc:97:33:c6:0f:0d:26:25: 6b:c8:1d:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NnQr/+vJZe8aL3pt2ehPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzFlMmNjOWQxNGQzNWJmNWVmNDg5NTZiOGJjZWUzZGFjY2I1MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AvhO25mxkb4ESNzSsBAHhx1gNwZ L38C0fJ1bfOuH3hag95vcMw+p8jXl7z/1TdjL3FBZXHNGb+n3YPF832UoCCykeI4 v3VeC1GJFxlmUYIJGhuufXSJxWMR4NxhVb20kFxr7JEaxbTBgjt/jbKle2Txn7NA fneskYNWkiy0avRk15A1AfHZEmphYAUPM2GSp8GI2+ZrFiRpXRGvINpI3Vf+ritA xeeph5MLkBCMorabfYD0gx9R1+mvz+utppZDuoR1CXpEbVyTKkesxdDP7QY44fOS nU9Yndjsw8t7wpvDLWWO9weC0auxcVmtQmeIbsAwlbzkcwAFz1PbyKzdvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBMeLMnRTTW/XvSJVri87j2sy1OOMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvRXg0c3lkRk5OYjllOUlsV3VMenVQYXpMVTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPgHYAwQA wttPMA0GCSqGSIb3DQEBCwUAA4IBAQBV6yFfjRSVLr2qzSseqNydJD5XUjfg2ZQC 6vC7TQPYFMujrf3x/5kXLN4g1jRREK/LT2375QllGjTt8dPcIlVmRxQ+P83LD1z8 q9rSVlkHpwelTsLwgEDZ7xxzWprI03YCzPqyr6NmCNJK25eXSK2kIHJEb8yvOwLq qetEWxNH6eijjKjzSMPtBCAexc06XiZ+armxCfpgQBZbiCBSKPDEhP7APBKYZSoI nwGPb4C7P92MUd7RW+o2SylPQmJWqZR5AjaiwjCRfxFo3ilUZhb/h/3OHe48ciqf O6e5Cdon8o8Y1aP7MsL71gPPw2zcaxUiY9whvJczxg8NJiVryB1u -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:55 2026 by rpki-client