This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa File: 4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa (raw, json) Hash identifier: /Aj0axBj9aVxd0CaoZ4TQJb5zpK/Z9ZsET+fz6PD9KQ= Subject key identifier: E1:22:86:47:64:61:C7:A1:EA:DF:4A:8D:0B:2A:1E:84:93:BB:59:A4 Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31 Certificate serial: 019B7EA68658DF74F8CEB26B284FE08E1911 Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197877 IP address blocks: 91.228.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:86:58:df:74:f8:ce:b2:6b:28:4f:e0:8e:19:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e12286476461c7a1eadf4a8d0b2a1e8493bb59a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:a3:9a:f1:00:cc:14:2b:5a:e3:79:c9:f0: 01:17:b5:62:67:03:b8:21:76:f0:bc:ff:b5:3e:11: 58:bb:13:9b:13:00:44:df:42:ab:99:44:cc:49:4b: 07:d3:e8:9d:40:4e:7d:63:54:04:98:6f:80:fa:52: 71:ac:76:d5:c4:3b:ca:ee:34:a1:59:c6:8e:0e:87: 0e:cc:a1:d3:ea:86:96:03:e7:11:80:b6:34:ca:22: 66:ac:01:3d:14:82:f6:df:2b:fc:8c:3f:ff:27:ac: d0:df:e4:8b:ab:bd:24:8c:76:62:35:2f:85:14:f0: f2:a8:21:a3:5f:b5:6c:39:87:95:06:b3:13:d0:4b: 40:2e:e7:3d:ca:fe:e9:b8:54:e4:27:cf:7e:6c:d8: a5:d5:f2:9e:cf:eb:1b:73:bf:77:a6:a9:d9:b1:99: 36:10:cb:5e:fc:69:0b:37:0e:4c:74:78:2a:ae:28: 7d:31:91:4a:47:a3:e1:6f:7e:ef:61:17:0d:59:17: f7:cf:40:7d:b1:6a:06:01:0b:ac:d0:03:8b:ac:d1: a3:72:a4:a1:77:3a:7e:d2:03:98:7d:a5:eb:1f:7b: d3:6f:00:1a:b5:6f:f1:3b:3b:86:f1:e5:8f:38:c5: fe:a6:3f:b0:83:27:25:e3:72:5d:52:b3:c2:9d:55: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:22:86:47:64:61:C7:A1:EA:DF:4A:8D:0B:2A:1E:84:93:BB:59:A4 X509v3 Authority Key Identifier: keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.207.0/24 Signature Algorithm: sha256WithRSAEncryption 95:bb:d9:f8:98:fc:c0:d2:a8:6c:e5:95:6a:fb:c3:9d:f7:d2: 0f:49:d0:eb:f2:63:82:d9:6a:be:82:74:38:36:c9:77:63:a9: f3:2a:4b:9e:65:7e:42:a0:ce:2e:06:25:a0:ce:9c:37:f4:45: 8d:f2:70:51:57:d6:e5:83:8e:42:d2:90:09:f8:ac:69:bb:8a: c9:5e:a8:65:ed:0d:df:49:fc:7e:49:41:7b:b3:d3:4e:ae:ad: 5d:7d:f4:cd:67:87:82:9c:b7:87:0a:7c:f6:cb:f2:14:35:d9: 68:e5:e4:0b:f8:e8:d6:b4:7f:6c:29:8f:f2:19:99:e1:83:d0: 3b:6f:6d:fa:dc:6a:9a:ba:fc:0b:6e:e8:39:06:67:39:ed:41: f5:35:d1:16:20:95:46:b3:4b:bb:f3:bf:80:f6:93:c2:64:83: e7:09:c1:f2:9a:22:24:d2:8a:f1:fb:35:fa:fa:5c:ac:bc:d0: e2:43:30:75:58:81:de:db:09:7e:dd:cc:e7:d3:23:51:b4:3b: 9a:00:68:ce:20:64:08:1c:c5:4d:81:4c:48:38:92:82:17:a6: 79:2a:68:14:82:69:fa:be:24:29:16:65:7f:d0:0d:80:a5:6a: c6:72:88:08:ad:3d:08:6a:2f:2c:d2:46:e4:4e:a4:e4:05:e2: c4:f8:b9:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+poZY33T4zrJrKE/gjhkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTA0NWQwMjFkNDhhZTg2MWEwY2U2N2QzOGQxNWEwNjc2 NTNhMzEwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTIyODY0NzY0NjFjN2ExZWFkZjRhOGQwYjJhMWU4NDkzYmI1OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1mjmvEAzBQrWuN5yfABF7ViZwO4 IXbwvP+1PhFYuxObEwBE30KrmUTMSUsH0+idQE59Y1QEmG+A+lJxrHbVxDvK7jSh WcaODocOzKHT6oaWA+cRgLY0yiJmrAE9FIL23yv8jD//J6zQ3+SLq70kjHZiNS+F FPDyqCGjX7VsOYeVBrMT0EtALuc9yv7puFTkJ89+bNil1fKez+sbc793pqnZsZk2 EMte/GkLNw5MdHgqrih9MZFKR6Phb37vYRcNWRf3z0B9sWoGAQus0AOLrNGjcqSh dzp+0gOYfaXrH3vTbwAatW/xOzuG8eWPOMX+pj+wgycl43JdUrPCnVVztQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEihkdkYceh6t9KjQsqHoSTu1mkMB8GA1UdIwQY MBaAFEPgRdAh1IroYaDOZ9ONFaBnZToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTIt M2IwMmM5OWM3MzNiLzEvNFNLR1IyUmh4NkhxMzBxTkN5b2VoSk83V2FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTItM2IwMmM5OWM3MzNi LzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+TPMA0G CSqGSIb3DQEBCwUAA4IBAQCVu9n4mPzA0qhs5ZVq+8Od99IPSdDr8mOC2Wq+gnQ4 Nsl3Y6nzKkueZX5CoM4uBiWgzpw39EWN8nBRV9blg45C0pAJ+Kxpu4rJXqhl7Q3f Sfx+SUF7s9NOrq1dffTNZ4eCnLeHCnz2y/IUNdlo5eQL+OjWtH9sKY/yGZnhg9A7 b2363GqauvwLbug5Bmc57UH1NdEWIJVGs0u787+A9pPCZIPnCcHymiIk0orx+zX6 +lysvNDiQzB1WIHe2wl+3czn0yNRtDuaAGjOIGQIHMVNgUxIOJKCF6Z5KmgUgmn6 viQpFmV/0A2ApWrGcogIrT0Iai8s0kbkTqTkBeLE+LmQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:07 2026 by rpki-client