This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa File: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (raw, json) Hash identifier: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ= Subject key identifier: E2:0F:FB:95:10:E3:01:53:0D:89:38:81:2A:CA:2A:25:7C:2E:4F:18 Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Certificate serial: 019B7A59A24CFB9D79A81E1B186A0795A1B0 Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa Signing time: Thu 01 Jan 2026 16:17:33 +0000 ROA not before: Thu 01 Jan 2026 16:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 109.224.233.0/24 maxlen: 24 193.111.200.0/24 maxlen: 24 195.74.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:a2:4c:fb:9d:79:a8:1e:1b:18:6a:07:95:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2 Validity Not Before: Jan 1 16:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e20ffb9510e301530d8938812aca2a257c2e4f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:7d:e8:d1:ba:82:84:c2:53:9a:6b:22:a6: 4b:72:0c:06:58:27:7b:f3:53:fb:3b:2c:c9:61:76: 7f:ef:be:8b:64:6e:8f:0f:94:fb:08:bf:fc:8b:76: 9a:54:65:2b:cf:25:14:ad:79:86:2d:00:ee:d2:a6: 87:b2:4a:c1:2f:ba:8d:a0:72:42:0a:53:7e:18:21: b5:1a:e7:69:00:30:76:fe:cb:cd:56:4b:bd:25:66: 16:c4:25:be:5b:42:91:a8:18:8b:97:69:e7:e2:af: fc:b9:3c:8a:27:59:12:21:ce:48:c1:28:96:5c:67: 1a:6c:d0:b2:be:cb:15:c8:2f:7c:51:06:5d:31:db: 25:3b:c5:28:1f:0d:68:2b:03:aa:e9:da:53:33:5e: 7f:1a:36:3a:d8:45:ca:3f:7b:b6:da:28:43:2c:c4: b5:e4:32:e0:8d:20:f6:49:70:0a:16:8d:c7:94:65: 97:97:9a:68:99:79:fd:58:e4:c6:b6:f1:75:c8:e3: 01:b7:35:41:a9:ca:38:28:b1:b8:cd:2f:d8:45:8f: 68:b8:52:33:67:f8:0e:33:5d:96:25:80:89:5a:1d: c9:77:c7:d2:ae:e9:f0:7a:db:a0:f7:f2:1f:7e:65: 6a:39:d3:bb:55:37:1d:79:7a:74:81:d7:c5:6d:3f: f1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0F:FB:95:10:E3:01:53:0D:89:38:81:2A:CA:2A:25:7C:2E:4F:18 X509v3 Authority Key Identifier: keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.233.0/24 193.111.200.0/24 195.74.60.0/24 Signature Algorithm: sha256WithRSAEncryption 90:90:91:67:a8:12:b3:17:82:0a:8c:7d:05:33:53:8b:b7:0a: 73:20:f3:ea:3b:37:ea:f8:d8:84:87:3e:d8:2e:ab:af:83:6d: 53:09:a8:88:81:89:9d:a4:25:0a:44:d1:48:0a:05:21:c8:84: b7:e9:4b:46:27:ff:c8:03:0d:4a:3e:5d:bd:5d:a4:b5:b5:90: e8:b3:11:7a:c7:6b:49:7f:02:11:d7:0f:5d:cd:bc:8e:77:5b: 0a:e9:a8:9c:42:2c:67:96:90:24:b4:eb:b5:95:35:3e:af:d6: 54:d1:cb:1c:05:6c:1b:bf:cd:e5:0a:38:6b:2b:33:0a:f0:fd: 93:fe:ce:d5:d8:04:6a:e3:b5:b1:2c:7c:65:96:78:82:d7:a7: 11:8b:d4:3f:84:06:34:09:6f:5a:46:1b:c2:83:bf:f9:e9:bc: f5:8d:8c:54:c6:de:cb:9a:9e:b0:13:44:76:a4:40:39:05:39: 87:ad:35:8f:92:79:85:38:0f:16:1e:4d:98:45:5a:65:ce:c0: 4e:69:28:c7:f7:2c:4d:4d:76:f1:cc:f9:22:e0:17:65:91:1b: 66:ef:07:f4:34:e6:5d:cc:ac:af:f0:e2:cb:6d:33:94:ac:05: ec:bd:d7:fb:6c:77:4a:ff:fb:94:be:3f:8a:9f:4d:be:57:a7: c5:9b:8c:87 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WaJM+515qB4bGGoHlaGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYjk4MGMxMGQ3MTEwZjkxZmZmOWUwZWNlYjYzOWQ5ZTc1 YjM1ZTIwHhcNMjYwMTAxMTYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjBmZmI5NTEwZTMwMTUzMGQ4OTM4ODEyYWNhMmEyNTdjMmU0ZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lF96NG6goTCU5prIqZLcgwGWCd7 81P7OyzJYXZ/776LZG6PD5T7CL/8i3aaVGUrzyUUrXmGLQDu0qaHskrBL7qNoHJC ClN+GCG1GudpADB2/svNVku9JWYWxCW+W0KRqBiLl2nn4q/8uTyKJ1kSIc5IwSiW XGcabNCyvssVyC98UQZdMdslO8UoHw1oKwOq6dpTM15/GjY62EXKP3u22ihDLMS1 5DLgjSD2SXAKFo3HlGWXl5pomXn9WOTGtvF1yOMBtzVBqco4KLG4zS/YRY9ouFIz Z/gOM12WJYCJWh3Jd8fSrunwetug9/IffmVqOdO7VTcdeXp0gdfFbT/xBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOIP+5UQ4wFTDYk4gSrKKiV8Lk8YMB8GA1UdIwQY MBaAFAK5gMENcRD5H/+eDs62OdnnWzXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUt NzBjMGE1MDZkNzk3LzEvNGdfN2xSRGpBVk1OaVRpQktzb3FKWHd1VHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hODk0N2YtZTUyYy00ZGUxLWJhZGUtNzBjMGE1MDZkNzk3 LzEvQXJtQXdRMXhFUGtmXzU0T3pyWTUyZWRiTmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbeDpAwQA wW/IAwQAw0o8MA0GCSqGSIb3DQEBCwUAA4IBAQCQkJFnqBKzF4IKjH0FM1OLtwpz IPPqOzfq+NiEhz7YLquvg21TCaiIgYmdpCUKRNFICgUhyIS36UtGJ//IAw1KPl29 XaS1tZDosxF6x2tJfwIR1w9dzbyOd1sK6aicQixnlpAktOu1lTU+r9ZU0cscBWwb v83lCjhrKzMK8P2T/s7V2ARq47WxLHxllniC16cRi9Q/hAY0CW9aRhvCg7/56bz1 jYxUxt7Lmp6wE0R2pEA5BTmHrTWPknmFOA8WHk2YRVplzsBOaSjH9yxNTXbxzPki 4BdlkRtm7wf0NOZdzKyv8OLLbTOUrAXsvdf7bHdK//uUvj+Kn02+V6fFm4yH -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:39 2026 by rpki-client