This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4yrpkzUbh1LTFKaOhDK9vGxkKYw.roa File: 4yrpkzUbh1LTFKaOhDK9vGxkKYw.roa (raw, json) Hash identifier: i6N8rWQuzLO0DbJmpHH/mKvjoEw3WtP+CYyboHjXvNk= Subject key identifier: E3:2A:E9:93:35:1B:87:52:D3:14:A6:8E:84:32:BD:BC:6C:64:29:8C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7ED83A0E5B41824C294D93CD2A214CF3 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4yrpkzUbh1LTFKaOhDK9vGxkKYw.roa Signing time: Fri 02 Jan 2026 13:14:18 +0000 ROA not before: Fri 02 Jan 2026 13:14:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 194.76.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:d8:3a:0e:5b:41:82:4c:29:4d:93:cd:2a:21:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 13:14:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e32ae993351b8752d314a68e8432bdbc6c64298c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:1a:d9:e7:b0:89:30:47:64:32:c0:94:47: 55:92:5d:22:38:9b:93:5f:0b:ff:63:ac:04:fd:f4: f0:27:66:1e:9f:31:6e:a5:08:f8:39:00:e0:a2:96: bd:79:ba:a0:a7:55:9e:e5:5a:b5:24:de:23:43:7b: 0a:62:e8:c0:ed:7d:cd:20:6b:eb:52:ab:a9:a3:a9: 5a:38:f9:8b:44:95:00:b6:32:8e:1d:a2:81:ea:64: 40:e2:d9:e0:09:15:2c:ab:e5:fb:c2:a8:75:a2:fb: b7:dd:66:8a:6d:69:cc:13:43:3b:bc:05:6d:46:38: 56:b4:e4:55:32:0c:69:71:3a:80:86:d8:3e:09:62: 4e:15:6a:d6:4d:4f:ba:6d:dc:24:98:96:65:43:7d: 29:b3:8f:55:08:89:8e:cf:37:cd:85:99:6d:44:47: 83:4d:0e:2e:c9:8e:80:f9:bd:e7:06:f2:4a:d7:e6: 0a:7a:58:c3:33:8b:71:24:c7:13:5c:90:74:07:26: 90:3d:12:45:78:93:96:e3:6b:99:e1:2c:84:2c:e8: ae:50:7e:60:09:e5:80:60:df:12:53:d2:b2:f3:c0: 63:1c:05:8c:37:f8:c2:ac:48:4a:7c:fd:24:83:7f: 5d:bb:a2:9c:a1:ab:69:bf:e2:11:d9:5c:26:14:f8: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:E9:93:35:1B:87:52:D3:14:A6:8E:84:32:BD:BC:6C:64:29:8C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4yrpkzUbh1LTFKaOhDK9vGxkKYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.172.0/24 Signature Algorithm: sha256WithRSAEncryption 12:84:e6:da:ae:e3:1e:32:78:25:66:92:f1:a3:cc:4b:c1:dc: 2c:09:5c:7a:64:bc:35:40:4e:4d:d2:59:fd:ce:51:40:85:0f: 93:a3:da:59:78:b7:a8:56:b0:86:4e:85:3c:f5:b4:30:e8:53: 89:65:b5:ca:22:e5:f2:10:51:3c:10:bc:b4:e4:c9:98:86:b8: ad:21:56:e1:ce:c1:ee:16:87:b0:e0:37:21:57:c1:3b:5a:9a: 56:cd:39:4c:77:f3:4d:39:85:56:de:e4:0e:95:c4:3c:da:5e: ab:60:b6:5f:77:f0:73:70:39:5b:fb:0d:88:02:b2:b9:d9:be: 5f:ad:21:d2:eb:00:5d:35:93:9f:21:4a:fc:78:ae:14:fd:e1: fb:21:5f:07:c1:5a:e2:84:74:37:1b:80:b0:85:0d:44:5a:0b: 9d:e4:90:7d:f8:8b:2a:9d:1f:b8:4a:1a:3b:c2:9f:93:57:17: 67:05:74:01:49:1e:c4:c3:9e:8a:52:48:55:c3:3e:fa:e1:fd: 8f:62:a9:0a:0b:21:64:3e:e1:9f:ce:e9:32:79:f9:86:a9:d2: 48:86:79:ab:88:5b:dc:49:a2:35:c7:d8:c0:45:b1:1f:53:00: 90:a7:72:cb:6d:e0:9e:26:46:c8:5f:07:d2:d9:93:68:12:d3: 0b:79:8d:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+2DoOW0GCTClNk80qIUzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMTMxNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzJhZTk5MzM1MWI4NzUyZDMxNGE2OGU4NDMyYmRiYzZjNjQyOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wsa2eewiTBHZDLAlEdVkl0iOJuT Xwv/Y6wE/fTwJ2YenzFupQj4OQDgopa9ebqgp1We5Vq1JN4jQ3sKYujA7X3NIGvr Uqupo6laOPmLRJUAtjKOHaKB6mRA4tngCRUsq+X7wqh1ovu33WaKbWnME0M7vAVt RjhWtORVMgxpcTqAhtg+CWJOFWrWTU+6bdwkmJZlQ30ps49VCImOzzfNhZltREeD TQ4uyY6A+b3nBvJK1+YKeljDM4txJMcTXJB0ByaQPRJFeJOW42uZ4SyELOiuUH5g CeWAYN8SU9Ky88BjHAWMN/jCrEhKfP0kg39du6Kcoatpv+IR2VwmFPiDvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMq6ZM1G4dS0xSmjoQyvbxsZCmMMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNHlycGt6VWJoMUxURkthT2hESzl2R3hrS1l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkysMA0G CSqGSIb3DQEBCwUAA4IBAQAShObaruMeMnglZpLxo8xLwdwsCVx6ZLw1QE5N0ln9 zlFAhQ+To9pZeLeoVrCGToU89bQw6FOJZbXKIuXyEFE8ELy05MmYhritIVbhzsHu Foew4DchV8E7WppWzTlMd/NNOYVW3uQOlcQ82l6rYLZfd/BzcDlb+w2IArK52b5f rSHS6wBdNZOfIUr8eK4U/eH7IV8HwVrihHQ3G4CwhQ1EWgud5JB9+IsqnR+4Sho7 wp+TVxdnBXQBSR7Ew56KUkhVwz764f2PYqkKCyFkPuGfzukyefmGqdJIhnmriFvc SaI1x9jARbEfUwCQp3LLbeCeJkbIXwfS2ZNoEtMLeY0N -----END CERTIFICATE-----Generated at Wed Jan 7 00:51:48 2026 by rpki-client