This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4Z30TCNhLAhA_iAPCmjICzxS_ds.roa File: 4Z30TCNhLAhA_iAPCmjICzxS_ds.roa (raw, json) Hash identifier: HvmYSWSbYYPAqcXiOXYwIpUm6yeSaJDdeEeaucvEf0c= Subject key identifier: E1:9D:F4:4C:23:61:2C:08:40:FE:20:0F:0A:68:C8:0B:3C:52:FD:DB Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E66F69EF03936CDE328801224ACE Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4Z30TCNhLAhA_iAPCmjICzxS_ds.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51395 IP address blocks: 94.247.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e6:6f:69:ef:03:93:6c:de:32:88:01:22:4a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e19df44c23612c0840fe200f0a68c80b3c52fddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:86:de:42:28:d7:aa:04:8d:a4:d6:db:ef:9d: 40:c8:a3:d6:c8:e4:43:af:f6:97:1e:0f:7a:2a:1c: e4:c5:0b:22:4c:b2:1f:51:92:d8:10:2f:f8:82:e4: 03:a3:e9:a4:61:35:0c:4e:25:d1:64:2f:fb:d4:02: 2f:fe:35:73:41:4b:74:01:be:26:92:92:a1:d0:ad: 6a:31:24:5c:73:c5:a4:49:de:d2:45:45:5c:f2:1f: 6b:33:f3:2b:f6:2f:16:90:f4:79:3a:c8:b2:73:fd: 9f:70:cf:8c:fb:3c:d5:7f:17:6d:04:33:52:82:bc: e2:f3:a7:83:2c:5a:f6:05:95:66:6e:4d:ac:c9:37: 64:60:12:44:6c:99:3f:e3:98:42:74:bf:9a:6e:e3: c0:3c:76:a8:26:bc:4c:7b:4d:16:bc:d5:40:f7:26: 40:ba:44:4c:85:7c:60:29:35:b8:87:26:81:ab:21: 14:6a:bd:1e:3a:3e:80:de:f8:9e:38:15:08:33:db: f3:d8:ca:a7:32:b4:2d:ae:1d:39:24:3f:83:e9:88: c2:22:ee:eb:25:88:49:6b:63:66:29:45:f0:2f:36: 31:a0:a9:cd:ef:15:75:56:6a:08:0b:61:c5:15:ab: 91:46:62:41:c1:a0:93:31:71:0e:8f:82:b6:fe:19: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9D:F4:4C:23:61:2C:08:40:FE:20:0F:0A:68:C8:0B:3C:52:FD:DB X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4Z30TCNhLAhA_iAPCmjICzxS_ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.42.0/24 Signature Algorithm: sha256WithRSAEncryption 94:69:e5:ba:65:67:e7:dc:29:45:67:52:d5:b8:f5:c9:87:a6: 13:01:af:57:9a:26:73:5e:a8:ad:c3:21:ae:3f:80:dd:d1:dc: f0:2e:e7:16:e6:79:4c:9a:83:48:be:69:51:8b:e9:46:12:94: af:f4:2b:82:6e:5d:4a:3c:3e:78:5c:83:82:26:04:0e:00:1a: 5b:f5:3a:9d:c8:19:de:4c:5c:ae:d6:58:09:b3:14:a8:a3:2c: 0c:93:bc:3b:23:f6:b9:95:1a:ae:5b:f3:57:c9:70:00:07:62: 88:80:f2:ac:8a:2b:d8:3d:d4:e1:b6:b6:fc:55:ac:a5:fd:1a: 5c:54:a2:d8:e2:08:e0:c9:86:36:d7:cf:da:2d:33:f2:a2:8c: 93:7e:f1:f2:4d:49:d6:94:9c:69:ed:51:5e:a4:68:99:8b:ab: 01:c1:c2:e5:c0:03:c8:e3:82:dc:1d:74:92:70:5e:ba:84:34: 80:9f:15:43:91:04:dd:bc:74:01:b6:95:c8:d9:5e:4a:50:f7: af:4d:45:d1:26:3e:77:95:e2:88:ed:05:1c:23:5a:6d:f7:df: 76:36:71:82:5e:f6:90:8b:34:46:87:03:3e:9e:69:5f:75:4c: 22:2d:13:f0:8f:65:2a:43:0f:62:ac:dc:53:a5:8e:e0:2f:37: 93:c1:37:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOZvae8Dk2zeMogBIkrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTlkZjQ0YzIzNjEyYzA4NDBmZTIwMGYwYTY4YzgwYjNjNTJmZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIbeQijXqgSNpNbb751AyKPWyORD r/aXHg96KhzkxQsiTLIfUZLYEC/4guQDo+mkYTUMTiXRZC/71AIv/jVzQUt0Ab4m kpKh0K1qMSRcc8WkSd7SRUVc8h9rM/Mr9i8WkPR5Osiyc/2fcM+M+zzVfxdtBDNS grzi86eDLFr2BZVmbk2syTdkYBJEbJk/45hCdL+abuPAPHaoJrxMe00WvNVA9yZA ukRMhXxgKTW4hyaBqyEUar0eOj6A3vieOBUIM9vz2MqnMrQtrh05JD+D6YjCIu7r JYhJa2NmKUXwLzYxoKnN7xV1VmoIC2HFFauRRmJBwaCTMXEOj4K2/hlm9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGd9EwjYSwIQP4gDwpoyAs8Uv3bMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvNFozMFRDTmhMQWhBX2lBUENtaklDenhTX2RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvcqMA0G CSqGSIb3DQEBCwUAA4IBAQCUaeW6ZWfn3ClFZ1LVuPXJh6YTAa9XmiZzXqitwyGu P4Dd0dzwLucW5nlMmoNIvmlRi+lGEpSv9CuCbl1KPD54XIOCJgQOABpb9TqdyBne TFyu1lgJsxSooywMk7w7I/a5lRquW/NXyXAAB2KIgPKsiivYPdThtrb8Vayl/Rpc VKLY4gjgyYY218/aLTPyooyTfvHyTUnWlJxp7VFepGiZi6sBwcLlwAPI44LcHXSS cF66hDSAnxVDkQTdvHQBtpXI2V5KUPevTUXRJj53leKI7QUcI1pt9992NnGCXvaQ izRGhwM+nmlfdUwiLRPwj2UqQw9irNxTpY7gLzeTwTep -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:48 2026 by rpki-client