This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4t1cnFILPpWxTiQAbKvrjsS1tIs.roa File: 4t1cnFILPpWxTiQAbKvrjsS1tIs.roa (raw, json) Hash identifier: vBA/+4wMSJ7JCYOGjzL87CU5fnSPn9SJA681Ty4G7fE= Subject key identifier: E2:DD:5C:9C:52:0B:3E:95:B1:4E:24:00:6C:AB:EB:8E:C4:B5:B4:8B Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84EF58D532CDE13B436E16B84F5E49 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4t1cnFILPpWxTiQAbKvrjsS1tIs.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214432 IP address blocks: 5.182.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ef:58:d5:32:cd:e1:3b:43:6e:16:b8:4f:5e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2dd5c9c520b3e95b14e24006cabeb8ec4b5b48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:09:b6:06:d6:7a:aa:05:57:a5:d4:7a:9f:dc: cd:c6:7a:86:3f:14:8c:de:d4:ac:0e:6a:ca:69:5a: 6b:89:f2:da:c4:9c:00:1a:cc:53:05:cb:08:59:5b: 30:1f:72:04:f5:90:e6:85:3d:bc:2b:10:bc:40:a1: 08:15:4c:5b:37:12:27:da:0c:f0:01:73:5a:1f:3a: 8f:3d:e1:53:76:c8:fa:75:db:54:8e:09:6f:81:62: 21:d4:e9:ab:67:d2:1d:8a:99:53:c0:d8:f4:b5:dc: 0a:fd:0d:04:c8:8a:03:8c:df:a4:7d:3f:46:94:2f: 6a:f7:39:e4:aa:a2:1f:39:28:e8:33:43:ca:5e:36: c0:7a:5c:02:97:0f:62:ea:24:c3:c6:75:89:38:c9: 6a:ee:d7:b0:84:96:ff:5a:b8:f2:2f:54:ed:14:19: 66:55:e6:4f:f8:79:0a:9a:4a:4e:80:c0:79:ad:60: 3e:61:69:54:b4:54:50:7d:3a:14:b2:cb:2d:c8:1a: 95:90:37:89:05:3d:90:a0:b2:c2:db:fd:c4:60:1d: 1a:e2:02:ce:8c:0a:9a:c3:51:a7:ab:39:14:b5:3a: e0:93:da:a8:5f:f6:02:11:9c:17:55:5c:c3:64:2b: 8a:01:d8:ed:97:12:1d:ed:18:17:6e:a1:62:5d:63: 88:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:5C:9C:52:0B:3E:95:B1:4E:24:00:6C:AB:EB:8E:C4:B5:B4:8B X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/4t1cnFILPpWxTiQAbKvrjsS1tIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.112.0/24 Signature Algorithm: sha256WithRSAEncryption 15:35:fa:96:a5:31:6e:73:0e:60:55:95:aa:74:15:9e:67:d6: a9:18:2b:48:2a:84:46:40:c5:66:6f:1d:76:12:11:c4:23:af: 08:d9:5f:34:2e:35:e4:f2:a1:f5:1d:8a:4f:77:4f:56:cd:c6: 5a:16:d2:68:18:80:e0:6f:52:56:04:e0:b1:30:f2:bb:e2:76: bb:df:cb:77:bb:f8:bd:cb:0e:99:ac:d0:23:f8:b3:6e:6f:b8: e2:27:da:d7:d1:0b:58:ea:ed:01:66:f7:77:e7:41:fc:7b:3b: 97:84:94:50:a4:69:63:9c:8b:8f:99:be:08:a1:ad:56:08:51: 55:2d:5c:70:9c:88:ce:74:42:01:0d:d2:36:fc:a5:10:76:1b: af:4f:71:eb:56:99:47:fb:95:86:22:57:13:11:a8:ee:d3:91: ae:bd:2c:28:e1:ae:22:ab:28:58:cd:cc:0b:42:73:0f:68:4e: fc:1d:27:8a:d7:73:77:3d:6c:9b:f9:c7:91:dc:6e:c9:94:e1: 35:42:6a:d6:d5:03:fa:e0:60:5d:9d:92:9d:3d:ac:23:d7:52: de:d2:49:99:37:c0:5d:f3:0c:47:49:ed:50:41:7c:22:5a:48: 35:f0:dd:47:d1:fa:58:85:14:0f:e5:b6:b5:7c:50:1d:9b:1e: 21:ca:69:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hO9Y1TLN4TtDbha4T15JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmRkNWM5YzUyMGIzZTk1YjE0ZTI0MDA2Y2FiZWI4ZWM0YjViNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Am2BtZ6qgVXpdR6n9zNxnqGPxSM 3tSsDmrKaVprifLaxJwAGsxTBcsIWVswH3IE9ZDmhT28KxC8QKEIFUxbNxIn2gzw AXNaHzqPPeFTdsj6ddtUjglvgWIh1OmrZ9IdiplTwNj0tdwK/Q0EyIoDjN+kfT9G lC9q9znkqqIfOSjoM0PKXjbAelwClw9i6iTDxnWJOMlq7tewhJb/WrjyL1TtFBlm VeZP+HkKmkpOgMB5rWA+YWlUtFRQfToUssstyBqVkDeJBT2QoLLC2/3EYB0a4gLO jAqaw1GnqzkUtTrgk9qoX/YCEZwXVVzDZCuKAdjtlxId7RgXbqFiXWOIRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLdXJxSCz6VsU4kAGyr647EtbSLMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvNHQxY25GSUxQcFd4VGlRQWJLdnJqc1MxdElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbZwMA0G CSqGSIb3DQEBCwUAA4IBAQAVNfqWpTFucw5gVZWqdBWeZ9apGCtIKoRGQMVmbx12 EhHEI68I2V80LjXk8qH1HYpPd09WzcZaFtJoGIDgb1JWBOCxMPK74na738t3u/i9 yw6ZrNAj+LNub7jiJ9rX0QtY6u0BZvd350H8ezuXhJRQpGljnIuPmb4Ioa1WCFFV LVxwnIjOdEIBDdI2/KUQdhuvT3HrVplH+5WGIlcTEaju05GuvSwo4a4iqyhYzcwL QnMPaE78HSeK13N3PWyb+ceR3G7JlOE1QmrW1QP64GBdnZKdPawj11Le0kmZN8Bd 8wxHSe1QQXwiWkg18N1H0fpYhRQP5ba1fFAdmx4hymkl -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client