This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/4ae5_6Oq1qgP_qVzyJIPMEZlDls.roa File: 4ae5_6Oq1qgP_qVzyJIPMEZlDls.roa (raw, json) Hash identifier: Pz3KHgE7nt62CyJZQAWq1/cmKNewix+faz+oFpRFRns= Subject key identifier: E1:A7:B9:FF:A3:AA:D6:A8:0F:FE:A5:73:C8:92:0F:30:46:65:0E:5B Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB176212038A1BAD0FBA98F7D32A15 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/4ae5_6Oq1qgP_qVzyJIPMEZlDls.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 193.106.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:17:62:12:03:8a:1b:ad:0f:ba:98:f7:d3:2a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1a7b9ffa3aad6a80ffea573c8920f3046650e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:63:d7:42:31:61:74:e1:b2:ae:2c:26:9b: 04:49:4d:03:d9:26:c0:fd:52:df:dd:6f:ba:9b:f7: 41:5d:e4:19:f9:03:69:f6:64:02:d4:7a:bb:a9:bd: 18:10:d9:e1:70:cf:32:7c:a0:7c:78:63:8e:81:f3: e0:6a:3c:6b:42:74:d9:c4:4f:08:d1:42:2b:75:a9: f5:dd:f0:aa:1d:5d:d8:5d:66:09:b9:0b:b8:21:42: d0:83:d8:10:bd:86:e3:7b:58:26:b9:f0:4d:3b:1e: a2:bf:00:f1:71:36:59:a1:59:86:34:63:3f:1c:a1: b2:e6:97:67:ef:05:9f:3e:91:69:4b:bc:80:4a:fa: 9e:66:3a:7b:d6:34:f5:9d:26:03:71:9f:77:bb:d6: 4b:8f:ea:c2:24:4f:b2:9b:70:32:11:4f:a3:3d:22: 41:8c:87:45:7d:5d:86:92:15:7a:da:7e:41:30:3d: b6:e0:51:1f:35:76:eb:da:5b:71:08:d7:84:8f:5b: e4:4f:e6:5a:61:57:87:9d:57:d0:a5:15:b7:07:d6: 31:76:44:45:b3:2a:b8:f8:88:b8:c6:00:6f:b6:5b: 73:de:e4:63:a3:c9:8f:36:3b:1c:b2:5a:8e:0b:1e: 8e:28:43:a0:19:a8:35:82:eb:c8:d2:c0:dc:dd:92: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A7:B9:FF:A3:AA:D6:A8:0F:FE:A5:73:C8:92:0F:30:46:65:0E:5B X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/4ae5_6Oq1qgP_qVzyJIPMEZlDls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.196.0/24 Signature Algorithm: sha256WithRSAEncryption 39:93:c1:a7:b6:f0:b7:61:11:c2:c1:eb:52:6c:0b:72:d4:df: dc:99:86:2c:b9:ae:77:84:46:92:26:54:17:0b:67:e4:3f:59: 29:18:4b:bf:7e:06:b5:bd:10:70:60:0c:20:42:b3:50:be:73: 67:a8:42:c1:31:63:4c:b7:c4:31:0a:e6:a7:82:ed:b6:0e:c6: 44:f9:19:09:be:60:99:50:86:3f:44:ac:da:51:0d:bc:19:b4: d5:69:88:bc:cf:c4:11:85:3c:d4:58:f9:c0:16:50:1d:f4:ba: 87:12:fa:75:ef:cd:29:35:c1:35:33:39:f0:a9:51:18:87:47: 36:9c:eb:02:62:61:bc:c3:23:19:ee:2c:45:91:e2:1b:1c:35: 01:35:a0:fb:1b:c3:98:ec:04:c0:93:08:0f:0d:0e:69:2d:3c: 3c:b7:b1:94:1b:e9:f6:dc:5e:33:a7:53:fd:64:89:0e:a9:2b: 77:de:6e:b1:6e:ab:fc:9f:2e:35:43:47:80:1f:a3:b6:4d:29: 2d:09:9e:ce:05:6f:4e:4d:0c:47:90:78:2e:ec:a6:78:3c:5b: 5d:55:42:59:7f:61:43:3d:9d:2e:4a:68:78:a7:e8:a9:b9:d0: e9:e4:6c:5d:7f:75:03:7b:8a:c1:c1:39:dc:cf:06:34:1d:92: 69:e3:55:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xdiEgOKG60Pupj30yoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWE3YjlmZmEzYWFkNmE4MGZmZWE1NzNjODkyMGYzMDQ2NjUwZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg1j10IxYXThsq4sJpsESU0D2SbA /VLf3W+6m/dBXeQZ+QNp9mQC1Hq7qb0YENnhcM8yfKB8eGOOgfPgajxrQnTZxE8I 0UIrdan13fCqHV3YXWYJuQu4IULQg9gQvYbje1gmufBNOx6ivwDxcTZZoVmGNGM/ HKGy5pdn7wWfPpFpS7yASvqeZjp71jT1nSYDcZ93u9ZLj+rCJE+ym3AyEU+jPSJB jIdFfV2GkhV62n5BMD224FEfNXbr2ltxCNeEj1vkT+ZaYVeHnVfQpRW3B9YxdkRF syq4+Ii4xgBvtltz3uRjo8mPNjscslqOCx6OKEOgGag1guvI0sDc3ZLwaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGnuf+jqtaoD/6lc8iSDzBGZQ5bMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvNGFlNV82T3ExcWdQX3FWenlKSVBNRVpsRGxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrEMA0G CSqGSIb3DQEBCwUAA4IBAQA5k8GntvC3YRHCwetSbAty1N/cmYYsua53hEaSJlQX C2fkP1kpGEu/fga1vRBwYAwgQrNQvnNnqELBMWNMt8QxCuangu22DsZE+RkJvmCZ UIY/RKzaUQ28GbTVaYi8z8QRhTzUWPnAFlAd9LqHEvp1780pNcE1MznwqVEYh0c2 nOsCYmG8wyMZ7ixFkeIbHDUBNaD7G8OY7ATAkwgPDQ5pLTw8t7GUG+n23F4zp1P9 ZIkOqSt33m6xbqv8ny41Q0eAH6O2TSktCZ7OBW9OTQxHkHgu7KZ4PFtdVUJZf2FD PZ0uSmh4p+ipudDp5Gxdf3UDe4rBwTnczwY0HZJp41VY -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:57 2026 by rpki-client