This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/T4heRDKlYRou0MSfgEymplCs1fI.roa File: T4heRDKlYRou0MSfgEymplCs1fI.roa (raw, json) Hash identifier: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg= Subject key identifier: 4F:88:5E:44:32:A5:61:1A:2E:D0:C4:9F:80:4C:A6:A6:50:AC:D5:F2 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B797EC949C7471321363FE62E05FAC2AC Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/T4heRDKlYRou0MSfgEymplCs1fI.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 14.102.8.0/24 maxlen: 24 91.200.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:49:c7:47:13:21:36:3f:e6:2e:05:fa:c2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f885e4432a5611a2ed0c49f804ca6a650acd5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:fb:fb:a7:31:29:90:d0:e2:c7:1f:2a:14: 11:0f:09:7f:8f:c4:43:8a:72:eb:50:2c:80:9b:fc: a2:a1:c7:4c:f7:db:23:ee:62:bc:75:3a:8f:9f:24: 75:0d:0c:a5:6e:bc:82:cb:b3:9c:19:ba:ac:f6:6b: f6:fa:55:75:a5:6b:42:8f:07:d9:47:ed:c8:24:1e: 72:8a:c2:0f:05:b5:9b:1e:8a:10:77:d9:d9:b2:dc: 77:7e:78:48:fa:a2:cb:56:fe:83:e4:10:fa:db:1c: b6:62:3d:ae:8d:b8:43:94:fb:67:6b:c9:89:4a:94: 90:bf:60:68:15:00:da:61:25:42:9f:89:b6:40:c9: a8:0c:d0:57:d9:d1:b9:be:2a:87:55:26:0d:d3:21: a0:c4:9b:71:0e:b4:99:16:25:71:3f:40:b7:73:25: 4f:c7:3c:3c:e9:ce:aa:ad:d0:b9:3a:57:a9:be:56: c2:f5:4f:da:02:0d:38:77:8e:bb:95:0b:c6:fc:48: 7a:ba:fa:35:fb:88:dd:b4:ff:f4:fa:7e:62:4d:dd: db:49:13:a1:8c:fe:e9:43:36:07:44:e1:62:43:05: b2:4f:03:29:80:b0:57:94:04:9a:1b:8e:cf:15:34: 42:ae:97:b9:7c:7f:18:9b:61:59:5b:9c:9e:0d:6a: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:5E:44:32:A5:61:1A:2E:D0:C4:9F:80:4C:A6:A6:50:AC:D5:F2 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/T4heRDKlYRou0MSfgEymplCs1fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.8.0/24 91.200.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:60:ba:59:f6:3f:3f:31:bc:d5:73:ff:da:1f:5b:f3:52:09: 6f:f0:0d:cd:f9:96:41:4b:8b:77:fb:eb:cb:a6:55:c4:c6:bc: e4:70:0a:48:02:87:04:31:9d:95:68:71:f2:f7:5f:57:c4:ec: 76:af:f4:86:d9:60:fc:ae:1c:fe:22:06:6a:e0:af:ac:8b:62: ec:5f:d5:8d:1d:cd:e7:07:3c:1d:57:6d:23:71:95:6b:58:4a: 0c:c2:01:55:98:09:fd:b8:5b:d4:52:50:4e:e0:ab:69:a7:88: 86:9a:43:9f:0b:25:f4:7e:b3:0f:8b:e9:b2:8a:73:c3:4b:c8: d1:e0:5c:94:7b:72:d7:f6:64:11:95:f2:f6:cf:ad:96:e4:e1: ea:e5:d1:f4:a2:6d:b1:f3:29:0c:80:08:57:53:d0:55:39:3a: 12:35:da:1e:fd:e9:9b:63:ff:d8:d0:29:ad:90:99:01:12:af: 3c:2f:77:83:2c:dc:fd:60:0d:09:ce:cc:0d:b7:2f:b4:31:ce: 92:ce:26:58:21:8d:6d:3a:bb:48:bb:fd:56:6f:4b:0a:a8:23: f7:d5:0f:53:4b:0e:a0:9d:f6:44:c5:b3:34:dd:06:48:b8:eb: 56:fb:99:79:70:a7:8e:a0:f9:d1:ca:52:8c:28:61:7a:5b:32: d3:03:fd:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fslJx0cTITY/5i4F+sKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Zjg4NWU0NDMyYTU2MTFhMmVkMGM0OWY4MDRjYTZhNjUwYWNkNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3/7+6cxKZDQ4scfKhQRDwl/j8RD inLrUCyAm/yiocdM99sj7mK8dTqPnyR1DQylbryCy7OcGbqs9mv2+lV1pWtCjwfZ R+3IJB5yisIPBbWbHooQd9nZstx3fnhI+qLLVv6D5BD62xy2Yj2ujbhDlPtna8mJ SpSQv2BoFQDaYSVCn4m2QMmoDNBX2dG5viqHVSYN0yGgxJtxDrSZFiVxP0C3cyVP xzw86c6qrdC5OlepvlbC9U/aAg04d467lQvG/Eh6uvo1+4jdtP/0+n5iTd3bSROh jP7pQzYHROFiQwWyTwMpgLBXlASaG47PFTRCrpe5fH8Ym2FZW5yeDWoyVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE+IXkQypWEaLtDEn4BMpqZQrNXyMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvVDRoZVJES2xZUm91ME1TZmdFeW1wbENzMWZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADmYIAwQA W8j/MA0GCSqGSIb3DQEBCwUAA4IBAQAPYLpZ9j8/MbzVc//aH1vzUglv8A3N+ZZB S4t3++vLplXExrzkcApIAocEMZ2VaHHy919XxOx2r/SG2WD8rhz+IgZq4K+si2Ls X9WNHc3nBzwdV20jcZVrWEoMwgFVmAn9uFvUUlBO4Ktpp4iGmkOfCyX0frMPi+my inPDS8jR4FyUe3LX9mQRlfL2z62W5OHq5dH0om2x8ykMgAhXU9BVOToSNdoe/emb Y//Y0CmtkJkBEq88L3eDLNz9YA0JzswNty+0Mc6SziZYIY1tOrtIu/1Wb0sKqCP3 1Q9TSw6gnfZExbM03QZIuOtW+5l5cKeOoPnRylKMKGF6WzLTA/2y -----END CERTIFICATE-----Generated at Wed Jan 21 04:57:29 2026 by rpki-client