This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4FZM4EbNYVWbjX94O02MX1kRDyI.roa File: 4FZM4EbNYVWbjX94O02MX1kRDyI.roa (raw, json) Hash identifier: lEv1Sxr4CUG4fJvA62rz3NmguEig2xfi+enTtgwBk5s= Subject key identifier: E0:56:4C:E0:46:CD:61:55:9B:8D:7F:78:3B:4D:8C:5F:59:11:0F:22 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C807F18087F25B5F20B5064281C1C34 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4FZM4EbNYVWbjX94O02MX1kRDyI.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47440 IP address blocks: 46.243.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7f:18:08:7f:25:b5:f2:0b:50:64:28:1c:1c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0564ce046cd61559b8d7f783b4d8c5f59110f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:e1:82:6b:9f:57:27:fa:ad:0a:53:93:5b: c0:ef:a1:21:9c:3f:04:a4:e4:08:3e:69:73:f4:a6: f4:de:8d:a5:09:82:80:cf:74:2e:9b:c8:a1:e5:92: b6:97:97:d3:80:59:fd:fa:74:76:89:3e:02:0e:6e: fd:f3:4e:65:45:57:a0:c4:78:03:71:28:b6:43:5a: f6:9a:56:24:55:5c:30:7a:58:4d:c9:cf:01:a2:bc: a2:6f:8a:bc:b0:64:fc:5a:61:2a:08:ed:59:4b:0e: 87:72:e7:7c:57:d1:0e:d4:0c:ad:62:1c:d3:86:90: 5b:c3:6e:95:a9:b1:89:a4:37:a2:e5:44:01:3f:85: df:d7:67:7f:6c:7e:90:9e:9f:2a:c0:70:18:08:97: ca:ad:e7:38:b3:24:d8:bd:eb:e0:01:6c:62:18:c2: e9:fd:17:6c:19:f7:8d:59:56:b1:aa:10:2b:38:42: 08:a6:82:01:a6:91:e9:47:9f:a4:a8:d7:2a:f3:3e: 5b:25:ac:2e:23:4e:3b:62:ec:ee:c6:f6:c4:59:26: 62:6f:06:ae:9a:27:c0:63:f3:6b:33:75:a6:20:db: d0:8f:09:46:a8:dd:fd:81:de:1b:5a:b2:b7:e4:8e: c0:78:b9:36:99:f5:2a:26:54:fe:87:e2:55:98:28: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:4C:E0:46:CD:61:55:9B:8D:7F:78:3B:4D:8C:5F:59:11:0F:22 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4FZM4EbNYVWbjX94O02MX1kRDyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.2.0/24 Signature Algorithm: sha256WithRSAEncryption 56:ff:d3:f9:35:ab:12:8b:b0:e7:dc:5c:3c:b8:d8:bd:e1:db: b1:ec:d3:28:bb:cf:eb:4d:89:d5:32:d6:86:18:eb:f3:ce:5a: 5e:9b:07:40:ca:5b:3d:59:dc:0b:bf:f9:c8:64:72:b2:61:dc: b3:09:3b:a1:e1:94:38:71:7a:0f:8d:58:e9:f7:85:13:62:0c: b8:06:ef:9e:bc:e7:7a:32:63:93:92:1b:f1:f2:58:b6:ed:a6: a3:42:d3:f9:ec:d8:b0:89:c9:20:49:ac:81:ce:2d:66:1c:6c: 42:f3:34:b3:09:d0:6a:e9:70:13:d9:d9:89:60:23:73:28:6b: 0e:22:20:11:8b:e8:50:e9:de:51:41:b7:c4:74:f0:e8:11:ef: 20:8f:1b:02:50:21:70:8d:3e:72:93:f6:2c:67:41:0d:88:e7: 56:46:b2:6d:c1:90:48:92:c5:da:a4:4b:f1:9e:e9:4a:99:23: 16:8d:41:c4:d5:11:e3:d5:8b:0f:04:e5:ed:69:af:05:18:c4: 8a:4b:66:7f:5c:16:86:9c:b1:ef:f2:1c:39:34:f9:9a:30:15: 2f:26:3a:bf:51:66:6e:aa:36:a0:aa:0c:9e:5e:cf:85:00:59: 65:eb:8d:9a:75:e0:66:2c:87:85:c6:69:22:ad:6a:b6:45:ef: 80:71:40:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH8YCH8ltfILUGQoHBw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDU2NGNlMDQ2Y2Q2MTU1OWI4ZDdmNzgzYjRkOGM1ZjU5MTEwZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgrhgmufVyf6rQpTk1vA76EhnD8E pOQIPmlz9Kb03o2lCYKAz3Qum8ih5ZK2l5fTgFn9+nR2iT4CDm79805lRVegxHgD cSi2Q1r2mlYkVVwwelhNyc8Boryib4q8sGT8WmEqCO1ZSw6Hcud8V9EO1AytYhzT hpBbw26VqbGJpDei5UQBP4Xf12d/bH6Qnp8qwHAYCJfKrec4syTYvevgAWxiGMLp /RdsGfeNWVaxqhArOEIIpoIBppHpR5+kqNcq8z5bJawuI047YuzuxvbEWSZibwau mifAY/NrM3WmINvQjwlGqN39gd4bWrK35I7AeLk2mfUqJlT+h+JVmCjDYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBWTOBGzWFVm41/eDtNjF9ZEQ8iMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvNEZaTTRFYk5ZVldialg5NE8wMk1YMWtSRHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvMCMA0G CSqGSIb3DQEBCwUAA4IBAQBW/9P5NasSi7Dn3Fw8uNi94dux7NMou8/rTYnVMtaG GOvzzlpemwdAyls9WdwLv/nIZHKyYdyzCTuh4ZQ4cXoPjVjp94UTYgy4Bu+evOd6 MmOTkhvx8li27aajQtP57NiwickgSayBzi1mHGxC8zSzCdBq6XAT2dmJYCNzKGsO IiARi+hQ6d5RQbfEdPDoEe8gjxsCUCFwjT5yk/YsZ0ENiOdWRrJtwZBIksXapEvx nulKmSMWjUHE1RHj1YsPBOXtaa8FGMSKS2Z/XBaGnLHv8hw5NPmaMBUvJjq/UWZu qjagqgyeXs+FAFll642adeBmLIeFxmkirWq2Re+AcUD1 -----END CERTIFICATE-----Generated at Wed Jan 21 08:07:57 2026 by rpki-client