This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa File: 4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa (raw, json) Hash identifier: VIkjYJrRr/vUMXwmdH32EDSuoEreHbJ8GbvjfrFA1JI= Subject key identifier: E0:66:24:8F:F7:F6:35:FE:3A:A2:F0:1B:23:D2:02:97:E3:54:3C:D9 Certificate issuer: /CN=b653166a6f1f33e4720e67d24dd32e44580352f0 Certificate serial: 019B78A2F456934FC404B5EA277DD36E33DF Authority key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52012 IP address blocks: 192.109.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f4:56:93:4f:c4:04:b5:ea:27:7d:d3:6e:33:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b653166a6f1f33e4720e67d24dd32e44580352f0 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e066248ff7f635fe3aa2f01b23d20297e3543cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:ac:85:18:fc:81:0b:3b:8f:4c:b5:07:58: 01:8e:6a:50:6b:93:c6:5b:fa:36:41:83:b3:ac:89: 41:3d:58:5c:58:0b:37:1e:95:92:67:1b:e8:57:b8: 38:d8:fc:6e:5b:6a:e0:ae:8c:c7:b0:d2:41:84:f1: 74:cc:bc:13:9d:92:96:6e:65:9d:54:2c:59:fb:ea: ea:69:e1:93:be:3a:ac:5a:a9:39:e6:42:2c:2c:e7: af:fb:dc:d4:74:7c:c8:33:35:56:b3:98:ff:fa:8d: f4:f3:65:74:8e:2f:5f:82:8b:59:2a:35:f4:75:6e: 5b:77:ea:37:7b:1f:81:7d:e0:14:93:f6:e5:6b:5c: 07:98:a9:c6:7f:7b:4b:96:45:15:f0:26:c6:1d:c8: 20:a2:96:d4:95:6d:c4:45:57:f2:89:dc:1c:e9:e9: cb:d1:b5:0a:f0:a9:a0:89:2d:dc:98:ae:fd:51:0d: 3f:62:ff:29:e6:90:98:51:19:f2:ce:bd:8e:6d:4c: 66:55:27:51:c6:c1:ea:fc:76:17:08:58:4a:1d:be: 42:b6:26:02:f8:c7:4b:43:09:c5:1e:4e:24:fb:42: 6b:03:8e:21:4d:36:cf:13:7d:e0:53:25:ec:e3:64: af:88:ae:e4:88:78:93:26:0b:56:97:a7:9b:27:eb: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:24:8F:F7:F6:35:FE:3A:A2:F0:1B:23:D2:02:97:E3:54:3C:D9 X509v3 Authority Key Identifier: keyid:B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/4GYkj_f2Nf46ovAbI9ICl-NUPNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.195.0/24 Signature Algorithm: sha256WithRSAEncryption 91:8f:94:71:38:2b:cf:ba:59:8d:29:03:ba:c8:3b:f2:8a:31: 75:59:b3:d2:7c:bc:ab:87:f6:2b:93:29:9d:c7:24:75:7e:a4: 1f:55:c5:40:fe:9f:b3:9d:03:9a:d2:d2:f3:c4:a3:f9:92:66: 04:3d:76:99:9e:51:4c:be:b7:b5:49:fd:03:33:ff:73:5c:39: b3:60:9d:a3:cd:45:da:84:87:fb:73:ef:f2:02:70:d6:83:3c: 32:a7:03:0a:81:2a:eb:de:e8:4e:52:e0:11:13:b5:43:da:ae: 11:a9:c8:95:ad:8f:72:68:0d:73:aa:49:d3:0f:53:7b:24:a8: 8a:23:b2:d6:f1:33:ab:ba:ac:41:56:bd:9d:4d:0c:7e:d7:ae: 3d:b7:65:bf:c9:85:95:2e:f0:b2:f5:4f:8d:59:22:f4:db:11: e7:c1:81:90:b8:d9:e1:3a:39:bc:a0:bc:10:59:15:5d:2a:a2: 2d:cb:3f:c4:19:e6:ac:a4:52:9b:d6:88:12:67:be:41:7f:2d: 42:04:f3:8e:d5:f9:cc:97:4e:54:42:d0:25:ef:12:54:ac:43: db:f9:9b:02:47:96:4f:9f:a4:f8:47:f7:5e:0b:21:d2:82:1c: 86:19:c5:7e:95:b6:7f:e2:16:88:43:1a:ce:a8:6c:56:0e:6f: 91:25:11:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovRWk0/EBLXqJ33TbjPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NTMxNjZhNmYxZjMzZTQ3MjBlNjdkMjRkZDMyZTQ0NTgw MzUyZjAwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDY2MjQ4ZmY3ZjYzNWZlM2FhMmYwMWIyM2QyMDI5N2UzNTQzY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldishRj8gQs7j0y1B1gBjmpQa5PG W/o2QYOzrIlBPVhcWAs3HpWSZxvoV7g42PxuW2rgrozHsNJBhPF0zLwTnZKWbmWd VCxZ++rqaeGTvjqsWqk55kIsLOev+9zUdHzIMzVWs5j/+o3082V0ji9fgotZKjX0 dW5bd+o3ex+BfeAUk/bla1wHmKnGf3tLlkUV8CbGHcggopbUlW3ERVfyidwc6enL 0bUK8KmgiS3cmK79UQ0/Yv8p5pCYURnyzr2ObUxmVSdRxsHq/HYXCFhKHb5CtiYC +MdLQwnFHk4k+0JrA44hTTbPE33gUyXs42SviK7kiHiTJgtWl6ebJ+t35wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBmJI/39jX+OqLwGyPSApfjVDzZMB8GA1UdIwQY MBaAFLZTFmpvHzPkcg5n0k3TLkRYA1LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjIt ZmNkMzdmMjYwNDdmLzEvNEdZa2pfZjJOZjQ2b3ZBYkk5SUNsLU5VUE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hZWI4YmMtODg0Yy00MDRmLWJjYjItZmNkMzdmMjYwNDdm LzEvdGxNV2FtOGZNLVJ5RG1mU1RkTXVSRmdEVXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3DMA0G CSqGSIb3DQEBCwUAA4IBAQCRj5RxOCvPulmNKQO6yDvyijF1WbPSfLyrh/Yrkymd xyR1fqQfVcVA/p+znQOa0tLzxKP5kmYEPXaZnlFMvre1Sf0DM/9zXDmzYJ2jzUXa hIf7c+/yAnDWgzwypwMKgSrr3uhOUuARE7VD2q4RqciVrY9yaA1zqknTD1N7JKiK I7LW8TOruqxBVr2dTQx+1649t2W/yYWVLvCy9U+NWSL02xHnwYGQuNnhOjm8oLwQ WRVdKqItyz/EGeaspFKb1ogSZ75Bfy1CBPOO1fnMl05UQtAl7xJUrEPb+ZsCR5ZP n6T4R/deCyHSghyGGcV+lbZ/4haIQxrOqGxWDm+RJRFG -----END CERTIFICATE-----Generated at Tue Jan 27 16:04:44 2026 by rpki-client