This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/00o4xaDHpiFteTUPLMlUN7rQVoI.roa File: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (raw, json) Hash identifier: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E= Subject key identifier: D3:4A:38:C5:A0:C7:A6:21:6D:79:35:0F:2C:C9:54:37:BA:D0:56:82 Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Certificate serial: 019B7BA4DDCAEBE5838CACAF08E73EC0DE0B Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/00o4xaDHpiFteTUPLMlUN7rQVoI.roa Signing time: Thu 01 Jan 2026 22:19:20 +0000 ROA not before: Thu 01 Jan 2026 22:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 82.178.33.0/24 maxlen: 24 82.178.158.0/23 maxlen: 24 134.0.216.0/21 maxlen: 24 213.202.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dd:ca:eb:e5:83:8c:ac:af:08:e7:3e:c0:de:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d34a38c5a0c7a6216d79350f2cc95437bad05682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:5c:bd:ef:ad:2c:d9:02:9a:bf:80:6b:12: 05:ff:f6:eb:0e:7c:a0:cb:60:33:ff:dc:85:17:e6: b8:15:80:1c:a8:88:d1:9d:ac:91:76:3e:dc:47:35: 6c:4e:01:5a:50:41:86:4e:bb:16:48:20:da:6b:15: 42:d3:d8:fd:1c:1e:ba:f1:b5:55:4b:e3:c5:ec:b3: c0:c0:ba:8a:f4:9f:e5:6c:a7:ec:67:14:09:a3:09: c7:c1:a8:87:dd:cb:00:55:bb:7e:18:e7:c1:88:a5: f9:63:6e:f4:90:91:14:48:54:23:a7:91:e2:43:eb: c7:99:0d:fe:44:c6:03:ea:d9:6b:4a:3e:c3:01:26: 46:c9:a9:0f:32:f4:32:24:63:45:6f:77:54:7e:a9: 36:0b:08:69:b0:f6:61:c4:bf:e2:18:e6:9d:2a:03: 22:6a:32:3f:2c:46:1a:d9:90:67:b9:41:6d:2e:ff: 1b:31:18:2e:86:88:4a:f9:1c:09:a1:91:f4:ff:51: fc:4e:a7:0a:f4:3d:80:a8:c5:59:a0:eb:f7:49:6d: a0:36:3e:17:56:03:a1:10:78:41:eb:01:e4:a0:34: 3b:fb:3d:48:1e:53:0c:fc:41:81:1a:2d:f9:1a:4a: af:5b:cf:a6:f6:c5:18:77:bb:5f:40:2c:c8:40:91: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:38:C5:A0:C7:A6:21:6D:79:35:0F:2C:C9:54:37:BA:D0:56:82 X509v3 Authority Key Identifier: keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/00o4xaDHpiFteTUPLMlUN7rQVoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.178.33.0/24 82.178.158.0/23 134.0.216.0/21 213.202.0.0/21 Signature Algorithm: sha256WithRSAEncryption ae:17:24:80:80:a2:86:f9:9e:29:cb:90:2d:ab:84:82:91:a6: 34:ed:c3:2c:e8:d3:22:4d:a3:78:e4:72:2d:7d:3f:f6:49:91: d9:56:45:38:e8:a7:7c:01:6c:7b:da:22:62:40:bc:11:77:cb: 18:05:f2:5e:fe:a8:2f:53:f2:0f:c5:53:00:b8:94:03:9e:4a: 4d:f6:b7:1b:e5:1e:04:18:aa:8a:a5:02:e2:fd:33:24:a4:d7: 60:79:f9:eb:61:42:d4:ff:2a:7f:2e:a3:e6:fc:af:d1:8e:c7: 09:2f:51:1c:6b:4b:bf:17:55:25:ca:b5:e9:5d:3b:28:b1:79: 21:78:07:8e:69:ff:3e:48:a7:37:e4:55:db:00:1b:e7:20:fe: e0:b7:d5:36:ea:7b:d7:3a:1f:ac:72:d6:aa:e7:de:5f:03:c9: 84:98:29:23:e0:2f:ca:4f:40:da:bd:0b:67:c3:d5:0c:f9:77: 50:3d:39:1f:49:e8:b4:93:fd:15:0d:4e:a4:c4:54:29:08:60: 15:66:ce:10:e8:5a:7f:80:e1:24:4d:76:fa:19:e4:4a:60:00: fb:a9:60:16:8c:81:90:9f:ad:23:59:35:f4:7f:a8:21:67:8d: b1:f5:ce:f5:a4:d2:8e:d2:d1:08:a4:9d:96:d6:fb:ea:d1:3d: 6a:4c:6a:f0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pN3K6+WDjKyvCOc+wN4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl ODg3ZGMwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzRhMzhjNWEwYzdhNjIxNmQ3OTM1MGYyY2M5NTQzN2JhZDA1NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBNcve+tLNkCmr+AaxIF//brDnyg y2Az/9yFF+a4FYAcqIjRnayRdj7cRzVsTgFaUEGGTrsWSCDaaxVC09j9HB668bVV S+PF7LPAwLqK9J/lbKfsZxQJownHwaiH3csAVbt+GOfBiKX5Y270kJEUSFQjp5Hi Q+vHmQ3+RMYD6tlrSj7DASZGyakPMvQyJGNFb3dUfqk2CwhpsPZhxL/iGOadKgMi ajI/LEYa2ZBnuUFtLv8bMRguhohK+RwJoZH0/1H8TqcK9D2AqMVZoOv3SW2gNj4X VgOhEHhB6wHkoDQ7+z1IHlMM/EGBGi35GkqvW8+m9sUYd7tfQCzIQJF2LwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNNKOMWgx6YhbXk1DyzJVDe60FaCMB8GA1UdIwQY MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt YWFlMTQ0NzYwM2MwLzEvMDBvNHhhREhwaUZ0ZVRVUExNbFVON3JRVm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUrIhAwQB UrKeAwQDhgDYAwQD1coAMA0GCSqGSIb3DQEBCwUAA4IBAQCuFySAgKKG+Z4py5At q4SCkaY07cMs6NMiTaN45HItfT/2SZHZVkU46Kd8AWx72iJiQLwRd8sYBfJe/qgv U/IPxVMAuJQDnkpN9rcb5R4EGKqKpQLi/TMkpNdgefnrYULU/yp/LqPm/K/RjscJ L1Eca0u/F1UlyrXpXTsosXkheAeOaf8+SKc35FXbABvnIP7gt9U26nvXOh+sctaq 595fA8mEmCkj4C/KT0DavQtnw9UM+XdQPTkfSei0k/0VDU6kxFQpCGAVZs4Q6Fp/ gOEkTXb6GeRKYAD7qWAWjIGQn60jWTX0f6ghZ42x9c71pNKO0tEIpJ2W1vvq0T1q TGrw -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:49 2026 by rpki-client