This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa File: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (raw, json) Hash identifier: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ= Subject key identifier: E0:76:BF:D8:20:91:BE:0B:1C:B1:9F:AB:DC:67:08:68:27:D1:5B:AE Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Certificate serial: 019B7B363E06C8A4D74C69AE6B16FEE23829 Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8880 IP address blocks: 193.111.194.0/24 maxlen: 24 193.111.195.0/24 maxlen: 24 193.194.140.0/24 maxlen: 24 193.194.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3e:06:c8:a4:d7:4c:69:ae:6b:16:fe:e2:38:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e076bfd82091be0b1cb19fabdc67086827d15bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:85:07:a0:0c:47:18:a9:c0:b3:fe:9a:d7: d1:ad:13:2d:a4:f9:02:15:65:ea:17:9f:54:cb:a5: 35:03:84:a4:9c:d1:3b:2e:87:9c:c2:0b:e0:8e:28: d5:56:ee:4f:cc:ca:9b:03:e8:01:89:43:6a:10:64: 6e:49:5e:7b:36:b2:16:dd:e6:c6:69:e3:71:ac:61: 57:80:3d:5b:6f:a2:e7:84:9e:f8:9f:c6:cc:72:94: ce:98:cf:c9:35:52:a9:30:fe:ff:9f:11:8a:1e:60: 10:11:d8:bd:ca:9f:25:d7:94:fe:2a:17:26:fc:c5: ef:02:16:51:ee:13:96:84:3a:31:1f:3e:e1:6a:3d: 78:77:39:c0:ff:4a:13:15:f8:a7:e6:aa:7f:80:10: ae:82:af:bd:ec:7f:cf:c2:78:c9:d8:2f:a4:c7:b3: f8:a5:c2:2e:a8:b1:04:0a:66:43:2c:cf:59:21:00: b8:08:48:58:d8:e4:b9:6b:b4:98:33:75:c2:e6:1f: 08:12:85:14:96:6d:06:e1:29:b4:38:73:2f:f1:10: eb:9c:b1:5c:01:5d:ca:10:ef:5b:d5:c4:e1:8c:64: 94:11:ae:64:d2:7b:f1:89:76:d8:97:84:56:8d:1c: 60:15:5a:11:6c:c9:48:3b:84:d0:eb:1f:42:69:d9: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:BF:D8:20:91:BE:0B:1C:B1:9F:AB:DC:67:08:68:27:D1:5B:AE X509v3 Authority Key Identifier: keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.194.0/23 193.194.140.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:f4:78:f4:84:c6:79:77:94:15:37:d0:3a:5d:4d:67:10:7e: 23:e6:78:13:22:ba:20:22:4f:5f:42:39:1b:3b:dc:24:6f:3d: 5c:9f:0a:6b:72:da:af:79:9a:04:84:06:4d:d4:9f:e3:99:e0: 55:c5:06:07:52:a5:21:f5:4e:d2:72:4a:1e:2e:cc:7f:8b:c8: a8:6a:ad:7a:cd:fd:5d:3e:65:f7:12:a3:57:7f:38:c4:0d:25: 7b:90:48:2d:50:57:dd:12:7a:85:91:48:c7:7b:41:74:e0:e6: fd:95:22:70:f1:ac:34:a5:20:8d:05:a6:fb:4d:04:20:09:46: 71:1c:81:77:2b:47:f8:c8:a8:0a:b2:d7:5a:9f:02:7a:41:4b: 9d:27:9e:2d:45:54:d3:9b:ac:c7:78:a5:26:47:7b:20:0c:4a: 05:32:18:93:7b:d7:bf:51:c3:28:e6:04:12:7a:01:77:ae:e0: a9:b9:3c:74:d4:3a:5d:2f:70:0f:10:7c:bf:1b:9a:9c:7d:44: 56:d0:fb:4e:5b:5a:ef:a8:2a:e8:11:ef:9f:03:d6:04:cc:56: 90:dd:e6:ed:6e:8c:f5:e8:3f:1f:d3:0c:c1:b5:96:fc:0a:b0: b1:d6:e2:40:6f:91:b8:0a:9b:55:c4:50:68:2e:c0:a8:11:d9: 46:a1:44:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nj4GyKTXTGmuaxb+4jgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYWYzOGFkNDQwNjliZTY1NGQyZTc4N2Y5NmM0ZThmZDI2 YTUxMzIwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDc2YmZkODIwOTFiZTBiMWNiMTlmYWJkYzY3MDg2ODI3ZDE1YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTeFB6AMRxipwLP+mtfRrRMtpPkC FWXqF59Uy6U1A4SknNE7LoecwgvgjijVVu5PzMqbA+gBiUNqEGRuSV57NrIW3ebG aeNxrGFXgD1bb6LnhJ74n8bMcpTOmM/JNVKpMP7/nxGKHmAQEdi9yp8l15T+Khcm /MXvAhZR7hOWhDoxHz7haj14dznA/0oTFfin5qp/gBCugq+97H/PwnjJ2C+kx7P4 pcIuqLEECmZDLM9ZIQC4CEhY2OS5a7SYM3XC5h8IEoUUlm0G4Sm0OHMv8RDrnLFc AV3KEO9b1cThjGSUEa5k0nvxiXbYl4RWjRxgFVoRbMlIO4TQ6x9CadkniQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOB2v9ggkb4LHLGfq9xnCGgn0VuuMB8GA1UdIwQY MBaAFPGvOK1EBpvmVNLnh/lsTo/SalEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMt ZDdhMWIzZGY5YTAzLzEvNEhhXzJDQ1J2Z3Njc1otcjNHY0lhQ2ZSVzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wZmMzYTgtMGNmMS00ZTA1LThlNmMtZDdhMWIzZGY5YTAz LzEvOGE4NHJVUUdtLVpVMHVlSC1XeE9qOUpxVVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwW/CAwQB wcKMMA0GCSqGSIb3DQEBCwUAA4IBAQCP9Hj0hMZ5d5QVN9A6XU1nEH4j5ngTIrog Ik9fQjkbO9wkbz1cnwprctqveZoEhAZN1J/jmeBVxQYHUqUh9U7SckoeLsx/i8io aq16zf1dPmX3EqNXfzjEDSV7kEgtUFfdEnqFkUjHe0F04Ob9lSJw8aw0pSCNBab7 TQQgCUZxHIF3K0f4yKgKstdanwJ6QUudJ54tRVTTm6zHeKUmR3sgDEoFMhiTe9e/ UcMo5gQSegF3ruCpuTx01DpdL3APEHy/G5qcfURW0PtOW1rvqCroEe+fA9YEzFaQ 3ebtboz16D8f0wzBtZb8CrCx1uJAb5G4CptVxFBoLsCoEdlGoURi -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:02 2026 by rpki-client