This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa File: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (raw, json) Hash identifier: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8= Subject key identifier: E1:50:3B:C1:92:5A:88:75:86:D8:60:0F:B4:0E:6E:D4:10:DC:9F:82 Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7 Certificate serial: 019B7C7F5E4CA1EBEB77AEC0ACB5F02F1450 Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa Signing time: Fri 02 Jan 2026 02:18:00 +0000 ROA not before: Fri 02 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50141 IP address blocks: 213.5.80.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5e:4c:a1:eb:eb:77:ae:c0:ac:b5:f0:2f:14:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7 Validity Not Before: Jan 2 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1503bc1925a887586d8600fb40e6ed410dc9f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:f7:8f:17:85:0a:16:60:0a:b5:8e:ae:4b: 9c:81:97:9c:fe:be:3e:87:69:97:2b:fa:5d:c4:f8: ec:53:93:3c:11:dd:b2:93:ec:2c:b8:e3:c1:3f:5f: e0:bd:91:7c:0d:17:a0:28:54:6f:85:71:db:e7:f7: 06:ef:c4:80:12:ff:ef:1d:53:f1:66:1f:7c:9f:60: e8:f6:87:19:d2:4a:99:6a:79:2c:6e:32:ed:58:f2: 15:bb:2e:de:9d:a9:2e:90:00:00:c5:8b:71:96:f3: 34:25:56:89:c8:2b:b8:a6:c7:fb:17:f6:f5:a3:e6: 9a:cf:65:dd:e3:79:cd:7a:a0:c9:22:ff:37:f9:71: 75:73:46:c2:31:64:6f:07:f7:d3:2b:b3:37:ff:04: 66:4c:d9:73:0d:6d:09:cf:4e:6e:ec:60:35:d5:c0: 27:2e:a1:f3:09:f8:7b:d5:5d:3c:e6:cd:7c:87:72: d8:7a:0f:5f:2c:aa:2f:be:ec:1d:3b:3e:5a:65:39: d2:0a:0b:3a:af:c5:e2:2f:7b:92:54:bc:44:e6:f6: e3:03:83:11:0e:5e:77:8e:4e:88:d3:2e:98:bd:84: 76:c6:13:a3:a7:9c:85:fb:a8:33:41:d8:77:99:57: ae:a4:4d:23:34:7d:af:c9:04:db:cc:7e:e5:9f:88: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:50:3B:C1:92:5A:88:75:86:D8:60:0F:B4:0E:6E:D4:10:DC:9F:82 X509v3 Authority Key Identifier: keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.5.80.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:3b:b2:1e:9c:aa:ff:a6:e8:fc:c3:cb:41:a0:a3:bf:6a:79: df:21:20:5a:0f:56:bb:6b:4a:3e:d5:7b:0f:09:fa:d7:2b:91: fa:4b:98:18:54:c4:b8:03:e9:fa:b2:18:36:0b:5a:d7:c8:b5: c4:31:8c:fb:08:e2:54:7f:55:ea:c2:0e:66:3e:6b:fe:94:ee: 42:27:0f:92:c5:0d:38:18:dc:ba:eb:5a:5a:0e:32:0a:2b:ff: 28:95:c2:b8:d3:86:5c:57:e3:65:c8:d6:fc:fa:d2:38:10:6b: 8d:a6:df:5a:2a:a9:49:64:3c:d5:99:64:91:9a:54:0a:73:6d: 95:e8:5a:e8:a3:17:39:a6:ce:c3:7e:ac:26:3d:37:df:5a:08: 9c:d2:b6:d4:00:35:fc:6d:d6:17:be:a0:29:35:15:2f:6d:2d: c2:b9:ff:5d:b6:3a:94:c4:69:a3:55:fd:54:24:32:a3:ee:02: 6d:b1:c2:22:3e:4e:9a:2b:70:ed:4e:8d:bb:ae:d9:1d:c0:c9: 1d:dc:0e:53:52:4b:77:a3:c8:ab:3b:29:07:a0:f6:86:80:ff: 31:89:59:8a:50:be:66:83:0f:62:7b:ae:27:d0:a2:f8:d9:32: fd:f3:b6:4e:ed:e8:d5:f8:b4:f6:12:72:9f:c0:4a:d8:49:92: 1d:f1:93:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f15Moevrd67ArLXwLxRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4 Mjk2YzcwHhcNMjYwMTAyMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTUwM2JjMTkyNWE4ODc1ODZkODYwMGZiNDBlNmVkNDEwZGM5ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH/3jxeFChZgCrWOrkucgZec/r4+ h2mXK/pdxPjsU5M8Ed2yk+wsuOPBP1/gvZF8DRegKFRvhXHb5/cG78SAEv/vHVPx Zh98n2Do9ocZ0kqZanksbjLtWPIVuy7enakukAAAxYtxlvM0JVaJyCu4psf7F/b1 o+aaz2Xd43nNeqDJIv83+XF1c0bCMWRvB/fTK7M3/wRmTNlzDW0Jz05u7GA11cAn LqHzCfh71V085s18h3LYeg9fLKovvuwdOz5aZTnSCgs6r8XiL3uSVLxE5vbjA4MR Dl53jk6I0y6YvYR2xhOjp5yF+6gzQdh3mVeupE0jNH2vyQTbzH7ln4hhWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOFQO8GSWoh1hthgD7QObtQQ3J+CMB8GA1UdIwQY MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt ZmZlZDUzZjQ1ZGVkLzEvNFZBN3daSmFpSFdHMkdBUHRBNXUxQkRjbjRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1QVQMA0G CSqGSIb3DQEBCwUAA4IBAQAKO7IenKr/puj8w8tBoKO/annfISBaD1a7a0o+1XsP CfrXK5H6S5gYVMS4A+n6shg2C1rXyLXEMYz7COJUf1Xqwg5mPmv+lO5CJw+SxQ04 GNy661paDjIKK/8olcK404ZcV+NlyNb8+tI4EGuNpt9aKqlJZDzVmWSRmlQKc22V 6Frooxc5ps7DfqwmPTffWgic0rbUADX8bdYXvqApNRUvbS3Cuf9dtjqUxGmjVf1U JDKj7gJtscIiPk6aK3DtTo27rtkdwMkd3A5TUkt3o8irOykHoPaGgP8xiVmKUL5m gw9ie64n0KL42TL987ZO7ejV+LT2EnKfwErYSZId8ZN1 -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:36 2026 by rpki-client