This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa File: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (raw, json) Hash identifier: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o= Subject key identifier: E1:53:B8:24:C0:B0:BC:75:74:B1:F5:0D:2C:0E:7D:69:CD:83:83:76 Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019B7DCA710E952CCFD2D4715A747044D614 Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11426 IP address blocks: 86.109.80.0/23 maxlen: 24 86.109.82.0/23 maxlen: 24 86.109.84.0/23 maxlen: 24 86.109.86.0/23 maxlen: 24 86.109.92.0/23 maxlen: 24 86.109.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:71:0e:95:2c:cf:d2:d4:71:5a:74:70:44:d6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e153b824c0b0bc7574b1f50d2c0e7d69cd838376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:cb:62:bb:af:4c:2e:80:bd:df:d7:ca:2e: 01:f9:30:bf:4a:8d:42:08:ed:43:57:88:9e:50:e7: d5:3b:51:32:de:b3:58:9a:53:34:8f:73:33:bf:f1: 57:76:8f:0c:0d:25:76:78:2b:11:e8:16:0a:05:44: 26:82:85:c6:eb:83:25:4f:1f:1e:3a:33:f0:de:9f: 0a:b5:f9:b1:4b:f5:29:e1:0a:6c:ab:97:dd:c5:65: 07:ee:f5:11:60:b3:c0:37:b0:73:b0:a6:97:1a:63: 64:6f:c3:05:e9:f2:75:56:da:c1:73:a8:1b:b0:28: 62:3c:52:ec:84:c1:bb:22:01:72:1a:5f:bc:9c:f3: 45:31:0a:61:8e:70:38:9f:0d:51:9f:b3:0c:c6:72: a1:b5:8d:21:98:a8:c2:d6:5b:13:2a:84:1c:05:c5: d5:a4:93:6e:89:62:a3:b2:3c:c8:c6:c8:69:37:00: 36:fc:15:0d:d1:8e:da:4a:f8:50:ed:ae:fa:de:17: 80:7a:38:c7:c8:69:11:0e:8d:90:b6:fe:62:d3:9c: ec:f2:9c:e4:1e:e9:0d:75:5a:2e:78:98:16:80:ea: 71:ab:31:ce:ba:41:2e:67:9b:7e:6b:74:c5:ab:8d: e8:1e:e1:66:16:34:03:26:7e:1b:3d:44:d7:3c:50: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:53:B8:24:C0:B0:BC:75:74:B1:F5:0D:2C:0E:7D:69:CD:83:83:76 X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.80.0/21 86.109.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:46:c4:e0:ee:ab:0e:10:6c:b4:88:d0:38:39:0b:16:91:7e: 45:e6:7f:8d:30:de:a7:40:1c:35:a5:d1:d5:00:1e:6c:34:a6: 3d:e5:61:15:b1:f3:d9:a0:70:31:e0:fc:95:bc:5c:d9:87:1a: 1f:a1:e0:c2:1b:a5:2a:03:09:9e:90:13:bc:4a:9e:2e:e5:8a: 58:15:a5:50:ea:9c:8d:48:8d:aa:4e:60:85:68:7d:17:2d:05: 6b:d3:d7:57:57:1d:a8:67:92:6e:32:eb:9e:c6:1d:6f:b0:0e: 85:5a:52:05:b8:dd:d2:a0:1a:b2:c3:22:67:c6:c1:ad:7b:08: e5:5e:ed:c5:08:7e:ae:05:1e:59:08:29:f5:6f:f9:39:b4:34: b0:41:19:ae:27:61:c1:47:b3:52:34:c0:1f:63:93:ef:a5:34: 30:da:5e:a6:50:b2:c6:89:bc:9a:41:a1:2e:22:ca:08:b3:b3: 99:63:8b:5b:92:fa:54:7a:6e:bf:9d:9b:21:62:04:c8:16:f6: 44:c5:c5:61:28:78:d8:22:9b:bb:94:d9:86:f4:f0:1d:c5:73: e0:5c:fc:30:61:08:11:88:16:99:8e:79:54:9b:94:51:df:2d: 18:41:a7:ae:75:13:ba:c7:a8:3f:54:05:20:f3:1a:9c:3b:eb: ee:0a:9d:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ynEOlSzP0tRxWnRwRNYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTUzYjgyNGMwYjBiYzc1NzRiMWY1MGQyYzBlN2Q2OWNkODM4Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z/LYruvTC6Avd/Xyi4B+TC/So1C CO1DV4ieUOfVO1Ey3rNYmlM0j3Mzv/FXdo8MDSV2eCsR6BYKBUQmgoXG64MlTx8e OjPw3p8KtfmxS/Up4Qpsq5fdxWUH7vURYLPAN7BzsKaXGmNkb8MF6fJ1VtrBc6gb sChiPFLshMG7IgFyGl+8nPNFMQphjnA4nw1Rn7MMxnKhtY0hmKjC1lsTKoQcBcXV pJNuiWKjsjzIxshpNwA2/BUN0Y7aSvhQ7a763heAejjHyGkRDo2Qtv5i05zs8pzk HukNdVoueJgWgOpxqzHOukEuZ5t+a3TFq43oHuFmFjQDJn4bPUTXPFBkhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOFTuCTAsLx1dLH1DSwOfWnNg4N2MB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvNFZPNEpNQ3d2SFYwc2ZVTkxBNTlhYzJEZzNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVm1QAwQC Vm1cMA0GCSqGSIb3DQEBCwUAA4IBAQBvRsTg7qsOEGy0iNA4OQsWkX5F5n+NMN6n QBw1pdHVAB5sNKY95WEVsfPZoHAx4PyVvFzZhxofoeDCG6UqAwmekBO8Sp4u5YpY FaVQ6pyNSI2qTmCFaH0XLQVr09dXVx2oZ5JuMuuexh1vsA6FWlIFuN3SoBqywyJn xsGtewjlXu3FCH6uBR5ZCCn1b/k5tDSwQRmuJ2HBR7NSNMAfY5PvpTQw2l6mULLG ibyaQaEuIsoIs7OZY4tbkvpUem6/nZshYgTIFvZExcVhKHjYIpu7lNmG9PAdxXPg XPwwYQgRiBaZjnlUm5RR3y0YQaeudRO6x6g/VAUg8xqcO+vuCp2+ -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client