This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/4avV52VadcXyjmFmkPiOZqd4aEo.roa File: 4avV52VadcXyjmFmkPiOZqd4aEo.roa (raw, json) Hash identifier: rACIPz05aOD1m23fMqk7AR2NAoediVEN3H+EA6u4xuE= Subject key identifier: E1:AB:D5:E7:65:5A:75:C5:F2:8E:61:66:90:F8:8E:66:A7:78:68:4A Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B78A3109F850DC2DE85044E8CFCC31F53 Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/4avV52VadcXyjmFmkPiOZqd4aEo.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62412 IP address blocks: 192.140.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:10:9f:85:0d:c2:de:85:04:4e:8c:fc:c3:1f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1abd5e7655a75c5f28e616690f88e66a778684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:3f:4b:de:de:44:b8:fe:22:64:09:d4:65: e6:0c:bc:26:f9:f7:f2:d0:11:f5:89:fd:a8:80:82: 5c:33:2a:d6:c0:38:fc:c9:8a:2e:a9:6b:56:e6:db: 36:9e:62:11:2b:c8:fa:2c:1e:3a:ac:fa:d3:3d:7c: a0:c1:41:26:89:e1:be:8c:cb:08:e4:c2:fc:03:54: 87:0b:89:94:a6:84:df:cb:b6:04:6a:4b:55:71:34: 6f:40:0c:16:71:97:9a:c2:ce:3f:1b:59:b7:fb:07: e9:67:f0:86:26:af:99:a1:f9:c1:ca:c8:33:ae:d9: 9c:33:ed:70:9f:1a:33:ec:63:35:93:12:17:5e:5b: c8:fe:af:c8:2b:e0:d3:bb:01:27:2f:a5:b0:25:1e: de:b8:20:d6:e7:49:22:9f:d3:dd:04:bf:b6:fb:2a: ad:9b:bb:33:8e:3a:32:10:a0:ad:d9:da:e6:57:21: 5b:9f:9c:da:92:20:26:4d:ef:28:b8:b1:9c:84:d4: 86:e4:6c:ec:98:43:6c:e4:0c:85:43:d5:04:47:f8: a9:93:dc:ba:07:e9:e6:5d:0a:39:1c:13:fd:3a:76: 08:d3:e3:9d:84:5d:13:b0:55:11:cc:77:35:78:11: 2e:2e:d0:0b:17:d4:9a:8e:72:78:25:c5:a7:f2:64: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AB:D5:E7:65:5A:75:C5:F2:8E:61:66:90:F8:8E:66:A7:78:68:4A X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/4avV52VadcXyjmFmkPiOZqd4aEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.228.0/24 Signature Algorithm: sha256WithRSAEncryption 45:3d:7d:06:e2:0a:79:9a:48:9f:dc:b3:b8:93:97:dd:97:3d: 41:67:89:f9:bc:2c:38:80:0b:6d:4c:a6:1b:39:a6:f0:4d:b5: 53:20:52:33:56:02:b4:b8:85:29:98:35:74:13:81:29:b7:dd: cf:c9:6d:2f:dc:fa:24:3a:51:85:32:b5:bd:4d:b8:60:d5:0f: ea:69:c7:59:1f:31:be:b0:80:b8:e2:2a:79:d5:f7:11:5b:e3: dc:0f:4f:68:5a:dd:90:cf:89:95:4b:b6:60:b0:4d:5b:95:b8: 8a:ea:d3:85:a1:8b:3c:a7:58:68:b8:c8:cf:b1:b3:4b:ce:9b: 17:8d:34:7a:38:9d:1d:e0:7d:c9:c0:6e:56:3f:03:41:df:b5: 5c:e7:0f:65:cd:66:b8:e2:d4:54:d8:e8:57:a8:fe:04:15:2d: d0:27:a7:c9:9c:74:c6:1b:f3:59:6b:4c:ff:e0:02:6d:ac:ec: 29:81:d8:25:23:c3:c9:ec:b6:07:22:63:b1:0f:c6:61:06:75: 9e:b2:3f:35:11:5b:4b:0d:15:9e:d8:ff:ea:49:d9:4f:ef:51: 5f:94:ee:dc:d1:97:7b:e3:40:72:7e:19:8c:78:80:86:28:ed: 48:13:d3:11:bc:71:ac:bf:89:7b:cf:b9:19:69:62:e2:a7:44: 2b:3d:2c:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxCfhQ3C3oUEToz8wx9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWFiZDVlNzY1NWE3NWM1ZjI4ZTYxNjY5MGY4OGU2NmE3Nzg2ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4/S97eRLj+ImQJ1GXmDLwm+ffy 0BH1if2ogIJcMyrWwDj8yYouqWtW5ts2nmIRK8j6LB46rPrTPXygwUEmieG+jMsI 5ML8A1SHC4mUpoTfy7YEaktVcTRvQAwWcZeaws4/G1m3+wfpZ/CGJq+ZofnBysgz rtmcM+1wnxoz7GM1kxIXXlvI/q/IK+DTuwEnL6WwJR7euCDW50kin9PdBL+2+yqt m7szjjoyEKCt2drmVyFbn5zakiAmTe8ouLGchNSG5GzsmENs5AyFQ9UER/ipk9y6 B+nmXQo5HBP9OnYI0+OdhF0TsFURzHc1eBEuLtALF9SajnJ4JcWn8mQYTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGr1edlWnXF8o5hZpD4jmaneGhKMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvNGF2VjUyVmFkY1h5am1GbWtQaU9acWQ0YUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIzkMA0G CSqGSIb3DQEBCwUAA4IBAQBFPX0G4gp5mkif3LO4k5fdlz1BZ4n5vCw4gAttTKYb OabwTbVTIFIzVgK0uIUpmDV0E4Ept93PyW0v3PokOlGFMrW9Tbhg1Q/qacdZHzG+ sIC44ip51fcRW+PcD09oWt2Qz4mVS7ZgsE1blbiK6tOFoYs8p1houMjPsbNLzpsX jTR6OJ0d4H3JwG5WPwNB37Vc5w9lzWa44tRU2OhXqP4EFS3QJ6fJnHTGG/NZa0z/ 4AJtrOwpgdglI8PJ7LYHImOxD8ZhBnWesj81EVtLDRWe2P/qSdlP71FflO7c0Zd7 40ByfhmMeICGKO1IE9MRvHGsv4l7z7kZaWLip0QrPSyF -----END CERTIFICATE-----Generated at Wed Jan 7 10:41:55 2026 by rpki-client