This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/D4beAc045-n-__O8Gk3mL0QKXy4.roa File: D4beAc045-n-__O8Gk3mL0QKXy4.roa (raw, json) Hash identifier: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY= Subject key identifier: 0F:86:DE:01:CD:38:E7:E9:FE:FF:F3:BC:1A:4D:E6:2F:44:0A:5F:2E Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019B7910043B87BD978B2184073EB03ECEDF Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/D4beAc045-n-__O8Gk3mL0QKXy4.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6908 IP address blocks: 185.120.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:04:3b:87:bd:97:8b:21:84:07:3e:b0:3e:ce:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f86de01cd38e7e9fefff3bc1a4de62f440a5f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:aa:8f:96:1b:88:5a:7e:3d:e0:9d:d1:3d: 93:8f:4e:b8:1c:0d:9f:96:b2:cc:75:3d:03:fd:17: e4:5f:a1:c8:4b:d5:1e:63:38:74:be:fe:a7:c3:db: e7:58:9e:de:5b:3f:2e:7d:a3:d9:8d:2b:b0:76:28: d8:66:ac:af:6b:8c:d0:34:f5:e3:1d:ae:20:c9:22: a8:d4:c4:4d:d8:4f:51:81:ab:89:00:e0:1f:9b:97: 6d:ea:94:fc:94:fe:38:d0:71:96:17:07:93:b8:cd: 99:06:46:fa:f5:30:b8:fe:03:f9:bb:57:5c:42:62: 77:de:dd:82:60:5e:c9:93:ca:d2:67:2c:b2:ad:fd: c1:eb:9c:77:9d:e1:b1:38:d2:d1:9b:b8:da:87:ae: f8:8b:72:2f:ef:a9:8e:3b:fd:92:dd:74:65:a1:3a: 97:ca:c2:d5:d0:bc:05:60:96:61:9f:39:64:38:0b: e6:a1:0d:39:e7:ae:26:b8:2a:4c:3e:8a:57:c6:81: 3e:7e:5a:a7:96:7b:d9:c6:66:ae:02:46:57:3f:30: 75:53:2a:62:6c:ba:5b:f3:fd:5b:8c:61:4e:13:43: 6f:3c:6c:81:42:d9:1f:d7:fd:92:de:3d:f4:c4:46: 8c:2f:68:4c:55:96:82:03:18:bb:f4:54:39:e9:a6: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:86:DE:01:CD:38:E7:E9:FE:FF:F3:BC:1A:4D:E6:2F:44:0A:5F:2E X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/D4beAc045-n-__O8Gk3mL0QKXy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:2d:9b:24:99:5b:29:34:2f:c0:e3:48:a6:94:b7:ac:72:a0: 86:b8:2e:97:e4:a2:f6:04:96:5b:c5:d4:ea:1f:48:51:c8:16: 40:9e:03:af:d9:a7:66:bd:ef:27:bb:ab:2d:12:32:25:f3:92: 36:a5:c5:4a:ec:8e:03:06:76:13:37:3a:ea:02:fa:66:16:50: f4:16:c1:83:a3:5a:37:92:ff:c6:f3:9f:58:18:79:0b:ae:dd: c6:53:f6:66:bc:18:45:c8:66:0f:49:bd:ae:d7:e9:0b:04:c3: 1c:b9:85:aa:69:0c:10:8b:e3:6f:11:d1:f9:f1:a0:05:5f:1f: 01:40:c8:f8:8d:b9:c0:5b:b4:60:f1:4c:7b:93:b5:bb:08:53: 7b:fd:78:e1:78:6a:eb:07:11:2c:15:26:38:dd:85:ec:ae:3c: 01:ac:45:1c:06:a5:94:05:05:bc:73:56:f8:87:39:f9:9f:e4: a7:f8:2d:99:f6:e4:67:8b:76:5a:f5:58:c9:e2:81:02:4f:9a: ca:e7:73:9e:08:00:7f:bb:f0:0a:02:6e:42:04:61:66:c7:af: 3f:57:ba:ab:3e:ad:1d:95:d4:5a:6d:f4:f2:af:c0:67:27:25: 5a:28:b6:35:ec:0a:8b:08:f8:ea:20:ab:1f:e1:c3:cb:05:33: 14:32:1b:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAQ7h72XiyGEBz6wPs7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjg2ZGUwMWNkMzhlN2U5ZmVmZmYzYmMxYTRkZTYyZjQ0MGE1ZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbiqj5YbiFp+PeCd0T2Tj064HA2f lrLMdT0D/RfkX6HIS9UeYzh0vv6nw9vnWJ7eWz8ufaPZjSuwdijYZqyva4zQNPXj Ha4gySKo1MRN2E9RgauJAOAfm5dt6pT8lP440HGWFweTuM2ZBkb69TC4/gP5u1dc QmJ33t2CYF7Jk8rSZyyyrf3B65x3neGxONLRm7jah674i3Iv76mOO/2S3XRloTqX ysLV0LwFYJZhnzlkOAvmoQ05564muCpMPopXxoE+flqnlnvZxmauAkZXPzB1Uypi bLpb8/1bjGFOE0NvPGyBQtkf1/2S3j30xEaML2hMVZaCAxi79FQ56ab+jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+G3gHNOOfp/v/zvBpN5i9ECl8uMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvRDRiZUFjMDQ1LW4tX19POEdrM21MMFFLWHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXhIMA0G CSqGSIb3DQEBCwUAA4IBAQBKLZskmVspNC/A40imlLescqCGuC6X5KL2BJZbxdTq H0hRyBZAngOv2admve8nu6stEjIl85I2pcVK7I4DBnYTNzrqAvpmFlD0FsGDo1o3 kv/G859YGHkLrt3GU/ZmvBhFyGYPSb2u1+kLBMMcuYWqaQwQi+NvEdH58aAFXx8B QMj4jbnAW7Rg8Ux7k7W7CFN7/XjheGrrBxEsFSY43YXsrjwBrEUcBqWUBQW8c1b4 hzn5n+Sn+C2Z9uRni3Za9VjJ4oECT5rK53OeCAB/u/AKAm5CBGFmx68/V7qrPq0d ldRabfTyr8BnJyVaKLY17AqLCPjqIKsf4cPLBTMUMhuf -----END CERTIFICATE-----Generated at Fri Jan 23 19:17:47 2026 by rpki-client