This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4Lq99be2nl-lvDOLaKTBj-4e2tg.roa File: 4Lq99be2nl-lvDOLaKTBj-4e2tg.roa (raw, json) Hash identifier: sqHWC3KRb5cu/NuRG74MJnGwzFNFZn52bM6N2UIFS+I= Subject key identifier: E0:BA:BD:F5:B7:B6:9E:5F:A5:BC:33:8B:68:A4:C1:8F:EE:1E:DA:D8 Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019A96AD65C43BD12AF5D1C8E24D0C6CFEDE Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4Lq99be2nl-lvDOLaKTBj-4e2tg.roa Signing time: Tue 18 Nov 2025 11:15:37 +0000 ROA not before: Tue 18 Nov 2025 11:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 185.56.44.0/24 maxlen: 24 185.87.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:ad:65:c4:3b:d1:2a:f5:d1:c8:e2:4d:0c:6c:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Nov 18 11:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0babdf5b7b69e5fa5bc338b68a4c18fee1edad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:10:e1:48:e1:8b:73:b4:e2:78:9d:2a:8a: 5b:a1:a0:18:dc:95:53:89:7c:b6:0c:6b:21:93:39: 7c:6d:e4:30:fe:4f:50:6b:f3:59:1f:00:68:49:fe: 8a:e4:e1:3d:dc:5c:f3:d3:ce:d3:ef:f4:ae:fc:a8: 29:64:b7:a2:06:fa:01:08:24:cc:a6:d2:35:f7:f3: c8:32:2e:6f:09:fc:9a:33:80:ae:e2:71:e7:34:3d: 09:97:99:72:89:c2:7b:7d:de:a8:66:35:99:66:51: 62:51:24:c5:ef:ac:7d:ab:1e:7e:86:c0:84:21:c5: aa:52:99:48:ad:95:84:fd:5b:85:06:fd:d7:a4:da: 76:8e:2c:39:90:5d:54:41:32:c1:0b:75:3a:74:2c: 9e:23:7c:fe:7f:82:1d:ab:80:ba:66:e8:73:83:51: 20:2d:05:2a:fa:c7:a1:d1:76:4d:db:0f:9d:1b:b4: 6d:47:d9:a2:b5:81:4f:27:0d:54:fb:4c:f5:a7:69: ef:64:ba:d9:13:97:a8:01:37:62:7b:36:78:3b:a8: 8f:da:ec:b9:04:33:8c:51:e3:b4:5f:c0:6d:81:2c: 2c:ff:22:02:6c:05:f5:ad:c6:5a:c0:cd:e4:76:9d: db:cc:62:a3:a9:50:91:4d:59:26:5c:5f:a2:46:b1: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:BD:F5:B7:B6:9E:5F:A5:BC:33:8B:68:A4:C1:8F:EE:1E:DA:D8 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4Lq99be2nl-lvDOLaKTBj-4e2tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.44.0/24 185.87.56.0/24 Signature Algorithm: sha256WithRSAEncryption a8:02:44:32:cd:94:7d:15:c0:93:52:26:d4:ca:52:e2:72:e1: 76:17:f5:63:aa:0a:75:f0:70:9c:2f:5b:3a:6a:8f:a3:c1:1f: b3:ec:7e:9f:2b:71:64:06:f9:8f:30:17:96:5a:a7:93:ec:55: 7b:c3:43:f3:ef:94:0b:f6:6f:ff:97:67:c7:95:07:62:6e:25: 96:95:79:16:6b:9a:4e:cf:44:9c:56:4d:4f:41:3e:ab:e8:6b: 29:02:13:da:a8:12:84:9e:02:fa:d0:a4:1c:14:b6:15:c1:4a: bb:bc:2b:da:41:94:52:d3:af:d4:f3:f0:10:f0:96:4e:dc:17: 03:ae:05:9c:ce:ee:a0:d4:97:6b:73:99:10:7e:83:dc:d8:67: 17:46:00:7b:9c:3b:e5:00:4f:34:e7:be:a8:1d:f0:a3:86:6a: 91:a9:2d:70:fe:94:ed:1e:1b:34:54:d4:95:27:6c:f2:70:98: 48:a9:b9:6d:2d:af:e5:6f:c1:70:b9:26:2a:1b:62:67:7e:33: 2e:e3:43:d7:55:ca:eb:1f:e7:15:fe:d9:90:14:74:e1:59:ad: f6:67:bd:d0:51:0b:52:3d:f8:fb:09:e6:59:fb:2c:45:e5:ad: 74:a7:05:1d:04:68:9a:f8:e0:4b:e1:0e:63:30:db:95:61:ac: 83:7a:51:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqWrWXEO9Eq9dHI4k0MbP7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjUxMTE4MTExNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGJhYmRmNWI3YjY5ZTVmYTViYzMzOGI2OGE0YzE4ZmVlMWVkYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmcQ4Ujhi3O04nidKopboaAY3JVT iXy2DGshkzl8beQw/k9Qa/NZHwBoSf6K5OE93Fzz087T7/Su/KgpZLeiBvoBCCTM ptI19/PIMi5vCfyaM4Cu4nHnND0Jl5lyicJ7fd6oZjWZZlFiUSTF76x9qx5+hsCE IcWqUplIrZWE/VuFBv3XpNp2jiw5kF1UQTLBC3U6dCyeI3z+f4Idq4C6Zuhzg1Eg LQUq+seh0XZN2w+dG7RtR9mitYFPJw1U+0z1p2nvZLrZE5eoATdiezZ4O6iP2uy5 BDOMUeO0X8BtgSws/yICbAX1rcZawM3kdp3bzGKjqVCRTVkmXF+iRrH5nQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOC6vfW3tp5fpbwzi2ikwY/uHtrYMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvNExxOTliZTJubC1sdkRPTGFLVEJqLTRlMnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTgsAwQA uVc4MA0GCSqGSIb3DQEBCwUAA4IBAQCoAkQyzZR9FcCTUibUylLicuF2F/Vjqgp1 8HCcL1s6ao+jwR+z7H6fK3FkBvmPMBeWWqeT7FV7w0Pz75QL9m//l2fHlQdibiWW lXkWa5pOz0ScVk1PQT6r6GspAhPaqBKEngL60KQcFLYVwUq7vCvaQZRS06/U8/AQ 8JZO3BcDrgWczu6g1Jdrc5kQfoPc2GcXRgB7nDvlAE80576oHfCjhmqRqS1w/pTt Hhs0VNSVJ2zycJhIqbltLa/lb8FwuSYqG2JnfjMu40PXVcrrH+cV/tmQFHThWa32 Z73QUQtSPfj7CeZZ+yxF5a10pwUdBGia+OBL4Q5jMNuVYayDelEu -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:08 2025 by rpki-client