This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4ULYQtUd4oJTzwLazC-kDlXIDUE.roa File: 4ULYQtUd4oJTzwLazC-kDlXIDUE.roa (raw, json) Hash identifier: KhGm2r25s8XUb5ohnzrZIMa245c7C+KlzncTxFjIUB4= Subject key identifier: E1:42:D8:42:D5:1D:E2:82:53:CF:02:DA:CC:2F:A4:0E:55:C8:0D:41 Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019B783523C0FCD445708851D804641ABD38 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4ULYQtUd4oJTzwLazC-kDlXIDUE.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 185.56.47.0/24 maxlen: 24 185.87.57.0/24 maxlen: 24 185.87.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:23:c0:fc:d4:45:70:88:51:d8:04:64:1a:bd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e142d842d51de28253cf02dacc2fa40e55c80d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:3f:38:44:44:4c:42:13:97:91:6b:b0:91: 7f:c4:91:8d:d0:c7:48:cb:7d:2d:69:25:c1:06:fb: 80:48:78:62:2c:4a:71:03:5c:31:2c:6a:ae:a4:7e: 03:14:08:2f:af:6d:12:4b:0f:dd:22:c5:e3:d6:a3: a8:4b:33:e0:f2:fc:cb:39:09:2b:34:00:73:f5:cb: 7d:cf:d9:81:89:13:19:99:6e:8f:73:b8:9f:7e:21: 0c:35:29:6a:39:1a:2a:e7:10:08:82:95:e4:c1:eb: 03:4c:fe:cc:10:3b:21:50:4a:7d:19:d1:1a:11:7a: 96:f2:97:c3:ee:14:f3:00:46:16:9c:0a:65:b9:14: 15:8e:f0:38:b6:fe:fd:c9:d9:f4:71:3e:cf:ea:8e: 7a:17:7b:d1:79:97:8c:52:ae:04:3d:c3:fa:28:3e: 2e:1a:a3:e9:e6:fc:68:cd:06:31:2a:a2:b1:d7:d4: 5c:be:cf:31:62:79:1e:3a:87:89:ca:93:25:bb:aa: 92:c7:3a:44:df:5f:c5:c9:f1:d4:c8:ab:1f:4d:82: 27:67:28:fa:a8:b5:96:ca:9e:ef:82:d8:f4:65:f4: ca:d7:19:42:76:bf:cd:68:da:be:f9:8e:5c:c5:ff: 00:39:bf:80:2b:c2:e6:9a:ab:2b:50:5e:ee:69:9c: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:42:D8:42:D5:1D:E2:82:53:CF:02:DA:CC:2F:A4:0E:55:C8:0D:41 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/4ULYQtUd4oJTzwLazC-kDlXIDUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.47.0/24 185.87.57.0-185.87.58.255 Signature Algorithm: sha256WithRSAEncryption af:0a:3e:cd:4d:1b:46:25:87:2c:29:0a:74:18:5d:91:76:32: 0d:b3:d7:1f:7f:9f:69:19:6c:07:cc:f0:1d:e8:ec:2f:79:50: 8a:df:e8:98:ad:08:3e:07:a7:e3:99:13:0e:c1:8c:36:dc:6a: 2a:93:ff:15:72:7b:e6:4b:d9:89:67:27:31:5a:e4:91:58:52: 19:e1:c1:f6:70:6f:95:cc:a5:91:a3:4f:02:ee:55:cb:97:ce: 7e:3c:df:99:34:42:6e:0f:52:fc:26:9a:cc:9a:b0:9c:d2:ff: 19:4b:ce:c5:ad:cf:cd:6f:f4:b0:e6:48:19:a9:73:9e:3a:27: c1:c8:4f:12:ab:d1:34:80:e1:22:c8:ab:2e:4b:1b:66:28:a7: ed:a6:a2:ec:c9:33:58:82:d9:3d:4f:09:c4:93:66:18:6a:45: 03:1f:e3:d5:81:cc:df:81:b3:91:a1:ca:2f:25:62:71:f4:32: d3:60:8f:ab:14:c0:50:9a:95:d8:51:66:fb:31:d6:7c:37:31: 2d:79:14:1f:66:14:db:b0:96:19:c9:3e:79:be:52:d1:76:de: 20:10:19:dd:d7:40:ac:98:b9:f5:fa:f2:58:f5:86:91:f0:45: 0f:fd:f5:5e:3c:db:41:7e:30:25:76:c6:7c:d2:3f:d4:c8:6d: 02:bc:b7:15 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NSPA/NRFcIhR2ARkGr04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTQyZDg0MmQ1MWRlMjgyNTNjZjAyZGFjYzJmYTQwZTU1YzgwZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKE/OERETEITl5FrsJF/xJGN0MdI y30taSXBBvuASHhiLEpxA1wxLGqupH4DFAgvr20SSw/dIsXj1qOoSzPg8vzLOQkr NABz9ct9z9mBiRMZmW6Pc7iffiEMNSlqORoq5xAIgpXkwesDTP7MEDshUEp9GdEa EXqW8pfD7hTzAEYWnApluRQVjvA4tv79ydn0cT7P6o56F3vReZeMUq4EPcP6KD4u GqPp5vxozQYxKqKx19Rcvs8xYnkeOoeJypMlu6qSxzpE31/FyfHUyKsfTYInZyj6 qLWWyp7vgtj0ZfTK1xlCdr/NaNq++Y5cxf8AOb+AK8LmmqsrUF7uaZzrHwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOFC2ELVHeKCU88C2swvpA5VyA1BMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvNFVMWVF0VWQ0b0pUendMYXpDLWtEbFhJRFVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuTgvMAwD BAC5VzkDBAC5VzowDQYJKoZIhvcNAQELBQADggEBAK8KPs1NG0YlhywpCnQYXZF2 Mg2z1x9/n2kZbAfM8B3o7C95UIrf6JitCD4Hp+OZEw7BjDbcaiqT/xVye+ZL2Yln JzFa5JFYUhnhwfZwb5XMpZGjTwLuVcuXzn4835k0Qm4PUvwmmsyasJzS/xlLzsWt z81v9LDmSBmpc546J8HITxKr0TSA4SLIqy5LG2Yop+2mouzJM1iC2T1PCcSTZhhq RQMf49WBzN+Bs5Ghyi8lYnH0MtNgj6sUwFCaldhRZvsx1nw3MS15FB9mFNuwlhnJ Pnm+UtF23iAQGd3XQKyYufX68lj1hpHwRQ/99V4820F+MCV2xnzSP9TIbQK8txU= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:52 2026 by rpki-client