This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4DnLY63VmZymzxixvD66dZZSVw0.roa File: 4DnLY63VmZymzxixvD66dZZSVw0.roa (raw, json) Hash identifier: u0AO7wBtUeeSY60nlBx8BK9y9QNxAkFlZBiSjMDIr1Q= Subject key identifier: E0:39:CB:63:AD:D5:99:9C:A6:CF:18:B1:BC:3E:BA:75:96:52:57:0D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F1EF196A5763A199F13CBBFF8A71 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4DnLY63VmZymzxixvD66dZZSVw0.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35197 IP address blocks: 185.226.173.0/24 maxlen: 24 185.226.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f1:ef:19:6a:57:63:a1:99:f1:3c:bb:ff:8a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e039cb63add5999ca6cf18b1bc3eba759652570d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:00:bb:fb:84:8c:71:d6:c5:91:48:22:a6: 24:89:21:db:2b:93:6d:fc:e4:db:0e:41:19:8c:ba: 5f:d6:af:07:2f:2d:15:95:9a:67:d8:b4:2b:eb:aa: 15:10:5d:e2:32:96:d6:cd:72:e8:c3:69:1a:e0:d1: 67:3f:ca:e5:7b:b6:b1:4b:31:dc:63:45:14:d3:fa: c2:76:73:64:d7:41:5d:61:f4:e0:01:eb:1c:28:e0: 8e:cb:7b:d5:14:cb:45:cb:aa:ed:07:a2:d7:e4:0a: 7f:14:ce:50:fd:b7:79:2b:ec:89:d0:1c:d8:7e:9a: fa:5c:ff:3a:57:b8:b4:35:a6:b8:72:94:c6:6a:ef: 24:ac:5b:a8:f8:cc:fb:38:59:85:ba:9b:c0:ff:14: 36:a4:67:d0:b0:ae:db:3b:91:98:51:aa:7b:8c:0a: b3:d0:46:22:27:39:ed:73:7b:5c:53:c4:90:90:d0: 59:da:1d:5c:43:47:0a:5f:49:b4:84:0d:0d:b9:e1: cf:97:6a:99:55:e3:01:d9:6d:13:9e:5a:b3:79:28: a3:ae:02:2c:79:be:96:96:aa:fc:eb:72:81:11:56: 12:93:fa:00:b6:4a:f9:ad:37:3a:3a:73:46:b7:f3: 45:cb:71:49:b0:24:fc:bc:aa:05:cd:e5:95:68:07: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:CB:63:AD:D5:99:9C:A6:CF:18:B1:BC:3E:BA:75:96:52:57:0D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4DnLY63VmZymzxixvD66dZZSVw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.173.0/24 185.226.175.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:39:d6:d8:65:bc:44:49:78:1f:48:d0:19:85:5e:06:a7:b2: 2f:df:46:e1:ad:ba:79:40:7f:e8:c9:3c:22:33:3c:56:e2:a1: e7:4f:ea:ee:cc:cd:26:56:1c:ec:da:69:34:7f:16:65:e6:89: 14:ee:8e:f8:16:6e:b0:b7:31:39:be:b8:bb:62:23:f9:6d:c4: c6:e6:e8:aa:12:09:a9:ba:b7:2c:48:e4:16:20:de:c0:27:46: d3:69:86:91:e2:4f:83:b0:10:08:12:5c:b6:b7:d6:a2:d6:89: 2d:ac:bf:0a:83:30:fa:8e:d1:6e:de:3e:0f:b8:8c:f0:fa:36: 3c:70:7f:30:13:7c:68:02:31:f1:60:7f:85:db:26:79:66:6f: d6:d2:00:87:05:4f:06:54:83:dd:b4:aa:73:8e:43:2c:fa:03: 84:c7:3c:eb:ce:9c:92:6b:ef:2c:7d:24:85:56:13:c2:86:3e: a0:48:37:7e:88:a0:6c:26:b8:59:b3:87:08:fc:cf:d3:54:35: 5a:8a:d2:02:b0:12:4a:ac:5c:f3:b4:4c:2b:7f:12:67:76:5f: 9c:af:b1:ac:83:19:d7:6c:ec:d4:f9:90:47:cc:6b:e6:84:5c: 52:bd:f3:eb:fb:a9:72:63:98:ff:2d:6b:8c:98:69:9c:95:38: 0a:3c:d7:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ovHvGWpXY6GZ8Ty7/4pxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDM5Y2I2M2FkZDU5OTljYTZjZjE4YjFiYzNlYmE3NTk2NTI1NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs64Au/uEjHHWxZFIIqYkiSHbK5Nt /OTbDkEZjLpf1q8HLy0VlZpn2LQr66oVEF3iMpbWzXLow2ka4NFnP8rle7axSzHc Y0UU0/rCdnNk10FdYfTgAescKOCOy3vVFMtFy6rtB6LX5Ap/FM5Q/bd5K+yJ0BzY fpr6XP86V7i0Naa4cpTGau8krFuo+Mz7OFmFupvA/xQ2pGfQsK7bO5GYUap7jAqz 0EYiJzntc3tcU8SQkNBZ2h1cQ0cKX0m0hA0NueHPl2qZVeMB2W0TnlqzeSijrgIs eb6Wlqr863KBEVYSk/oAtkr5rTc6OnNGt/NFy3FJsCT8vKoFzeWVaAd01QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOA5y2Ot1Zmcps8Ysbw+unWWUlcNMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvNERuTFk2M1ZtWnltenhpeHZENjZkWlpTVncwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueKtAwQA ueKvMA0GCSqGSIb3DQEBCwUAA4IBAQAdOdbYZbxESXgfSNAZhV4Gp7Iv30bhrbp5 QH/oyTwiMzxW4qHnT+ruzM0mVhzs2mk0fxZl5okU7o74Fm6wtzE5vri7YiP5bcTG 5uiqEgmpurcsSOQWIN7AJ0bTaYaR4k+DsBAIEly2t9ai1oktrL8KgzD6jtFu3j4P uIzw+jY8cH8wE3xoAjHxYH+F2yZ5Zm/W0gCHBU8GVIPdtKpzjkMs+gOExzzrzpyS a+8sfSSFVhPChj6gSDd+iKBsJrhZs4cI/M/TVDVaitICsBJKrFzztEwrfxJndl+c r7GsgxnXbOzU+ZBHzGvmhFxSvfPr+6lyY5j/LWuMmGmclTgKPNeG -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:59 2026 by rpki-client