This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa File: 4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa (raw, json) Hash identifier: xUot+v+AHTA8ATVTOD8t8oNEzzIYT8n3+znSSnpti6g= Subject key identifier: E2:53:39:F4:80:3B:72:FE:E6:D8:FE:DC:A9:D6:E7:C3:EB:89:30:34 Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548 Certificate serial: 019B7C1291194904F81B8A97D507F89CC574 Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62406 IP address blocks: 185.235.81.0/24 maxlen: 24 185.235.83.0/24 maxlen: 24 2a0a:5b40:1::/48 maxlen: 48 2a0a:5b40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:91:19:49:04:f8:1b:8a:97:d5:07:f8:9c:c5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25339f4803b72fee6d8fedca9d6e7c3eb893034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:34:06:8a:4a:4a:8d:ea:69:1c:92:2d:c9: 27:08:7f:32:7e:07:bd:98:05:38:2e:9b:7e:34:20: 37:0e:56:05:ae:fa:44:cb:e5:1f:93:f4:5e:ff:3c: 2d:82:95:2a:c2:7c:14:2b:03:20:5d:01:88:d1:ab: 85:09:3b:e0:c3:09:c4:0a:68:22:41:48:c3:52:6e: 75:58:e8:79:6b:c8:3e:b5:48:3e:f6:34:5b:86:3a: 08:a1:41:08:31:ac:1c:00:84:53:8c:a1:50:47:2e: 29:74:d1:d3:ff:b0:09:84:63:7a:91:d8:dc:05:d8: b2:fe:78:38:e8:02:c5:f2:c3:03:32:6a:cd:76:16: a0:97:de:fd:22:80:d6:ee:85:7f:2d:fd:d1:f6:b7: 86:37:d7:6a:ce:7c:ad:75:13:59:95:27:18:2c:a7: 44:d1:17:18:aa:89:be:0b:f8:d8:ed:b0:71:60:47: 47:f2:b4:f1:87:88:11:f1:d6:8c:ca:a7:bf:71:6d: 90:d3:9b:09:c1:ec:39:66:49:4c:e2:4e:9d:0e:61: a6:ed:2a:0c:38:4f:2e:30:02:2e:a0:3f:04:ce:9d: 1b:cb:e7:76:cf:38:08:44:53:86:17:61:f8:f5:b8: a1:ce:c1:cb:2a:a2:86:29:c8:a2:df:25:b3:70:26: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:53:39:F4:80:3B:72:FE:E6:D8:FE:DC:A9:D6:E7:C3:EB:89:30:34 X509v3 Authority Key Identifier: keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/4lM59IA7cv7m2P7cqdbnw-uJMDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.81.0/24 185.235.83.0/24 IPv6: 2a0a:5b40:1::/48 2a0a:5b40:3::/48 Signature Algorithm: sha256WithRSAEncryption 1d:c7:49:35:31:0e:fd:44:24:0d:0a:fe:32:0e:9c:bf:94:fc: 29:ba:ae:b1:3c:57:1e:7f:72:08:0b:b7:96:87:8a:2e:d0:41: 88:08:44:54:18:66:7d:99:8b:e8:6b:78:f9:3f:c2:a1:de:ca: dd:86:0b:08:52:2c:e3:fb:05:ec:0f:e6:23:93:5b:5f:8c:c6: 21:fc:0f:1c:10:cc:91:0b:a0:b7:4e:7e:11:dc:b4:05:d1:f6: 3c:e2:8a:e8:24:13:44:77:32:5a:c1:1c:3b:f0:26:36:7c:74: 49:3e:05:0d:aa:76:6e:7e:76:5f:0c:a8:6a:cb:e7:a6:26:ca: fd:1d:cb:34:98:3e:2d:99:58:34:60:5f:83:58:6e:72:2f:f0: 74:51:15:e5:fa:4b:0c:ee:f1:7a:9d:aa:8f:c7:ae:c1:7a:af: c2:9f:52:fa:4d:4a:ac:4e:fc:b4:c6:9f:8b:5a:13:48:17:10: 13:91:23:3a:60:f8:53:4b:aa:c6:f3:66:23:40:4a:6f:e3:b0: b5:a0:5c:a3:33:b2:03:89:3d:03:f9:c9:d2:44:91:8d:19:c6: 83:82:1e:1c:b8:b9:6f:99:63:8a:9a:ac:34:c7:45:13:f3:c5: 2b:34:0c:d5:c6:53:4f:4f:92:f6:44:83:bd:7f:e5:78:22:d4: 19:76:45:27 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8EpEZSQT4G4qX1Qf4nMV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmY4YzZmYjdmNTQ3MTcwYjY3OTYyNTc1Y2YyYmE4ZWQx NWU1NDgwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjUzMzlmNDgwM2I3MmZlZTZkOGZlZGNhOWQ2ZTdjM2ViODkzMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2A0BopKSo3qaRySLcknCH8yfge9 mAU4Lpt+NCA3DlYFrvpEy+Ufk/Re/zwtgpUqwnwUKwMgXQGI0auFCTvgwwnECmgi QUjDUm51WOh5a8g+tUg+9jRbhjoIoUEIMawcAIRTjKFQRy4pdNHT/7AJhGN6kdjc Bdiy/ng46ALF8sMDMmrNdhagl979IoDW7oV/Lf3R9reGN9dqznytdRNZlScYLKdE 0RcYqom+C/jY7bBxYEdH8rTxh4gR8daMyqe/cW2Q05sJwew5ZklM4k6dDmGm7SoM OE8uMAIuoD8Ezp0by+d2zzgIRFOGF2H49bihzsHLKqKGKcii3yWzcCYQVQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOJTOfSAO3L+5tj+3KnW58PriTA0MB8GA1UdIwQY MBaAFC+/jG+39UcXC2eWJXXPK6jtFeVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzIt ZjFlNGYyMWQ4NzAyLzEvNGxNNTlJQTdjdjdtMlA3Y3FkYm53LXVKTURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzItZjFlNGYyMWQ4NzAy LzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAuetRAwQA uetTMBgEAgACMBIDBwAqCltAAAEDBwAqCltAAAMwDQYJKoZIhvcNAQELBQADggEB AB3HSTUxDv1EJA0K/jIOnL+U/Cm6rrE8Vx5/cggLt5aHii7QQYgIRFQYZn2Zi+hr ePk/wqHeyt2GCwhSLOP7BewP5iOTW1+MxiH8DxwQzJELoLdOfhHctAXR9jziiugk E0R3MlrBHDvwJjZ8dEk+BQ2qdm5+dl8MqGrL56Ymyv0dyzSYPi2ZWDRgX4NYbnIv 8HRRFeX6Swzu8Xqdqo/HrsF6r8KfUvpNSqxO/LTGn4taE0gXEBORIzpg+FNLqsbz ZiNASm/jsLWgXKMzsgOJPQP5ydJEkY0ZxoOCHhy4uW+ZY4qarDTHRRPzxSs0DNXG U09PkvZEg71/5Xgi1Bl2RSc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:13 2026 by rpki-client