This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/4_C_LH1nSyQOu16AzrkH56R6Qco.roa File: 4_C_LH1nSyQOu16AzrkH56R6Qco.roa (raw, json) Hash identifier: PB9D6OuMlpeu2fl0ur5FRGNivh90riiacfurkWgTaH0= Subject key identifier: E3:F0:BF:2C:7D:67:4B:24:0E:BB:5E:80:CE:B9:07:E7:A4:7A:41:CA Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2 Certificate serial: 019B77C74A8A0CBA9E0B638A0662DDC576AE Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/4_C_LH1nSyQOu16AzrkH56R6Qco.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204180 IP address blocks: 185.111.248.0/22 maxlen: 22 185.111.248.0/24 maxlen: 24 185.111.249.0/24 maxlen: 24 185.111.250.0/24 maxlen: 24 185.111.251.0/24 maxlen: 24 2a06:6080::/29 maxlen: 29 2a06:6080::/32 maxlen: 32 2a06:6080::/40 maxlen: 40 2a06:6080::/48 maxlen: 48 2a06:6080:1::/48 maxlen: 48 2a06:6080:2::/48 maxlen: 48 2a06:6081::/32 maxlen: 32 2a06:6082::/32 maxlen: 32 2a06:6083::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:8a:0c:ba:9e:0b:63:8a:06:62:dd:c5:76:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3f0bf2c7d674b240ebb5e80ceb907e7a47a41ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:60:a8:fd:71:ec:a0:81:72:42:8f:24:31: 34:ab:64:fc:e4:7c:b1:0d:0a:8f:64:c9:63:03:62: 9d:04:b7:7f:ae:af:8d:75:ee:16:31:e9:4a:26:51: b7:1b:56:03:91:29:b6:0c:05:3d:45:27:fe:e6:53: 49:4b:39:85:99:1b:c4:58:37:80:ae:b4:dc:0a:dd: c7:cd:60:41:0f:3c:c2:7b:3a:e3:b2:ae:43:c3:40: 2e:4d:19:f0:20:53:fe:03:c3:f9:30:ff:86:eb:12: 15:b4:3e:5d:d7:6f:7c:4d:93:27:d5:6b:91:e1:d3: d4:4d:a0:c5:bd:5c:55:8b:f9:26:e3:bb:84:8a:09: 2f:7a:fa:43:b6:dc:9c:1f:45:b1:35:3a:5e:6b:be: 98:a8:8e:ba:02:a2:1e:f4:d0:58:9e:b8:d3:3a:e3: 5c:51:c8:db:f4:5a:f3:c7:1a:54:4d:3f:2b:82:7c: f4:a2:19:a4:35:9a:44:d6:56:b1:d0:dd:15:25:29: 20:7f:5e:37:08:e7:fb:28:e5:09:83:e0:2b:05:5d: 12:53:7b:ad:fc:fb:0f:82:29:4d:fb:cb:8b:02:b2: 73:7e:18:9f:5f:ee:ba:1f:2b:77:93:ca:53:f8:70: 51:6f:52:0a:f2:43:0b:51:48:20:dc:4c:20:d5:2c: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F0:BF:2C:7D:67:4B:24:0E:BB:5E:80:CE:B9:07:E7:A4:7A:41:CA X509v3 Authority Key Identifier: keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/4_C_LH1nSyQOu16AzrkH56R6Qco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.248.0/22 IPv6: 2a06:6080::/29 Signature Algorithm: sha256WithRSAEncryption d5:d6:91:f6:26:f3:f0:d4:16:b0:54:db:d9:c1:4d:58:77:e7: 5a:a5:1f:ea:99:7e:0b:9a:9a:3a:66:d2:7b:f9:e4:b3:60:5a: 00:50:8b:e9:ac:28:2a:cb:95:3a:b9:93:98:32:c9:1a:f0:41: 79:b2:47:a8:66:f2:01:53:00:cf:de:d1:a6:c6:2a:ee:8a:01: 2a:af:c4:40:36:08:82:39:b1:fe:38:64:c0:2c:ca:b3:ae:9f: 33:54:a9:85:40:3c:b2:37:7c:a1:45:0d:f0:d8:c3:c7:05:94: fc:03:09:bc:38:4d:28:7c:3a:0b:07:d8:68:a1:5a:fc:ee:70: a7:e5:ac:e5:35:52:d9:80:6e:51:69:c6:8a:d4:fc:25:c3:54: 25:07:6d:e1:bc:2f:36:99:ad:8d:65:41:4f:1d:3a:b0:05:7b: d1:6f:58:d2:53:35:68:01:db:a1:41:b7:b4:59:82:66:10:49: 51:64:fd:79:f8:79:ec:8b:80:38:98:ae:cd:71:70:52:21:c8: 0f:b4:66:b5:69:f1:ea:83:5c:a5:a6:ec:2c:ef:42:6b:e9:f4: be:61:13:e0:cb:40:e2:a2:74:38:53:dc:5e:10:f2:e8:fd:d8: 15:e9:a6:6d:10:cc:a3:9a:a9:65:f0:e1:6d:c5:25:aa:0f:22: f2:38:80:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x0qKDLqeC2OKBmLdxXauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MWQ0OTNiMWJjMGE4Yzg1MmRkMTFjZmM5Mzc4OTFkYWMz ZjA3YzIwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2YwYmYyYzdkNjc0YjI0MGViYjVlODBjZWI5MDdlN2E0N2E0MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVNgqP1x7KCBckKPJDE0q2T85Hyx DQqPZMljA2KdBLd/rq+Nde4WMelKJlG3G1YDkSm2DAU9RSf+5lNJSzmFmRvEWDeA rrTcCt3HzWBBDzzCezrjsq5Dw0AuTRnwIFP+A8P5MP+G6xIVtD5d1298TZMn1WuR 4dPUTaDFvVxVi/km47uEigkvevpDttycH0WxNTpea76YqI66AqIe9NBYnrjTOuNc Ucjb9FrzxxpUTT8rgnz0ohmkNZpE1lax0N0VJSkgf143COf7KOUJg+ArBV0SU3ut /PsPgilN+8uLArJzfhifX+66Hyt3k8pT+HBRb1IK8kMLUUgg3Ewg1SweowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOPwvyx9Z0skDrtegM65B+ekekHKMB8GA1UdIwQY MBaAFJUdSTsbwKjIUt0Rz8k3iR2sPwfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84OWJmM2EtYmY5MC00NjdhLWE5MGIt MjJlMjQ4ZWQyMDE0LzEvNF9DX0xIMW5TeVFPdTE2QXpya0g1NlI2UWNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84OWJmM2EtYmY5MC00NjdhLWE5MGItMjJlMjQ4ZWQyMDE0 LzEvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuW/4MA0E AgACMAcDBQMqBmCAMA0GCSqGSIb3DQEBCwUAA4IBAQDV1pH2JvPw1BawVNvZwU1Y d+dapR/qmX4Lmpo6ZtJ7+eSzYFoAUIvprCgqy5U6uZOYMska8EF5skeoZvIBUwDP 3tGmxiruigEqr8RANgiCObH+OGTALMqzrp8zVKmFQDyyN3yhRQ3w2MPHBZT8Awm8 OE0ofDoLB9hooVr87nCn5azlNVLZgG5RacaK1Pwlw1QlB23hvC82ma2NZUFPHTqw BXvRb1jSUzVoAduhQbe0WYJmEElRZP15+Hnsi4A4mK7NcXBSIcgPtGa1afHqg1yl puws70Jr6fS+YRPgy0DionQ4U9xeEPLo/dgV6aZtEMyjmqll8OFtxSWqDyLyOIAh -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:27 2026 by rpki-client