This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa File: 4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa (raw, json) Hash identifier: new/XwK7LDSQZ29SSLejk2ZrF4hRfXE6iD6WKPwdrVA= Subject key identifier: E2:00:DB:0F:AA:7C:1D:E7:26:7B:79:E3:DA:65:6A:DB:2A:34:C1:C4 Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003 Certificate serial: 019B79109B787D7CD48C5D2A8465AD6F374B Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62134 IP address blocks: 185.46.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9b:78:7d:7c:d4:8c:5d:2a:84:65:ad:6f:37:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e200db0faa7c1de7267b79e3da656adb2a34c1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:7d:ed:7e:54:02:ac:2b:65:02:67:f8:f0: 9a:e7:b1:cb:07:3e:80:32:4b:52:5a:ce:71:c4:5b: 07:61:d6:69:32:45:1c:cf:ae:c1:1e:bf:b2:d9:90: b2:57:e9:46:6a:eb:bf:e9:16:0e:ba:8d:fe:47:89: 63:a4:dd:00:d1:c4:bd:6f:e8:e3:0f:e2:97:4b:9d: a0:8f:a7:90:b2:48:cc:a5:b5:0a:ef:e4:7b:d6:ca: c1:d8:4e:1f:e6:5d:16:22:04:fb:51:97:39:c2:7c: 59:03:5b:b9:55:45:04:66:8d:01:37:73:16:f9:d3: c6:88:d1:7e:0d:4d:a7:bd:74:19:7e:08:3d:e0:73: 35:39:d5:fb:3d:8e:74:fb:a4:a9:53:1a:43:87:a0: 07:a6:f9:ee:5d:16:3a:82:b7:77:3c:4e:80:90:ea: c0:e4:7d:82:50:3b:6e:e0:40:dd:f7:82:cb:50:04: 33:e1:30:38:24:fc:8c:41:d4:a8:53:b6:eb:d4:db: 68:9f:82:fc:d0:d1:0d:47:67:3b:8d:07:b5:9d:c0: 6e:c1:5c:e0:fd:ce:da:83:81:9c:3e:1b:c1:9a:e9: 82:7a:4d:a9:cc:a0:f9:29:1e:cb:71:f3:2b:4d:3e: f9:5a:2a:19:49:33:44:fd:45:7c:e1:1c:6d:a7:b1: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:DB:0F:AA:7C:1D:E7:26:7B:79:E3:DA:65:6A:DB:2A:34:C1:C4 X509v3 Authority Key Identifier: keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.120.0/22 Signature Algorithm: sha256WithRSAEncryption 01:49:d2:4b:ec:37:b5:c7:03:c0:cb:0f:9e:a8:83:25:25:5e: 00:6d:8a:63:c6:dd:e8:24:8d:7b:03:75:b5:b5:57:7f:f1:5a: 64:4e:36:97:fc:11:a2:c5:df:e4:46:e0:67:56:55:76:cb:d0: f4:b7:b4:f2:b6:cb:11:12:88:8d:0f:3a:3d:2b:b0:23:74:5c: 45:b9:4b:62:79:2b:b7:52:36:df:0f:3b:3f:43:4f:40:21:9c: c2:2b:21:40:8f:f4:ec:d8:c5:35:01:2e:d4:f6:48:2b:4a:8f: 8f:f8:a2:39:67:25:ef:02:18:30:5e:03:a1:2b:39:43:b2:75: 44:93:f2:23:f9:28:1a:c5:25:92:34:83:78:43:ab:7a:18:68: 42:23:3d:93:0d:a5:c0:2f:28:3b:63:1b:5c:3c:75:09:06:18: f5:7a:eb:36:cf:2d:99:16:47:42:f0:f3:5e:ff:af:c5:db:48: 14:84:7b:36:82:20:72:b7:de:0b:50:a3:36:ef:d1:e4:d2:b0: b6:05:33:2b:0b:d5:25:8c:2d:13:07:b9:4d:ed:a6:08:32:f6: b1:e7:52:92:a8:ad:34:ef:a6:6c:a6:08:aa:1d:3f:27:0b:a4: d6:0a:bd:09:54:ab:92:fd:73:e3:b2:25:68:e2:36:4b:af:b9: 4b:93:34:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJt4fXzUjF0qhGWtbzdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzdkMmY2ZjBiNzhjMGVkNzViOGVmYzI4MDA5ZDc5Nzk2 MTQwMDMwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjAwZGIwZmFhN2MxZGU3MjY3Yjc5ZTNkYTY1NmFkYjJhMzRjMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq197X5UAqwrZQJn+PCa57HLBz6A MktSWs5xxFsHYdZpMkUcz67BHr+y2ZCyV+lGauu/6RYOuo3+R4ljpN0A0cS9b+jj D+KXS52gj6eQskjMpbUK7+R71srB2E4f5l0WIgT7UZc5wnxZA1u5VUUEZo0BN3MW +dPGiNF+DU2nvXQZfgg94HM1OdX7PY50+6SpUxpDh6AHpvnuXRY6grd3PE6AkOrA 5H2CUDtu4EDd94LLUAQz4TA4JPyMQdSoU7br1Nton4L80NENR2c7jQe1ncBuwVzg /c7ag4GcPhvBmumCek2pzKD5KR7LcfMrTT75WioZSTNE/UV84Rxtp7GMBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIA2w+qfB3nJnt549platsqNMHEMB8GA1UdIwQY MBaAFMk30vbwt4wO11uO/CgAnXl5YUADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTIt OTM3NzU0Y2JiNTA1LzEvNGdEYkQ2cDhIZWNtZTNuajJtVnEyeW8wd2NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWJkMDYtOTZjOC00ZTcxLWJhMTItOTM3NzU0Y2JiNTA1 LzEveVRmUzl2QzNqQTdYVzQ3OEtBQ2RlWGxoUUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuS54MA0G CSqGSIb3DQEBCwUAA4IBAQABSdJL7De1xwPAyw+eqIMlJV4AbYpjxt3oJI17A3W1 tVd/8VpkTjaX/BGixd/kRuBnVlV2y9D0t7TytssREoiNDzo9K7AjdFxFuUtieSu3 UjbfDzs/Q09AIZzCKyFAj/Ts2MU1AS7U9kgrSo+P+KI5ZyXvAhgwXgOhKzlDsnVE k/Ij+SgaxSWSNIN4Q6t6GGhCIz2TDaXALyg7YxtcPHUJBhj1eus2zy2ZFkdC8PNe /6/F20gUhHs2giByt94LUKM279Hk0rC2BTMrC9UljC0TB7lN7aYIMvax51KSqK00 76ZspgiqHT8nC6TWCr0JVKuS/XPjsiVo4jZLr7lLkzRS -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:08 2026 by rpki-client