This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/4cy1aqEYp9F7V13taLUgvqJl6bk.roa File: 4cy1aqEYp9F7V13taLUgvqJl6bk.roa (raw, json) Hash identifier: y4AZgnc6ll/dTvazfgvRlzMdkBW1msJHbGpj1pvELdM= Subject key identifier: E1:CC:B5:6A:A1:18:A7:D1:7B:57:5D:ED:68:B5:20:BE:A2:65:E9:B9 Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Certificate serial: 019B7C123B84E140EC377A6B0E42B4A91BF2 Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/4cy1aqEYp9F7V13taLUgvqJl6bk.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52080 IP address blocks: 185.249.152.0/22 maxlen: 22 185.249.152.0/24 maxlen: 24 185.249.153.0/24 maxlen: 24 185.249.154.0/24 maxlen: 24 185.249.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3b:84:e1:40:ec:37:7a:6b:0e:42:b4:a9:1b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ccb56aa118a7d17b575ded68b520bea265e9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:22:77:a1:b3:5b:f7:74:71:5b:af:11:d1: 7a:97:27:72:20:fd:28:18:24:a8:2a:70:e5:5c:d5: d5:34:2b:72:71:1f:56:7d:5c:92:9e:59:2c:f7:c0: 22:bc:d4:35:83:3d:24:ad:e6:53:9b:a8:97:1d:e1: b2:d0:76:76:0b:1b:a9:bd:b2:8c:62:b1:e1:cb:b8: 5d:35:a8:a1:8a:85:ac:45:75:46:88:73:02:e3:4c: 53:68:a7:75:96:9a:90:89:79:fe:77:27:64:c4:db: 20:00:8b:60:7c:ae:a0:c0:5d:5d:9b:2b:b6:59:9c: 67:3a:b8:c7:ab:64:e2:67:5b:ff:99:a2:a3:21:27: 9d:24:5f:82:1f:9a:b2:9a:56:1d:94:88:e7:1f:99: 65:64:63:24:4a:00:40:4c:3c:8a:de:a5:79:64:13: 36:ec:97:04:38:46:17:c2:ca:f9:60:a0:c9:92:15: 0b:79:3f:76:7a:9d:ec:b9:b8:e2:ae:5e:c4:32:fd: fa:cb:05:10:08:e0:6d:07:09:d3:bf:f6:df:45:2c: 1a:f0:04:cd:66:cc:b3:f9:d1:c7:1f:00:e6:62:2e: 28:3e:3e:e0:24:19:14:be:f8:55:7d:bf:c0:67:e5: 3e:2c:54:06:08:d1:45:c9:2d:eb:07:9b:c5:00:41: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CC:B5:6A:A1:18:A7:D1:7B:57:5D:ED:68:B5:20:BE:A2:65:E9:B9 X509v3 Authority Key Identifier: keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/4cy1aqEYp9F7V13taLUgvqJl6bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.152.0/22 Signature Algorithm: sha256WithRSAEncryption 61:b6:49:b9:c8:da:de:bf:8a:27:d1:1f:8d:16:11:c1:0b:8b: 2b:e2:c7:93:9f:7f:33:79:e2:e7:c7:0e:ae:b5:3b:00:9e:c6: 8a:3f:47:ff:bd:92:dc:0e:0b:89:5a:2b:b2:e4:06:24:75:87: bd:87:8a:4b:32:12:e8:cb:fe:45:3f:09:53:ef:c6:f3:67:12: f7:85:11:43:05:8f:43:b9:dc:09:7a:84:19:fb:bc:89:da:0d: eb:51:c6:83:2d:ad:26:b3:65:f6:92:d3:b7:3c:de:32:e0:93: 48:5f:eb:74:aa:fa:73:a9:5c:d7:3d:9b:b8:5a:49:17:44:fa: 49:d3:2d:2a:bb:85:8c:77:2e:a7:4d:67:2a:11:3f:99:95:3e: 37:8f:25:b9:54:92:43:52:8c:60:cc:ab:9c:57:a5:49:9b:e8: 9c:a0:7c:b0:9b:7b:8a:ba:ed:9b:7c:66:8f:01:9d:a0:4a:39: 92:c9:c1:f4:4a:a1:43:63:9e:db:4c:fe:0d:50:49:e5:5e:dd: 09:19:46:84:03:cd:51:52:63:b3:b9:b7:cd:01:b5:81:78:8d: 52:27:3e:97:c0:6f:bf:a8:76:cb:53:d3:b1:27:a6:a1:2c:c9: c0:d4:50:31:57:46:8b:23:dd:47:d8:e7:7a:b4:f3:24:c7:27: 6b:9c:77:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjuE4UDsN3prDkK0qRvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz OTBkZTYwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNjYjU2YWExMThhN2QxN2I1NzVkZWQ2OGI1MjBiZWEyNjVlOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrcid6GzW/d0cVuvEdF6lydyIP0o GCSoKnDlXNXVNCtycR9WfVySnlks98AivNQ1gz0kreZTm6iXHeGy0HZ2CxupvbKM YrHhy7hdNaihioWsRXVGiHMC40xTaKd1lpqQiXn+dydkxNsgAItgfK6gwF1dmyu2 WZxnOrjHq2TiZ1v/maKjISedJF+CH5qymlYdlIjnH5llZGMkSgBATDyK3qV5ZBM2 7JcEOEYXwsr5YKDJkhULeT92ep3subjirl7EMv36ywUQCOBtBwnTv/bfRSwa8ATN Zsyz+dHHHwDmYi4oPj7gJBkUvvhVfb/AZ+U+LFQGCNFFyS3rB5vFAEFAcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHMtWqhGKfRe1dd7Wi1IL6iZem5MB8GA1UdIwQY MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt MzAxZGYyNzIxNTJlLzEvNGN5MWFxRVlwOUY3VjEzdGFMVWd2cUpsNmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufmYMA0G CSqGSIb3DQEBCwUAA4IBAQBhtkm5yNrev4on0R+NFhHBC4sr4seTn38zeeLnxw6u tTsAnsaKP0f/vZLcDguJWiuy5AYkdYe9h4pLMhLoy/5FPwlT78bzZxL3hRFDBY9D udwJeoQZ+7yJ2g3rUcaDLa0ms2X2ktO3PN4y4JNIX+t0qvpzqVzXPZu4WkkXRPpJ 0y0qu4WMdy6nTWcqET+ZlT43jyW5VJJDUoxgzKucV6VJm+icoHywm3uKuu2bfGaP AZ2gSjmSycH0SqFDY57bTP4NUEnlXt0JGUaEA81RUmOzubfNAbWBeI1SJz6XwG+/ qHbLU9OxJ6ahLMnA1FAxV0aLI91H2Od6tPMkxydrnHd0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:10 2026 by rpki-client