This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4OyVG_gO81z1lV8umainSvDE3LE.roa File: 4OyVG_gO81z1lV8umainSvDE3LE.roa (raw, json) Hash identifier: kJwR8q6ebMSusUcMNzzK9CAqMOm/Uab2YBinV+WNMWI= Subject key identifier: E0:EC:95:1B:F8:0E:F3:5C:F5:95:5F:2E:99:A8:A7:4A:F0:C4:DC:B1 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BB6E7AD1B80E96D7F7B6994F9CF1DB918 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4OyVG_gO81z1lV8umainSvDE3LE.roa Signing time: Tue 13 Jan 2026 10:29:54 +0000 ROA not before: Tue 13 Jan 2026 10:29:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53107 IP address blocks: 185.47.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:e7:ad:1b:80:e9:6d:7f:7b:69:94:f9:cf:1d:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 13 10:29:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ec951bf80ef35cf5955f2e99a8a74af0c4dcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:2a:f7:89:db:2f:59:31:b9:37:fa:c1:ca:a6: 44:4c:1d:46:a6:92:78:f8:a2:0b:31:59:a5:2b:19: 15:91:d2:a1:9f:f6:fe:af:f9:00:de:14:50:e3:1c: fe:e8:ec:11:eb:f5:50:88:ec:a2:f2:e3:19:bb:03: 5d:5d:1e:b7:60:c5:77:2d:7f:ad:d0:43:65:3f:fc: c0:01:8c:31:4b:fe:fd:71:a1:40:0e:1e:c2:dc:73: e9:20:d3:05:1e:70:c4:50:03:87:3d:c7:cf:4e:ce: d3:d0:51:ff:96:26:00:d1:ee:83:2c:77:9d:78:88: 3a:c7:fa:3c:17:35:75:06:4d:e0:7d:3c:ad:09:c0: fe:16:8f:1c:06:c4:ab:2c:9b:82:3c:4a:fc:2a:d7: 10:20:11:0d:62:b2:c5:83:3e:60:69:8f:56:28:b4: f2:0b:fd:ac:ad:ed:a0:81:4a:93:8c:f1:a0:21:8d: 59:19:83:3f:38:f4:0c:ca:36:19:34:fe:3a:89:7b: 80:7c:d2:ff:0b:ba:4d:90:57:37:70:36:f6:6c:ab: 9e:3f:7d:6c:f0:fc:ab:21:f0:fb:7d:1d:59:c4:b1: fa:e9:de:39:ab:54:30:c0:11:2d:cf:76:b4:88:2a: 40:b0:e6:30:63:65:41:f8:90:d6:b0:e0:1b:6d:92: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EC:95:1B:F8:0E:F3:5C:F5:95:5F:2E:99:A8:A7:4A:F0:C4:DC:B1 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4OyVG_gO81z1lV8umainSvDE3LE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.143.0/24 Signature Algorithm: sha256WithRSAEncryption d2:e3:45:90:c4:d4:34:fe:ef:a2:7d:89:a4:1e:08:ef:24:e0: d7:d6:d3:aa:de:76:e6:64:4b:40:9d:50:cf:c0:e3:6b:76:da: f3:2f:d4:6e:38:f5:c3:f8:0f:83:d0:c6:dc:fa:ac:4d:40:40: 8a:1c:0c:46:82:60:26:8f:13:6a:aa:3e:d4:0b:6a:b1:24:db: 1f:06:2c:c2:aa:43:2b:e6:2e:c8:f1:7a:29:aa:ce:a8:f2:e6: e0:df:99:75:6e:b5:20:dd:fa:ae:9a:7a:52:3f:14:51:c3:ed: 0d:83:09:9a:a7:ef:f9:33:29:af:3e:6e:dc:67:41:fc:de:02: 37:c4:99:d7:ba:d2:9c:71:3b:77:f4:45:52:69:86:c0:ad:89: dd:74:0c:94:01:1d:bb:38:ca:55:bf:ed:f9:9c:be:92:84:11: a6:f4:51:af:ca:d3:ac:00:77:90:8d:88:f7:f8:3f:34:ec:e5: 50:b9:bc:ee:85:f3:65:8e:a4:60:45:d9:0c:84:61:ef:13:9c: 52:90:10:60:d1:4c:d6:51:2c:4f:97:f4:74:30:36:c5:43:6e: b8:27:2a:da:46:61:db:10:ca:6e:95:86:7d:fa:97:cd:45:21: 45:45:54:10:35:f0:14:b1:3a:e2:df:0d:86:8f:78:b0:98:1c: 21:24:c4:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2560bgOltf3tplPnPHbkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTEzMTAyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVjOTUxYmY4MGVmMzVjZjU5NTVmMmU5OWE4YTc0YWYwYzRkY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/yr3idsvWTG5N/rByqZETB1GppJ4 +KILMVmlKxkVkdKhn/b+r/kA3hRQ4xz+6OwR6/VQiOyi8uMZuwNdXR63YMV3LX+t 0ENlP/zAAYwxS/79caFADh7C3HPpINMFHnDEUAOHPcfPTs7T0FH/liYA0e6DLHed eIg6x/o8FzV1Bk3gfTytCcD+Fo8cBsSrLJuCPEr8KtcQIBENYrLFgz5gaY9WKLTy C/2sre2ggUqTjPGgIY1ZGYM/OPQMyjYZNP46iXuAfNL/C7pNkFc3cDb2bKueP31s 8PyrIfD7fR1ZxLH66d45q1QwwBEtz3a0iCpAsOYwY2VB+JDWsOAbbZIauQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODslRv4DvNc9ZVfLpmop0rwxNyxMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNE95VkdfZ084MXoxbFY4dW1haW5TdkRFM0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS+PMA0G CSqGSIb3DQEBCwUAA4IBAQDS40WQxNQ0/u+ifYmkHgjvJODX1tOq3nbmZEtAnVDP wONrdtrzL9RuOPXD+A+D0Mbc+qxNQECKHAxGgmAmjxNqqj7UC2qxJNsfBizCqkMr 5i7I8Xopqs6o8ubg35l1brUg3fqumnpSPxRRw+0Ngwmap+/5MymvPm7cZ0H83gI3 xJnXutKccTt39EVSaYbArYnddAyUAR27OMpVv+35nL6ShBGm9FGvytOsAHeQjYj3 +D807OVQubzuhfNljqRgRdkMhGHvE5xSkBBg0UzWUSxPl/R0MDbFQ264JyraRmHb EMpulYZ9+pfNRSFFRVQQNfAUsTri3w2Gj3iwmBwhJMTg -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:23 2026 by rpki-client