This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/4K-iSTTQ62k9u_ts6FEnNZujPB8.roa File: 4K-iSTTQ62k9u_ts6FEnNZujPB8.roa (raw, json) Hash identifier: JFw4hB1oA1nXw9shAVgFEoq8dXT9KA58CiXxsf23Cvk= Subject key identifier: E0:AF:A2:49:34:D0:EB:69:3D:BB:FB:6C:E8:51:27:35:9B:A3:3C:1F Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Certificate serial: 019B797E32C66B9F7DE06E8F624E48F02F38 Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/4K-iSTTQ62k9u_ts6FEnNZujPB8.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.130.49.0/24 maxlen: 24 2a13:141:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:32:c6:6b:9f:7d:e0:6e:8f:62:4e:48:f0:2f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0afa24934d0eb693dbbfb6ce85127359ba33c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:f8:08:74:d2:94:23:eb:fc:bb:23:f0:14: c7:5b:8b:bc:87:e7:7e:e3:21:cc:4c:7f:9f:c2:7b: ba:0c:dd:cd:32:b5:c0:d8:2d:82:09:16:48:9a:7f: 55:37:b8:26:6e:f6:d4:22:ab:ae:cc:79:fb:6f:32: b5:4a:a4:2f:48:f4:26:09:44:9a:0a:99:8e:5b:16: f6:1d:45:7d:23:dc:a8:b7:92:5a:54:16:a9:57:70: 2f:a2:af:34:14:4e:32:9a:0d:25:d2:da:a1:da:4e: 56:9c:fb:cc:63:c6:4c:42:48:7b:20:c5:b3:36:b3: 3d:f8:49:7e:58:35:86:f0:16:e9:4c:c9:d5:84:a3: b9:4e:c8:36:fd:25:4e:c5:92:2b:f6:5f:a3:f6:39: c7:92:d5:3e:a8:21:05:2d:20:b5:03:14:b3:c9:6a: 51:19:2d:0b:f6:7e:5d:aa:dd:21:1a:49:9f:76:90: 01:a8:c2:e1:99:17:fd:d6:87:51:a0:01:fe:56:9e: ca:94:4b:fe:ac:bb:10:84:12:68:d9:a3:0e:79:d3: 61:2e:33:b6:5c:d0:05:a0:a2:09:a9:37:91:00:b1: 12:24:ec:4e:b8:ec:8d:9b:9e:6c:21:ed:b8:70:f0: 4d:19:48:b2:18:30:2d:3e:f8:6b:7b:c2:17:f8:c5: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:A2:49:34:D0:EB:69:3D:BB:FB:6C:E8:51:27:35:9B:A3:3C:1F X509v3 Authority Key Identifier: keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/4K-iSTTQ62k9u_ts6FEnNZujPB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.49.0/24 IPv6: 2a13:141:3::/48 Signature Algorithm: sha256WithRSAEncryption 61:2c:ec:df:3d:d8:fc:42:ee:f9:62:d4:c9:cb:5b:31:6a:8d: d2:b1:ae:b1:cd:37:17:bb:67:15:db:01:2d:51:c8:9a:97:9a: 7d:00:6a:c0:b1:08:fb:3e:70:7e:7b:cc:9b:c8:f3:c2:6d:c2: fc:7a:42:2d:67:31:75:b8:d7:10:8c:1b:e4:dd:b2:9c:b6:86: a3:9f:10:71:bb:22:b6:9c:37:65:63:52:87:a0:66:b6:a6:a1: 8c:7d:fa:1b:63:24:72:1e:9f:2c:f1:db:2e:ee:1d:e8:cc:92: 17:b3:18:7f:13:2e:77:c8:35:43:80:07:90:be:8b:a4:e8:f0: 78:55:cf:c8:85:1a:f4:81:6d:58:bc:d9:5a:ef:d6:25:f2:0c: 55:2e:c6:66:ba:a2:d2:32:b2:36:cd:99:40:1c:29:2f:d3:0b: ea:4e:d1:5b:8e:28:0b:60:4b:e8:1b:19:93:2f:24:4f:fc:dc: 32:0d:eb:c4:e3:5a:0e:27:0b:a7:9b:35:b5:59:8d:5a:51:96: 62:c0:ec:99:39:bd:53:89:83:79:9d:ef:b4:d9:7f:0a:85:39: 9d:8c:1f:22:5c:8c:3b:13:54:98:ef:8e:05:aa:97:2f:58:49: 97:69:8e:71:03:fd:2e:5d:6d:04:bf:bb:eb:9d:30:ad:f9:a1: 58:fa:7f:f3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fjLGa5994G6PYk5I8C84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky ZmU0NmUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFmYTI0OTM0ZDBlYjY5M2RiYmZiNmNlODUxMjczNTliYTMzYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZf4CHTSlCPr/Lsj8BTHW4u8h+d+ 4yHMTH+fwnu6DN3NMrXA2C2CCRZImn9VN7gmbvbUIquuzHn7bzK1SqQvSPQmCUSa CpmOWxb2HUV9I9yot5JaVBapV3Avoq80FE4ymg0l0tqh2k5WnPvMY8ZMQkh7IMWz NrM9+El+WDWG8BbpTMnVhKO5Tsg2/SVOxZIr9l+j9jnHktU+qCEFLSC1AxSzyWpR GS0L9n5dqt0hGkmfdpABqMLhmRf91odRoAH+Vp7KlEv+rLsQhBJo2aMOedNhLjO2 XNAFoKIJqTeRALESJOxOuOyNm55sIe24cPBNGUiyGDAtPvhre8IX+MVRUwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOCvokk00OtpPbv7bOhRJzWbozwfMB8GA1UdIwQY MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt ZjgyYjcwZDhhMGE3LzEvNEstaVNUVFE2Mms5dV90czZGRW5OWnVqUEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3 LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYIxMA8E AgACMAkDBwAqEwFBAAMwDQYJKoZIhvcNAQELBQADggEBAGEs7N892PxC7vli1MnL WzFqjdKxrrHNNxe7ZxXbAS1RyJqXmn0AasCxCPs+cH57zJvI88Jtwvx6Qi1nMXW4 1xCMG+Tdspy2hqOfEHG7IracN2VjUoegZramoYx9+htjJHIenyzx2y7uHejMkhez GH8TLnfINUOAB5C+i6To8HhVz8iFGvSBbVi82Vrv1iXyDFUuxma6otIysjbNmUAc KS/TC+pO0VuOKAtgS+gbGZMvJE/83DIN68TjWg4nC6ebNbVZjVpRlmLA7Jk5vVOJ g3md77TZfwqFOZ2MHyJcjDsTVJjvjgWqly9YSZdpjnED/S5dbQS/u+udMK35oVj6 f/M= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:12 2026 by rpki-client