This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/4oS7f5aNMThyZTin7FlnkmNfcnM.roa File: 4oS7f5aNMThyZTin7FlnkmNfcnM.roa (raw, json) Hash identifier: Rq3EvqTLDbExRBsoliQM1/05zLN71ScvdftpfuJDfm0= Subject key identifier: E2:84:BB:7F:96:8D:31:38:72:65:38:A7:EC:59:67:92:63:5F:72:73 Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c Certificate serial: 019B7834E1D3A8CF8D40C30104B0AF9C4CFE Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/4oS7f5aNMThyZTin7FlnkmNfcnM.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211029 IP address blocks: 185.253.244.0/22 maxlen: 24 185.253.245.0/24 maxlen: 24 185.253.246.0/24 maxlen: 24 185.253.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e1:d3:a8:cf:8d:40:c3:01:04:b0:af:9c:4c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e284bb7f968d3138726538a7ec596792635f7273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:da:b0:f8:5e:97:ab:84:49:6a:bd:ae:8a: b8:18:58:e7:04:a4:26:9c:83:e6:45:13:ad:a0:ff: e6:53:ef:f2:19:72:ee:6b:0c:4d:32:0d:89:d2:94: 71:b5:f9:9d:88:68:41:0c:c9:ba:e3:7f:88:3e:f4: ba:9c:f4:09:81:f6:59:d2:08:40:7e:23:1e:db:74: 74:35:25:87:3e:29:63:8b:b1:2f:60:fe:e5:ca:ce: 6e:75:14:cb:9d:e3:bf:b7:34:b7:52:46:a2:dd:9a: b4:02:6a:0f:6d:4d:13:8f:c8:ad:e6:e3:ce:be:63: f8:f9:a1:3a:57:57:f3:a0:26:63:2f:1b:17:59:a2: d4:9c:a4:7d:98:c7:c2:a8:f4:77:22:16:e5:c6:75: bb:a7:ce:f5:53:f3:2f:f1:06:a5:68:e7:aa:9f:f3: 0d:75:a3:12:3c:83:d3:12:b9:46:16:90:e0:8a:1c: 05:d2:81:07:55:fa:b7:c4:3f:cb:e6:03:51:7e:7d: 8f:a1:33:87:67:8f:93:3d:7d:4a:cf:3b:61:9a:e7: 92:40:c3:1e:d2:8e:54:da:c2:99:7f:d9:8e:03:ab: 26:c0:8d:43:0c:98:de:a2:91:10:c2:c5:bc:ab:4d: a0:2f:0d:fb:cb:6c:b4:1d:64:c2:06:24:3e:7b:64: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:84:BB:7F:96:8D:31:38:72:65:38:A7:EC:59:67:92:63:5F:72:73 X509v3 Authority Key Identifier: keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/4oS7f5aNMThyZTin7FlnkmNfcnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.244.0/22 Signature Algorithm: sha256WithRSAEncryption 50:36:e9:8b:46:b3:f8:1b:0d:37:5a:50:77:6e:24:db:6a:9d: bd:55:ac:1c:21:9b:9a:ef:ba:9d:83:ae:8f:51:13:3e:b3:cf: be:4a:6a:ec:ab:6e:20:34:4e:b9:9f:9c:27:25:72:fe:e1:8e: 28:53:fa:bf:2b:77:fe:9d:a5:83:e1:93:8e:21:bc:d9:56:ae: ed:f6:a2:49:03:2d:1b:3d:d4:20:5d:ee:bf:52:61:c6:be:02: 65:00:92:fc:98:79:28:a8:0b:55:0c:38:9c:3c:0a:ae:7f:15: 65:5e:79:36:26:0b:83:a7:09:42:e8:55:31:99:bd:ed:c8:be: da:f6:a7:71:3e:0e:da:27:e4:c3:19:1e:fb:7b:a2:64:8e:7f: b0:74:05:f1:e0:22:e1:15:ed:d0:bf:e4:7f:13:60:00:b5:50: e6:52:be:3f:4b:c1:cc:6c:35:5f:74:ae:be:3e:6e:64:04:9f: 9e:2a:82:d5:06:37:7c:ef:3e:25:2b:a1:82:6e:04:a6:1a:12: e1:58:9a:3f:ee:76:5c:8a:ee:41:08:66:5f:6a:be:b2:0a:15: ba:52:73:a1:6f:ff:a0:6c:27:4b:9f:5a:cd:7e:6a:2e:bb:40: f1:17:3c:7c:56:ba:0c:1b:3f:d9:0f:c9:f9:78:1b:be:31:ee: f7:ef:7a:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOHTqM+NQMMBBLCvnEz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzYzN2E3MDlkZGJlN2Y2MjM3YWY4ZDViMjkxM2I0MjIz NzE1N2MwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg0YmI3Zjk2OGQzMTM4NzI2NTM4YTdlYzU5Njc5MjYzNWY3MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz3asPhel6uESWq9roq4GFjnBKQm nIPmRROtoP/mU+/yGXLuawxNMg2J0pRxtfmdiGhBDMm643+IPvS6nPQJgfZZ0ghA fiMe23R0NSWHPilji7EvYP7lys5udRTLneO/tzS3Ukai3Zq0AmoPbU0Tj8it5uPO vmP4+aE6V1fzoCZjLxsXWaLUnKR9mMfCqPR3IhblxnW7p871U/Mv8QalaOeqn/MN daMSPIPTErlGFpDgihwF0oEHVfq3xD/L5gNRfn2PoTOHZ4+TPX1KzzthmueSQMMe 0o5U2sKZf9mOA6smwI1DDJjeopEQwsW8q02gLw37y2y0HWTCBiQ+e2TcLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKEu3+WjTE4cmU4p+xZZ5JjX3JzMB8GA1UdIwQY MBaAFCfGN6cJ3b5/YjevjVspE7QiNxV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMt Y2JhZGI2NDM0MGUwLzEvNG9TN2Y1YU5NVGh5WlRpbjdGbG5rbU5mY25NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMtY2JhZGI2NDM0MGUw LzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf30MA0G CSqGSIb3DQEBCwUAA4IBAQBQNumLRrP4Gw03WlB3biTbap29VawcIZua77qdg66P URM+s8++Smrsq24gNE65n5wnJXL+4Y4oU/q/K3f+naWD4ZOOIbzZVq7t9qJJAy0b PdQgXe6/UmHGvgJlAJL8mHkoqAtVDDicPAqufxVlXnk2JguDpwlC6FUxmb3tyL7a 9qdxPg7aJ+TDGR77e6Jkjn+wdAXx4CLhFe3Qv+R/E2AAtVDmUr4/S8HMbDVfdK6+ Pm5kBJ+eKoLVBjd87z4lK6GCbgSmGhLhWJo/7nZciu5BCGZfar6yChW6UnOhb/+g bCdLn1rNfmouu0DxFzx8VroMGz/ZD8n5eBu+Me7373ri -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:27 2026 by rpki-client