This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/fQi4S-76xWPPyw5vMb_RHWLTS5s.roa File: fQi4S-76xWPPyw5vMb_RHWLTS5s.roa (raw, json) Hash identifier: rmuMrTFKFEOVdlfyW4V4X3rzLj8ASYY1dTNue1YgmjQ= Subject key identifier: 7D:08:B8:4B:EE:FA:C5:63:CF:CB:0E:6F:31:BF:D1:1D:62:D3:4B:9B Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026 Certificate serial: 019B7C12D41A28D9206DA12AEA941447862B Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/fQi4S-76xWPPyw5vMb_RHWLTS5s.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202546 IP address blocks: 185.127.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d4:1a:28:d9:20:6d:a1:2a:ea:94:14:47:86:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d08b84beefac563cfcb0e6f31bfd11d62d34b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:41:18:22:a3:ea:56:f1:33:d9:04:e5:68: 24:53:43:67:77:46:d3:2d:08:b7:6f:cc:a8:da:03: d5:9e:ef:c0:10:07:ac:c0:51:ad:a4:ed:66:62:fc: b6:72:db:8e:62:1d:b3:61:e2:07:40:2b:7d:28:76: ca:eb:29:76:0e:0b:b6:4d:d3:4c:88:a0:cd:ac:d4: b1:e4:67:6b:c9:2e:f2:b5:ed:e2:00:d9:9e:b7:c1: 31:d9:69:17:1c:41:96:7a:37:fe:8f:1d:e4:2c:12: cd:ba:2a:2a:61:78:4f:12:1a:39:41:04:2f:ab:61: a1:1b:d0:6e:64:21:cd:ae:29:60:6b:7b:d0:84:92: 18:a3:f2:21:96:e8:68:e6:f0:93:84:b4:a7:40:00: 1f:40:29:3f:1d:b1:d6:37:c7:30:02:10:80:67:90: 9c:fb:d7:0d:b0:76:61:eb:53:7e:c8:96:86:f9:8c: f1:41:d2:9d:49:fb:c7:5c:d1:05:b8:de:41:d2:ee: a9:77:c8:9e:0a:47:21:53:da:9e:c9:2c:88:b1:5b: 4d:65:72:da:d4:22:f2:de:21:ca:db:27:d2:54:c0: 00:ac:4c:2a:e6:0d:88:9d:87:1a:5f:53:c3:d2:51: 7e:9c:07:84:f4:68:46:02:ef:7c:cf:e7:55:9e:f1: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:08:B8:4B:EE:FA:C5:63:CF:CB:0E:6F:31:BF:D1:1D:62:D3:4B:9B X509v3 Authority Key Identifier: keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/fQi4S-76xWPPyw5vMb_RHWLTS5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.4.0/22 Signature Algorithm: sha256WithRSAEncryption ae:30:b8:89:f0:b7:bf:33:80:12:79:bc:b9:eb:d7:0c:09:11: 64:b1:f7:ad:e8:d6:68:11:b0:3d:2e:26:32:b8:41:30:55:1b: 52:da:9e:9c:a8:48:8c:37:00:4d:0d:dc:0d:ab:7b:f9:9b:bf: 9a:49:f2:e6:24:ec:11:37:f2:e2:0b:e0:98:0e:45:a0:f4:e2: ac:89:7c:0d:d0:b4:bb:2c:59:c0:ab:ee:0d:f4:db:06:a4:7e: b9:9c:8a:ed:ff:22:20:d3:04:f6:e2:fa:a7:b8:c9:4c:4c:b6: 9a:34:ba:ff:b2:44:20:8c:10:7e:d9:99:92:bc:c1:68:ef:a1: 59:24:91:21:a2:f8:51:bd:37:19:e5:61:8c:95:14:59:6c:53: 27:fd:a0:25:7e:b0:45:2e:50:9b:4a:4d:c9:20:61:45:b4:e3: 60:4f:bd:97:79:56:ab:81:f1:cc:bc:95:4c:34:55:18:f4:16: c6:08:45:6a:8f:e4:e3:f9:fc:40:10:80:d0:95:1a:2d:2e:d3: 3e:be:30:72:72:c7:33:88:5e:77:ee:36:08:35:0e:b5:83:2a: 2d:51:ce:59:6a:3a:f9:2e:b5:fa:ff:3c:52:11:2d:83:a7:5a: 4f:f9:1b:e4:ac:30:b8:8e:96:96:ad:b4:69:1e:d4:9a:d3:4c: a2:65:bb:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtQaKNkgbaEq6pQUR4YrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MTViZWVmOWVhMWRkNDc3MmMyZWU5NTI3NjFkNjU1ZDk4 NjUwMjYwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA4Yjg0YmVlZmFjNTYzY2ZjYjBlNmYzMWJmZDExZDYyZDM0YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo71BGCKj6lbxM9kE5WgkU0Nnd0bT LQi3b8yo2gPVnu/AEAeswFGtpO1mYvy2ctuOYh2zYeIHQCt9KHbK6yl2Dgu2TdNM iKDNrNSx5GdryS7yte3iANmet8Ex2WkXHEGWejf+jx3kLBLNuioqYXhPEho5QQQv q2GhG9BuZCHNrilga3vQhJIYo/Ihluho5vCThLSnQAAfQCk/HbHWN8cwAhCAZ5Cc +9cNsHZh61N+yJaG+YzxQdKdSfvHXNEFuN5B0u6pd8ieCkchU9qeySyIsVtNZXLa 1CLy3iHK2yfSVMAArEwq5g2InYcaX1PD0lF+nAeE9GhGAu98z+dVnvF/pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0IuEvu+sVjz8sObzG/0R1i00ubMB8GA1UdIwQY MBaAFLQVvu+eod1HcsLulSdh1lXZhlAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDkt MGUxOTVlYzY1YjcyLzEvZlFpNFMtNzZ4V1BQeXc1dk1iX1JIV0xUUzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDktMGUxOTVlYzY1Yjcy LzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX8EMA0G CSqGSIb3DQEBCwUAA4IBAQCuMLiJ8Le/M4ASeby569cMCRFksfet6NZoEbA9LiYy uEEwVRtS2p6cqEiMNwBNDdwNq3v5m7+aSfLmJOwRN/LiC+CYDkWg9OKsiXwN0LS7 LFnAq+4N9NsGpH65nIrt/yIg0wT24vqnuMlMTLaaNLr/skQgjBB+2ZmSvMFo76FZ JJEhovhRvTcZ5WGMlRRZbFMn/aAlfrBFLlCbSk3JIGFFtONgT72XeVargfHMvJVM NFUY9BbGCEVqj+Tj+fxAEIDQlRotLtM+vjBycscziF537jYINQ61gyotUc5Zajr5 LrX6/zxSES2Dp1pP+RvkrDC4jpaWrbRpHtSa00yiZbtH -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:45 2026 by rpki-client