This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa File: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (raw, json) Hash identifier: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA= Subject key identifier: E3:F6:CC:CC:C0:61:0D:FE:6D:B8:10:6F:62:D0:68:20:E8:3E:28:B7 Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Certificate serial: 019B7DC9E15EC87AC563D71650A6557A70EA Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa Signing time: Fri 02 Jan 2026 08:19:00 +0000 ROA not before: Fri 02 Jan 2026 08:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205365 IP address blocks: 195.191.80.0/24 maxlen: 24 195.191.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e1:5e:c8:7a:c5:63:d7:16:50:a6:55:7a:70:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f Validity Not Before: Jan 2 08:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3f6ccccc0610dfe6db8106f62d06820e83e28b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:b8:9d:7f:86:61:f0:aa:fe:27:a5:a2:91: 9b:8e:ed:2a:0a:7f:c5:a3:c8:2e:fd:1b:f9:a9:6f: dc:68:d5:0d:9d:f9:11:fc:20:c0:b6:e9:ab:25:ed: 4f:d3:86:36:09:97:6c:87:c3:84:16:dd:92:34:8a: cc:f7:6e:69:b1:71:ed:29:72:01:93:de:15:38:ec: 23:67:ae:da:9f:b7:7f:de:51:56:d2:62:d6:e0:45: 5a:88:d0:be:3a:15:3c:3c:e3:3b:49:20:21:c3:1d: 06:55:86:b2:ad:09:a1:fa:57:eb:85:54:cd:97:92: c4:91:0e:33:94:7e:35:12:7a:bf:a8:06:a4:a2:9e: 40:16:c6:16:c9:75:36:8b:a0:c0:a5:30:f9:fd:03: e2:18:77:9d:5a:f4:7a:7f:ef:15:2c:52:8e:51:5c: c1:b5:12:1c:f9:a0:b4:52:34:bc:12:be:3c:de:c8: 2a:65:8f:ab:4a:b4:3e:35:bb:8d:c7:71:43:b6:47: b6:77:d9:55:7e:c1:df:53:61:4d:f4:d2:81:98:1a: 4c:67:37:eb:91:1b:81:1a:45:ae:cd:7a:3c:ed:0a: ce:3a:65:83:0a:21:8c:a9:b5:80:54:f2:bf:dd:30: 57:a4:c5:b4:c1:2c:2a:17:6e:0e:b7:e9:0c:ac:0e: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F6:CC:CC:C0:61:0D:FE:6D:B8:10:6F:62:D0:68:20:E8:3E:28:B7 X509v3 Authority Key Identifier: keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.80.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:62:71:a5:8e:d3:43:3a:37:e9:84:a5:cf:1c:4f:f9:48:c6: 28:b2:c9:3d:97:05:84:20:89:ef:64:b5:ec:17:32:96:45:6f: fb:e0:f1:16:1e:01:aa:fc:ab:04:78:b0:38:0f:4f:bc:73:35: ae:2b:21:aa:05:cf:95:c8:6e:7f:33:1d:e4:be:22:42:de:50: 4a:e6:f7:6a:f9:1d:3f:60:5d:cb:7a:3a:37:4b:4e:6a:96:bc: 7d:39:74:3b:a7:55:bb:ad:34:89:70:16:82:fe:a0:bc:1f:8d: f8:a6:76:36:23:73:c7:92:ce:05:cb:64:ae:b2:a0:fe:e6:a5: 1a:99:4c:05:d7:86:2d:3a:34:46:d8:02:b4:32:52:6a:ce:58: 8f:04:32:89:c9:fb:25:15:09:34:b7:5c:96:d7:65:47:f5:79: 74:4b:00:e6:63:18:82:df:c1:b3:ed:78:33:36:30:51:66:cf: e4:1e:06:60:e4:16:a3:de:e0:72:2a:49:f4:26:70:fb:dd:97: c1:d8:bb:31:e7:f0:ad:05:e6:d7:3e:2b:98:2e:52:24:61:6d: 6d:96:73:6a:9b:3b:d2:61:f8:f2:48:a8:fd:31:fe:57:25:64: 5b:51:4e:29:cd:07:0c:04:86:29:93:f4:6c:cf:7b:7b:be:7b: bb:f5:8f:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yeFeyHrFY9cWUKZVenDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw NDc3OWYwHhcNMjYwMTAyMDgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Y2Y2NjY2MwNjEwZGZlNmRiODEwNmY2MmQwNjgyMGU4M2UyOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM64nX+GYfCq/ielopGbju0qCn/F o8gu/Rv5qW/caNUNnfkR/CDAtumrJe1P04Y2CZdsh8OEFt2SNIrM925psXHtKXIB k94VOOwjZ67an7d/3lFW0mLW4EVaiNC+OhU8POM7SSAhwx0GVYayrQmh+lfrhVTN l5LEkQ4zlH41Enq/qAakop5AFsYWyXU2i6DApTD5/QPiGHedWvR6f+8VLFKOUVzB tRIc+aC0UjS8Er483sgqZY+rSrQ+NbuNx3FDtke2d9lVfsHfU2FN9NKBmBpMZzfr kRuBGkWuzXo87QrOOmWDCiGMqbWAVPK/3TBXpMW0wSwqF24Ot+kMrA52iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOP2zMzAYQ3+bbgQb2LQaCDoPii3MB8GA1UdIwQY MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt ZjI2MWZlNTE2OTUxLzEvNF9iTXpNQmhEZjV0dUJCdll0Qm9JT2ctS0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79QMA0G CSqGSIb3DQEBCwUAA4IBAQAKYnGljtNDOjfphKXPHE/5SMYossk9lwWEIInvZLXs FzKWRW/74PEWHgGq/KsEeLA4D0+8czWuKyGqBc+VyG5/Mx3kviJC3lBK5vdq+R0/ YF3Lejo3S05qlrx9OXQ7p1W7rTSJcBaC/qC8H434pnY2I3PHks4Fy2SusqD+5qUa mUwF14YtOjRG2AK0MlJqzliPBDKJyfslFQk0t1yW12VH9Xl0SwDmYxiC38Gz7Xgz NjBRZs/kHgZg5Baj3uByKkn0JnD73ZfB2Lsx5/CtBebXPiuYLlIkYW1tlnNqmzvS YfjySKj9Mf5XJWRbUU4pzQcMBIYpk/Rsz3t7vnu79Y/r -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:11 2026 by rpki-client