This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s4Q1hdMh0pLHU4IVLQKZfoTLp2w.roa File: s4Q1hdMh0pLHU4IVLQKZfoTLp2w.roa (raw, json) Hash identifier: 4Xn0nnLmWqe+7Zs1WC/oiPq/YsGt4JwvSO9mHdejOiE= Subject key identifier: B3:84:35:85:D3:21:D2:92:C7:53:82:15:2D:02:99:7E:84:CB:A7:6C Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8547697479E137FC739508FEE149B0 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s4Q1hdMh0pLHU4IVLQKZfoTLp2w.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207159 IP address blocks: 185.195.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:47:69:74:79:e1:37:fc:73:95:08:fe:e1:49:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3843585d321d292c75382152d02997e84cba76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:29:8d:51:27:92:a4:72:76:60:9b:20:e9: f8:63:7c:b4:97:2f:d9:04:fb:dc:80:c0:bc:2f:99: f8:bc:29:6d:59:d8:17:96:97:f1:66:ca:d7:98:50: eb:10:1a:8c:fb:ba:47:d6:f1:de:1d:c6:2c:01:4f: 34:70:d3:ab:50:ed:1b:50:4f:62:7d:9c:9d:af:ab: 0a:41:12:ee:b1:eb:13:27:ca:84:4b:a9:3b:3b:10: f1:a9:f4:8f:c2:28:1a:de:64:f9:ff:90:52:79:a9: 53:3e:a3:e1:f6:cf:6a:c7:0b:56:38:aa:9a:37:29: 2a:53:a9:bf:44:85:ac:f7:ec:70:1a:a7:65:84:a9: 41:3a:d7:7b:71:90:fe:11:76:3b:ba:27:c1:76:3a: 8b:30:bd:4a:03:6a:95:d8:b5:4c:00:94:1e:b9:47: ea:73:18:90:90:42:6c:14:b9:85:0f:19:7b:e6:c2: ab:bc:83:39:43:e8:11:51:da:38:65:16:98:7c:bf: 75:cf:85:3f:0c:c7:62:ee:b8:8f:34:59:7c:d4:f0: 46:95:fc:2c:ed:87:a9:fc:ba:16:b3:19:0b:21:d9: 1d:c0:ad:c2:ac:f1:a0:64:43:64:bc:e3:a1:96:56: 7d:70:84:35:7c:9d:9c:4b:49:73:5e:87:66:f0:8c: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:84:35:85:D3:21:D2:92:C7:53:82:15:2D:02:99:7E:84:CB:A7:6C X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/s4Q1hdMh0pLHU4IVLQKZfoTLp2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.184.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:c2:06:f9:ab:4a:94:b5:9a:34:5f:6a:bc:45:cc:4f:5f:80: 65:f6:86:fa:04:ec:3a:74:c5:06:3a:c2:17:54:46:10:ff:aa: fc:bc:0b:4d:24:4e:b8:55:0c:3c:3f:d3:50:40:f1:7a:c2:d3: c6:af:38:80:20:32:8c:5f:23:d1:ae:89:ed:60:5c:ba:78:2e: b7:fb:fe:5e:01:bc:80:47:d6:72:c1:07:4e:30:e5:be:c4:fc: 1d:0a:e8:e6:96:9f:b9:c5:76:e8:81:c1:1f:48:e2:15:9e:2e: f0:91:71:14:0c:da:9e:c4:26:b5:6e:08:2d:c9:b9:ba:7a:ef: 3f:33:21:42:ac:c2:d0:c7:d1:0d:bf:09:f2:dd:44:69:fd:90: d1:3e:77:25:df:02:31:22:10:c4:b5:54:55:e5:25:91:c6:41: 53:bf:e6:4d:03:5e:e1:51:79:a1:60:6f:6d:6b:8f:5b:e9:32: 81:c0:32:a5:8b:dd:1e:ca:05:3d:9e:ac:8e:c8:dd:0a:c9:86: bf:50:76:73:28:49:5d:3d:18:09:84:0d:a8:62:69:a2:27:e8: dc:7e:34:ba:19:56:77:ef:5d:6b:90:ae:51:f8:b0:bd:0c:ff: 10:c8:27:11:8c:5a:ab:89:55:3a:04:ea:43:a4:b1:89:d8:0a: 88:2b:88:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUdpdHnhN/xzlQj+4UmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg0MzU4NWQzMjFkMjkyYzc1MzgyMTUyZDAyOTk3ZTg0Y2JhNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/8pjVEnkqRydmCbIOn4Y3y0ly/Z BPvcgMC8L5n4vCltWdgXlpfxZsrXmFDrEBqM+7pH1vHeHcYsAU80cNOrUO0bUE9i fZydr6sKQRLusesTJ8qES6k7OxDxqfSPwiga3mT5/5BSealTPqPh9s9qxwtWOKqa NykqU6m/RIWs9+xwGqdlhKlBOtd7cZD+EXY7uifBdjqLML1KA2qV2LVMAJQeuUfq cxiQkEJsFLmFDxl75sKrvIM5Q+gRUdo4ZRaYfL91z4U/DMdi7riPNFl81PBGlfws 7Yep/LoWsxkLIdkdwK3CrPGgZENkvOOhllZ9cIQ1fJ2cS0lzXodm8IwfSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOENYXTIdKSx1OCFS0CmX6Ey6dsMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvczRRMWhkTWgwcExIVTRJVkxRS1pmb1RMcDJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucO4MA0G CSqGSIb3DQEBCwUAA4IBAQCcwgb5q0qUtZo0X2q8RcxPX4Bl9ob6BOw6dMUGOsIX VEYQ/6r8vAtNJE64VQw8P9NQQPF6wtPGrziAIDKMXyPRrontYFy6eC63+/5eAbyA R9ZywQdOMOW+xPwdCujmlp+5xXbogcEfSOIVni7wkXEUDNqexCa1bggtybm6eu8/ MyFCrMLQx9ENvwny3URp/ZDRPncl3wIxIhDEtVRV5SWRxkFTv+ZNA17hUXmhYG9t a49b6TKBwDKli90eygU9nqyOyN0KyYa/UHZzKEldPRgJhA2oYmmiJ+jcfjS6GVZ3 711rkK5R+LC9DP8QyCcRjFqriVU6BOpDpLGJ2AqIK4i5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:47 2026 by rpki-client