This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa File: 4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa (raw, json) Hash identifier: JkbE2ukkvOX9Yb+5O016nUW2TqsNKcHpk0PraLymPbM= Subject key identifier: E0:BF:91:89:98:AD:C2:AD:15:27:B2:5A:D0:83:E9:F5:8D:C6:FA:52 Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Certificate serial: 019B7A5A5916FB207ADA914F4D9B23E75ABE Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa Signing time: Thu 01 Jan 2026 16:18:19 +0000 ROA not before: Thu 01 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207290 IP address blocks: 37.44.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:59:16:fb:20:7a:da:91:4f:4d:9b:23:e7:5a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Validity Not Before: Jan 1 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0bf918998adc2ad1527b25ad083e9f58dc6fa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:13:ed:62:e9:6c:d3:8d:d1:ed:83:1c:5d:57: 80:a3:82:a6:f4:d8:0d:dd:60:c2:b7:08:90:19:6d: bb:1c:17:30:71:69:25:9a:70:01:f0:45:12:16:cc: d5:27:64:04:ae:c4:e3:f8:78:e7:0e:00:e1:e5:28: 86:1f:ad:9d:2e:83:d8:3e:fe:00:de:dd:49:0c:ff: f7:30:c1:de:ae:9e:ce:45:5f:60:3c:42:12:83:03: 1b:a3:b1:e2:f5:52:49:5b:aa:89:ac:75:59:1d:2e: 1f:a5:c9:c9:c0:47:06:32:d8:22:26:5d:ad:4e:ff: e5:d0:49:b4:47:b6:df:e9:23:a6:88:db:e0:10:46: 2c:c4:f6:f1:75:fb:4e:89:54:89:8f:79:7e:ed:a8: 1d:b7:d2:97:83:b9:0b:68:e6:dd:b8:06:45:83:05: 16:01:43:38:7a:a8:66:77:a5:f9:c1:07:3d:93:63: 53:de:bc:b3:45:7a:bb:60:db:a2:fe:fc:08:c8:97: 51:69:fa:92:ae:ca:e6:f7:80:a7:4b:6e:7b:7f:d6: 1a:ae:1b:94:ad:44:fc:df:40:09:e2:6b:e9:f4:c6: ad:1b:0a:71:65:ae:60:34:23:48:c3:14:df:a7:f7: a3:b0:d7:29:3f:14:05:7c:ae:28:e5:2c:f4:2d:13: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BF:91:89:98:AD:C2:AD:15:27:B2:5A:D0:83:E9:F5:8D:C6:FA:52 X509v3 Authority Key Identifier: keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/4L-RiZitwq0VJ7Ja0IPp9Y3G-lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.240.0/22 Signature Algorithm: sha256WithRSAEncryption 34:45:b9:8b:dd:a1:b0:6e:51:23:65:38:cd:cf:93:23:e9:69: ee:24:7b:ff:79:76:bb:73:51:55:8f:a3:8f:16:ef:7a:c0:e7: 49:81:cb:45:1f:be:60:ff:56:87:4a:ac:4a:7f:3e:c9:0b:14: 71:99:ae:3d:40:04:37:93:ec:bc:35:8e:6a:4a:45:cc:a7:fe: c6:fa:f4:c8:05:fa:cc:4c:50:13:e6:cd:d6:78:5b:63:75:05: 99:3b:a1:b5:35:ef:8f:57:d9:bf:a5:1b:84:a4:b6:e7:b3:22: fd:c1:23:05:b2:21:50:cf:8e:c4:38:4e:8b:b8:ba:43:f5:4b: 7c:a7:95:1a:63:d7:e3:5a:79:64:0b:a1:ee:54:e2:cc:e4:b7: c3:a2:79:22:a6:ca:e2:7d:17:4e:f0:1f:26:b4:9f:63:8a:e8: 5e:0d:63:21:8d:92:74:fd:73:3d:51:77:b4:33:64:02:58:e8: c2:a1:7b:d6:52:27:2c:ba:31:4d:41:8d:40:c5:99:89:5e:e5: df:7a:65:29:82:74:8d:c7:f5:f3:34:30:92:d3:81:84:38:b4: db:d7:5e:a0:d1:e1:42:a5:26:f5:0a:aa:14:67:6c:aa:5f:58: f3:00:77:9e:ab:53:22:b4:91:6b:e7:f8:12:3b:a9:2e:6f:c0: 6d:40:db:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WlkW+yB62pFPTZsj51q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjkyNTEzOWFjYzRhZmUwYmU5ZWYwOTg0ZTNlN2JkNWI0 NGU5ZTYwHhcNMjYwMTAxMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGJmOTE4OTk4YWRjMmFkMTUyN2IyNWFkMDgzZTlmNThkYzZmYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BPtYuls043R7YMcXVeAo4Km9NgN 3WDCtwiQGW27HBcwcWklmnAB8EUSFszVJ2QErsTj+HjnDgDh5SiGH62dLoPYPv4A 3t1JDP/3MMHerp7ORV9gPEISgwMbo7Hi9VJJW6qJrHVZHS4fpcnJwEcGMtgiJl2t Tv/l0Em0R7bf6SOmiNvgEEYsxPbxdftOiVSJj3l+7agdt9KXg7kLaObduAZFgwUW AUM4eqhmd6X5wQc9k2NT3ryzRXq7YNui/vwIyJdRafqSrsrm94CnS257f9YarhuU rUT830AJ4mvp9MatGwpxZa5gNCNIwxTfp/ejsNcpPxQFfK4o5Sz0LROB9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOC/kYmYrcKtFSeyWtCD6fWNxvpSMB8GA1UdIwQY MBaAFIVpJROazEr+C+nvCYTj571bROnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUt OGQyMDNiYTRhY2M0LzEvNEwtUmlaaXR3cTBWSjdKYTBJUHA5WTNHLWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUtOGQyMDNiYTRhY2M0 LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzwMA0G CSqGSIb3DQEBCwUAA4IBAQA0RbmL3aGwblEjZTjNz5Mj6WnuJHv/eXa7c1FVj6OP Fu96wOdJgctFH75g/1aHSqxKfz7JCxRxma49QAQ3k+y8NY5qSkXMp/7G+vTIBfrM TFAT5s3WeFtjdQWZO6G1Ne+PV9m/pRuEpLbnsyL9wSMFsiFQz47EOE6LuLpD9Ut8 p5UaY9fjWnlkC6HuVOLM5LfDonkipsrifRdO8B8mtJ9jiuheDWMhjZJ0/XM9UXe0 M2QCWOjCoXvWUicsujFNQY1AxZmJXuXfemUpgnSNx/XzNDCS04GEOLTb116g0eFC pSb1CqoUZ2yqX1jzAHeeq1MitJFr5/gSO6kub8BtQNsp -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:29 2026 by rpki-client