This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/4oDq4WaHtzxq4X2XmYKxOilfXjc.roa File: 4oDq4WaHtzxq4X2XmYKxOilfXjc.roa (raw, json) Hash identifier: 0o/IvKk3dqBypwXiDheqBd2S3T9GWA2BbRQUpKWXnt8= Subject key identifier: E2:80:EA:E1:66:87:B7:3C:6A:E1:7D:97:99:82:B1:3A:29:5F:5E:37 Certificate issuer: /CN=695dce5e37a862538a0f66883de206ffb7c93b69 Certificate serial: 019B7F15920E084C2E9C17BC8E1BC6B4CFF7 Authority key identifier: 69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/4oDq4WaHtzxq4X2XmYKxOilfXjc.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205073 IP address blocks: 185.231.0.0/24 maxlen: 24 185.231.1.0/24 maxlen: 24 185.231.2.0/24 maxlen: 24 185.231.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:92:0e:08:4c:2e:9c:17:bc:8e:1b:c6:b4:cf:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695dce5e37a862538a0f66883de206ffb7c93b69 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e280eae16687b73c6ae17d979982b13a295f5e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:93:36:65:cc:01:15:cd:64:53:6b:92:97: 97:a3:83:78:cb:a5:60:fb:55:86:5a:3a:d8:82:22: 13:ba:c1:fd:c4:ce:80:b6:b7:3b:2b:f3:fc:dc:e5: a5:ed:b4:9f:74:eb:dc:9d:01:74:62:e1:17:ed:82: 37:7f:a9:2b:f7:2b:77:f1:18:35:c4:ba:7b:a7:c7: a9:1c:31:c6:a7:de:b6:c3:92:1f:c1:e4:8f:d5:dc: 0e:39:81:0c:c8:79:7e:55:59:8d:70:0b:5e:9f:5e: 3f:2e:7e:9a:52:d9:e6:0d:e6:8a:4a:d3:34:a2:c3: e7:66:b7:80:82:bf:6c:27:86:e1:85:5b:4e:26:fb: 31:d5:77:c5:b2:e8:9c:11:de:d7:f3:cb:aa:89:0f: 6c:23:42:fe:ac:79:10:a8:a9:99:30:42:fa:4e:62: 5f:7a:a9:18:0a:c1:5f:b8:4a:1e:76:63:6e:90:93: 63:9a:6f:6c:cc:80:63:dc:a9:4e:f6:5e:78:4d:58: d9:b5:2c:14:ae:e0:97:95:66:01:86:ae:b5:09:86: c5:18:47:2d:28:c2:cc:76:80:46:6a:27:f5:a2:08: e3:7f:36:dd:c9:77:2e:8f:7b:57:f6:92:ba:1d:8d: 16:c4:09:b3:9b:2b:5e:06:8a:3f:70:c1:c0:17:b0: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:80:EA:E1:66:87:B7:3C:6A:E1:7D:97:99:82:B1:3A:29:5F:5E:37 X509v3 Authority Key Identifier: keyid:69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/4oDq4WaHtzxq4X2XmYKxOilfXjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.0.0/22 Signature Algorithm: sha256WithRSAEncryption 63:25:f9:11:ae:7a:6c:9f:66:11:09:a3:d2:3e:14:35:43:9e: 09:f7:e8:60:aa:4f:f2:07:c7:9d:96:91:95:3a:60:3f:26:27: c8:f7:5a:b2:6e:3a:00:a8:70:7a:c1:6a:ed:53:7e:44:5d:97: 88:75:6a:eb:aa:23:a8:69:a8:7b:05:b0:a4:6b:37:fd:44:58: 53:e9:74:7b:b7:2c:4a:7b:55:45:2c:bd:4a:2f:68:f9:73:7a: 0d:ee:f1:0b:92:4a:3d:56:f2:a2:0d:bd:9d:a1:d1:a6:3c:11: 13:32:a9:c8:ca:ea:ed:82:90:50:1e:b6:cd:59:c6:b0:3e:c6: cf:94:91:9e:fd:8f:a3:92:c3:50:69:f1:d9:cf:1b:9f:3a:a7: 58:fd:87:a6:79:08:54:5b:0b:3c:04:f9:5a:22:87:67:13:0e: 92:b9:d6:be:b2:7d:33:ab:ff:02:3c:c0:58:31:61:17:79:d2: cc:ed:55:c7:63:5c:e5:f4:d4:55:27:35:c3:b3:f8:5b:89:08: 2e:e7:64:93:17:11:83:11:40:14:2d:aa:6b:45:52:f6:27:0f: 7a:e9:e5:16:2b:7c:d8:03:c6:d1:9d:3b:c4:66:b6:e6:e6:d7: c6:51:d2:c4:88:65:8f:2b:33:2a:2e:4a:78:4a:cd:89:77:a0: 59:9e:c8:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZIOCEwunBe8jhvGtM/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWRjZTVlMzdhODYyNTM4YTBmNjY4ODNkZTIwNmZmYjdj OTNiNjkwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjgwZWFlMTY2ODdiNzNjNmFlMTdkOTc5OTgyYjEzYTI5NWY1ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04aTNmXMARXNZFNrkpeXo4N4y6Vg +1WGWjrYgiITusH9xM6Atrc7K/P83OWl7bSfdOvcnQF0YuEX7YI3f6kr9yt38Rg1 xLp7p8epHDHGp962w5IfweSP1dwOOYEMyHl+VVmNcAten14/Ln6aUtnmDeaKStM0 osPnZreAgr9sJ4bhhVtOJvsx1XfFsuicEd7X88uqiQ9sI0L+rHkQqKmZMEL6TmJf eqkYCsFfuEoedmNukJNjmm9szIBj3KlO9l54TVjZtSwUruCXlWYBhq61CYbFGEct KMLMdoBGaif1ogjjfzbdyXcuj3tX9pK6HY0WxAmzmyteBoo/cMHAF7BSCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKA6uFmh7c8auF9l5mCsTopX143MB8GA1UdIwQY MBaAFGldzl43qGJTig9miD3iBv+3yTtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVYzT1hqZW9ZbE9LRDJhSVBlSUdfN2ZKTzJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83MTY5MTEtMzBkZS00Yjc0LTk1OWIt MDE3ZGVlNDUyZWM0LzEvNG9EcTRXYUh0enhxNFgyWG1ZS3hPaWxmWGpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83MTY5MTEtMzBkZS00Yjc0LTk1OWItMDE3ZGVlNDUyZWM0 LzEvYVYzT1hqZW9ZbE9LRDJhSVBlSUdfN2ZKTzJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuecAMA0G CSqGSIb3DQEBCwUAA4IBAQBjJfkRrnpsn2YRCaPSPhQ1Q54J9+hgqk/yB8edlpGV OmA/JifI91qybjoAqHB6wWrtU35EXZeIdWrrqiOoaah7BbCkazf9RFhT6XR7tyxK e1VFLL1KL2j5c3oN7vELkko9VvKiDb2dodGmPBETMqnIyurtgpBQHrbNWcawPsbP lJGe/Y+jksNQafHZzxufOqdY/YemeQhUWws8BPlaIodnEw6Suda+sn0zq/8CPMBY MWEXedLM7VXHY1zl9NRVJzXDs/hbiQgu52STFxGDEUAULaprRVL2Jw966eUWK3zY A8bRnTvEZrbm5tfGUdLEiGWPKzMqLkp4Ss2Jd6BZnshX -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:37 2026 by rpki-client