This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/4nH4XfhimtA2VpYePD6iIqgS8jg.roa File: 4nH4XfhimtA2VpYePD6iIqgS8jg.roa (raw, json) Hash identifier: WzWjp5sYk3618sDtkEiRYCtG2GQQ5fgZA4Df9TxbCmE= Subject key identifier: E2:71:F8:5D:F8:62:9A:D0:36:56:96:1E:3C:3E:A2:22:A8:12:F2:38 Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Certificate serial: 019B79102A1D0F85299A27CCDCFE889BF444 Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/4nH4XfhimtA2VpYePD6iIqgS8jg.roa Signing time: Thu 01 Jan 2026 10:17:41 +0000 ROA not before: Thu 01 Jan 2026 10:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 185.225.132.0/23 maxlen: 23 185.225.134.0/24 maxlen: 24 2a0d:c400::/32 maxlen: 32 2a0d:c401::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2a:1d:0f:85:29:9a:27:cc:dc:fe:88:9b:f4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e271f85df8629ad03656961e3c3ea222a812f238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:c1:ca:e4:ce:ec:c4:64:9e:84:54:75:df: ce:55:2b:31:11:03:f5:0c:28:04:be:78:1d:de:e2: 6b:a9:62:3a:33:9b:c4:d7:20:21:8f:a8:68:0f:a0: ee:12:69:9a:ef:5f:06:ad:03:9b:b1:5b:02:c1:bb: df:61:16:2f:0b:e3:4c:0f:ca:92:cd:f8:cb:f4:15: 6c:d2:6b:38:cd:13:b4:43:6f:fa:f4:e9:52:90:fb: 25:c1:6a:47:9a:5d:75:c2:3f:37:e0:9d:c9:07:8c: 73:c0:5d:30:59:e0:4a:02:6b:3a:e9:85:53:c0:50: fb:3f:69:b1:3e:c2:8a:41:03:6f:30:2d:7b:2b:a8: f3:82:6e:85:e4:2a:ce:54:ef:e3:e7:e9:4b:9a:85: 4d:b1:d7:78:8a:6a:14:c7:55:7b:ab:0a:8b:d9:6b: ce:4a:ee:c3:d9:bd:6d:63:ac:9f:6f:8e:c5:18:7d: 51:ab:74:2c:13:08:39:7e:92:a0:69:87:c3:b9:91: d9:92:fb:c7:28:28:ba:e4:5b:1f:93:53:2c:b6:46: 61:e8:13:93:7d:57:a1:24:79:59:db:48:a9:98:05: 8b:d5:62:5d:f3:5e:2f:f5:25:7b:1c:d7:f2:01:f4: 08:81:34:c5:6e:95:00:9a:3f:41:39:bd:ae:01:c1: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:71:F8:5D:F8:62:9A:D0:36:56:96:1E:3C:3E:A2:22:A8:12:F2:38 X509v3 Authority Key Identifier: keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/4nH4XfhimtA2VpYePD6iIqgS8jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.132.0-185.225.134.255 IPv6: 2a0d:c400::/31 Signature Algorithm: sha256WithRSAEncryption 08:5a:ba:66:49:a1:8d:ec:9c:03:63:69:15:f7:95:4c:bc:c1: 5a:30:7f:ba:6d:1b:db:7c:23:0f:20:b1:29:29:24:99:aa:89: 4a:a0:b8:07:05:2f:cc:d1:93:ac:39:3a:33:64:cb:e1:5d:89: 78:21:9b:52:82:3e:93:2b:36:6b:49:a0:9a:38:cc:cc:74:e3: e7:ac:cc:ca:46:12:94:94:d1:ec:72:11:bb:49:5f:4d:3b:06: 3f:dc:9a:24:e2:c3:8a:40:d3:2a:e6:05:fb:9e:05:00:8a:a3: b0:fa:30:29:73:f2:1c:4d:1d:d1:32:28:35:19:74:f6:fd:07: f3:a9:85:b6:d6:f3:3a:d8:1b:36:d3:35:79:3a:7f:f3:87:cf: 56:1e:e5:57:c3:ee:0f:d2:2d:73:d4:c1:ff:2e:c6:15:d7:8a: 41:97:6c:e3:c0:77:1f:0a:69:79:1e:c9:a0:2a:18:cc:6c:66: 33:bd:37:b6:8e:4d:ea:3c:06:34:d3:01:fa:12:18:f4:bb:49: 95:04:07:ea:d0:44:d7:c4:2c:c3:d3:80:c9:e7:1d:03:75:bf: 77:26:62:79:35:8e:75:30:0e:01:a2:48:c6:56:bf:4e:ac:2b: 3d:98:c4:4a:c2:0f:83:3c:06:5a:97:f4:73:61:fb:3d:50:fe: 70:a2:e8:1f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5ECodD4UpmifM3P6Im/REMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1 MjVhZjEwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjcxZjg1ZGY4NjI5YWQwMzY1Njk2MWUzYzNlYTIyMmE4MTJmMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6XByuTO7MRknoRUdd/OVSsxEQP1 DCgEvngd3uJrqWI6M5vE1yAhj6hoD6DuEmma718GrQObsVsCwbvfYRYvC+NMD8qS zfjL9BVs0ms4zRO0Q2/69OlSkPslwWpHml11wj834J3JB4xzwF0wWeBKAms66YVT wFD7P2mxPsKKQQNvMC17K6jzgm6F5CrOVO/j5+lLmoVNsdd4imoUx1V7qwqL2WvO Su7D2b1tY6yfb47FGH1Rq3QsEwg5fpKgaYfDuZHZkvvHKCi65Fsfk1MstkZh6BOT fVehJHlZ20ipmAWL1WJd814v9SV7HNfyAfQIgTTFbpUAmj9BOb2uAcGO3wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOJx+F34YprQNlaWHjw+oiKoEvI4MB8GA1UdIwQY MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt MWZhOWFjNTgwYjhlLzEvNG5INFhmaGltdEEyVnBZZVBENmlJcWdTOGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK54YQD BAC54YYwDQQCAAIwBwMFASoNxAAwDQYJKoZIhvcNAQELBQADggEBAAhaumZJoY3s nANjaRX3lUy8wVowf7ptG9t8Iw8gsSkpJJmqiUqguAcFL8zRk6w5OjNky+FdiXgh m1KCPpMrNmtJoJo4zMx04+eszMpGEpSU0exyEbtJX007Bj/cmiTiw4pA0yrmBfue BQCKo7D6MClz8hxNHdEyKDUZdPb9B/OphbbW8zrYGzbTNXk6f/OHz1Ye5VfD7g/S LXPUwf8uxhXXikGXbOPAdx8KaXkeyaAqGMxsZjO9N7aOTeo8BjTTAfoSGPS7SZUE B+rQRNfELMPTgMnnHQN1v3cmYnk1jnUwDgGiSMZWv06sKz2YxErCD4M8BlqX9HNh +z1Q/nCi6B8= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:11 2026 by rpki-client