This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/4Qc85N4EwfShTiGhUnkvPvcjOEs.roa File: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (raw, json) Hash identifier: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA= Subject key identifier: E1:07:3C:E4:DE:04:C1:F4:A1:4E:21:A1:52:79:2F:3E:F7:23:38:4B Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1 Certificate serial: 019B78A2BAE0FA8A64FBE37BA4EA29EFD197 Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/4Qc85N4EwfShTiGhUnkvPvcjOEs.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198726 IP address blocks: 193.110.40.0/21 maxlen: 21 194.4.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ba:e0:fa:8a:64:fb:e3:7b:a4:ea:29:ef:d1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1 Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1073ce4de04c1f4a14e21a152792f3ef723384b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:93:63:09:2a:73:33:9f:4f:70:eb:02:35: c7:23:64:f8:9c:00:60:d2:4b:5d:a1:4d:ee:1a:0b: 1e:2b:26:ee:d5:0c:71:79:fb:e5:54:db:24:83:7a: 6d:a9:48:40:53:0a:e3:93:94:d5:c8:0e:60:e3:82: e7:01:6f:ed:d6:5f:84:74:e6:3e:df:08:d4:c8:05: 08:04:2e:37:46:b2:82:94:d7:5c:3d:53:a9:ab:6e: 32:11:63:a6:50:e5:d1:2d:c4:55:e4:2f:6c:e8:2f: 55:e8:d7:24:a8:5e:20:a6:f0:01:64:97:7e:03:5a: d4:1b:2e:20:ab:fd:66:4c:1c:c9:79:d2:0e:ce:9f: 26:80:37:cc:3f:63:91:4d:b3:68:cb:2d:6a:93:6b: dc:ac:81:ba:ef:b2:bb:17:ea:a5:05:b0:62:a6:98: 25:0f:33:4a:8b:04:4e:ed:2c:f8:73:c7:82:d2:95: e8:6c:5c:69:be:b0:18:c6:3c:c0:8c:87:f3:5c:ae: d3:d8:91:73:1e:cc:4d:3d:12:9a:f0:43:d6:6f:46: 2b:38:2f:ef:be:84:bc:38:3f:49:a8:45:ca:2e:ba: 11:09:e3:e1:13:64:5c:55:2d:7c:14:af:7e:4c:6d: e0:b0:a0:e3:93:e1:87:8e:e6:ca:85:02:f9:a7:71: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:07:3C:E4:DE:04:C1:F4:A1:4E:21:A1:52:79:2F:3E:F7:23:38:4B X509v3 Authority Key Identifier: keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/4Qc85N4EwfShTiGhUnkvPvcjOEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.40.0/21 194.4.160.0/22 Signature Algorithm: sha256WithRSAEncryption 83:f4:78:a2:ac:df:4a:f4:de:05:a2:86:b3:c9:85:45:38:dd: a8:b3:8e:e6:21:7f:24:f2:87:de:ec:2c:f3:33:de:94:3e:0c: e6:f0:2b:f4:79:1f:f4:ba:57:82:e3:a6:9e:1f:2a:e6:d7:aa: d6:39:a7:43:9b:0d:bf:1d:15:86:ad:c0:14:ab:ab:4a:0d:7b: 98:84:e5:1b:0b:bf:c1:ea:69:20:be:73:8e:c1:06:e8:48:5e: 89:d6:6a:6e:51:20:65:c5:90:c2:6f:89:a3:64:09:73:c7:cc: e4:a4:34:55:4f:d9:3d:82:21:16:5b:d5:84:08:82:40:19:b2: 37:f0:14:45:79:a7:ab:a4:95:fd:50:23:3d:c4:62:d0:be:fd: 0a:94:a0:83:c9:41:99:1b:5d:5f:1b:df:61:b7:05:26:0d:55: b5:55:d9:42:1d:df:e4:ea:06:4b:11:7c:b4:f4:51:75:8a:33: f7:42:13:0e:52:26:ee:74:65:eb:36:b8:78:e4:9e:b6:6f:92: d3:92:f7:19:9f:bb:9d:f9:a5:d8:6f:35:80:25:8e:82:f4:6a: eb:5c:56:e8:b9:99:40:3a:ba:42:8f:9a:5e:02:c2:7c:ea:b3: f9:7d:e6:a6:e0:c0:1b:01:fc:9b:ee:1f:f1:15:1a:f4:07:3f: 06:c5:3a:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4orrg+opk++N7pOop79GXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1 ZTU3YTEwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTA3M2NlNGRlMDRjMWY0YTE0ZTIxYTE1Mjc5MmYzZWY3MjMzODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLmTYwkqczOfT3DrAjXHI2T4nABg 0ktdoU3uGgseKybu1QxxefvlVNskg3ptqUhAUwrjk5TVyA5g44LnAW/t1l+EdOY+ 3wjUyAUIBC43RrKClNdcPVOpq24yEWOmUOXRLcRV5C9s6C9V6NckqF4gpvABZJd+ A1rUGy4gq/1mTBzJedIOzp8mgDfMP2ORTbNoyy1qk2vcrIG677K7F+qlBbBippgl DzNKiwRO7Sz4c8eC0pXobFxpvrAYxjzAjIfzXK7T2JFzHsxNPRKa8EPWb0YrOC/v voS8OD9JqEXKLroRCePhE2RcVS18FK9+TG3gsKDjk+GHjubKhQL5p3Gt1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOEHPOTeBMH0oU4hoVJ5Lz73IzhLMB8GA1UdIwQY MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt OTA5MWNkNzNkMzhjLzEvNFFjODVONEV3ZlNoVGlHaFVua3ZQdmNqT0VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwW4oAwQC wgSgMA0GCSqGSIb3DQEBCwUAA4IBAQCD9HiirN9K9N4FooazyYVFON2os47mIX8k 8ofe7CzzM96UPgzm8Cv0eR/0uleC46aeHyrm16rWOadDmw2/HRWGrcAUq6tKDXuY hOUbC7/B6mkgvnOOwQboSF6J1mpuUSBlxZDCb4mjZAlzx8zkpDRVT9k9giEWW9WE CIJAGbI38BRFeaerpJX9UCM9xGLQvv0KlKCDyUGZG11fG99htwUmDVW1VdlCHd/k 6gZLEXy09FF1ijP3QhMOUibudGXrNrh45J62b5LTkvcZn7ud+aXYbzWAJY6C9Grr XFbouZlAOrpCj5peAsJ86rP5feam4MAbAfyb7h/xFRr0Bz8GxTrh -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:55 2026 by rpki-client