This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/4DzAOv88kFIOqHCs_9bsjlv3GTE.roa File: 4DzAOv88kFIOqHCs_9bsjlv3GTE.roa (raw, json) Hash identifier: caV7/tYU8DPcz0xZ4ImkoJhJu5r2VSnvWFC2mJf3l9g= Subject key identifier: E0:3C:C0:3A:FF:3C:90:52:0E:A8:70:AC:FF:D6:EC:8E:5B:F7:19:31 Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Certificate serial: 019B7DCA48F175AF1006D3BD10C9105545A4 Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/4DzAOv88kFIOqHCs_9bsjlv3GTE.roa Signing time: Fri 02 Jan 2026 08:19:27 +0000 ROA not before: Fri 02 Jan 2026 08:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213317 IP address blocks: 185.167.252.0/24 maxlen: 24 2a10:7a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:48:f1:75:af:10:06:d3:bd:10:c9:10:55:45:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e03cc03aff3c90520ea870acffd6ec8e5bf71931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:ab:37:68:d4:de:82:6a:ce:48:7d:50:f5: 06:8d:9b:48:e8:1c:a0:11:42:65:4e:12:c0:32:29: c2:d0:39:40:3a:87:b6:fd:cc:a0:1b:5a:8e:3a:82: 4f:de:08:a6:c7:b8:bb:e3:f5:f1:c9:36:6d:28:b6: 85:39:be:b5:53:46:01:6c:29:97:5e:c1:d4:54:06: 81:c8:67:cf:dd:1a:f4:c2:21:ff:7a:05:c7:58:52: 4b:51:6c:9d:a8:b9:13:4f:fd:b9:79:79:fc:2a:05: 96:07:03:23:f6:28:e6:4b:3c:11:e9:58:1a:ef:68: 6b:4e:e3:45:0f:57:a6:0c:6b:0d:3a:81:2a:5c:b3: e1:cf:c9:39:96:63:92:08:4a:ab:5f:fb:82:16:c6: 35:73:ae:87:71:0d:28:b6:81:1c:36:fe:d2:b7:c4: 3b:9d:73:7d:3c:2e:4f:26:9c:8e:6c:f1:e1:9a:f3: 12:52:e3:38:21:ce:5b:5a:5e:8c:f4:49:96:54:a7: 71:62:d6:8e:ed:5a:67:bc:37:1e:c4:74:1c:80:50: c3:7f:2c:a7:28:9e:e5:4a:26:c9:23:b9:33:b4:4b: dc:ea:a3:a0:a0:15:4c:bc:2c:a5:ec:16:e5:ff:e6: 7f:b5:52:ca:35:10:43:9f:80:7e:dc:74:00:d9:2b: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3C:C0:3A:FF:3C:90:52:0E:A8:70:AC:FF:D6:EC:8E:5B:F7:19:31 X509v3 Authority Key Identifier: keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/4DzAOv88kFIOqHCs_9bsjlv3GTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.252.0/24 IPv6: 2a10:7a80::/29 Signature Algorithm: sha256WithRSAEncryption 2e:01:34:b3:96:26:84:45:36:cd:21:11:50:52:59:9c:3b:5f: ab:a9:ca:28:e3:90:42:fb:47:06:9d:68:69:6c:0b:36:f5:b3: 27:10:e0:3b:03:f6:90:5f:c0:fa:e4:1e:12:65:9c:5c:f6:39: c1:e8:d1:46:c8:50:b0:37:25:2f:83:3e:47:b9:a9:d0:1c:98: d0:92:76:65:52:09:9d:e7:b8:8f:3a:ad:30:2a:76:02:06:a3: f3:3e:b9:49:3f:8f:25:45:29:82:e0:a1:1c:61:33:30:b2:68: 2e:8f:6f:71:d9:39:94:ff:cd:ea:61:ee:9b:0c:37:20:cb:24: e8:66:b5:61:7d:34:f6:7b:93:fd:af:e6:99:21:d7:3e:a1:00: ee:fa:26:fb:87:93:9b:3c:5b:f6:3f:b0:04:83:dc:80:fb:4b: 5d:a8:97:e7:0f:72:31:28:d7:f3:5d:58:1e:74:bc:29:0d:c0: ce:8a:2b:82:83:fb:c3:48:e9:07:11:8d:1c:ac:0d:68:26:8e: a6:0c:15:3a:b3:ad:df:d8:44:81:05:25:50:4d:98:da:7d:51: ce:85:49:7b:6b:0b:24:3c:c8:e0:f1:5b:bd:cb:d2:0e:75:28: ea:ee:eb:1b:52:bb:c3:20:fd:54:ae:11:1b:1d:b4:b2:00:e8: 89:43:1e:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ykjxda8QBtO9EMkQVUWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy YmQ4NmEwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDNjYzAzYWZmM2M5MDUyMGVhODcwYWNmZmQ2ZWM4ZTViZjcxOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszKrN2jU3oJqzkh9UPUGjZtI6Byg EUJlThLAMinC0DlAOoe2/cygG1qOOoJP3gimx7i74/XxyTZtKLaFOb61U0YBbCmX XsHUVAaByGfP3Rr0wiH/egXHWFJLUWydqLkTT/25eXn8KgWWBwMj9ijmSzwR6Vga 72hrTuNFD1emDGsNOoEqXLPhz8k5lmOSCEqrX/uCFsY1c66HcQ0otoEcNv7St8Q7 nXN9PC5PJpyObPHhmvMSUuM4Ic5bWl6M9EmWVKdxYtaO7VpnvDcexHQcgFDDfyyn KJ7lSibJI7kztEvc6qOgoBVMvCyl7Bbl/+Z/tVLKNRBDn4B+3HQA2SvBEwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOA8wDr/PJBSDqhwrP/W7I5b9xkxMB8GA1UdIwQY MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut ZTY5N2M1MmRmYzFlLzEvNER6QU92ODhrRklPcUhDc185YnNqbHYzR1RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuaf8MA0E AgACMAcDBQMqEHqAMA0GCSqGSIb3DQEBCwUAA4IBAQAuATSzliaERTbNIRFQUlmc O1+rqcoo45BC+0cGnWhpbAs29bMnEOA7A/aQX8D65B4SZZxc9jnB6NFGyFCwNyUv gz5HuanQHJjQknZlUgmd57iPOq0wKnYCBqPzPrlJP48lRSmC4KEcYTMwsmguj29x 2TmU/83qYe6bDDcgyyToZrVhfTT2e5P9r+aZIdc+oQDu+ib7h5ObPFv2P7AEg9yA +0tdqJfnD3IxKNfzXVgedLwpDcDOiiuCg/vDSOkHEY0crA1oJo6mDBU6s63f2ESB BSVQTZjafVHOhUl7awskPMjg8Vu9y9IOdSjq7usbUrvDIP1UrhEbHbSyAOiJQx6M -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:03 2026 by rpki-client