This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa File: n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa (raw, json) Hash identifier: OBqZU1zM//7Ku6VXCPW57HKZVO1wfa+8Zttcrr4ee/o= Subject key identifier: 9F:83:F8:03:0E:44:A9:53:DB:A7:47:47:50:69:A5:93:E1:63:DC:A4 Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7 Certificate serial: 019B7F8408B414BB55A65F74076EE08B755E Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa Signing time: Fri 02 Jan 2026 16:21:58 +0000 ROA not before: Fri 02 Jan 2026 16:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.119.10.0/24 maxlen: 24 185.119.11.0/24 maxlen: 24 2a10:80c0::/48 maxlen: 48 2a10:80c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:08:b4:14:bb:55:a6:5f:74:07:6e:e0:8b:75:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7 Validity Not Before: Jan 2 16:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f83f8030e44a953dba747475069a593e163dca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:b2:40:b9:25:56:01:86:88:0c:2a:82:73: 60:5c:a1:38:bc:b8:4d:89:48:1b:03:c2:48:4c:98: d3:f8:bc:1c:5d:be:72:d6:b9:da:85:2c:02:8f:ac: 82:dc:c5:55:55:7d:28:4c:d6:4f:46:62:44:eb:03: 92:d4:ef:b9:36:91:42:c7:1b:2a:a1:7c:ce:95:0d: 28:87:b8:7f:6d:fd:5f:e2:3d:22:80:5f:9d:45:41: 4e:bc:fa:3b:c3:07:6c:92:3a:eb:2b:c7:e5:f8:50: 32:d0:c3:a8:37:a2:d9:6d:7f:5a:0a:54:61:08:2a: 01:ac:d4:7c:81:90:e0:e0:5c:9c:23:b1:e5:21:6b: d0:e6:60:8c:ed:40:48:c3:54:28:16:f4:f9:3f:b1: c5:e3:c8:90:bb:a7:d9:48:ac:7b:95:31:ad:ad:3a: 33:74:76:2e:3b:7a:5c:fd:3c:56:38:96:a0:23:62: 8d:e9:ff:78:0f:51:13:c7:b7:25:ce:d8:27:5b:90: 28:2b:ad:11:d9:fb:a6:92:57:be:46:f9:e8:73:54: b1:54:bc:c6:9c:d7:1f:49:2f:75:56:08:12:00:b3: 5d:c3:ec:87:01:0f:c2:74:6e:70:3e:f8:88:6e:bf: 2d:79:19:ec:e0:0e:ec:7c:3b:39:d8:89:ba:4b:9e: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:83:F8:03:0E:44:A9:53:DB:A7:47:47:50:69:A5:93:E1:63:DC:A4 X509v3 Authority Key Identifier: keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.10.0/23 IPv6: 2a10:80c0::/48 2a10:80c0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 14:c2:3c:d7:e9:aa:93:c3:d3:c2:79:29:1e:e4:da:78:d5:a0: 5b:5f:02:f1:e1:25:9c:5b:82:a4:e7:26:9b:c1:3d:ad:07:c0: 8e:b0:5f:43:93:91:c4:99:6c:74:22:9c:ca:bc:b7:74:41:3e: 4e:85:8d:90:d6:a4:2f:9b:44:6b:a2:14:bd:46:7d:59:74:9c: 24:b4:3f:c3:19:27:3f:18:2c:c4:50:e1:b1:77:df:13:6c:06: 0f:05:ed:23:38:d3:53:f7:3e:ca:28:18:56:fc:8d:37:6a:5d: 85:8b:46:61:2b:28:95:3e:cd:e3:49:71:70:79:ef:2d:61:d5: 7f:e3:b3:10:e5:ae:f1:06:ba:1b:47:94:88:14:98:25:ab:7d: 1d:ca:40:0b:5f:ea:6d:a1:28:14:2e:ee:5b:5e:3f:07:23:90: 5d:ec:52:5d:f3:05:32:80:fc:9f:b9:0d:46:61:f4:2e:42:b7: ab:8a:bd:cd:e9:4e:4d:c8:f1:cd:04:03:a8:ec:b4:10:6c:07: 33:5d:6d:38:59:8a:24:a3:66:2b:22:68:e7:27:f9:98:f6:69: 2c:ba:fa:3d:92:49:c4:19:e7:2d:7a:9c:8f:52:56:d9:a6:5f: 8d:07:49:17:fd:15:45:40:34:3d:14:13:b9:88:af:d4:72:ba: 4f:96:b4:7f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/hAi0FLtVpl90B27gi3VeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4 MGE1YzcwHhcNMjYwMTAyMTYyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjgzZjgwMzBlNDRhOTUzZGJhNzQ3NDc1MDY5YTU5M2UxNjNkY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjSyQLklVgGGiAwqgnNgXKE4vLhN iUgbA8JITJjT+LwcXb5y1rnahSwCj6yC3MVVVX0oTNZPRmJE6wOS1O+5NpFCxxsq oXzOlQ0oh7h/bf1f4j0igF+dRUFOvPo7wwdskjrrK8fl+FAy0MOoN6LZbX9aClRh CCoBrNR8gZDg4FycI7HlIWvQ5mCM7UBIw1QoFvT5P7HF48iQu6fZSKx7lTGtrToz dHYuO3pc/TxWOJagI2KN6f94D1ETx7clztgnW5AoK60R2fumkle+Rvnoc1SxVLzG nNcfSS91VggSALNdw+yHAQ/CdG5wPviIbr8teRns4A7sfDs52Im6S57TmQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJ+D+AMORKlT26dHR1BppZPhY9ykMB8GA1UdIwQY MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct MjkzZjYxMjJhMTlkLzEvbjRQNEF3NUVxVlBicDBkSFVHbWxrLUZqM0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBuXcKMBgE AgACMBIDBwAqEIDAAAADBwAqEIDAEAAwDQYJKoZIhvcNAQELBQADggEBABTCPNfp qpPD08J5KR7k2njVoFtfAvHhJZxbgqTnJpvBPa0HwI6wX0OTkcSZbHQinMq8t3RB Pk6FjZDWpC+bRGuiFL1GfVl0nCS0P8MZJz8YLMRQ4bF33xNsBg8F7SM401P3Psoo GFb8jTdqXYWLRmErKJU+zeNJcXB57y1h1X/jsxDlrvEGuhtHlIgUmCWrfR3KQAtf 6m2hKBQu7ltePwcjkF3sUl3zBTKA/J+5DUZh9C5Ct6uKvc3pTk3I8c0EA6jstBBs BzNdbThZiiSjZisiaOcn+Zj2aSy6+j2SScQZ5y16nI9SVtmmX40HSRf9FUVAND0U E7mIr9Ryuk+WtH8= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:17 2026 by rpki-client