This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/p4r9vS1h1xzzjTxiGcnowDuodA0.roa File: p4r9vS1h1xzzjTxiGcnowDuodA0.roa (raw, json) Hash identifier: Sr6fy0bEO4gM1AkbG+qMN/VCnyXUfZs5uUjs30p7en4= Subject key identifier: A7:8A:FD:BD:2D:61:D7:1C:F3:8D:3C:62:19:C9:E8:C0:3B:A8:74:0D Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105 Certificate serial: 019B7A5AE5108B12ED87DCE63E771F85CF92 Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/p4r9vS1h1xzzjTxiGcnowDuodA0.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214229 IP address blocks: 185.117.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e5:10:8b:12:ed:87:dc:e6:3e:77:1f:85:cf:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105 Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a78afdbd2d61d71cf38d3c6219c9e8c03ba8740d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:0d:54:90:ab:7d:d4:40:3d:d0:aa:b1:38: ec:e7:b3:a6:7b:e2:ed:8f:ea:6f:e7:a3:38:32:6f: 33:d1:9f:51:f5:9b:55:55:ff:29:5c:e1:65:ab:90: ac:ae:3a:bb:b8:42:6d:9a:ed:9b:d4:4f:37:3f:f0: 28:01:60:11:e5:2c:93:2f:d7:17:fb:93:9f:b4:72: b1:e2:7d:b1:8b:b4:75:39:2b:8b:28:11:52:68:9d: 5a:7c:f9:f0:c2:64:f3:31:8a:0f:33:bb:38:bf:86: 6b:15:68:91:a5:ca:2b:f5:87:27:df:42:3e:f1:d4: 15:a4:89:4a:95:8f:bb:31:f9:78:41:74:28:78:b3: e9:90:71:c7:e1:4c:57:f0:7a:3c:bb:f4:16:33:fc: 3d:13:00:ce:ba:8a:43:ce:a0:79:19:4c:52:a5:fd: 72:3b:9f:3f:65:7c:aa:90:f9:e8:bb:b6:88:e4:28: 32:59:85:4d:eb:b0:5d:7c:f8:47:ec:2a:f4:c7:5e: 01:c1:1e:4a:2d:73:96:d9:ec:50:53:71:d2:f9:19: ce:4c:61:d4:ad:7e:99:25:64:ae:85:b6:49:b5:4e: 2e:8c:65:34:d7:43:90:3a:5b:e8:05:6b:00:ef:22: a7:7c:4b:95:cf:1d:09:13:81:98:c5:11:d5:4b:0b: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:FD:BD:2D:61:D7:1C:F3:8D:3C:62:19:C9:E8:C0:3B:A8:74:0D X509v3 Authority Key Identifier: keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/p4r9vS1h1xzzjTxiGcnowDuodA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.242.0/24 Signature Algorithm: sha256WithRSAEncryption c7:1e:d1:39:e8:91:bb:db:d3:78:15:76:79:43:bc:6c:18:72: 80:06:2f:a6:d0:ad:05:25:a8:5b:82:66:91:8c:60:0f:6a:40: d9:95:c6:a5:e7:4d:5c:bc:75:19:a2:19:92:51:48:a8:5b:32: 92:ee:3d:1b:1b:04:5f:ea:26:9f:4a:4d:46:c2:2f:a7:c2:d8: b5:d3:5d:08:d4:a4:87:33:dd:49:59:0d:54:4a:8f:77:8e:41: 7a:8f:df:67:84:f8:14:dc:41:b5:9e:7c:d0:4b:6f:77:1a:39: 3d:d2:dd:01:0a:b1:8e:d2:c7:83:91:d1:86:f0:60:bc:7d:5d: 99:c6:85:9c:cd:89:45:e9:0f:00:b9:5c:6c:bc:ad:c4:c2:ec: a2:e0:3d:20:b8:99:17:9c:3e:0a:1e:a6:f2:37:f8:f0:46:d7: 57:17:7e:0b:7a:34:c5:a7:5b:f8:b3:cc:68:da:46:e3:81:0b: a1:95:1a:31:78:57:f1:31:a7:3c:a3:f6:5e:74:be:3d:22:66: 6a:65:ba:c5:80:49:c0:0a:df:2a:5d:23:35:0d:fb:3e:00:5d: 55:77:89:87:97:1c:aa:a1:a8:48:00:06:56:71:fa:a8:e6:5d: c7:ba:e4:13:18:18:4a:52:31:6a:f6:df:c4:b1:76:c4:29:45: 44:5c:4a:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuUQixLth9zmPncfhc+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh YmYxMDUwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzhhZmRiZDJkNjFkNzFjZjM4ZDNjNjIxOWM5ZThjMDNiYTg3NDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tgNVJCrfdRAPdCqsTjs57Ome+Lt j+pv56M4Mm8z0Z9R9ZtVVf8pXOFlq5Csrjq7uEJtmu2b1E83P/AoAWAR5SyTL9cX +5OftHKx4n2xi7R1OSuLKBFSaJ1afPnwwmTzMYoPM7s4v4ZrFWiRpcor9Ycn30I+ 8dQVpIlKlY+7Mfl4QXQoeLPpkHHH4UxX8Ho8u/QWM/w9EwDOuopDzqB5GUxSpf1y O58/ZXyqkPnou7aI5CgyWYVN67BdfPhH7Cr0x14BwR5KLXOW2exQU3HS+RnOTGHU rX6ZJWSuhbZJtU4ujGU010OQOlvoBWsA7yKnfEuVzx0JE4GYxRHVSwsaMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeK/b0tYdcc8408YhnJ6MA7qHQNMB8GA1UdIwQY MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt MWQzMWExOTYwMTQ3LzEvcDRyOXZTMWgxeHp6alR4aUdjbm93RHVvZEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3 LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXyMA0G CSqGSIb3DQEBCwUAA4IBAQDHHtE56JG729N4FXZ5Q7xsGHKABi+m0K0FJahbgmaR jGAPakDZlcal501cvHUZohmSUUioWzKS7j0bGwRf6iafSk1Gwi+nwti1010I1KSH M91JWQ1USo93jkF6j99nhPgU3EG1nnzQS293Gjk90t0BCrGO0seDkdGG8GC8fV2Z xoWczYlF6Q8AuVxsvK3Ewuyi4D0guJkXnD4KHqbyN/jwRtdXF34LejTFp1v4s8xo 2kbjgQuhlRoxeFfxMac8o/ZedL49ImZqZbrFgEnACt8qXSM1Dfs+AF1Vd4mHlxyq oahIAAZWcfqo5l3HuuQTGBhKUjFq9t/EsXbEKUVEXEqj -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:24 2026 by rpki-client