This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/1q4BtkfepJc-raZEhj-gGf2uWvE.roa File: 1q4BtkfepJc-raZEhj-gGf2uWvE.roa (raw, json) Hash identifier: 3v5nIZKVUJNwnzavqdu5v3q5UyDoCLmVDzmJ4965j9Q= Subject key identifier: D6:AE:01:B6:47:DE:A4:97:3E:AD:A6:44:86:3F:A0:19:FD:AE:5A:F1 Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d Certificate serial: 019B77C6FD5CE5C8CE1C153CED277DA17A72 Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/1q4BtkfepJc-raZEhj-gGf2uWvE.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47609 IP address blocks: 91.206.132.0/23 maxlen: 23 185.72.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fd:5c:e5:c8:ce:1c:15:3c:ed:27:7d:a1:7a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6ae01b647dea4973eada644863fa019fdae5af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:de:4d:80:9b:ae:e5:7c:ea:32:43:58:9a: 07:09:8c:3a:4a:e6:ee:c6:0c:11:50:48:36:11:e7: af:c5:1f:53:71:3e:32:83:d9:aa:ed:2f:4e:1c:f6: 19:ce:2a:67:01:1a:3e:cc:a0:31:c1:35:23:81:56: fe:6a:80:7b:5a:0c:e2:f5:36:c8:98:21:73:98:5f: ab:0f:51:81:fc:94:3a:03:f7:59:70:5b:e6:c0:d1: 90:57:4b:c6:ce:61:ee:e1:d5:01:36:21:1b:69:60: 23:d3:8e:12:e8:cd:0c:fb:24:ab:10:6c:85:ed:68: 6a:80:bb:b5:fa:c1:16:1d:55:05:32:08:85:a8:e5: 66:5d:18:84:00:d3:7c:9e:51:06:25:9c:f4:d6:5e: 55:1a:8b:43:58:b2:e9:2c:f4:8b:bc:d5:9c:22:6b: 68:a3:1c:fa:2a:1b:78:1c:83:db:51:2e:b7:42:cc: a5:65:88:e3:9d:84:62:8b:66:a0:b3:2b:ff:1b:0e: 45:4b:b5:2e:a8:4e:d7:45:da:e2:c9:ff:e9:07:ec: b1:1b:35:76:98:ab:c6:03:7c:12:06:80:1b:12:8b: 5b:a3:1f:51:8b:6a:10:34:2e:b6:97:1d:78:79:0c: bc:70:61:83:e5:de:4c:36:e0:42:27:da:61:dd:f2: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AE:01:B6:47:DE:A4:97:3E:AD:A6:44:86:3F:A0:19:FD:AE:5A:F1 X509v3 Authority Key Identifier: keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/1q4BtkfepJc-raZEhj-gGf2uWvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.132.0/23 185.72.101.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:85:bc:69:06:d3:ef:87:9a:5e:6a:40:e3:0d:66:47:eb:e0: bd:97:8e:d1:51:bc:72:c2:92:65:76:91:8f:79:df:52:dc:2b: 69:41:70:d1:1a:bf:e7:e3:13:94:86:5d:ff:f2:16:7c:6e:04: 5a:14:00:ac:15:1d:4a:9f:f5:c4:8e:32:29:f3:58:e2:4d:91: 45:94:85:18:77:e9:f6:94:31:c7:54:a7:96:24:4f:b7:78:6a: 5d:e9:9d:f3:0b:d1:9c:3a:a5:e5:f3:e5:2c:1d:ac:8a:07:3d: 25:d6:0d:ef:65:f7:c4:4a:f1:0a:1b:91:62:e3:56:ee:ea:49: 4c:39:d9:b9:92:fa:30:2b:04:47:60:64:ed:50:a1:ed:b0:b3: 34:19:5a:fa:94:fc:7a:6d:7d:be:09:52:33:cb:8c:bd:e3:df: 2c:47:4e:14:8d:3b:c5:23:d7:bc:8f:ea:02:0a:5f:d3:93:08: 83:20:83:c6:90:6c:44:1d:a9:3c:67:45:37:0c:8e:a4:a3:e4: 57:57:db:b3:36:c0:5e:42:83:35:d3:e2:81:28:97:5c:e6:22: e8:dc:13:81:e6:26:36:b3:94:29:c6:94:49:e5:7c:60:94:0e: 67:aa:62:3c:69:6e:38:f5:24:ae:bf:0b:34:00:e7:a4:ad:c5: b0:13:dd:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xv1c5cjOHBU87Sd9oXpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGI2NGNiNmYxOGExMTQxNzQyMzEwNTBiMDE3OTkzMWI1 ZTQ4NmQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmFlMDFiNjQ3ZGVhNDk3M2VhZGE2NDQ4NjNmYTAxOWZkYWU1YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGveTYCbruV86jJDWJoHCYw6Subu xgwRUEg2EeevxR9TcT4yg9mq7S9OHPYZzipnARo+zKAxwTUjgVb+aoB7Wgzi9TbI mCFzmF+rD1GB/JQ6A/dZcFvmwNGQV0vGzmHu4dUBNiEbaWAj044S6M0M+ySrEGyF 7WhqgLu1+sEWHVUFMgiFqOVmXRiEANN8nlEGJZz01l5VGotDWLLpLPSLvNWcImto oxz6Kht4HIPbUS63QsylZYjjnYRii2agsyv/Gw5FS7UuqE7XRdriyf/pB+yxGzV2 mKvGA3wSBoAbEotbox9Ri2oQNC62lx14eQy8cGGD5d5MNuBCJ9ph3fIQ5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNauAbZH3qSXPq2mRIY/oBn9rlrxMB8GA1UdIwQY MBaAFHoLZMtvGKEUF0IxBQsBeZMbXkhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd0a3kyOFlvUlFYUWpFRkN3RjVreHRlU0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80MDM5ZDktYThiMC00NjU0LWE1YzMt MjJhZTU0MmViNWRmLzEvMXE0QnRrZmVwSmMtcmFaRWhqLWdHZjJ1V3ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80MDM5ZDktYThiMC00NjU0LWE1YzMtMjJhZTU0MmViNWRm LzEvZWd0a3kyOFlvUlFYUWpFRkN3RjVreHRlU0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW86EAwQA uUhlMA0GCSqGSIb3DQEBCwUAA4IBAQCMhbxpBtPvh5peakDjDWZH6+C9l47RUbxy wpJldpGPed9S3CtpQXDRGr/n4xOUhl3/8hZ8bgRaFACsFR1Kn/XEjjIp81jiTZFF lIUYd+n2lDHHVKeWJE+3eGpd6Z3zC9GcOqXl8+UsHayKBz0l1g3vZffESvEKG5Fi 41bu6klMOdm5kvowKwRHYGTtUKHtsLM0GVr6lPx6bX2+CVIzy4y9498sR04UjTvF I9e8j+oCCl/TkwiDIIPGkGxEHak8Z0U3DI6ko+RXV9uzNsBeQoM10+KBKJdc5iLo 3BOB5iY2s5QpxpRJ5XxglA5nqmI8aW449SSuvws0AOekrcWwE915 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:18 2026 by rpki-client