This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4I6b9QoPXMX4HnABLYqYzXzMRfs.roa File: 4I6b9QoPXMX4HnABLYqYzXzMRfs.roa (raw, json) Hash identifier: 3cj/jqKO3VwiGKdsXdevBV4eLZi0Q7jcANHr4Ux3C4I= Subject key identifier: E0:8E:9B:F5:0A:0F:5C:C5:F8:1E:70:01:2D:8A:98:CD:7C:CC:45:FB Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Certificate serial: 019B7AC7A8AFEF3648155DD94485A13A38AF Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4I6b9QoPXMX4HnABLYqYzXzMRfs.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36239 IP address blocks: 185.65.146.0/24 maxlen: 24 185.138.171.0/24 maxlen: 24 2a0b:40c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a8:af:ef:36:48:15:5d:d9:44:85:a1:3a:38:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e08e9bf50a0f5cc5f81e70012d8a98cd7ccc45fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:2f:30:31:50:29:a9:77:b8:97:73:9f:21: 32:af:c6:85:11:c3:24:7c:da:5d:0a:97:c8:21:a1: 50:cc:f8:de:a4:4d:51:6b:09:c0:25:f3:48:3f:be: e7:01:9f:5f:9d:ca:49:fa:60:95:3b:bc:b7:f5:4b: 92:d8:a6:f0:28:13:40:46:53:70:ba:1d:4b:5f:2a: 5e:99:77:73:5b:81:aa:6a:19:e9:55:c0:eb:67:c0: 36:7f:11:64:bb:08:2a:b3:2f:19:c3:57:e4:75:d1: 65:1d:1e:a2:34:7e:05:9f:59:79:de:12:38:57:a9: 6b:bc:48:54:cc:5d:0b:0f:9d:48:4a:8c:68:52:ec: 9a:7b:7c:74:dc:24:d7:24:35:f1:77:08:22:d1:30: 88:3a:43:7d:72:82:c2:06:cf:81:a8:a8:e9:fd:6a: ee:32:c2:62:81:f4:47:52:f8:6d:e1:3b:fe:f5:67: 06:22:ef:75:30:42:1f:b3:fe:d8:c7:de:a1:d4:96: f6:f0:05:b6:0a:92:40:47:1b:51:e5:b9:ea:ae:43: a8:03:ec:5a:13:df:b2:c1:44:01:08:90:f9:9a:a2: 19:8b:4d:d8:bf:58:72:d5:5d:78:c0:5f:c4:db:83: 9a:92:2d:4c:18:94:23:42:2a:d9:a7:37:7c:00:53: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:9B:F5:0A:0F:5C:C5:F8:1E:70:01:2D:8A:98:CD:7C:CC:45:FB X509v3 Authority Key Identifier: keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4I6b9QoPXMX4HnABLYqYzXzMRfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.146.0/24 185.138.171.0/24 IPv6: 2a0b:40c1::/48 Signature Algorithm: sha256WithRSAEncryption 6f:c5:d2:df:28:8b:a7:c7:ec:d5:a3:3d:90:e7:9c:10:f1:16: 5b:a6:5b:fe:19:78:43:d9:fb:44:66:c7:92:78:ec:8d:cf:f3: 32:93:a8:08:62:2c:34:05:78:17:17:5d:ff:b8:f7:c1:f5:6a: 09:01:de:0f:3b:f1:b8:8d:64:25:99:8d:b6:e9:fa:f8:f7:33: 5e:e4:e3:ee:c9:e0:09:2b:88:bc:0e:40:f2:93:13:2d:a7:b4: ff:97:0a:8d:13:65:2a:5c:9a:b7:6e:4a:c3:1a:8b:43:21:39: 4d:e0:25:31:d5:81:b6:65:50:96:52:84:64:6c:15:11:9c:53: 59:ce:3f:4a:93:23:68:ec:50:48:02:82:88:64:c5:2f:5d:17: f2:05:d8:5f:7d:b2:e3:08:9a:ee:aa:e6:87:e8:94:47:64:98: 7b:dc:e1:0d:9c:51:09:f3:2c:c8:a9:ce:d1:47:b6:97:97:76: 57:65:56:44:56:c9:38:16:17:d0:cc:b7:9f:01:ae:2d:55:51: 7f:16:75:25:88:42:32:ba:e4:2f:b6:f2:57:90:08:a5:88:e0: af:e0:e4:6b:f1:31:7a:62:49:76:2c:da:e9:94:90:fc:01:b3: 3d:4e:e0:07:95:f0:b6:da:49:3e:03:4d:2d:1b:a7:8d:ea:20: 51:68:77:a6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x6iv7zZIFV3ZRIWhOjivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2 NmIyMWUwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDhlOWJmNTBhMGY1Y2M1ZjgxZTcwMDEyZDhhOThjZDdjY2M0NWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGAvMDFQKal3uJdznyEyr8aFEcMk fNpdCpfIIaFQzPjepE1RawnAJfNIP77nAZ9fncpJ+mCVO7y39UuS2KbwKBNARlNw uh1LXypemXdzW4GqahnpVcDrZ8A2fxFkuwgqsy8Zw1fkddFlHR6iNH4Fn1l53hI4 V6lrvEhUzF0LD51ISoxoUuyae3x03CTXJDXxdwgi0TCIOkN9coLCBs+BqKjp/Wru MsJigfRHUvht4Tv+9WcGIu91MEIfs/7Yx96h1Jb28AW2CpJARxtR5bnqrkOoA+xa E9+ywUQBCJD5mqIZi03Yv1hy1V14wF/E24Oaki1MGJQjQirZpzd8AFNA0QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOCOm/UKD1zF+B5wAS2KmM18zEX7MB8GA1UdIwQY MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt ODA5MWViY2UzYmJmLzEvNEk2YjlRb1BYTVg0SG5BQkxZcVl6WHpNUmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuUGSAwQA uYqrMA8EAgACMAkDBwAqC0DBAAAwDQYJKoZIhvcNAQELBQADggEBAG/F0t8oi6fH 7NWjPZDnnBDxFlumW/4ZeEPZ+0Rmx5J47I3P8zKTqAhiLDQFeBcXXf+498H1agkB 3g878biNZCWZjbbp+vj3M17k4+7J4AkriLwOQPKTEy2ntP+XCo0TZSpcmrduSsMa i0MhOU3gJTHVgbZlUJZShGRsFRGcU1nOP0qTI2jsUEgCgohkxS9dF/IF2F99suMI mu6q5ofolEdkmHvc4Q2cUQnzLMipztFHtpeXdldlVkRWyTgWF9DMt58Bri1VUX8W dSWIQjK65C+28leQCKWI4K/g5GvxMXpiSXYs2umUkPwBsz1O4AeV8LbaST4DTS0b p43qIFFod6Y= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:09 2026 by rpki-client