This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/arliBhhCazfqYB3QIekl14-Z-Tc.roa File: arliBhhCazfqYB3QIekl14-Z-Tc.roa (raw, json) Hash identifier: Yk7QGRYvHZ4mOm/M0+qWtbOZ3XSsCNWJWnDjcQIrUQ8= Subject key identifier: 6A:B9:62:06:18:42:6B:37:EA:60:1D:D0:21:E9:25:D7:8F:99:F9:37 Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a Certificate serial: 019B7A5AF2509A3E768ED1515C0D9C29809A Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/arliBhhCazfqYB3QIekl14-Z-Tc.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200700 IP address blocks: 185.93.28.0/22 maxlen: 24 185.93.28.0/23 maxlen: 24 185.93.28.0/24 maxlen: 24 185.93.29.0/24 maxlen: 24 185.93.30.0/23 maxlen: 24 185.93.30.0/24 maxlen: 24 185.93.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f2:50:9a:3e:76:8e:d1:51:5c:0d:9c:29:80:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab9620618426b37ea601dd021e925d78f99f937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:fa:bb:d4:d0:48:87:f9:41:2f:9d:8b:23: 06:f9:37:ca:c2:4b:5a:37:37:42:8a:8e:90:6c:87: 84:e1:98:34:f3:51:33:09:32:e8:00:a6:fa:e2:81: e2:61:15:d3:77:51:9d:bc:bf:0e:f7:81:a9:ed:66: 57:7e:b7:d4:4c:e5:0e:6c:4c:36:7c:20:22:00:3a: 0e:00:7e:22:64:3e:13:11:9e:79:c6:9a:e1:4c:74: 78:f2:32:e9:63:84:00:c6:98:c0:0c:8d:f5:3c:29: 82:35:bb:95:39:20:cd:66:33:8e:e5:18:52:92:92: 25:84:de:9c:9e:06:21:ca:d6:28:3c:ae:0e:c4:8e: 6d:4e:6f:ff:c9:bf:b3:4e:81:3e:6c:3f:37:59:da: ff:bf:20:9b:97:6a:e3:3a:4d:e6:8d:b4:49:29:52: 65:82:fe:50:84:61:8a:5c:9c:42:b4:2b:0e:f9:9e: 99:ac:e8:95:df:f3:c7:23:7e:5b:35:a7:66:cb:5f: 56:2e:de:7f:ff:01:34:61:ab:9d:90:ab:d3:c6:31: e4:30:b5:55:fa:f6:9b:f8:a8:63:15:ba:2d:29:0e: ab:b6:bd:8a:ac:2c:70:b1:17:77:8c:d1:98:89:e0: 27:c3:22:a5:06:af:44:30:80:4c:49:03:92:64:ed: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:62:06:18:42:6B:37:EA:60:1D:D0:21:E9:25:D7:8F:99:F9:37 X509v3 Authority Key Identifier: keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/arliBhhCazfqYB3QIekl14-Z-Tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.28.0/22 Signature Algorithm: sha256WithRSAEncryption 38:5a:09:9e:91:c0:c2:f6:e5:7a:6c:24:26:1d:f9:4d:13:8c: 1a:cb:29:9e:65:8b:56:50:1a:cc:54:c7:f3:93:a2:ed:d3:86: 88:18:b8:88:e7:a3:d0:79:df:9f:68:16:76:d9:d4:c1:52:d5: c3:cd:3a:8a:a6:e8:95:81:ba:e5:f1:29:42:f9:ab:fc:9d:ea: fa:5f:7d:49:59:d9:bc:b2:9d:d7:f9:b5:24:1f:44:8e:26:c1: 1b:27:3f:2c:17:03:c5:5f:6b:90:af:f7:41:82:d4:45:66:b5: 1a:9b:1c:04:a2:27:e4:e1:81:ab:8b:4c:4e:e7:b1:d4:e9:3f: 3d:7a:46:fe:46:37:07:c1:6d:9b:c4:b3:40:14:b1:c0:66:ec: 0d:1a:69:a6:a8:e0:09:b6:7f:6e:84:e2:df:7a:5f:0b:43:b7: b2:49:b1:33:b1:98:05:33:ac:ab:80:bb:83:00:c0:d5:e9:60: 96:1b:8c:48:af:1a:81:74:1c:16:e3:d0:d3:b2:19:1b:4c:7f: 29:98:62:5f:88:1d:1d:b3:dd:d5:77:d1:2f:b2:24:c2:ac:a6: 1f:16:d4:0f:54:1a:13:1f:50:e6:d2:66:83:b1:ed:c1:11:48: 0f:88:56:dd:cc:4d:d9:ee:a3:79:40:75:00:96:6d:9b:4b:f8: df:12:a0:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvJQmj52jtFRXA2cKYCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTE4MDVmODQ3ZTAwYWZkNjMxNzllNGMyNTJhMzY3ZTk0 NWIyNmEwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWI5NjIwNjE4NDI2YjM3ZWE2MDFkZDAyMWU5MjVkNzhmOTlmOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOH6u9TQSIf5QS+diyMG+TfKwkta NzdCio6QbIeE4Zg081EzCTLoAKb64oHiYRXTd1GdvL8O94Gp7WZXfrfUTOUObEw2 fCAiADoOAH4iZD4TEZ55xprhTHR48jLpY4QAxpjADI31PCmCNbuVOSDNZjOO5RhS kpIlhN6cngYhytYoPK4OxI5tTm//yb+zToE+bD83Wdr/vyCbl2rjOk3mjbRJKVJl gv5QhGGKXJxCtCsO+Z6ZrOiV3/PHI35bNadmy19WLt5//wE0YaudkKvTxjHkMLVV +vab+KhjFbotKQ6rtr2KrCxwsRd3jNGYieAnwyKlBq9EMIBMSQOSZO2h7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGq5YgYYQms36mAd0CHpJdePmfk3MB8GA1UdIwQY MBaAFPThgF+EfgCv1jF55MJSo2fpRbJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjIt OTQwYzhhMGZjNzcwLzEvYXJsaUJoaENhemZxWUIzUUlla2wxNC1aLVRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hM2I1NjAtYjliNS00MDUyLWE4NjItOTQwYzhhMGZjNzcw LzEvOU9HQVg0Ui1BS19XTVhua3dsS2paLWxGc21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV0cMA0G CSqGSIb3DQEBCwUAA4IBAQA4WgmekcDC9uV6bCQmHflNE4wayymeZYtWUBrMVMfz k6Lt04aIGLiI56PQed+faBZ22dTBUtXDzTqKpuiVgbrl8SlC+av8ner6X31JWdm8 sp3X+bUkH0SOJsEbJz8sFwPFX2uQr/dBgtRFZrUamxwEoifk4YGri0xO57HU6T89 ekb+RjcHwW2bxLNAFLHAZuwNGmmmqOAJtn9uhOLfel8LQ7eySbEzsZgFM6yrgLuD AMDV6WCWG4xIrxqBdBwW49DTshkbTH8pmGJfiB0ds93Vd9EvsiTCrKYfFtQPVBoT H1Dm0maDse3BEUgPiFbdzE3Z7qN5QHUAlm2bS/jfEqAP -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:09 2026 by rpki-client