This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/4YEshEThhW-HfjiC_JXVyf4TwOE.roa File: 4YEshEThhW-HfjiC_JXVyf4TwOE.roa (raw, json) Hash identifier: oQgmj/P+AIYLaF+qIOfX7poYMGbO0DMzAyRYbtM7ju4= Subject key identifier: E1:81:2C:84:44:E1:85:6F:87:7E:38:82:FC:95:D5:C9:FE:13:C0:E1 Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a Certificate serial: 019B7A59E5EA0911DC3CAD2E33084A22AAB7 Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/4YEshEThhW-HfjiC_JXVyf4TwOE.roa Signing time: Thu 01 Jan 2026 16:17:50 +0000 ROA not before: Thu 01 Jan 2026 16:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216434 IP address blocks: 195.160.64.0/24 maxlen: 24 195.160.65.0/24 maxlen: 24 195.160.66.0/24 maxlen: 24 195.160.67.0/24 maxlen: 24 195.160.68.0/24 maxlen: 24 195.160.70.0/24 maxlen: 24 195.160.71.0/24 maxlen: 24 195.160.72.0/24 maxlen: 24 195.160.74.0/24 maxlen: 24 195.160.80.0/23 maxlen: 23 195.160.88.0/24 maxlen: 24 195.160.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:e5:ea:09:11:dc:3c:ad:2e:33:08:4a:22:aa:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a Validity Not Before: Jan 1 16:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1812c8444e1856f877e3882fc95d5c9fe13c0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:fc:c9:1f:47:99:b9:d6:88:df:fe:3e:54: 6d:95:b7:31:05:fa:b3:bb:9d:9e:bd:f8:b4:35:40: a7:eb:40:07:cd:c4:5f:ea:fb:90:b6:b9:bb:f3:5c: fb:9a:bc:42:a0:48:57:32:0a:97:99:37:1b:95:da: 09:38:3d:c0:53:87:5e:c4:17:e7:83:41:04:5a:21: 6e:27:99:19:90:30:1e:df:ca:57:29:a5:5d:81:72: 47:5f:74:cf:e1:e3:9b:d0:3f:b4:be:bf:2c:22:82: a4:6d:01:4b:d2:21:f4:9f:a2:b5:25:9b:fa:34:ad: 60:7c:a5:09:05:98:72:17:dc:6d:48:81:ea:c2:a1: 21:cb:89:39:f6:fc:11:95:ac:2f:05:6d:ed:06:59: 76:a3:c4:b4:19:eb:43:b8:d8:c2:17:d2:b0:fa:72: 86:5f:71:fd:32:d7:4a:fb:de:e3:e4:b0:aa:07:e9: 5d:dc:b9:1b:d5:97:71:6a:c6:22:f6:9d:c5:f7:6a: 17:68:e3:87:fb:d7:03:90:5d:cb:ef:11:37:b2:cf: 8e:9b:37:e8:7e:c0:27:35:88:71:91:18:80:cd:43: de:58:70:fa:04:b4:ad:96:76:46:d6:81:93:ef:6f: f5:f7:1b:6c:40:9e:4c:ce:ef:b4:e0:e3:7b:93:f8: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:81:2C:84:44:E1:85:6F:87:7E:38:82:FC:95:D5:C9:FE:13:C0:E1 X509v3 Authority Key Identifier: keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/4YEshEThhW-HfjiC_JXVyf4TwOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.64.0-195.160.68.255 195.160.70.0-195.160.72.255 195.160.74.0/24 195.160.80.0/23 195.160.88.0/23 Signature Algorithm: sha256WithRSAEncryption 57:c0:15:41:2a:12:bc:16:3f:eb:d8:50:d7:d6:81:f9:00:f4: 60:11:70:f8:b6:ce:c2:ee:b0:43:33:0f:d7:b5:51:78:f5:d5: a9:0c:84:08:b5:d1:4e:ec:25:e5:fe:d6:c7:28:c4:92:79:84: 0d:bc:05:e7:4e:a8:d5:cf:5a:46:a1:ff:ca:87:42:62:a3:5e: f5:0f:3f:db:62:57:2f:d9:c5:ad:3c:42:6a:f4:c9:8d:c4:13: 80:53:ff:85:76:8b:0f:6f:0a:37:f4:eb:a5:dd:b8:79:54:ae: a9:b5:a0:45:91:2d:ae:24:9b:2d:85:df:58:af:a7:e7:82:f0: f8:14:e0:78:46:15:9b:43:f1:31:a6:92:68:89:e7:ac:8d:da: b6:5d:aa:b8:d8:ff:23:ca:96:26:5c:c1:49:03:d2:6e:12:a6: ab:07:77:48:aa:bf:87:38:e8:e3:ca:f1:eb:ae:ca:90:35:26: 3b:7a:92:54:09:2c:58:01:f5:84:f9:57:91:50:f0:ab:72:47: dd:13:9a:f1:79:ff:4d:69:90:8d:0b:cb:df:3b:90:a2:10:dc: a8:06:35:73:be:cf:7f:3e:06:c2:bd:d5:66:b6:48:d5:14:ab: 2b:93:71:d1:9e:f8:9f:3a:df:81:a6:13:79:f9:78:1d:9b:0e: 04:8a:81:2e -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6WeXqCRHcPK0uMwhKIqq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2I3NTYxZDk4ZGFjZmFiODYzMDU4YjNiOTgwN2FkODIz ZjE4NmEwHhcNMjYwMTAxMTYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTgxMmM4NDQ0ZTE4NTZmODc3ZTM4ODJmYzk1ZDVjOWZlMTNjMGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoz8yR9HmbnWiN/+PlRtlbcxBfqz u52evfi0NUCn60AHzcRf6vuQtrm781z7mrxCoEhXMgqXmTcbldoJOD3AU4dexBfn g0EEWiFuJ5kZkDAe38pXKaVdgXJHX3TP4eOb0D+0vr8sIoKkbQFL0iH0n6K1JZv6 NK1gfKUJBZhyF9xtSIHqwqEhy4k59vwRlawvBW3tBll2o8S0GetDuNjCF9Kw+nKG X3H9MtdK+97j5LCqB+ld3Lkb1ZdxasYi9p3F92oXaOOH+9cDkF3L7xE3ss+Omzfo fsAnNYhxkRiAzUPeWHD6BLStlnZG1oGT72/19xtsQJ5Mzu+04ON7k/hsZQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFOGBLIRE4YVvh344gvyV1cn+E8DhMB8GA1UdIwQY MBaAFDh7dWHZjaz6uGMFizuYB62CPxhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hMTQ2NGEtMjQxMS00Y2M4LWExMDEt MGFlY2RjNTE3NWZhLzEvNFlFc2hFVGhoVy1IZmppQ19KWFZ5ZjRUd09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hMTQ2NGEtMjQxMS00Y2M4LWExMDEtMGFlY2RjNTE3NWZh LzEvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAbDoEAD BADDoEQwDAMEAcOgRgMEAMOgSAMEAMOgSgMEAcOgUAMEAcOgWDANBgkqhkiG9w0B AQsFAAOCAQEAV8AVQSoSvBY/69hQ19aB+QD0YBFw+LbOwu6wQzMP17VRePXVqQyE CLXRTuwl5f7WxyjEknmEDbwF506o1c9aRqH/yodCYqNe9Q8/22JXL9nFrTxCavTJ jcQTgFP/hXaLD28KN/Trpd24eVSuqbWgRZEtriSbLYXfWK+n54Lw+BTgeEYVm0Px MaaSaInnrI3atl2quNj/I8qWJlzBSQPSbhKmqwd3SKq/hzjo48rx667KkDUmO3qS VAksWAH1hPlXkVDwq3JH3ROa8Xn/TWmQjQvL3zuQohDcqAY1c77Pfz4Gwr3VZrZI 1RSrK5Nx0Z74nzrfgaYTefl4HZsOBIqBLg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:16 2026 by rpki-client