This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4gRdPLdeZ4zWGbyDVaJhqo-6tRo.roa File: 4gRdPLdeZ4zWGbyDVaJhqo-6tRo.roa (raw, json) Hash identifier: aojgXEXY8X/Kplznc6NKSbyXTUBbPT6s4M8y3hd20rM= Subject key identifier: E2:04:5D:3C:B7:5E:67:8C:D6:19:BC:83:55:A2:61:AA:8F:BA:B5:1A Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C133118B5657A91F070D6E4B14CDA98 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4gRdPLdeZ4zWGbyDVaJhqo-6tRo.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206930 IP address blocks: 185.216.130.0/24 maxlen: 24 194.15.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:31:18:b5:65:7a:91:f0:70:d6:e4:b1:4c:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2045d3cb75e678cd619bc8355a261aa8fbab51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:8a:a1:80:e3:ea:3f:23:be:ac:1d:a0:f6: 6a:7f:e0:b9:37:0d:e4:03:9f:a6:dd:6c:04:49:d1: 20:a7:2a:ce:f7:e9:9c:e6:1f:14:9e:2b:95:ea:b5: a7:ed:16:7a:e6:56:f4:d5:95:4d:40:21:a2:21:c0: b8:f8:9d:a8:08:47:25:68:87:1d:cf:44:0d:f8:83: 00:b5:90:c2:1e:69:d8:45:3e:5d:4d:45:a1:db:b8: a5:79:91:02:85:4b:47:46:2e:d3:7f:2a:99:74:8f: 1e:7d:eb:b2:84:f6:26:90:04:3e:87:ca:a7:e6:3d: 4b:af:9b:59:80:0f:64:df:ce:dc:48:97:85:5a:50: c4:32:f9:d6:67:04:bd:f8:27:e2:7d:bc:3e:4b:55: 8f:eb:92:83:df:a1:92:4f:e7:63:b2:4f:cc:b7:5e: 64:a5:c8:06:2e:ff:a6:95:ad:98:b5:5a:c7:67:67: 6c:5a:8f:ab:ea:29:d8:ab:23:09:0e:9e:5d:c8:bd: 96:e3:54:49:75:c9:bf:02:1f:89:81:49:99:79:7f: ba:78:17:08:24:de:68:0c:64:d1:86:d4:a5:a5:4d: 0c:d4:66:eb:8a:30:b2:45:f7:a9:92:57:3f:a1:72: a3:60:74:01:dc:76:37:c7:35:1b:32:ac:ff:82:a1: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:04:5D:3C:B7:5E:67:8C:D6:19:BC:83:55:A2:61:AA:8F:BA:B5:1A X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4gRdPLdeZ4zWGbyDVaJhqo-6tRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.130.0/24 194.15.140.0/24 Signature Algorithm: sha256WithRSAEncryption c8:50:d6:62:96:ca:05:e0:07:f0:17:34:7f:74:80:f3:18:c9: 49:26:7e:ed:cc:74:59:81:03:d6:e9:02:ae:af:05:b7:d0:60: 71:63:51:a7:49:94:67:30:7b:d7:45:6a:dc:84:35:e4:4b:ac: 96:b1:81:cb:51:e2:54:a7:16:07:a9:d9:19:9b:99:da:d1:17: b0:42:65:e4:e7:ef:80:23:2b:01:03:32:d1:2a:c4:9c:7a:e6: 46:85:30:a0:5a:c8:4d:7b:dd:5a:fd:90:0c:14:8b:cf:7c:09: ee:2b:35:12:98:51:d3:a7:b7:f4:f6:31:fb:89:09:35:12:43: d6:f1:32:8a:5f:71:be:3a:dd:11:27:ea:07:21:dc:be:ab:3d: f9:5c:80:55:d3:e7:12:94:6f:fc:f7:37:eb:1e:fe:38:99:75: 62:99:cc:2a:03:35:23:9e:20:ad:f3:e6:12:75:ac:7c:ad:ac: d3:33:74:17:94:a7:6a:90:44:fc:ce:38:a6:95:2a:36:f4:9c: f8:1b:80:97:07:bf:f8:0b:73:6f:ca:a2:8b:10:fa:f3:8b:c4: 7b:2b:b9:ca:88:0c:3f:ee:2f:0e:cd:db:c5:1c:78:0d:67:60: 8a:be:34:08:5c:bf:1e:46:d5:44:06:0a:2b:d6:4a:39:57:f2: 77:5f:ca:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EzEYtWV6kfBw1uSxTNqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjA0NWQzY2I3NWU2NzhjZDYxOWJjODM1NWEyNjFhYThmYmFiNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGKKoYDj6j8jvqwdoPZqf+C5Nw3k A5+m3WwESdEgpyrO9+mc5h8UniuV6rWn7RZ65lb01ZVNQCGiIcC4+J2oCEclaIcd z0QN+IMAtZDCHmnYRT5dTUWh27ileZEChUtHRi7TfyqZdI8efeuyhPYmkAQ+h8qn 5j1Lr5tZgA9k387cSJeFWlDEMvnWZwS9+Cfifbw+S1WP65KD36GST+djsk/Mt15k pcgGLv+mla2YtVrHZ2dsWo+r6inYqyMJDp5dyL2W41RJdcm/Ah+JgUmZeX+6eBcI JN5oDGTRhtSlpU0M1GbrijCyRfepklc/oXKjYHQB3HY3xzUbMqz/gqHWpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOIEXTy3XmeM1hm8g1WiYaqPurUaMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvNGdSZFBMZGVaNHpXR2J5RFZhSmhxby02dFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudiCAwQA wg+MMA0GCSqGSIb3DQEBCwUAA4IBAQDIUNZilsoF4AfwFzR/dIDzGMlJJn7tzHRZ gQPW6QKurwW30GBxY1GnSZRnMHvXRWrchDXkS6yWsYHLUeJUpxYHqdkZm5na0Rew QmXk5++AIysBAzLRKsSceuZGhTCgWshNe91a/ZAMFIvPfAnuKzUSmFHTp7f09jH7 iQk1EkPW8TKKX3G+Ot0RJ+oHIdy+qz35XIBV0+cSlG/89zfrHv44mXVimcwqAzUj niCt8+YSdax8razTM3QXlKdqkET8zjimlSo29Jz4G4CXB7/4C3NvyqKLEPrzi8R7 K7nKiAw/7i8OzdvFHHgNZ2CKvjQIXL8eRtVEBgor1ko5V/J3X8pM -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:22 2026 by rpki-client