This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/4dg4kAKJ8YSOGy8c68PKhEx34vE.roa File: 4dg4kAKJ8YSOGy8c68PKhEx34vE.roa (raw, json) Hash identifier: ry2ttY5wtlmGli2qcFEKHyBaFD3fHmgeyUWAJ6+46jE= Subject key identifier: E1:D8:38:90:02:89:F1:84:8E:1B:2F:1C:EB:C3:CA:84:4C:77:E2:F1 Certificate issuer: /CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74 Certificate serial: 019B79ECC0DBFE778CC2CD6A47DCA04F345E Authority key identifier: 84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/4dg4kAKJ8YSOGy8c68PKhEx34vE.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211136 IP address blocks: 185.15.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c0:db:fe:77:8c:c2:cd:6a:47:dc:a0:4f:34:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84284d67c9abaf6fa8fea6142a5b2558c9cbcf74 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d838900289f1848e1b2f1cebc3ca844c77e2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:28:b5:03:6f:d4:78:fc:57:db:94:6b:52: 42:a0:f0:5f:61:99:83:03:83:87:c4:13:b5:2e:b4: eb:79:71:29:90:39:41:68:79:ae:39:81:18:02:65: 67:28:d5:e4:e9:f4:96:97:99:da:35:e8:37:36:fb: 86:9b:95:4a:da:be:32:c6:1c:31:e5:e0:5f:49:47: 73:b3:fb:19:fa:ad:66:01:84:09:76:90:17:04:de: 2f:fb:15:86:2a:1f:3b:c1:8d:52:df:09:94:a0:c0: db:d6:97:2d:ac:53:4f:1f:b0:63:51:e7:bd:3d:42: 89:d9:7a:81:00:4f:1d:d6:78:78:5d:58:40:cf:d4: a6:bb:d1:ff:a2:be:0f:e0:f1:5f:8e:33:43:30:4a: 83:c6:54:3b:9b:78:b3:14:26:7f:cc:44:07:92:d5: f2:11:4e:52:1b:4d:2c:3c:d0:53:36:b4:af:dc:89: a7:aa:49:c7:5c:3e:59:85:77:51:6c:6b:82:58:0c: 61:cd:3d:ba:83:c2:b4:ed:92:1c:70:ea:a3:09:8f: a7:1b:98:dc:a6:85:12:85:91:0c:e7:e9:73:32:d6: 59:b8:8b:2a:39:85:33:f6:95:85:41:44:b5:a0:7a: 4a:7e:7a:56:6f:95:61:f5:e8:06:4b:fc:bc:d8:3a: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D8:38:90:02:89:F1:84:8E:1B:2F:1C:EB:C3:CA:84:4C:77:E2:F1 X509v3 Authority Key Identifier: keyid:84:28:4D:67:C9:AB:AF:6F:A8:FE:A6:14:2A:5B:25:58:C9:CB:CF:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hChNZ8mrr2-o_qYUKlslWMnLz3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/4dg4kAKJ8YSOGy8c68PKhEx34vE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/30af46-27ed-4482-840e-65f856f1249e/1/hChNZ8mrr2-o_qYUKlslWMnLz3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.138.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:d3:1b:1a:20:3c:32:ff:4a:86:13:ed:77:7d:98:d2:45:65: 57:58:14:32:62:4d:2e:67:19:58:c9:76:7a:91:f6:94:c9:46: 97:ea:1e:5a:09:3c:7c:ef:fc:68:7e:65:62:0b:07:3b:6d:9c: 6c:8e:f9:c7:9c:25:1b:19:ac:f9:1d:e2:db:ec:11:2f:d5:03: 33:91:c2:92:e6:e9:80:01:c4:b2:8d:98:ea:b3:eb:02:f6:58: 41:70:b9:01:31:8c:de:20:e3:49:a4:61:75:c0:99:22:0e:08: 32:0b:5c:18:49:c0:85:74:bd:02:d2:1c:c3:b3:f1:23:70:73: ba:58:f5:b2:91:10:03:ce:c2:93:8d:6b:a7:6f:8a:27:d9:9e: 36:04:12:61:e3:b2:76:d2:6a:65:1a:3e:f8:9a:a3:4d:62:e6: 6a:23:00:36:bb:23:a8:cf:fb:47:1f:7e:33:ac:8f:82:ed:b5: 0c:cf:18:4c:15:46:4c:d4:15:0a:7d:64:ec:e6:d6:cf:61:42: e8:aa:da:1f:ec:02:aa:e8:45:25:50:ed:f3:58:ab:a8:c8:d4: cc:8c:1e:dd:3a:8d:ee:89:7e:09:75:88:58:67:9e:e4:43:87: c3:4f:70:28:3b:67:45:b5:d3:fc:7f:c6:89:b7:45:f0:06:fe: 44:bf:82:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MDb/neMws1qR9ygTzReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Mjg0ZDY3YzlhYmFmNmZhOGZlYTYxNDJhNWIyNTU4Yzlj YmNmNzQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQ4Mzg5MDAyODlmMTg0OGUxYjJmMWNlYmMzY2E4NDRjNzdlMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XMotQNv1Hj8V9uUa1JCoPBfYZmD A4OHxBO1LrTreXEpkDlBaHmuOYEYAmVnKNXk6fSWl5naNeg3NvuGm5VK2r4yxhwx 5eBfSUdzs/sZ+q1mAYQJdpAXBN4v+xWGKh87wY1S3wmUoMDb1pctrFNPH7BjUee9 PUKJ2XqBAE8d1nh4XVhAz9Smu9H/or4P4PFfjjNDMEqDxlQ7m3izFCZ/zEQHktXy EU5SG00sPNBTNrSv3ImnqknHXD5ZhXdRbGuCWAxhzT26g8K07ZIccOqjCY+nG5jc poUShZEM5+lzMtZZuIsqOYUz9pWFQUS1oHpKfnpWb5Vh9egGS/y82DrapwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHYOJACifGEjhsvHOvDyoRMd+LxMB8GA1UdIwQY MBaAFIQoTWfJq69vqP6mFCpbJVjJy890MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaENoTlo4bXJyMi1vX3FZVUtsc2xXTW5MejNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMGFmNDYtMjdlZC00NDgyLTg0MGUt NjVmODU2ZjEyNDllLzEvNGRnNGtBS0o4WVNPR3k4YzY4UEtoRXgzNHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zMGFmNDYtMjdlZC00NDgyLTg0MGUtNjVmODU2ZjEyNDll LzEvaENoTlo4bXJyMi1vX3FZVUtsc2xXTW5MejNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ+KMA0G CSqGSIb3DQEBCwUAA4IBAQCM0xsaIDwy/0qGE+13fZjSRWVXWBQyYk0uZxlYyXZ6 kfaUyUaX6h5aCTx87/xofmViCwc7bZxsjvnHnCUbGaz5HeLb7BEv1QMzkcKS5umA AcSyjZjqs+sC9lhBcLkBMYzeIONJpGF1wJkiDggyC1wYScCFdL0C0hzDs/EjcHO6 WPWykRADzsKTjWunb4on2Z42BBJh47J20mplGj74mqNNYuZqIwA2uyOoz/tHH34z rI+C7bUMzxhMFUZM1BUKfWTs5tbPYULoqtof7AKq6EUlUO3zWKuoyNTMjB7dOo3u iX4JdYhYZ57kQ4fDT3AoO2dFtdP8f8aJt0XwBv5Ev4IB -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:41 2026 by rpki-client