This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa File: 4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa (raw, json) Hash identifier: YciKFVkaY1et6p1gervIPcpyQE7yFFy/esyiuxYNcNY= Subject key identifier: E0:89:B2:1A:01:4A:BD:9A:FD:1B:D0:02:F2:A8:04:F6:6D:C2:9E:D7 Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1 Certificate serial: 019B7D5C87DC276AC2DB5DFA8A09E9B329CA Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa Signing time: Fri 02 Jan 2026 06:19:34 +0000 ROA not before: Fri 02 Jan 2026 06:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56800 IP address blocks: 176.10.40.0/21 maxlen: 21 176.10.40.0/22 maxlen: 22 176.10.44.0/22 maxlen: 22 185.110.144.0/22 maxlen: 23 2a0b:26c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:87:dc:27:6a:c2:db:5d:fa:8a:09:e9:b3:29:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1 Validity Not Before: Jan 2 06:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e089b21a014abd9afd1bd002f2a804f66dc29ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:98:af:c2:e8:cb:79:33:c8:64:01:ef:d6: 31:23:a6:a1:ae:22:14:2e:35:76:87:55:b4:75:e4: f7:96:3f:1e:59:16:39:15:62:a4:5a:21:bf:4d:c2: ed:d5:e2:e7:31:94:ce:fb:0a:8c:39:cc:2e:0b:63: 38:7c:81:6f:4d:dd:30:22:fa:9d:a4:bb:cc:1e:81: 5a:12:10:f2:a4:49:3a:bf:e1:09:49:71:d1:39:b1: 84:fb:78:07:ed:57:3d:9e:df:12:dc:c0:e2:be:b9: ff:cd:9b:1e:3b:fa:43:1f:53:96:40:f8:c0:29:ff: 51:69:a2:5b:a6:6f:0b:be:c5:65:69:d4:fe:bc:4b: 2e:03:96:c9:f1:fc:8d:75:d9:7f:4f:14:c5:e3:5c: 23:fc:bb:60:e9:5f:45:06:ec:13:0d:6b:5f:22:9e: 94:60:90:3e:16:e9:f7:30:a1:80:d1:8e:5c:46:dd: c7:1d:3c:21:f3:bf:ab:6d:a0:7b:ab:5d:98:82:10: ac:39:20:25:07:70:e6:a5:78:28:74:15:b9:f9:94: 2b:10:f1:2c:51:a9:61:1e:4a:68:f3:56:51:db:d2: f1:ae:e1:b4:cc:05:2c:2d:f1:81:3d:0b:49:d9:b4: c3:c1:48:7c:7d:15:6c:1c:fd:a4:70:b1:54:fa:70: 68:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:B2:1A:01:4A:BD:9A:FD:1B:D0:02:F2:A8:04:F6:6D:C2:9E:D7 X509v3 Authority Key Identifier: keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/4ImyGgFKvZr9G9AC8qgE9m3Cntc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.40.0/21 185.110.144.0/22 IPv6: 2a0b:26c0::/29 Signature Algorithm: sha256WithRSAEncryption 2b:f0:48:2f:6e:b4:29:db:37:f7:d0:48:8b:91:a9:eb:9b:11: 84:54:15:0b:c6:2e:45:c4:56:4b:5c:1f:b9:58:1b:02:87:40: 58:95:81:47:53:e7:70:84:5a:1b:32:21:93:4e:e0:6b:f2:48: e5:e5:38:b4:71:a1:fc:eb:69:30:2b:0b:3c:31:6e:a9:e8:85: 12:6c:f6:78:15:df:4e:fd:44:ef:f7:93:cd:e0:2d:4c:88:02: 5a:83:13:40:fc:d2:e9:56:ca:4e:69:32:cd:06:8b:eb:0d:f0: 1a:3a:f8:e1:14:f0:1d:e4:50:02:d3:0e:44:22:8f:ff:33:6f: 1d:72:42:2d:5c:e3:33:27:b9:42:d8:06:05:4a:5f:a3:cf:cb: 28:65:4f:e5:58:dc:2c:c8:d5:3f:19:c4:78:4a:ce:d5:25:63: 85:d4:e4:eb:25:52:9d:db:60:90:a6:4c:36:ef:fe:d5:30:4c: 72:2c:40:2f:d7:27:ba:52:73:e8:a0:a3:52:c1:24:c5:1c:da: b2:e4:a5:2b:98:2f:9f:75:6c:23:4e:36:f3:00:cc:35:6e:60: 64:ae:c7:da:59:ae:89:36:b2:73:df:2f:29:28:72:ee:4d:6c: 18:2e:89:dc:96:f1:03:86:d4:da:bd:e0:bc:3f:c2:0a:fd:d7: 9a:ff:a2:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XIfcJ2rC2136ignpsynKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MjM5YTUxMDg0ZjFiMmI1YzY4NDY0M2NhYzE0NjIxN2M3 OWY4ZDEwHhcNMjYwMTAyMDYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDg5YjIxYTAxNGFiZDlhZmQxYmQwMDJmMmE4MDRmNjZkYzI5ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIWYr8Loy3kzyGQB79YxI6ahriIU LjV2h1W0deT3lj8eWRY5FWKkWiG/TcLt1eLnMZTO+wqMOcwuC2M4fIFvTd0wIvqd pLvMHoFaEhDypEk6v+EJSXHRObGE+3gH7Vc9nt8S3MDivrn/zZseO/pDH1OWQPjA Kf9RaaJbpm8LvsVladT+vEsuA5bJ8fyNddl/TxTF41wj/Ltg6V9FBuwTDWtfIp6U YJA+Fun3MKGA0Y5cRt3HHTwh87+rbaB7q12YghCsOSAlB3DmpXgodBW5+ZQrEPEs UalhHkpo81ZR29LxruG0zAUsLfGBPQtJ2bTDwUh8fRVsHP2kcLFU+nBonwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOCJshoBSr2a/RvQAvKoBPZtwp7XMB8GA1UdIwQY MBaAFGQjmlEITxsrXGhGQ8rBRiF8efjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYt NGU5MzA1Y2FmMWEzLzEvNElteUdnRkt2WnI5RzlBQzhxZ0U5bTNDbnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYtNGU5MzA1Y2FmMWEz LzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsAooAwQC uW6QMA0EAgACMAcDBQMqCybAMA0GCSqGSIb3DQEBCwUAA4IBAQAr8EgvbrQp2zf3 0EiLkanrmxGEVBULxi5FxFZLXB+5WBsCh0BYlYFHU+dwhFobMiGTTuBr8kjl5Ti0 caH862kwKws8MW6p6IUSbPZ4Fd9O/UTv95PN4C1MiAJagxNA/NLpVspOaTLNBovr DfAaOvjhFPAd5FAC0w5EIo//M28dckItXOMzJ7lC2AYFSl+jz8soZU/lWNwsyNU/ GcR4Ss7VJWOF1OTrJVKd22CQpkw27/7VMExyLEAv1ye6UnPooKNSwSTFHNqy5KUr mC+fdWwjTjbzAMw1bmBkrsfaWa6JNrJz3y8pKHLuTWwYLonclvEDhtTaveC8P8IK /dea/6Lj -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:47 2026 by rpki-client