This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-4xEs01bVkwUTehyZmb64CFv4rc.roa File: 1-4xEs01bVkwUTehyZmb64CFv4rc.roa (raw, json) Hash identifier: 9f69THqcsJFMz1/lyGA3oPGJqNeaClzbxiD2AjNQsHw= Subject key identifier: FB:8C:44:B3:4D:5B:56:4C:14:4D:E8:72:66:66:FA:E0:21:6F:E2:B7 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC78A625C8CE6F32EFE9D8CD0223FC3 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-4xEs01bVkwUTehyZmb64CFv4rc.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39113 IP address blocks: 85.8.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8a:62:5c:8c:e6:f3:2e:fe:9d:8c:d0:22:3f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb8c44b34d5b564c144de8726666fae0216fe2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:30:5c:4e:53:af:ea:9a:f0:d4:d7:0d:92: d0:d8:b2:a1:b0:52:24:ae:b1:8b:08:74:37:9b:f1: dc:96:01:a7:a0:80:fa:cc:b3:5c:aa:d7:1f:18:95: ff:1d:64:f3:9d:04:74:25:b5:19:35:55:2e:fe:6b: ae:05:83:e9:38:8a:c1:cb:86:00:d1:d2:f4:de:0d: 9d:91:2a:e1:53:b4:ec:9f:e1:83:b8:33:48:78:66: 4e:dc:d1:6b:70:c9:4e:3e:71:6b:e3:1d:f6:a2:13: 97:42:19:d8:3b:b4:76:e0:b8:da:fc:96:c7:70:46: c8:be:5d:80:e7:ed:94:f2:5f:9b:68:26:21:eb:62: fa:29:8f:35:c6:7f:0a:89:bc:09:4c:30:8a:27:4c: 9f:9f:ce:b2:56:24:a4:ef:8e:60:9e:76:87:9b:f8: 73:92:84:f9:e1:b6:79:76:f0:d0:14:9a:74:da:34: 77:a4:f4:f2:0a:c1:3f:f8:c7:5a:65:10:b8:61:d4: b7:81:85:f4:23:60:49:97:8e:4f:23:c7:ff:16:d0: df:ba:82:b9:35:e9:4d:ce:7c:84:8c:f5:dd:87:f8: 1d:5f:04:18:f9:c5:50:14:67:bd:45:7e:86:a8:8b: 5c:24:3f:66:81:1f:cf:bf:7a:91:92:31:60:62:a5: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8C:44:B3:4D:5B:56:4C:14:4D:E8:72:66:66:FA:E0:21:6F:E2:B7 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-4xEs01bVkwUTehyZmb64CFv4rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.186.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:32:39:34:fc:7d:7f:62:3d:98:f7:50:cc:2a:fb:e6:5c:c1: 85:f1:69:69:8f:69:c5:ec:26:3d:96:f0:37:73:6e:c5:1d:e2: dd:b4:f6:20:1f:b5:bf:e8:a7:a2:34:47:1f:70:d8:b7:09:53: 44:88:7f:cc:62:bc:1f:fb:8d:52:12:ec:00:6d:bb:8c:72:3b: 3f:25:49:74:eb:b8:cb:9a:4e:af:39:b3:ef:de:16:b7:c2:82: 4f:d5:31:84:51:39:47:c0:16:82:b4:0f:7d:1c:2c:aa:a7:9c: ee:6a:d8:d1:c8:12:4f:36:0a:2e:e1:86:bc:d4:4e:19:99:fc: 14:43:6f:f9:91:c4:36:1d:c7:dc:88:04:ce:2a:86:b8:bb:0a: 85:f2:c4:d9:db:18:13:5e:6d:9a:e2:d8:8d:82:09:cc:8a:df: 4f:fc:54:f9:4b:e2:1a:b8:dc:fc:40:4f:0b:bf:4c:85:d8:da: c7:06:4c:10:c1:2c:0f:1f:34:2e:69:73:d0:e1:cc:6a:1c:49: d8:b4:12:2c:ea:51:42:4a:f6:83:67:8c:6e:50:f6:cb:01:ee: c1:cb:65:95:86:e2:5e:bd:cf:42:fa:66:58:05:f7:99:1e:83: 2a:58:04:cf:bb:42:93:3f:a4:56:2e:59:ad:61:b4:16:36:24: 4c:bb:15:fe -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x4piXIzm8y7+nYzQIj/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjhjNDRiMzRkNWI1NjRjMTQ0ZGU4NzI2NjY2ZmFlMDIxNmZlMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuIwXE5Tr+qa8NTXDZLQ2LKhsFIk rrGLCHQ3m/HclgGnoID6zLNcqtcfGJX/HWTznQR0JbUZNVUu/muuBYPpOIrBy4YA 0dL03g2dkSrhU7Tsn+GDuDNIeGZO3NFrcMlOPnFr4x32ohOXQhnYO7R24Lja/JbH cEbIvl2A5+2U8l+baCYh62L6KY81xn8KibwJTDCKJ0yfn86yViSk745gnnaHm/hz koT54bZ5dvDQFJp02jR3pPTyCsE/+MdaZRC4YdS3gYX0I2BJl45PI8f/FtDfuoK5 NelNznyEjPXdh/gdXwQY+cVQFGe9RX6GqItcJD9mgR/Pv3qRkjFgYqVzYQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuMRLNNW1ZMFE3ocmZm+uAhb+K3MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvMS00eEVzMDFiVmt3VVRlaHlabWI2NENGdjRyYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjUvOTk5Yjk3LWM3MzEtNDE5Mi04NWYxLTU3MzcwMWM4NDgz My8xL1lpTGh3cVV4VXpTMmJZRDNqVnRRdEM1SUM1dy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFUIujAN BgkqhkiG9w0BAQsFAAOCAQEAOzI5NPx9f2I9mPdQzCr75lzBhfFpaY9pxewmPZbw N3NuxR3i3bT2IB+1v+inojRHH3DYtwlTRIh/zGK8H/uNUhLsAG27jHI7PyVJdOu4 y5pOrzmz794Wt8KCT9UxhFE5R8AWgrQPfRwsqqec7mrY0cgSTzYKLuGGvNROGZn8 FENv+ZHENh3H3IgEziqGuLsKhfLE2dsYE15tmuLYjYIJzIrfT/xU+UviGrjc/EBP C79MhdjaxwZMEMEsDx80Lmlz0OHMahxJ2LQSLOpRQkr2g2eMblD2ywHuwctllYbi Xr3PQvpmWAX3mR6DKlgEz7tCkz+kVi5ZrWG0FjYkTLsV/g== -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:17 2026 by rpki-client