This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/4v_iwBzOpciC0YWjVDg_w5r563M.roa File: 4v_iwBzOpciC0YWjVDg_w5r563M.roa (raw, json) Hash identifier: F5kWV5HiM8c6dQiiFtOG3n7NW+KRh+raqsJXmMUP0SM= Subject key identifier: E2:FF:E2:C0:1C:CE:A5:C8:82:D1:85:A3:54:38:3F:C3:9A:F9:EB:73 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B7FF1DD3214C065C75C093C1A15663719 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/4v_iwBzOpciC0YWjVDg_w5r563M.roa Signing time: Fri 02 Jan 2026 18:21:55 +0000 ROA not before: Fri 02 Jan 2026 18:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 82.206.32.0/21 maxlen: 24 82.206.40.0/21 maxlen: 24 82.206.48.0/21 maxlen: 24 82.206.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:dd:32:14:c0:65:c7:5c:09:3c:1a:15:66:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jan 2 18:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ffe2c01ccea5c882d185a354383fc39af9eb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:60:86:49:55:63:e7:0b:ed:5b:29:56:a6: ac:b3:51:b3:c5:7b:36:19:5c:6d:46:bc:f3:a7:5b: a6:3a:c5:b7:b3:b0:a1:04:d6:b1:ba:5f:92:16:1e: 90:b1:fb:cb:61:46:7b:0b:19:4a:0e:88:03:24:b6: eb:75:07:10:45:dd:44:c5:27:fc:1d:33:cc:c7:6e: b0:97:77:80:19:0b:7a:fa:4f:0c:de:4c:d4:c6:fc: 1b:4f:f6:c5:cb:1d:0f:c5:7c:8a:be:95:c1:6d:15: 9c:9a:d8:cd:0e:7d:52:46:38:17:8f:12:c3:eb:36: 6c:6c:ae:79:45:b5:87:ce:b6:5e:6c:f6:40:d0:12: 44:60:5d:e1:82:6a:47:09:8d:b4:84:ba:05:22:b6: 35:7a:21:2a:8d:85:1f:da:58:c5:0d:08:60:1b:b8: f7:1a:59:e2:d1:62:1c:30:c4:6b:6c:9f:be:4f:86: 44:bd:60:a8:8b:e9:fb:0c:18:6f:55:9c:d7:b2:70: 0a:83:f8:5a:23:ea:40:e7:83:29:7b:fb:ee:3d:a9: e4:3c:2f:a8:41:9b:ca:39:ce:2a:2d:55:de:09:42: 8d:d3:9b:59:89:54:42:e5:21:28:71:0d:cd:1d:94: 34:77:18:63:2a:71:a4:c0:c9:23:be:f8:ea:a3:a9: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FF:E2:C0:1C:CE:A5:C8:82:D1:85:A3:54:38:3F:C3:9A:F9:EB:73 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/4v_iwBzOpciC0YWjVDg_w5r563M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.32.0/19 Signature Algorithm: sha256WithRSAEncryption 44:ed:4e:af:48:a2:05:6e:61:e1:b4:0c:ca:97:a5:5b:1b:62: f4:d8:dc:61:c6:cb:31:97:a8:f8:39:02:b4:f8:72:ba:47:e3: 6c:65:a4:b4:1b:80:6a:1d:9c:5f:59:c8:6e:d8:88:ee:0c:e8: f5:23:7c:a8:db:50:d9:c2:c9:d8:e1:60:a8:f0:33:1c:d6:1d: 53:47:7e:35:77:e5:2f:7c:47:f5:a9:78:97:e2:f3:5f:16:1d: b8:8f:f3:23:bf:e8:e0:2e:40:7d:84:3f:be:00:b9:5b:b6:1f: 4a:8d:68:7c:c0:e6:7b:42:5d:68:16:13:ee:99:e6:92:67:ca: 73:70:b4:43:c3:e1:b5:2a:4f:c8:ec:2b:c5:4d:96:54:52:95: f4:66:ac:59:7f:58:bc:97:ec:16:9f:ae:0d:87:2c:f1:22:90: 47:43:d3:0c:48:4a:f5:b8:4b:a3:b2:f9:45:76:56:29:72:3a: 67:83:15:ee:b5:9a:db:e0:93:48:07:4e:5e:22:93:17:f1:3f: b1:19:28:89:b6:47:2e:dc:fb:f2:89:d5:9e:58:a0:a2:1a:0c: 01:7a:43:8c:e6:15:e4:f5:ff:2f:92:02:e3:09:12:cf:07:f4: 78:9c:51:81:e4:e4:29:8a:2c:0e:ff:63:44:06:01:fa:c5:7e: dc:19:e6:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8d0yFMBlx1wJPBoVZjcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjYwMTAyMTgyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZmZTJjMDFjY2VhNWM4ODJkMTg1YTM1NDM4M2ZjMzlhZjllYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkdghklVY+cL7VspVqass1GzxXs2 GVxtRrzzp1umOsW3s7ChBNaxul+SFh6QsfvLYUZ7CxlKDogDJLbrdQcQRd1ExSf8 HTPMx26wl3eAGQt6+k8M3kzUxvwbT/bFyx0PxXyKvpXBbRWcmtjNDn1SRjgXjxLD 6zZsbK55RbWHzrZebPZA0BJEYF3hgmpHCY20hLoFIrY1eiEqjYUf2ljFDQhgG7j3 Glni0WIcMMRrbJ++T4ZEvWCoi+n7DBhvVZzXsnAKg/haI+pA54Mpe/vuPankPC+o QZvKOc4qLVXeCUKN05tZiVRC5SEocQ3NHZQ0dxhjKnGkwMkjvvjqo6kuHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOL/4sAczqXIgtGFo1Q4P8Oa+etzMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvNHZfaXdCek9wY2lDMFlXalZEZ193NXI1NjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUs4gMA0G CSqGSIb3DQEBCwUAA4IBAQBE7U6vSKIFbmHhtAzKl6VbG2L02Nxhxssxl6j4OQK0 +HK6R+NsZaS0G4BqHZxfWchu2IjuDOj1I3yo21DZwsnY4WCo8DMc1h1TR341d+Uv fEf1qXiX4vNfFh24j/Mjv+jgLkB9hD++ALlbth9KjWh8wOZ7Ql1oFhPumeaSZ8pz cLRDw+G1Kk/I7CvFTZZUUpX0ZqxZf1i8l+wWn64NhyzxIpBHQ9MMSEr1uEujsvlF dlYpcjpngxXutZrb4JNIB05eIpMX8T+xGSiJtkcu3PvyidWeWKCiGgwBekOM5hXk 9f8vkgLjCRLPB/R4nFGB5OQpiiwO/2NEBgH6xX7cGebV -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:27 2026 by rpki-client