This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/r4j83LnOqT_xGRSb_Fa7UBQvrlw.roa File: r4j83LnOqT_xGRSb_Fa7UBQvrlw.roa (raw, json) Hash identifier: rb4exsmD7OP3M9BnVSukh02UwCQaYzN7McXArnHToZU= Subject key identifier: AF:88:FC:DC:B9:CE:A9:3F:F1:19:14:9B:FC:56:BB:50:14:2F:AE:5C Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b Certificate serial: 019B79ED66BA5969C5E130AB3C3B2FF41743 Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/r4j83LnOqT_xGRSb_Fa7UBQvrlw.roa Signing time: Thu 01 Jan 2026 14:19:20 +0000 ROA not before: Thu 01 Jan 2026 14:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29422 IP address blocks: 185.196.232.0/22 maxlen: 22 2a0a:73c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:66:ba:59:69:c5:e1:30:ab:3c:3b:2f:f4:17:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b Validity Not Before: Jan 1 14:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af88fcdcb9cea93ff119149bfc56bb50142fae5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:ad:b8:f6:28:c6:47:ce:a7:d6:44:0f:6b: 4a:c8:bb:3d:61:ef:43:2b:ef:96:53:8e:f3:d3:d9: 6f:6d:6c:81:81:e8:15:fb:06:92:70:6f:08:f6:32: 99:c1:5d:15:59:5d:7c:0b:f2:78:3d:4f:05:c7:cf: 01:16:4b:a5:08:82:3a:cb:e4:63:47:ab:91:4a:61: 30:c9:79:77:ad:66:b9:52:d7:e6:bf:dd:3e:a9:d5: 57:a6:b3:45:8b:6c:dc:14:5b:0d:4c:ec:3d:4f:15: 22:c1:40:1c:98:e5:a2:e9:ef:f3:17:2e:c9:c7:a6: bd:32:20:7b:01:56:dc:e4:e0:47:0f:be:67:c6:97: 6e:d9:97:dd:7c:96:6f:86:7e:c7:3f:da:b0:c5:b4: f6:ba:c4:6a:d1:14:ea:c9:e7:ed:65:33:30:30:cb: d7:13:f8:b9:12:7a:d6:8a:f4:75:51:5d:5d:74:36: 9a:58:33:f1:4c:40:d7:0d:cc:bf:14:ae:2b:e7:81: 36:e2:79:77:da:48:9a:e3:03:00:7a:39:be:24:f5: 36:d8:da:98:c5:48:80:45:d4:d0:32:de:bd:03:e5: 83:5a:ab:53:41:78:1f:63:0a:bd:09:a7:97:98:5e: 10:5a:14:d6:06:ac:0a:e4:25:d6:78:6d:e9:7c:f8: 01:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:FC:DC:B9:CE:A9:3F:F1:19:14:9B:FC:56:BB:50:14:2F:AE:5C X509v3 Authority Key Identifier: keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/r4j83LnOqT_xGRSb_Fa7UBQvrlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.232.0/22 IPv6: 2a0a:73c0::/29 Signature Algorithm: sha256WithRSAEncryption 61:2e:46:3a:1c:e0:83:5f:a3:9b:47:51:98:ea:1e:1d:57:2a: d5:bc:d1:86:db:2e:2d:90:16:c2:59:77:57:d3:41:a3:fd:df: c0:0b:6d:1a:1d:11:6d:a6:c1:d8:34:e5:8a:90:6c:ea:eb:19: 93:e8:40:63:4b:e5:00:7a:40:24:df:b6:9c:cc:b1:c4:cd:1e: 66:43:9e:b3:b0:22:a9:ca:9b:21:28:00:83:94:59:4e:c2:74: 6e:d8:4c:81:be:40:30:e4:4a:66:80:4c:c6:e8:64:b8:04:58: 9a:15:9f:f6:1d:e5:f0:47:91:85:2b:b7:97:b1:8e:c9:5b:78: f6:09:c7:57:85:12:6a:e9:a4:02:d0:da:53:89:b7:ab:cc:23: 2a:f7:2d:76:bb:6d:98:fc:a4:f8:f1:7a:48:68:97:1b:19:cd: f7:77:86:96:71:06:58:7c:34:6c:01:58:8c:c4:aa:4e:52:33: e1:da:b7:a8:39:60:19:2b:6c:26:b7:67:f3:19:91:f8:90:8a: dc:f4:60:dc:1d:9f:39:07:0d:03:85:73:da:a9:68:7b:67:2f: e0:1f:8e:e2:7d:1d:b1:71:3f:ea:2b:5e:54:7b:ec:81:06:25: 32:54:bd:17:66:e8:21:4c:2c:44:8a:0a:c6:dd:a0:0a:21:10: 1b:1c:8c:56 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Wa6WWnF4TCrPDsv9BdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3 MTcyNWIwHhcNMjYwMTAxMTQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg4ZmNkY2I5Y2VhOTNmZjExOTE0OWJmYzU2YmI1MDE0MmZhZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1GtuPYoxkfOp9ZED2tKyLs9Ye9D K++WU47z09lvbWyBgegV+waScG8I9jKZwV0VWV18C/J4PU8Fx88BFkulCII6y+Rj R6uRSmEwyXl3rWa5Utfmv90+qdVXprNFi2zcFFsNTOw9TxUiwUAcmOWi6e/zFy7J x6a9MiB7AVbc5OBHD75nxpdu2ZfdfJZvhn7HP9qwxbT2usRq0RTqyeftZTMwMMvX E/i5EnrWivR1UV1ddDaaWDPxTEDXDcy/FK4r54E24nl32kia4wMAejm+JPU22NqY xUiARdTQMt69A+WDWqtTQXgfYwq9CaeXmF4QWhTWBqwK5CXWeG3pfPgBZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK+I/Ny5zqk/8RkUm/xWu1AUL65cMB8GA1UdIwQY MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt YTE2YTM0YzQ2ZjMwLzEvcjRqODNMbk9xVF94R1JTYl9GYTdVQlF2cmx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucToMA0E AgACMAcDBQMqCnPAMA0GCSqGSIb3DQEBCwUAA4IBAQBhLkY6HOCDX6ObR1GY6h4d VyrVvNGG2y4tkBbCWXdX00Gj/d/AC20aHRFtpsHYNOWKkGzq6xmT6EBjS+UAekAk 37aczLHEzR5mQ56zsCKpypshKACDlFlOwnRu2EyBvkAw5EpmgEzG6GS4BFiaFZ/2 HeXwR5GFK7eXsY7JW3j2CcdXhRJq6aQC0NpTiberzCMq9y12u22Y/KT48XpIaJcb Gc33d4aWcQZYfDRsAViMxKpOUjPh2reoOWAZK2wmt2fzGZH4kIrc9GDcHZ85Bw0D hXPaqWh7Zy/gH47ifR2xcT/qK15Ue+yBBiUyVL0XZughTCxEigrG3aAKIRAbHIxW -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:33 2026 by rpki-client