This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/p_4t5r1LIVM__Crw-eZAOlvObAY.roa File: p_4t5r1LIVM__Crw-eZAOlvObAY.roa (raw, json) Hash identifier: 5BvLVMvi5NBU8nHQD8cDw6h+veyzG8axQK09AoRrWAs= Subject key identifier: A7:FE:2D:E6:BD:4B:21:53:3F:FC:2A:F0:F9:E6:40:3A:5B:CE:6C:06 Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Certificate serial: 019B7F82E88E8214A52E4251CD822379EFA3 Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/p_4t5r1LIVM__Crw-eZAOlvObAY.roa Signing time: Fri 02 Jan 2026 16:20:44 +0000 ROA not before: Fri 02 Jan 2026 16:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8697 IP address blocks: 185.98.224.0/22 maxlen: 24 212.34.0.0/19 maxlen: 24 213.139.32.0/19 maxlen: 24 2a00:18d8::/29 maxlen: 48 2a00:18d8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e8:8e:82:14:a5:2e:42:51:cd:82:23:79:ef:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b Validity Not Before: Jan 2 16:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fe2de6bd4b21533ffc2af0f9e6403a5bce6c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:e8:b1:90:d0:eb:10:a2:4e:b0:8f:83:b6: 09:84:c9:65:86:72:dd:53:7f:d4:73:4a:be:00:e2: 20:ac:9e:ab:98:cc:0a:bb:00:e8:6b:2f:08:2b:69: 39:6e:79:fd:0a:cb:ab:80:a6:7c:ea:a9:64:9d:56: d8:ee:03:31:5d:76:49:04:f8:4f:09:9c:34:9c:d5: c8:c9:c0:a7:3b:b3:26:44:5f:86:f0:ba:2c:bf:ab: 94:03:10:f5:d2:2b:c6:3f:b3:8b:ad:1c:f4:39:14: b8:51:7d:e4:e9:63:b4:7a:c8:74:be:07:ce:78:c3: fd:ec:c2:43:81:01:5f:94:17:f4:60:f4:14:bc:bc: 9f:d2:5f:67:25:54:50:b8:35:77:a9:89:fa:2e:41: 21:02:3a:b1:30:83:f4:4a:48:89:8c:0d:fd:17:10: f9:fc:bb:ba:f5:1a:a9:c5:a5:1e:02:89:2d:05:32: dc:76:d6:0e:bd:6a:0c:e0:bb:4c:de:9f:a8:ce:e8: 28:79:bb:ca:6c:ce:e7:f1:65:51:0a:7d:82:14:5c: a8:60:78:db:35:46:61:26:2b:96:6c:15:2b:12:c7: d6:78:2c:c4:ad:83:39:45:17:a8:00:86:9e:dd:b5: 67:18:d6:1b:52:43:eb:fa:58:9d:26:19:02:c0:67: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:2D:E6:BD:4B:21:53:3F:FC:2A:F0:F9:E6:40:3A:5B:CE:6C:06 X509v3 Authority Key Identifier: keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/p_4t5r1LIVM__Crw-eZAOlvObAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.224.0/22 212.34.0.0/19 213.139.32.0/19 IPv6: 2a00:18d8::/29 Signature Algorithm: sha256WithRSAEncryption 37:19:42:21:eb:88:41:bb:12:c9:30:2e:b6:d4:16:e6:41:e3: 1c:20:95:90:14:e1:09:39:af:05:d0:70:34:a1:25:5b:ef:6e: c7:52:9d:84:1f:f9:a1:c9:e6:a3:aa:b2:5a:d2:56:36:cf:52: 9d:1c:60:bd:84:64:f0:f9:1d:a4:47:e0:7c:76:9d:7f:c2:22: 20:61:f2:a7:e3:7c:2e:6f:05:7b:c3:bc:96:23:c6:49:10:63: e3:69:ef:8f:d8:6b:17:9a:62:de:f4:1a:93:92:58:0c:9e:ec: d9:cc:32:f8:f6:69:79:d1:e2:41:73:57:3d:60:aa:04:d0:06: f5:85:99:f2:47:bd:06:cc:50:70:00:d8:24:bb:30:0d:a9:ca: 66:f5:94:73:31:57:98:41:5d:b8:fa:f0:55:38:6e:7b:eb:18: da:fc:c4:e3:34:a7:01:a8:af:f0:2e:a9:dd:f6:ca:b2:d8:4c: c6:cc:be:e3:3d:ac:9f:88:78:5c:d5:a9:ac:23:70:92:c4:05: 5c:83:61:7a:71:0b:7d:5f:57:60:09:e2:15:b5:2b:17:e9:4a: 90:b3:2e:37:8c:2d:b7:73:d9:91:77:c3:9e:21:6b:fa:ef:9b: 4a:97:8f:30:e1:53:71:b4:21:d7:af:6c:22:8a:ed:28:4f:b2: 5a:b8:43:49 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/guiOghSlLkJRzYIjee+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWU5ODMzNmY2YTZjYzlkYmNmMWVjYjQ4OTU1ODBmMDk0 ZTNlMmIwHhcNMjYwMTAyMTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZlMmRlNmJkNGIyMTUzM2ZmYzJhZjBmOWU2NDAzYTViY2U2YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08josZDQ6xCiTrCPg7YJhMllhnLd U3/Uc0q+AOIgrJ6rmMwKuwDoay8IK2k5bnn9CsurgKZ86qlknVbY7gMxXXZJBPhP CZw0nNXIycCnO7MmRF+G8Losv6uUAxD10ivGP7OLrRz0ORS4UX3k6WO0esh0vgfO eMP97MJDgQFflBf0YPQUvLyf0l9nJVRQuDV3qYn6LkEhAjqxMIP0SkiJjA39FxD5 /Lu69RqpxaUeAoktBTLcdtYOvWoM4LtM3p+ozugoebvKbM7n8WVRCn2CFFyoYHjb NUZhJiuWbBUrEsfWeCzErYM5RReoAIae3bVnGNYbUkPr+lidJhkCwGeoRQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKf+Lea9SyFTP/wq8PnmQDpbzmwGMB8GA1UdIwQY MBaAFAKemDNvamzJ288ey0iVWA8JTj4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUt MGZlNmY1NWRiM2Y2LzEvcF80dDVyMUxJVk1fX0Nydy1lWkFPbHZPYkFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mYmMxNDEtOTlmYy00ZjgzLWI1ODUtMGZlNmY1NWRiM2Y2 LzEvQXA2WU0yOXFiTW5ieng3TFNKVllEd2xPUGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWLgAwQF 1CIAAwQF1YsgMA0EAgACMAcDBQMqABjYMA0GCSqGSIb3DQEBCwUAA4IBAQA3GUIh 64hBuxLJMC621BbmQeMcIJWQFOEJOa8F0HA0oSVb727HUp2EH/mhyeajqrJa0lY2 z1KdHGC9hGTw+R2kR+B8dp1/wiIgYfKn43wubwV7w7yWI8ZJEGPjae+P2GsXmmLe 9BqTklgMnuzZzDL49ml50eJBc1c9YKoE0Ab1hZnyR70GzFBwANgkuzANqcpm9ZRz MVeYQV24+vBVOG576xja/MTjNKcBqK/wLqnd9sqy2EzGzL7jPayfiHhc1amsI3CS xAVcg2F6cQt9X1dgCeIVtSsX6UqQsy43jC23c9mRd8OeIWv675tKl48w4VNxtCHX r2wiiu0oT7JauENJ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:40 2026 by rpki-client