This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/4FQy_cmXDbaRXeWlBuIuBFYt6oA.roa File: 4FQy_cmXDbaRXeWlBuIuBFYt6oA.roa (raw, json) Hash identifier: mdySyPSYsGC5ttrrbJP/Va0zmLht05VHfDcG10TtcD8= Subject key identifier: E0:54:32:FD:C9:97:0D:B6:91:5D:E5:A5:06:E2:2E:04:56:2D:EA:80 Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97 Certificate serial: 019B775885B9DEF0D137834E5A988E87EA29 Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/4FQy_cmXDbaRXeWlBuIuBFYt6oA.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 185.30.233.0/24 maxlen: 24 185.165.190.0/24 maxlen: 24 2a07:85c3::/48 maxlen: 48 2a07:85c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:85:b9:de:f0:d1:37:83:4e:5a:98:8e:87:ea:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e05432fdc9970db6915de5a506e22e04562dea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:25:96:a4:ee:78:f3:54:a6:58:54:90:97: b8:ab:49:23:bc:8f:78:14:3e:5b:2f:2b:ca:c5:38: c6:fa:d3:00:86:90:67:29:bc:f1:b3:51:2b:ed:1c: a4:67:8e:8f:39:dd:2b:f1:d3:23:08:a3:15:35:ee: 72:3b:a9:a1:c2:21:59:37:f6:66:42:cc:76:f0:33: db:18:da:78:7d:68:64:57:ff:18:d4:e6:a4:7d:d1: eb:8e:29:5a:79:89:ce:b1:46:f9:0e:d8:e2:2f:b2: b4:b2:c4:9c:3b:58:39:d9:7f:32:bf:24:7b:47:d0: b2:fc:e7:81:da:27:5a:a7:1c:a9:7f:d3:eb:c8:c3: ca:f7:0c:b8:47:4d:c0:3a:89:78:ed:f8:ca:93:c6: 00:12:db:97:1c:03:99:f5:d1:00:2f:e8:dd:5b:b6: 3c:09:97:7d:70:2d:42:11:42:d1:19:33:ae:4d:3e: fa:de:58:4a:2d:2b:1a:21:d6:67:19:7a:31:36:c7: f9:5c:83:33:59:8c:ed:11:81:7b:5b:20:8f:d0:e4: 73:81:de:3c:fc:ee:98:71:3f:9f:c8:e0:8c:d1:1f: 84:3a:2c:8d:4a:d4:d7:da:ce:08:4c:37:64:cc:aa: 7f:54:8b:51:48:65:d4:58:3c:a3:8a:7d:7d:53:60: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:54:32:FD:C9:97:0D:B6:91:5D:E5:A5:06:E2:2E:04:56:2D:EA:80 X509v3 Authority Key Identifier: keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/4FQy_cmXDbaRXeWlBuIuBFYt6oA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.233.0/24 185.165.190.0/24 IPv6: 2a07:85c3::/48 2a07:85c5::/48 Signature Algorithm: sha256WithRSAEncryption 76:d4:5e:96:06:0f:32:96:0e:e0:e5:cc:68:3c:97:2a:b2:01: 48:30:6e:1c:ac:5b:6c:d9:65:ed:17:fd:fc:3a:cd:af:6d:e4: 24:53:8c:55:94:98:2b:04:32:75:91:29:59:66:d4:b0:c1:11: 28:26:0e:f1:20:9c:5e:25:ef:c3:30:f9:30:5d:65:e1:c7:87: b3:e5:95:b2:47:67:65:bb:e5:72:88:c2:58:2d:66:6c:34:f5: 6f:60:8d:33:78:95:42:b6:e3:c0:d7:72:be:05:d2:c6:25:a5: 2f:b2:cb:ac:07:dd:4e:b5:5e:c1:4e:e1:87:7b:2f:de:c0:ad: 79:c0:24:e1:cd:41:33:25:41:fd:5a:ed:92:e5:11:3d:63:6b: 48:d3:14:9f:fc:12:89:3e:c0:89:36:c6:5c:07:ea:1f:a7:84: aa:56:3b:ad:4a:8f:87:34:44:ed:f2:36:04:52:c8:3e:9b:0a: df:2f:13:10:8e:66:38:9f:fb:a0:23:b9:3c:24:43:b5:72:57: 59:fc:c4:ee:a3:f4:13:11:06:a0:a9:d3:3a:07:cf:c2:d2:06: 29:be:52:66:01:22:9f:22:85:1b:cb:d9:84:2d:6d:d9:0b:dc: 8e:9b:c6:0b:9f:99:72:1f:ed:27:8b:0e:d1:b5:54:3f:b1:e1: 02:a8:54:ce -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3WIW53vDRN4NOWpiOh+opMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTg0MmU2NzE0NzI1MjUwNWY0MTU1MWYwZjczNWI3Zjcy ZTNlOTcwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDU0MzJmZGM5OTcwZGI2OTE1ZGU1YTUwNmUyMmUwNDU2MmRlYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3McllqTuePNUplhUkJe4q0kjvI94 FD5bLyvKxTjG+tMAhpBnKbzxs1Er7RykZ46POd0r8dMjCKMVNe5yO6mhwiFZN/Zm Qsx28DPbGNp4fWhkV/8Y1OakfdHrjilaeYnOsUb5DtjiL7K0ssScO1g52X8yvyR7 R9Cy/OeB2idapxypf9PryMPK9wy4R03AOol47fjKk8YAEtuXHAOZ9dEAL+jdW7Y8 CZd9cC1CEULRGTOuTT763lhKLSsaIdZnGXoxNsf5XIMzWYztEYF7WyCP0ORzgd48 /O6YcT+fyOCM0R+EOiyNStTX2s4ITDdkzKp/VItRSGXUWDyjin19U2Ch0QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOBUMv3Jlw22kV3lpQbiLgRWLeqAMB8GA1UdIwQY MBaAFO+oQuZxRyUlBfQVUfD3Nbf3Lj6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYt OGUwYzMxMjIzZGI4LzEvNEZReV9jbVhEYmFSWGVXbEJ1SXVCRll0Nm9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYtOGUwYzMxMjIzZGI4 LzEvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAuR7pAwQA uaW+MBgEAgACMBIDBwAqB4XDAAADBwAqB4XFAAAwDQYJKoZIhvcNAQELBQADggEB AHbUXpYGDzKWDuDlzGg8lyqyAUgwbhysW2zZZe0X/fw6za9t5CRTjFWUmCsEMnWR KVlm1LDBESgmDvEgnF4l78Mw+TBdZeHHh7PllbJHZ2W75XKIwlgtZmw09W9gjTN4 lUK248DXcr4F0sYlpS+yy6wH3U61XsFO4Yd7L97ArXnAJOHNQTMlQf1a7ZLlET1j a0jTFJ/8Eok+wIk2xlwH6h+nhKpWO61Kj4c0RO3yNgRSyD6bCt8vExCOZjif+6Aj uTwkQ7VyV1n8xO6j9BMRBqCp0zoHz8LSBim+UmYBIp8ihRvL2YQtbdkL3I6bxguf mXIf7SeLDtG1VD+x4QKoVM4= -----END CERTIFICATE-----Generated at Tue Jan 20 12:46:04 2026 by rpki-client