This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/4d_WqSozvRDgvNRTpqu3pf1ycY4.roa File: 4d_WqSozvRDgvNRTpqu3pf1ycY4.roa (raw, json) Hash identifier: SqhKCGRxDbWcKm2BqLr4W8c+6qQLakyn5pnLEeUZ7oQ= Subject key identifier: E1:DF:D6:A9:2A:33:BD:10:E0:BC:D4:53:A6:AB:B7:A5:FD:72:71:8E Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702 Certificate serial: 019B7910A6142A2D3868581AEE0CC989EB8B Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/4d_WqSozvRDgvNRTpqu3pf1ycY4.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42638 IP address blocks: 91.189.200.0/21 maxlen: 21 193.104.83.0/24 maxlen: 24 2a14:bb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a6:14:2a:2d:38:68:58:1a:ee:0c:c9:89:eb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702 Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1dfd6a92a33bd10e0bcd453a6abb7a5fd72718e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:3f:4a:34:b2:d9:48:5f:a8:82:b4:6c:b7: 08:9f:92:8a:3e:27:55:6c:a3:0f:e4:df:22:af:dd: 66:53:4e:f6:a7:ca:6a:e9:0d:36:6b:5f:d7:63:4c: a5:62:69:c8:37:9e:2a:4c:25:0c:81:6f:a4:50:7d: f3:51:ed:8f:85:9a:a9:01:40:20:82:04:7c:97:49: e2:e1:dc:6f:4e:a2:06:26:bf:af:6d:3a:4b:d3:0c: 33:db:b9:b3:75:58:a0:ed:3a:7e:e5:86:46:14:93: 7a:2e:3c:76:49:22:d0:7e:5b:9a:07:c9:56:b5:f4: f2:75:ce:87:bb:56:d0:23:0b:7b:1f:ca:65:20:72: 4c:da:34:a8:36:c5:23:67:7f:2a:c2:b5:01:69:cf: 49:5a:dd:e3:42:a0:5e:6f:5c:cc:8a:ee:64:3a:a7: d5:17:d3:a9:f0:0a:80:0a:eb:a7:9a:4f:f5:87:98: 5a:a5:b6:1a:35:96:60:4d:53:2b:43:40:eb:24:a0: c2:cb:28:5e:d0:3f:be:e5:34:4b:74:06:7c:db:4c: 27:f1:63:1d:f9:d2:73:be:c8:60:69:8e:a0:5a:9f: 2d:a6:c2:9b:42:88:38:2e:ff:a5:0a:1d:f2:99:36: 63:ae:b7:23:47:f7:18:54:26:58:1c:a9:35:1c:dc: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DF:D6:A9:2A:33:BD:10:E0:BC:D4:53:A6:AB:B7:A5:FD:72:71:8E X509v3 Authority Key Identifier: keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/4d_WqSozvRDgvNRTpqu3pf1ycY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.200.0/21 193.104.83.0/24 IPv6: 2a14:bb00::/29 Signature Algorithm: sha256WithRSAEncryption 7a:85:e1:eb:1f:55:2b:77:51:2a:7f:83:a8:8e:db:d3:a1:91: c4:27:d7:e0:64:90:c5:e3:57:1a:a8:83:24:3f:2a:24:ff:3f: 4d:d1:69:a0:02:a0:a1:bc:b9:27:ad:b1:85:d9:48:7b:59:34: e5:0a:fc:d5:d8:c7:59:bf:6c:cd:25:c4:42:77:d2:b9:0e:ef: 59:7c:55:c4:9e:c8:92:df:a7:7e:c0:cf:21:86:ee:94:04:63: 95:08:e8:d4:49:6a:8b:56:d5:55:6a:dc:87:35:69:21:ba:fb: a8:11:40:a7:9c:8c:62:f2:36:a1:05:16:75:3a:75:a0:59:87: 6d:ef:a3:8d:d8:da:85:93:55:5f:72:9e:6f:9c:e8:50:d3:56: 6e:3a:b2:6f:ed:75:ab:08:18:78:17:b4:56:be:39:f3:9d:50: 06:d7:4d:27:47:fc:38:13:a9:50:95:04:17:f2:20:42:69:6b: 2a:a9:66:58:40:9d:7a:38:e5:57:eb:ef:07:98:73:ec:ca:48: 41:52:fe:f3:96:75:6d:bd:fb:5d:b2:52:12:28:a9:19:b3:39: 3c:30:36:86:3e:12:3a:6c:34:9f:51:b1:9d:5b:36:95:cb:46: 6a:2a:52:a4:9f:f2:4a:23:ae:35:33:e5:45:ee:ff:da:c9:78: ff:ed:a2:cd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EKYUKi04aFga7gzJieuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWU2ZTY1ZThkNzQxODIwMzk2MzQ1NjZjZDFmYTJiMmIz MjU3MDIwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWRmZDZhOTJhMzNiZDEwZTBiY2Q0NTNhNmFiYjdhNWZkNzI3MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa0/SjSy2UhfqIK0bLcIn5KKPidV bKMP5N8ir91mU072p8pq6Q02a1/XY0ylYmnIN54qTCUMgW+kUH3zUe2PhZqpAUAg ggR8l0ni4dxvTqIGJr+vbTpL0wwz27mzdVig7Tp+5YZGFJN6Ljx2SSLQfluaB8lW tfTydc6Hu1bQIwt7H8plIHJM2jSoNsUjZ38qwrUBac9JWt3jQqBeb1zMiu5kOqfV F9Op8AqACuunmk/1h5hapbYaNZZgTVMrQ0DrJKDCyyhe0D++5TRLdAZ820wn8WMd +dJzvshgaY6gWp8tpsKbQog4Lv+lCh3ymTZjrrcjR/cYVCZYHKk1HNyuUwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOHf1qkqM70Q4LzUU6art6X9cnGOMB8GA1UdIwQY MBaAFIhebmXo10GCA5Y0VmzR+isrMlcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUY1dVplalhRWUlEbGpSV2JOSDZLeXN5VndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNWU0MzgtZTI5Mi00ZDIyLWE5MGUt Y2VlYmRmZGUwMWZjLzEvNGRfV3FTb3p2UkRndk5SVHBxdTNwZjF5Y1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iNWU0MzgtZTI5Mi00ZDIyLWE5MGUtY2VlYmRmZGUwMWZj LzEvaUY1dVplalhRWUlEbGpSV2JOSDZLeXN5VndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDW73IAwQA wWhTMA0EAgACMAcDBQMqFLsAMA0GCSqGSIb3DQEBCwUAA4IBAQB6heHrH1Urd1Eq f4OojtvToZHEJ9fgZJDF41caqIMkPyok/z9N0WmgAqChvLknrbGF2Uh7WTTlCvzV 2MdZv2zNJcRCd9K5Du9ZfFXEnsiS36d+wM8hhu6UBGOVCOjUSWqLVtVVatyHNWkh uvuoEUCnnIxi8jahBRZ1OnWgWYdt76ON2NqFk1Vfcp5vnOhQ01ZuOrJv7XWrCBh4 F7RWvjnznVAG100nR/w4E6lQlQQX8iBCaWsqqWZYQJ16OOVX6+8HmHPsykhBUv7z lnVtvftdslISKKkZszk8MDaGPhI6bDSfUbGdWzaVy0ZqKlKkn/JKI641M+VF7v/a yXj/7aLN -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:27 2026 by rpki-client