This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/4v5BgTcmzQ0y7khumrI19c8q-sM.roa File: 4v5BgTcmzQ0y7khumrI19c8q-sM.roa (raw, json) Hash identifier: pU1RWRtn8YAUvSz8vemI3GYYeqO0HhKmjSzy+TkEMSw= Subject key identifier: E2:FE:41:81:37:26:CD:0D:32:EE:48:6E:9A:B2:35:F5:CF:2A:FA:C3 Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7 Certificate serial: 019B77592D3D6528E76F61923EF46BE376FF Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/4v5BgTcmzQ0y7khumrI19c8q-sM.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39180 IP address blocks: 185.24.16.0/24 maxlen: 24 185.24.17.0/24 maxlen: 24 185.24.18.0/24 maxlen: 24 185.24.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2d:3d:65:28:e7:6f:61:92:3e:f4:6b:e3:76:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2fe41813726cd0d32ee486e9ab235f5cf2afac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:fb:9c:6b:7f:7a:06:88:6e:e0:d1:09:70: bc:53:bc:74:cb:ad:4e:ee:35:1c:cc:32:14:ae:98: 2d:ab:e3:c2:1f:63:b3:41:8b:09:d9:52:8d:6f:08: 83:3b:44:8d:ff:e2:ab:59:c9:99:7b:a9:33:10:58: 4e:2d:a5:e9:09:bc:2b:88:0b:6d:56:85:f1:76:dd: 8e:77:d4:e3:cb:43:03:d0:50:52:1e:bc:f2:ff:d2: 9d:c4:f3:ee:d4:fe:85:93:33:54:c0:ab:81:f4:f4: cc:ef:ca:2d:63:ea:71:e0:50:82:5b:b3:cd:12:c8: f7:62:4e:52:da:b2:38:ee:9f:41:60:6d:7f:ee:38: f5:4b:e5:b7:da:9b:57:7c:9d:2a:90:5d:a8:0c:ad: d2:f0:3b:af:29:90:a2:ef:db:7e:76:b2:6b:4c:e7: 1f:f6:fa:64:46:a6:f9:0a:5b:86:11:a7:87:2a:ce: 52:dd:b2:03:4b:f7:68:d3:8f:f8:9a:2f:0d:66:03: 27:20:f5:b1:78:9a:2d:c7:a7:a2:d5:a5:68:5d:7f: 20:a6:e4:6a:c2:0c:43:56:1a:9e:86:4e:e9:b1:19: 70:6e:e1:d9:d5:75:f4:b4:71:96:15:5c:95:f4:08: 39:6c:ee:1c:8b:cc:3c:fb:6e:ad:2d:72:6f:20:50: 31:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FE:41:81:37:26:CD:0D:32:EE:48:6E:9A:B2:35:F5:CF:2A:FA:C3 X509v3 Authority Key Identifier: keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/4v5BgTcmzQ0y7khumrI19c8q-sM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.16.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:1b:91:61:e5:c8:b9:4e:c2:cb:75:75:a2:e2:11:d3:3f:61: 53:ea:7f:f3:97:6f:99:05:f0:ed:13:12:8c:8e:75:38:6f:5e: 45:df:88:c6:96:ff:1a:d4:cc:de:7f:f6:43:09:80:14:2a:16: 02:69:4b:84:75:26:2c:86:62:58:5c:65:61:b9:31:c1:98:e1: 1d:d2:7e:ad:c2:27:8f:44:56:c8:9c:d2:46:6d:73:c5:c7:26: cc:f5:a2:7a:49:f6:44:3b:f5:4a:15:fa:d5:7b:e5:7a:e2:07: 51:59:c3:50:fe:63:f8:02:3d:17:a4:f7:e3:24:c1:d6:a8:a3: 6e:8b:8c:5f:06:7c:07:dd:c2:5b:bc:a2:c1:6c:b2:5e:49:ba: ac:a2:3c:25:13:8f:31:2c:f8:06:ff:63:c5:bd:76:aa:16:77: 8a:15:69:4a:f0:ee:8f:a9:bd:1e:84:14:13:d4:53:b9:bf:ec: 61:7d:3f:6f:1c:39:a2:97:23:8b:d0:3d:53:1d:24:90:4f:e7: 48:bb:86:9d:c6:6c:de:d6:63:5c:f5:6c:60:66:8e:d7:48:ac: 0d:7c:e3:29:03:79:9a:f2:4a:9a:52:88:26:23:b8:7a:1d:94: ad:7b:d1:ef:a9:29:d1:8c:3f:5c:e6:a9:6c:4d:af:33:4e:23: 52:24:48:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WS09ZSjnb2GSPvRr43b/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDY3ODVmNDY5YmU4YWE3MTUxZTMzMzNlNDc0NjVkNDc4 ZmQwZTcwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZlNDE4MTM3MjZjZDBkMzJlZTQ4NmU5YWIyMzVmNWNmMmFmYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEr7nGt/egaIbuDRCXC8U7x0y61O 7jUczDIUrpgtq+PCH2OzQYsJ2VKNbwiDO0SN/+KrWcmZe6kzEFhOLaXpCbwriAtt VoXxdt2Od9Tjy0MD0FBSHrzy/9KdxPPu1P6FkzNUwKuB9PTM78otY+px4FCCW7PN Esj3Yk5S2rI47p9BYG1/7jj1S+W32ptXfJ0qkF2oDK3S8DuvKZCi79t+drJrTOcf 9vpkRqb5CluGEaeHKs5S3bIDS/do04/4mi8NZgMnIPWxeJotx6ei1aVoXX8gpuRq wgxDVhqehk7psRlwbuHZ1XX0tHGWFVyV9Ag5bO4ci8w8+26tLXJvIFAxewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOL+QYE3Js0NMu5IbpqyNfXPKvrDMB8GA1UdIwQY MBaAFJJGeF9Gm+iqcVHjMz5HRl1Hj9DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgt NWMzOGM3NDc1YWE5LzEvNHY1QmdUY216UTB5N2todW1ySTE5YzhxLXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgtNWMzOGM3NDc1YWE5 LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRgQMA0G CSqGSIb3DQEBCwUAA4IBAQBLG5Fh5ci5TsLLdXWi4hHTP2FT6n/zl2+ZBfDtExKM jnU4b15F34jGlv8a1Mzef/ZDCYAUKhYCaUuEdSYshmJYXGVhuTHBmOEd0n6twieP RFbInNJGbXPFxybM9aJ6SfZEO/VKFfrVe+V64gdRWcNQ/mP4Aj0XpPfjJMHWqKNu i4xfBnwH3cJbvKLBbLJeSbqsojwlE48xLPgG/2PFvXaqFneKFWlK8O6Pqb0ehBQT 1FO5v+xhfT9vHDmilyOL0D1THSSQT+dIu4adxmze1mNc9WxgZo7XSKwNfOMpA3ma 8kqaUogmI7h6HZSte9HvqSnRjD9c5qlsTa8zTiNSJEgL -----END CERTIFICATE-----Generated at Tue Jan 27 03:25:20 2026 by rpki-client