This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/4ZpOnqfK2APIQ-4MQE03oLgsluo.roa File: 4ZpOnqfK2APIQ-4MQE03oLgsluo.roa (raw, json) Hash identifier: XuqF0JqsAK0twG4BuXKjAf3bjV6Snt02Feen7Cm/uhc= Subject key identifier: E1:9A:4E:9E:A7:CA:D8:03:C8:43:EE:0C:40:4D:37:A0:B8:2C:96:EA Certificate issuer: /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a Certificate serial: 019B7F82EDE3D91D560256FAC9623E9BC262 Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/4ZpOnqfK2APIQ-4MQE03oLgsluo.roa Signing time: Fri 02 Jan 2026 16:20:45 +0000 ROA not before: Fri 02 Jan 2026 16:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34803 IP address blocks: 85.115.128.0/19 maxlen: 24 185.104.220.0/22 maxlen: 24 195.166.192.0/19 maxlen: 24 2a02:638::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ed:e3:d9:1d:56:02:56:fa:c9:62:3e:9b:c2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a Validity Not Before: Jan 2 16:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e19a4e9ea7cad803c843ee0c404d37a0b82c96ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:72:00:e0:bb:13:c8:7d:b0:95:35:d4:c8: c3:d4:96:d6:cc:28:91:16:fa:14:dc:21:db:c8:e1: dd:0a:f8:b8:d9:80:f4:e2:3b:68:fc:59:55:b9:d8: 16:0b:20:96:d9:7b:ed:16:cd:06:23:49:a6:b7:46: f3:96:29:d5:ff:b3:09:ed:01:a9:27:9b:2a:1a:4e: c3:5d:38:b6:ff:36:d2:9f:f4:b5:a1:1e:8f:12:64: a6:97:3a:03:e2:79:bb:55:71:29:9e:96:22:de:ad: 38:79:1d:56:23:86:80:cf:8e:6f:12:e7:12:70:54: 03:65:2e:b5:37:b0:8c:02:43:d6:f8:78:27:ad:44: 42:8b:92:d6:95:9d:8e:b1:65:95:1e:8d:82:21:a9: 11:8e:ef:7e:80:fc:77:d4:65:4d:37:12:ea:33:33: 97:db:d4:aa:0c:ff:7f:d8:f9:17:9d:c0:c9:7b:c6: e5:31:ff:a5:b5:72:32:89:5c:a5:52:82:ac:a5:bd: 45:d5:80:d6:b0:0d:a8:c0:0f:6d:5a:d2:83:05:c2: 28:80:eb:fc:46:b1:cb:b0:00:30:e0:6a:b8:1a:b6: 5d:3e:b0:07:c3:3f:43:ed:71:ea:23:bd:6b:f8:16: 7e:8d:57:fe:1f:b4:9f:02:d6:fe:0e:b9:97:92:c4: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:4E:9E:A7:CA:D8:03:C8:43:EE:0C:40:4D:37:A0:B8:2C:96:EA X509v3 Authority Key Identifier: keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/4ZpOnqfK2APIQ-4MQE03oLgsluo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.128.0/19 185.104.220.0/22 195.166.192.0/19 IPv6: 2a02:638::/32 Signature Algorithm: sha256WithRSAEncryption 22:24:62:8d:f6:10:85:75:e2:4d:b4:a1:4d:2e:0e:4e:3d:c9: c2:e5:87:d7:e9:c8:a4:a7:54:df:68:f5:ee:0b:f3:14:c6:7a: bb:c2:18:36:01:fb:1d:13:1f:bd:68:96:25:00:51:28:eb:0f: 0c:35:6e:cf:d4:07:8d:55:14:12:a7:a3:b5:9a:ce:5b:0b:ae: 50:10:2e:12:2c:41:4b:ca:85:57:a9:2e:a4:5b:c4:47:23:be: ea:87:32:45:2d:46:06:b4:c6:e6:cd:06:bd:6f:a1:d5:6f:16: 88:ee:93:3b:2c:08:58:50:dd:12:c6:77:85:93:19:fa:5b:d5: c9:46:88:50:6e:28:80:90:0a:bb:2a:7f:e5:db:ac:80:3b:85: b2:ed:17:88:b7:9c:94:c8:1b:94:b0:d6:e1:0f:88:37:50:e4: 19:af:a9:52:0e:cc:f9:cd:e4:54:1c:3d:85:14:78:11:f9:41: c0:76:22:5b:7d:43:11:d9:d3:81:36:68:92:15:82:ed:dd:33: 79:d9:c2:bd:64:24:02:33:49:e0:15:64:54:a4:0b:7b:c8:de: bf:a5:38:0b:d1:c4:3e:2c:ad:21:cd:24:06:e1:23:2f:c5:e3: 64:61:b2:d1:e7:6b:ec:b1:1e:c7:62:78:ae:41:09:1a:2b:a1: 54:23:47:d6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/gu3j2R1WAlb6yWI+m8JiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjM0MGUzN2NjZmMxMmFlYmFhYzJhNWYzM2Q0NWVhMGE4 ODdhOGEwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTlhNGU5ZWE3Y2FkODAzYzg0M2VlMGM0MDRkMzdhMGI4MmM5NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5FyAOC7E8h9sJU11MjD1JbWzCiR FvoU3CHbyOHdCvi42YD04jto/FlVudgWCyCW2XvtFs0GI0mmt0bzlinV/7MJ7QGp J5sqGk7DXTi2/zbSn/S1oR6PEmSmlzoD4nm7VXEpnpYi3q04eR1WI4aAz45vEucS cFQDZS61N7CMAkPW+HgnrURCi5LWlZ2OsWWVHo2CIakRju9+gPx31GVNNxLqMzOX 29SqDP9/2PkXncDJe8blMf+ltXIyiVylUoKspb1F1YDWsA2owA9tWtKDBcIogOv8 RrHLsAAw4Gq4GrZdPrAHwz9D7XHqI71r+BZ+jVf+H7SfAtb+DrmXksQedwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOGaTp6nytgDyEPuDEBNN6C4LJbqMB8GA1UdIwQY MBaAFH1jQON8z8Eq66rCpfM9ReoKiHqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMWNlMzQtZTA0My00NWE4LWJlYmQt ODk4MmI3YThmNjE0LzEvNFpwT25xZksyQVBJUS00TVFFMDNvTGdzbHVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iMWNlMzQtZTA0My00NWE4LWJlYmQtODk4MmI3YThmNjE0 LzEvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFVXOAAwQC uWjcAwQFw6bAMA0EAgACMAcDBQAqAgY4MA0GCSqGSIb3DQEBCwUAA4IBAQAiJGKN 9hCFdeJNtKFNLg5OPcnC5YfX6cikp1TfaPXuC/MUxnq7whg2AfsdEx+9aJYlAFEo 6w8MNW7P1AeNVRQSp6O1ms5bC65QEC4SLEFLyoVXqS6kW8RHI77qhzJFLUYGtMbm zQa9b6HVbxaI7pM7LAhYUN0SxneFkxn6W9XJRohQbiiAkAq7Kn/l26yAO4Wy7ReI t5yUyBuUsNbhD4g3UOQZr6lSDsz5zeRUHD2FFHgR+UHAdiJbfUMR2dOBNmiSFYLt 3TN52cK9ZCQCM0ngFWRUpAt7yN6/pTgL0cQ+LK0hzSQG4SMvxeNkYbLR52vssR7H YniuQQkaK6FUI0fW -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:36 2026 by rpki-client