This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/4bCgDxdDaKJgzA4h-Rx55rf85c8.roa File: 4bCgDxdDaKJgzA4h-Rx55rf85c8.roa (raw, json) Hash identifier: pNURX3p9L1wk4RiWa90pndbKlQ0u4vCpDE0muKi8F30= Subject key identifier: E1:B0:A0:0F:17:43:68:A2:60:CC:0E:21:F9:1C:79:E6:B7:FC:E5:CF Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Certificate serial: 019B7B365BD3C8CBF4AB646C67C247AB22C0 Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/4bCgDxdDaKJgzA4h-Rx55rf85c8.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204773 IP address blocks: 185.66.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5b:d3:c8:cb:f4:ab:64:6c:67:c2:47:ab:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b0a00f174368a260cc0e21f91c79e6b7fce5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d9:31:51:76:7b:1c:af:63:45:91:7d:39:99: 57:60:22:14:82:1b:6d:df:15:8b:5b:34:32:f6:db: 62:86:78:eb:bc:e5:a8:e4:f5:33:ae:6a:f2:8f:bb: 09:65:76:44:e7:81:58:a1:a0:d7:7a:81:68:54:c2: ff:27:7f:05:95:cd:6e:b2:1f:fc:4b:05:a9:be:d6: f7:17:c1:12:17:61:b2:bb:31:1b:86:03:cf:66:ed: 40:94:1e:e5:7a:ed:b7:29:20:b8:b0:6e:be:58:a4: 1a:54:41:07:c5:7c:91:89:5e:4a:a7:4f:f1:6b:18: 36:82:c8:e6:31:77:61:77:fd:c4:cd:50:60:c2:2e: 43:23:54:f8:58:ef:84:80:00:bc:fe:e9:06:89:4a: 87:8b:56:53:2c:f5:62:d3:5c:43:b1:7a:ba:6b:1e: e7:6a:c7:b8:95:04:3a:d8:0b:4e:59:4d:b6:ef:fb: 41:02:e7:ab:bb:23:3e:48:9c:8d:94:b1:46:0b:6f: 3c:b9:19:6a:29:1a:00:b1:16:c9:42:d1:54:8f:37: 8d:1c:40:42:25:e2:6f:22:fc:21:8b:3e:36:f8:73: 75:1c:5c:38:1c:1f:f5:55:29:e2:71:de:46:b8:aa: 2c:41:ae:a0:5f:41:5c:31:1c:e4:ee:81:06:8f:f8: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:A0:0F:17:43:68:A2:60:CC:0E:21:F9:1C:79:E6:B7:FC:E5:CF X509v3 Authority Key Identifier: keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/4bCgDxdDaKJgzA4h-Rx55rf85c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.75.0/24 Signature Algorithm: sha256WithRSAEncryption 00:7f:e1:49:bc:d2:4c:6c:71:f8:42:4b:da:2d:59:34:7f:95: 59:67:15:d0:75:cc:e2:e1:ff:42:7f:5d:a1:cf:a0:38:30:3a: f0:9e:61:6e:cd:a7:6f:cd:cd:ff:b5:90:d6:38:e5:54:4e:b8: a4:b2:5b:8e:65:55:26:c7:6f:d0:2f:47:6e:be:d3:43:3c:14: e3:e2:3a:b2:2d:68:7d:23:fd:45:e3:d3:e8:06:3f:9f:b5:46: 93:43:dc:58:95:64:83:4e:67:5b:df:9e:8d:df:f7:b8:79:71: 0c:9e:1b:6b:75:49:fb:7e:97:06:d3:ae:e6:b0:d6:14:3b:fc: 83:a3:d4:4b:0c:d7:ed:0f:d5:2b:0f:98:cd:bd:8d:2e:9b:fd: eb:e1:55:7f:9f:9f:c2:7a:13:2b:c4:24:6c:7d:6b:cb:58:63: 88:3e:2c:05:c6:68:b2:ea:6d:07:46:9a:b4:10:c6:d2:67:3a: 96:dc:4f:98:82:24:60:58:e5:c0:f3:0b:b8:c8:7f:c7:5e:62: 24:87:bf:dd:bc:81:ad:8a:bd:ed:0a:d7:10:e0:ad:92:b0:d8: 78:b7:3c:04:b4:10:dc:f8:45:c3:77:6d:5c:32:fc:4b:24:d3: db:2d:7b:b6:a0:b5:07:68:2f:41:40:a4:56:a3:0f:07:4e:e2: 1d:f7:0c:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NlvTyMv0q2RsZ8JHqyLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGY3ODk0NzM0MWNlNTU4ODhiN2ViZjM2OTAxNDNiMGNi ZmYzZDYwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWIwYTAwZjE3NDM2OGEyNjBjYzBlMjFmOTFjNzllNmI3ZmNlNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NkxUXZ7HK9jRZF9OZlXYCIUghtt 3xWLWzQy9ttihnjrvOWo5PUzrmryj7sJZXZE54FYoaDXeoFoVML/J38Flc1ush/8 SwWpvtb3F8ESF2GyuzEbhgPPZu1AlB7leu23KSC4sG6+WKQaVEEHxXyRiV5Kp0/x axg2gsjmMXdhd/3EzVBgwi5DI1T4WO+EgAC8/ukGiUqHi1ZTLPVi01xDsXq6ax7n ase4lQQ62AtOWU227/tBAueruyM+SJyNlLFGC288uRlqKRoAsRbJQtFUjzeNHEBC JeJvIvwhiz42+HN1HFw4HB/1VSnicd5GuKosQa6gX0FcMRzk7oEGj/iUzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGwoA8XQ2iiYMwOIfkceea3/OXPMB8GA1UdIwQY MBaAFO9PeJRzQc5ViIt+vzaQFDsMv/PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAt OWJhYTY2Y2ExNDA0LzEvNGJDZ0R4ZERhS0pnekE0aC1SeDU1cmY4NWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAtOWJhYTY2Y2ExNDA0 LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUJLMA0G CSqGSIb3DQEBCwUAA4IBAQAAf+FJvNJMbHH4QkvaLVk0f5VZZxXQdczi4f9Cf12h z6A4MDrwnmFuzadvzc3/tZDWOOVUTriksluOZVUmx2/QL0duvtNDPBTj4jqyLWh9 I/1F49PoBj+ftUaTQ9xYlWSDTmdb356N3/e4eXEMnhtrdUn7fpcG067msNYUO/yD o9RLDNftD9UrD5jNvY0um/3r4VV/n5/CehMrxCRsfWvLWGOIPiwFxmiy6m0HRpq0 EMbSZzqW3E+YgiRgWOXA8wu4yH/HXmIkh7/dvIGtir3tCtcQ4K2SsNh4tzwEtBDc +EXDd21cMvxLJNPbLXu2oLUHaC9BQKRWow8HTuId9wxw -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:53 2026 by rpki-client