This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/L4UpAkdF8b839N44FTHNh-gC55s.roa File: L4UpAkdF8b839N44FTHNh-gC55s.roa (raw, json) Hash identifier: NDtnroxc2AqyKTb6om79If+wTLdHZt92uAc1INrbcN8= Subject key identifier: 2F:85:29:02:47:45:F1:BF:37:F4:DE:38:15:31:CD:87:E8:02:E7:9B Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8 Certificate serial: 019B7DCAB47CBB757592696341A8DB74F4D7 Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/L4UpAkdF8b839N44FTHNh-gC55s.roa Signing time: Fri 02 Jan 2026 08:19:54 +0000 ROA not before: Fri 02 Jan 2026 08:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211080 IP address blocks: 185.182.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b4:7c:bb:75:75:92:69:63:41:a8:db:74:f4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8 Validity Not Before: Jan 2 08:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f8529024745f1bf37f4de381531cd87e802e79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:62:ee:3c:0c:a9:6d:6b:85:bc:6b:19:f7: a2:a7:ed:9f:63:7c:43:de:cc:ae:8b:4f:20:24:2f: d8:f6:00:c8:76:a8:04:bf:6e:95:e1:36:95:45:4b: 5a:59:d8:ab:0e:28:08:45:bb:82:66:3c:86:fd:4d: 13:4a:3e:b8:2f:00:2a:ce:18:71:5f:b1:35:f1:ba: 2e:ec:fd:e2:1a:24:ca:f7:52:02:ca:91:27:ee:a1: 5e:ce:f3:65:f7:62:c8:2f:bf:db:a3:aa:a6:00:cd: 12:c4:4e:82:ce:48:a2:f9:19:6f:9b:c5:0a:71:58: 5b:1d:96:29:5c:62:cd:21:ce:7e:78:25:21:5a:07: 07:8c:5f:d9:1f:28:a0:51:1f:7c:a6:d1:8d:50:ae: d9:06:9a:2b:f1:3a:7c:45:87:a1:b9:44:27:ff:9b: 2c:f0:4c:fd:d9:be:b8:bc:e3:6a:4d:0b:7d:da:67: d2:21:77:21:a7:88:4c:17:28:73:10:31:43:b5:98: ed:2d:08:26:66:cd:1d:33:46:b4:7e:0d:a9:ec:65: c3:1d:b8:c1:ba:91:1c:fa:47:4b:f5:26:29:57:3f: fe:91:4e:c4:2e:2a:69:ae:29:c8:e1:72:04:43:d7: 24:59:a4:9d:ae:ed:fc:2b:cd:d4:bc:2e:53:8c:f8: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:85:29:02:47:45:F1:BF:37:F4:DE:38:15:31:CD:87:E8:02:E7:9B X509v3 Authority Key Identifier: keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/L4UpAkdF8b839N44FTHNh-gC55s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.158.0/24 Signature Algorithm: sha256WithRSAEncryption ad:f5:9e:3a:55:fa:61:35:36:5d:e2:fe:c1:c0:50:4c:1e:14: d5:7f:7f:34:d8:5d:90:a3:95:4e:e5:60:f4:c7:01:f6:48:12: 67:84:09:ed:fd:8e:4f:db:b6:24:89:e8:9e:c6:3f:bb:e6:df: c2:47:4f:47:3f:e6:3a:ae:44:dd:4f:d0:87:c0:8c:2f:05:fd: 9f:8c:1a:1f:e0:71:83:3d:61:ca:41:0d:87:8b:21:5a:35:17: d5:e5:e4:8a:af:ce:76:6a:05:7a:59:7a:e5:93:e0:e5:0a:72: 0a:ed:75:10:d7:55:45:6e:c1:12:ea:99:2e:2c:fb:b6:1c:9b: 06:4a:e9:a9:d1:92:7d:08:1f:1e:a5:66:dc:85:ae:31:a0:75: ad:43:d8:7b:4c:5c:97:c0:a6:ce:f6:98:cc:19:52:d5:35:f6: 2a:c8:91:75:89:3b:4d:f9:b0:df:9d:5f:a0:7f:67:95:3d:13: 29:ec:a7:58:26:42:57:b4:7c:5b:1b:00:52:38:44:7f:bc:10: 72:be:57:f6:66:fa:08:0a:4c:85:4c:c1:af:b0:60:a5:c7:c4: 85:d8:11:e3:c8:48:d7:9c:0e:3a:ac:7e:b1:38:6e:c8:de:cc: ea:f9:04:cd:4f:5b:d6:52:3f:d8:26:21:9c:c6:1c:f2:42:f6: e2:55:e0:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrR8u3V1kmljQajbdPTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYzcxYzg2NDU5ZGU3NGJiZDM1YTNjY2JmZDhhZTVkOWNi NGQyZDgwHhcNMjYwMTAyMDgxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjg1MjkwMjQ3NDVmMWJmMzdmNGRlMzgxNTMxY2Q4N2U4MDJlNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Ji7jwMqW1rhbxrGfeip+2fY3xD 3syui08gJC/Y9gDIdqgEv26V4TaVRUtaWdirDigIRbuCZjyG/U0TSj64LwAqzhhx X7E18bou7P3iGiTK91ICypEn7qFezvNl92LIL7/bo6qmAM0SxE6Czkii+Rlvm8UK cVhbHZYpXGLNIc5+eCUhWgcHjF/ZHyigUR98ptGNUK7ZBpor8Tp8RYehuUQn/5ss 8Ez92b64vONqTQt92mfSIXchp4hMFyhzEDFDtZjtLQgmZs0dM0a0fg2p7GXDHbjB upEc+kdL9SYpVz/+kU7ELipprinI4XIEQ9ckWaSdru38K83UvC5TjPhItQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+FKQJHRfG/N/TeOBUxzYfoAuebMB8GA1UdIwQY MBaAFKPHHIZFnedLvTWjzL/Yrl2ctNLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTkt MDkxNGFkMjRhM2U0LzEvTDRVcEFrZEY4YjgzOU40NEZUSE5oLWdDNTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTktMDkxNGFkMjRhM2U0 LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubaeMA0G CSqGSIb3DQEBCwUAA4IBAQCt9Z46VfphNTZd4v7BwFBMHhTVf3802F2Qo5VO5WD0 xwH2SBJnhAnt/Y5P27Ykieiexj+75t/CR09HP+Y6rkTdT9CHwIwvBf2fjBof4HGD PWHKQQ2HiyFaNRfV5eSKr852agV6WXrlk+DlCnIK7XUQ11VFbsES6pkuLPu2HJsG Sump0ZJ9CB8epWbcha4xoHWtQ9h7TFyXwKbO9pjMGVLVNfYqyJF1iTtN+bDfnV+g f2eVPRMp7KdYJkJXtHxbGwBSOER/vBByvlf2ZvoICkyFTMGvsGClx8SF2BHjyEjX nA46rH6xOG7I3szq+QTNT1vWUj/YJiGcxhzyQvbiVeCi -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:15 2026 by rpki-client