This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/4uNnt1OJCwXtGEItgS6NtJuR4oA.roa File: 4uNnt1OJCwXtGEItgS6NtJuR4oA.roa (raw, json) Hash identifier: gAZN3s4yjtn5ayJ9SQSEa16uGCJ0bKN5TqseIGhBElA= Subject key identifier: E2:E3:67:B7:53:89:0B:05:ED:18:42:2D:81:2E:8D:B4:9B:91:E2:80 Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7 Certificate serial: 019B7E37C0DA4D23D14E32481928A812A34A Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/4uNnt1OJCwXtGEItgS6NtJuR4oA.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60015 IP address blocks: 185.54.64.0/24 maxlen: 24 185.54.65.0/24 maxlen: 24 185.54.66.0/24 maxlen: 24 185.54.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c0:da:4d:23:d1:4e:32:48:19:28:a8:12:a3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7 Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e367b753890b05ed18422d812e8db49b91e280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:56:f6:86:b3:0b:f8:19:58:28:9a:dc:d7: 64:68:0c:f5:d8:72:59:24:46:cd:21:d8:51:9f:9c: 4f:54:72:4d:1b:be:2c:ea:54:09:49:b7:e1:2c:18: 1c:2e:27:f6:81:cf:3b:13:cc:1b:ee:4f:9b:5c:e8: c0:4f:66:a9:00:c4:9b:06:eb:c5:d7:b3:42:92:c4: 1f:db:ca:5e:03:48:4f:9f:86:9a:b0:80:27:78:93: 06:b1:e3:48:77:96:a7:51:53:a9:cf:04:2c:49:ae: 76:92:d8:df:0f:ac:65:2e:1c:ac:cb:64:08:d6:49: 3a:19:48:dd:a0:91:0a:c3:15:4f:7b:8f:51:4d:23: 0f:d4:6a:40:0e:97:b8:42:ea:a8:57:07:5c:ea:0b: 75:26:c7:be:99:d7:98:ba:1d:b1:05:b8:fa:7b:11: 79:02:a7:8b:8d:15:e9:fa:b9:8d:44:52:6a:6a:78: 2b:84:9c:f1:04:ca:44:82:e3:f0:e6:8f:ed:d8:08: b1:ba:c4:6a:51:fd:8b:a8:4d:b9:5c:67:3d:26:75: b5:58:62:26:c5:93:dd:61:bf:03:a4:04:c3:40:2e: cc:26:91:c4:77:9d:c1:e9:c3:01:48:0d:7c:11:c9: c4:e4:a2:02:a9:0e:45:62:33:48:92:f8:24:ed:a4: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E3:67:B7:53:89:0B:05:ED:18:42:2D:81:2E:8D:B4:9B:91:E2:80 X509v3 Authority Key Identifier: keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/4uNnt1OJCwXtGEItgS6NtJuR4oA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.64.0/22 Signature Algorithm: sha256WithRSAEncryption 84:bf:c8:cd:a0:95:e0:21:53:1b:98:bd:22:26:ac:e8:ec:b6: eb:43:d1:e2:3f:d3:f9:f0:17:11:4d:69:e5:87:c0:4f:e1:2c: e6:26:04:41:10:33:8f:2a:99:d4:8e:7b:f4:07:14:37:1e:8f: d8:94:8b:f4:0a:df:21:ea:3f:6e:60:f9:c9:c3:16:e8:ed:33: a4:28:72:f2:6e:21:ef:e0:96:e1:2e:0d:e4:2e:0b:f1:49:1b: 03:0b:48:d5:ac:5a:9e:aa:c1:aa:18:54:87:d2:56:54:a9:62: d3:37:e0:c3:ea:ce:a3:2e:d6:cd:c4:7c:f1:e2:b2:1e:77:50: f1:04:44:f0:1e:d1:25:ff:fd:5d:e3:dc:3c:42:57:ae:20:5e: 54:8f:20:68:9a:35:f9:bd:c2:8c:56:6b:b9:f3:4c:1a:27:35: b4:52:d1:f4:11:5d:7b:e9:80:55:54:48:7e:96:aa:87:9b:08: ec:6c:9c:4d:11:62:47:a0:0e:b8:71:e6:18:13:cc:46:00:cf: 17:07:9d:71:ee:72:4a:45:90:a7:e5:40:25:e7:2f:24:26:5a: 93:da:88:7e:23:4b:24:5b:6b:0b:ee:a5:4d:80:d8:52:62:57: 71:c2:05:2a:e5:47:72:17:66:a2:ab:32:bf:cd:0e:aa:c7:3e: cb:be:4b:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8DaTSPRTjJIGSioEqNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZTQ0M2Y5YWU5OGFjYWZkZGQ2MTYyZDVjOGViMGY5NDE5 YTA1ZjcwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmUzNjdiNzUzODkwYjA1ZWQxODQyMmQ4MTJlOGRiNDliOTFlMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveBW9oazC/gZWCia3NdkaAz12HJZ JEbNIdhRn5xPVHJNG74s6lQJSbfhLBgcLif2gc87E8wb7k+bXOjAT2apAMSbBuvF 17NCksQf28peA0hPn4aasIAneJMGseNId5anUVOpzwQsSa52ktjfD6xlLhysy2QI 1kk6GUjdoJEKwxVPe49RTSMP1GpADpe4QuqoVwdc6gt1Jse+mdeYuh2xBbj6exF5 AqeLjRXp+rmNRFJqangrhJzxBMpEguPw5o/t2AixusRqUf2LqE25XGc9JnW1WGIm xZPdYb8DpATDQC7MJpHEd53B6cMBSA18EcnE5KICqQ5FYjNIkvgk7aT/HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLjZ7dTiQsF7RhCLYEujbSbkeKAMB8GA1UdIwQY MBaAFKvkQ/mumKyv3dYWLVyOsPlBmgX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUt MDQ0YjY4NmJjOTdmLzEvNHVObnQxT0pDd1h0R0VJdGdTNk50SnVSNG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUtMDQ0YjY4NmJjOTdm LzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTZAMA0G CSqGSIb3DQEBCwUAA4IBAQCEv8jNoJXgIVMbmL0iJqzo7LbrQ9HiP9P58BcRTWnl h8BP4SzmJgRBEDOPKpnUjnv0BxQ3Ho/YlIv0Ct8h6j9uYPnJwxbo7TOkKHLybiHv 4JbhLg3kLgvxSRsDC0jVrFqeqsGqGFSH0lZUqWLTN+DD6s6jLtbNxHzx4rIed1Dx BETwHtEl//1d49w8QleuIF5UjyBomjX5vcKMVmu580waJzW0UtH0EV176YBVVEh+ lqqHmwjsbJxNEWJHoA64ceYYE8xGAM8XB51x7nJKRZCn5UAl5y8kJlqT2oh+I0sk W2sL7qVNgNhSYldxwgUq5UdyF2aiqzK/zQ6qxz7Lvkv3 -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:14 2026 by rpki-client