This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4Ja60_Ob1qyQ36cA5voSc2uJesU.roa File: 4Ja60_Ob1qyQ36cA5voSc2uJesU.roa (raw, json) Hash identifier: phe7oxYicIsE5Su+Fgz6QVulHqYmo2k2ps7HRljB/84= Subject key identifier: E0:96:BA:D3:F3:9B:D6:AC:90:DF:A7:00:E6:FA:12:73:6B:89:7A:C5 Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0 Certificate serial: 019B775969FCE22E4AB888B8A480E0057FC5 Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4Ja60_Ob1qyQ36cA5voSc2uJesU.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59720 IP address blocks: 185.5.232.0/22 maxlen: 24 185.5.232.0/24 maxlen: 24 185.5.233.0/24 maxlen: 24 185.5.234.0/24 maxlen: 24 185.5.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:69:fc:e2:2e:4a:b8:88:b8:a4:80:e0:05:7f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e096bad3f39bd6ac90dfa700e6fa12736b897ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:72:08:ab:31:1d:93:e1:88:32:4a:b8:bb: ca:fa:42:a3:44:96:c9:10:29:3b:98:b9:3b:65:bb: 9b:79:67:e8:ee:a2:c5:2b:3b:77:be:65:c9:16:45: 50:db:f7:08:df:ff:e5:83:42:8b:b8:91:cb:f9:ce: 52:b8:b0:41:a9:c3:a0:ab:ac:11:f1:ac:ad:c8:fb: 92:61:f7:e1:8d:f3:94:bb:d6:dc:20:b3:73:f8:16: 98:5d:3c:fc:f5:48:ab:73:e9:2c:ae:73:4f:ba:cb: bb:4b:95:a0:7c:42:1b:25:82:f5:ed:21:a4:40:10: fc:3b:a7:8a:81:d4:18:06:7a:9a:59:21:44:2b:06: d3:98:d3:8e:ad:a1:25:98:93:03:81:92:a0:c2:0a: 1f:ca:88:4f:11:4c:8d:19:a1:a7:a4:bd:a0:29:b1: d8:62:c3:aa:3d:fc:d0:7d:ee:3f:28:7a:8b:b3:57: 70:01:4b:e2:95:0e:cd:6f:0d:d5:2f:80:96:a3:02: d0:f3:b5:3a:81:56:7c:7c:cf:a9:62:df:9e:b9:02: 87:d6:3a:e5:e3:cd:ba:86:e2:18:8c:13:3f:1c:bf: ba:0a:03:6f:d1:fa:22:22:9e:51:fe:41:11:e5:ae: 31:3b:56:7f:3d:72:87:98:ca:b0:64:6c:1d:25:ec: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:96:BA:D3:F3:9B:D6:AC:90:DF:A7:00:E6:FA:12:73:6B:89:7A:C5 X509v3 Authority Key Identifier: keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4Ja60_Ob1qyQ36cA5voSc2uJesU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.5.232.0/22 Signature Algorithm: sha256WithRSAEncryption 12:9c:cc:b2:53:65:13:80:e2:99:26:06:5c:2f:28:c1:a6:6b: ce:34:b9:80:c4:11:2b:25:d6:6e:b5:4a:21:a5:d2:5b:5b:a4: f2:e0:cf:d8:52:e8:c0:8e:80:1f:4a:e4:a5:02:bb:ff:7b:98: ca:bf:c2:45:4b:dc:f0:39:d6:ed:cf:33:a7:e1:5b:80:29:8f: bd:cc:98:79:29:ce:76:c7:87:5c:83:36:eb:4d:0a:38:c6:d1: 31:2d:ec:e7:aa:ba:1f:1e:89:61:97:e2:b3:ff:05:d1:a2:11: 6f:f9:e2:b5:f3:38:21:27:b2:2a:77:c2:64:02:41:38:4e:76: 61:9a:be:e2:08:08:bb:2a:45:0f:e0:d3:cc:4e:0f:6a:3a:91: ad:de:47:85:01:3c:d8:20:f6:96:fa:d8:73:b0:44:4d:54:00: 66:e5:d5:db:04:10:39:04:ad:a9:b7:64:ca:5d:07:52:1d:bf: 7c:a5:45:d0:7c:1e:9d:64:3b:d5:b6:b5:44:f9:aa:5d:72:63: b1:32:dd:7b:93:83:c2:02:6b:37:36:ee:52:94:c3:da:c1:3a: 6c:16:d5:05:18:02:fc:2e:24:25:45:b1:cc:06:d1:87:a9:11: 8e:ba:05:1a:01:c9:5c:b6:34:9d:57:de:97:c9:a7:f8:3c:73: 75:4a:26:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWn84i5KuIi4pIDgBX/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5 ZTViZTAwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDk2YmFkM2YzOWJkNmFjOTBkZmE3MDBlNmZhMTI3MzZiODk3YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWJyCKsxHZPhiDJKuLvK+kKjRJbJ ECk7mLk7ZbubeWfo7qLFKzt3vmXJFkVQ2/cI3//lg0KLuJHL+c5SuLBBqcOgq6wR 8aytyPuSYffhjfOUu9bcILNz+BaYXTz89Uirc+ksrnNPusu7S5WgfEIbJYL17SGk QBD8O6eKgdQYBnqaWSFEKwbTmNOOraElmJMDgZKgwgofyohPEUyNGaGnpL2gKbHY YsOqPfzQfe4/KHqLs1dwAUvilQ7Nbw3VL4CWowLQ87U6gVZ8fM+pYt+euQKH1jrl 4826huIYjBM/HL+6CgNv0foiIp5R/kER5a4xO1Z/PXKHmMqwZGwdJezOuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCWutPzm9askN+nAOb6EnNriXrFMB8GA1UdIwQY MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt OTNiNTc4ZDE4YzhjLzEvNEphNjBfT2IxcXlRMzZjQTV2b1NjMnVKZXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQXoMA0G CSqGSIb3DQEBCwUAA4IBAQASnMyyU2UTgOKZJgZcLyjBpmvONLmAxBErJdZutUoh pdJbW6Ty4M/YUujAjoAfSuSlArv/e5jKv8JFS9zwOdbtzzOn4VuAKY+9zJh5Kc52 x4dcgzbrTQo4xtExLeznqrofHolhl+Kz/wXRohFv+eK18zghJ7Iqd8JkAkE4TnZh mr7iCAi7KkUP4NPMTg9qOpGt3keFATzYIPaW+thzsERNVABm5dXbBBA5BK2pt2TK XQdSHb98pUXQfB6dZDvVtrVE+apdcmOxMt17k4PCAms3Nu5SlMPawTpsFtUFGAL8 LiQlRbHMBtGHqRGOugUaAclctjSdV96Xyaf4PHN1SiZf -----END CERTIFICATE-----Generated at Mon Jan 26 20:13:31 2026 by rpki-client