This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/r4pIacnAe2D-JYQIftRnotqD1wA.roa File: r4pIacnAe2D-JYQIftRnotqD1wA.roa (raw, json) Hash identifier: eaVNQg7BOR5lgnv8gywl/1AkyppXss9dVOIpa7LgtUE= Subject key identifier: AF:8A:48:69:C9:C0:7B:60:FE:25:84:08:7E:D4:67:A2:DA:83:D7:00 Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e Certificate serial: 019B7F83E58B54AD412661EDBEE747506DC3 Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/r4pIacnAe2D-JYQIftRnotqD1wA.roa Signing time: Fri 02 Jan 2026 16:21:48 +0000 ROA not before: Fri 02 Jan 2026 16:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199708 IP address blocks: 185.48.200.0/23 maxlen: 23 185.48.201.0/24 maxlen: 24 185.48.202.0/23 maxlen: 23 185.48.203.0/24 maxlen: 24 2a04:b280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e5:8b:54:ad:41:26:61:ed:be:e7:47:50:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e Validity Not Before: Jan 2 16:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af8a4869c9c07b60fe2584087ed467a2da83d700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:80:c2:35:ee:05:dc:a7:2e:70:70:c5:0b: 14:71:d8:4a:85:ec:eb:14:61:16:02:35:b0:83:f0: ef:9e:33:fb:15:ad:b1:44:97:6c:b5:76:3a:70:d9: 2f:1e:8c:f5:76:77:c5:8f:72:e3:c1:97:ac:1d:27: da:4f:9c:32:5f:9f:50:1f:f0:1d:b4:56:64:80:38: cc:38:a5:dc:1e:48:fa:bc:7f:ef:08:b3:85:5e:11: 87:a8:16:81:92:b4:90:ea:d4:72:05:90:87:aa:59: ac:10:0a:20:18:ca:bc:50:6b:2a:6e:2f:a4:be:f7: f7:53:bc:4c:6f:a4:fe:a9:4d:b7:2d:c8:8e:b6:e7: 65:62:6c:b1:7a:ad:00:9f:47:29:11:6f:1e:e5:7f: ce:b3:e1:0a:db:b4:8f:bc:e8:5c:fe:f2:0c:64:49: 1b:4e:9c:c5:92:b5:39:c3:d8:08:84:ef:b4:11:9e: 77:6a:de:06:f1:85:22:09:bf:97:45:79:43:26:c6: d2:02:25:40:ee:98:91:f0:7d:c6:cb:d5:e1:46:80: c4:a1:9f:39:9c:30:e1:d9:2b:6d:8e:57:a4:6b:c4: 4b:51:72:35:b8:95:95:4e:d6:f1:3f:7d:a2:5f:a3: 98:4d:35:90:69:91:1a:44:2a:8e:fd:4e:28:57:13: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:48:69:C9:C0:7B:60:FE:25:84:08:7E:D4:67:A2:DA:83:D7:00 X509v3 Authority Key Identifier: keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/r4pIacnAe2D-JYQIftRnotqD1wA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.200.0/22 IPv6: 2a04:b280::/29 Signature Algorithm: sha256WithRSAEncryption ad:79:c1:1f:61:50:fa:a5:50:eb:44:3a:61:ec:be:73:95:db: fc:42:0d:80:34:f1:af:6e:ba:51:d0:fb:59:22:4d:8c:26:de: d2:98:c7:85:70:d0:2d:a2:59:a0:77:6b:c0:86:35:7e:49:5c: 80:9b:b7:7d:6d:04:e5:2e:6e:83:85:4b:46:5e:4b:6a:64:22: 2e:06:ed:08:28:03:99:bb:e1:22:eb:11:32:d6:c1:9c:7f:91: 61:af:b8:57:b5:5a:f9:01:72:b7:16:2f:cc:65:c7:f3:2c:c5: f4:f8:27:53:31:55:2f:2a:4a:f6:e0:05:47:a0:ce:6d:2b:55: 96:4b:a6:69:83:d8:a9:42:38:37:ff:1b:ed:d3:f2:30:85:8d: 01:2a:ae:c5:3a:0b:0a:f8:7a:f0:73:80:d0:77:f1:87:16:ee: db:3f:c6:4a:47:a1:e6:55:2d:2c:33:8b:0d:9a:61:df:1f:57: b1:5f:aa:a9:ad:39:a9:d1:ea:4f:40:b8:d3:c6:29:d5:27:d0: 56:b7:60:28:5c:99:ba:fa:b1:f1:d8:89:59:8b:a7:85:7a:98: 8a:f5:aa:36:eb:37:02:63:bd:78:c1:fe:45:e7:b9:fe:19:3d: 83:eb:4e:86:dd:3f:7d:08:f2:dd:11:57:f9:43:50:b0:49:33: a4:f2:fe:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g+WLVK1BJmHtvudHUG3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNGJkZDllOTdmMjEwMzcwY2MzMDEyNTdhYzE1ZmFlYjhm YTUyNGUwHhcNMjYwMTAyMTYyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjhhNDg2OWM5YzA3YjYwZmUyNTg0MDg3ZWQ0NjdhMmRhODNkNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wWAwjXuBdynLnBwxQsUcdhKhezr FGEWAjWwg/DvnjP7Fa2xRJdstXY6cNkvHoz1dnfFj3LjwZesHSfaT5wyX59QH/Ad tFZkgDjMOKXcHkj6vH/vCLOFXhGHqBaBkrSQ6tRyBZCHqlmsEAogGMq8UGsqbi+k vvf3U7xMb6T+qU23LciOtudlYmyxeq0An0cpEW8e5X/Os+EK27SPvOhc/vIMZEkb TpzFkrU5w9gIhO+0EZ53at4G8YUiCb+XRXlDJsbSAiVA7piR8H3Gy9XhRoDEoZ85 nDDh2Sttjleka8RLUXI1uJWVTtbxP32iX6OYTTWQaZEaRCqO/U4oVxNdAQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK+KSGnJwHtg/iWECH7UZ6Lag9cAMB8GA1UdIwQY MBaAFKxL3Z6X8hA3DMMBJXrBX664+lJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQt MTRiMGU4YzRlOGU3LzEvcjRwSWFjbkFlMkQtSllRSWZ0Um5vdHFEMXdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQtMTRiMGU4YzRlOGU3 LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTDIMA0E AgACMAcDBQMqBLKAMA0GCSqGSIb3DQEBCwUAA4IBAQCtecEfYVD6pVDrRDph7L5z ldv8Qg2ANPGvbrpR0PtZIk2MJt7SmMeFcNAtolmgd2vAhjV+SVyAm7d9bQTlLm6D hUtGXktqZCIuBu0IKAOZu+Ei6xEy1sGcf5Fhr7hXtVr5AXK3Fi/MZcfzLMX0+CdT MVUvKkr24AVHoM5tK1WWS6Zpg9ipQjg3/xvt0/IwhY0BKq7FOgsK+Hrwc4DQd/GH Fu7bP8ZKR6HmVS0sM4sNmmHfH1exX6qprTmp0epPQLjTxinVJ9BWt2AoXJm6+rHx 2IlZi6eFepiK9ao26zcCY714wf5F57n+GT2D606G3T99CPLdEVf5Q1CwSTOk8v6d -----END CERTIFICATE-----Generated at Tue Feb 3 00:08:02 2026 by rpki-client