This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/4uZV0ecDQCsLSsVXEupDSaa2T3I.roa File: 4uZV0ecDQCsLSsVXEupDSaa2T3I.roa (raw, json) Hash identifier: MAPL4inDc1NqzrZUNgjEgak9EE9tXeKLQhKgPP9NyZc= Subject key identifier: E2:E6:55:D1:E7:03:40:2B:0B:4A:C5:57:12:EA:43:49:A6:B6:4F:72 Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209 Certificate serial: 019B7DCAD5560EB6D7F2C8AEF8E4DE97D963 Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/4uZV0ecDQCsLSsVXEupDSaa2T3I.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209171 IP address blocks: 2.58.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d5:56:0e:b6:d7:f2:c8:ae:f8:e4:de:97:d9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e655d1e703402b0b4ac55712ea4349a6b64f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:d2:a7:0d:13:b5:99:a3:42:51:11:d0:bf: c4:8a:cf:00:95:39:85:be:01:84:ae:a7:c3:99:ad: 0e:3c:4d:41:ad:23:5f:8e:8e:fc:fe:0d:c4:2c:38: 1a:17:10:21:6b:19:15:29:58:02:bf:73:36:88:b7: 03:ed:dc:0f:5f:6f:6c:df:50:b1:93:36:fd:75:8c: c7:8f:ae:27:b9:95:b5:be:d9:57:e9:c9:08:48:9e: cf:c3:5d:93:fa:68:ab:6d:c6:b1:2e:54:f5:6b:00: 02:9a:38:34:73:80:b3:ad:a8:0e:fb:33:cb:ce:93: e5:b2:f1:2b:de:03:26:bf:00:c3:e3:ef:7f:3a:3a: d6:2c:7b:90:1a:fd:81:86:ac:a3:15:ea:cd:08:4f: f8:bd:70:a4:73:44:38:dd:56:b2:41:a1:b9:10:14: 27:69:06:6e:4e:cc:04:0d:dd:9c:f8:b0:35:c3:5a: 49:e4:8f:73:87:11:c5:e9:f5:0c:6f:86:1e:be:d0: e4:40:67:eb:2c:6b:4f:1c:68:b8:50:ae:95:d9:ba: ed:af:4e:7b:d9:47:13:7f:54:b8:cb:4b:e5:70:7c: 99:5e:61:a2:e0:4a:41:74:ec:f6:c9:99:ee:ef:56: ca:37:e2:44:0a:0e:98:6c:3b:dd:05:0e:d3:52:70: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:55:D1:E7:03:40:2B:0B:4A:C5:57:12:EA:43:49:A6:B6:4F:72 X509v3 Authority Key Identifier: keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/4uZV0ecDQCsLSsVXEupDSaa2T3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.140.0/22 Signature Algorithm: sha256WithRSAEncryption 70:e7:ea:0c:3d:cb:1d:77:4f:9e:8b:d6:74:03:a9:52:2b:6a: 1e:18:47:ce:58:d9:aa:e0:2c:ca:f7:ba:7c:1c:9d:7b:fa:8f: 67:e5:51:a9:cc:96:ea:9c:d8:7e:f5:25:65:2c:6c:de:d9:2d: 47:d2:f3:33:6a:c2:6b:7b:fd:e5:9f:1e:57:7a:80:b4:e3:7f: b2:ce:3b:f6:17:1d:f4:c6:8b:ce:8a:b3:a7:5a:11:4f:32:1b: a5:56:13:c4:7e:2b:0b:74:89:0c:12:37:77:4a:c1:74:42:a4: 37:0a:e0:46:9b:f7:1b:93:67:0d:69:9d:3b:77:22:12:70:04: fe:2e:ed:94:73:73:a0:b4:6e:0c:f1:53:23:e0:e6:48:7c:e6: d5:30:f6:cf:38:c2:76:65:ef:56:7b:25:45:2a:88:17:c7:50: 6d:b0:75:4d:e1:6b:df:cc:b9:48:d0:70:ca:87:c9:0a:d8:29: 5f:20:1a:ea:b4:0f:1f:f3:84:da:50:cb:72:de:b4:a2:c1:e0: 99:c7:c3:3a:8a:39:3f:fa:40:f8:cc:58:07:9e:a8:69:dd:f6: 8d:b6:3d:15:6a:e6:c8:92:e6:14:e4:b0:15:77:c6:36:39:72: 4b:1a:e5:20:69:d2:74:25:0f:03:69:c3:f1:d1:4a:fd:47:d0: 0b:5e:e1:33 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9ytVWDrbX8siu+OTel9ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYjBhMjU4MTBkMDI2NDY2NTZmOTA5YzQ0ZWIyYmE5Mzlk MjMyMDkwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmU2NTVkMWU3MDM0MDJiMGI0YWM1NTcxMmVhNDM0OWE2YjY0ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47nSpw0TtZmjQlER0L/Eis8AlTmF vgGErqfDma0OPE1BrSNfjo78/g3ELDgaFxAhaxkVKVgCv3M2iLcD7dwPX29s31Cx kzb9dYzHj64nuZW1vtlX6ckISJ7Pw12T+mirbcaxLlT1awACmjg0c4CzragO+zPL zpPlsvEr3gMmvwDD4+9/OjrWLHuQGv2BhqyjFerNCE/4vXCkc0Q43VayQaG5EBQn aQZuTswEDd2c+LA1w1pJ5I9zhxHF6fUMb4YevtDkQGfrLGtPHGi4UK6V2brtr057 2UcTf1S4y0vlcHyZXmGi4EpBdOz2yZnu71bKN+JECg6YbDvdBQ7TUnBeSwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOLmVdHnA0ArC0rFVxLqQ0mmtk9yMB8GA1UdIwQY MBaAFPuwolgQ0CZGZW+QnETrK6k50jIJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03Q2lXQkRRSmtabGI1Q2NST3NycVRuU01nay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMzRjYzEyLWM4MjQtNDQ5OS1hNWFm LTI5ZWYxNzU0MDIyMi8xLzR1WlYwZWNEUUNzTFNzVlhFdXBEU2FhMlQzSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODYvMzRjYzEyLWM4MjQtNDQ5OS1hNWFmLTI5ZWYxNzU0MDIy Mi8xLzEtN0NpV0JEUUprWmxiNUNjUk9zcnFUblNNZ2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAICOoww DQYJKoZIhvcNAQELBQADggEBAHDn6gw9yx13T56L1nQDqVIrah4YR85Y2argLMr3 unwcnXv6j2flUanMluqc2H71JWUsbN7ZLUfS8zNqwmt7/eWfHld6gLTjf7LOO/YX HfTGi86Ks6daEU8yG6VWE8R+Kwt0iQwSN3dKwXRCpDcK4Eab9xuTZw1pnTt3IhJw BP4u7ZRzc6C0bgzxUyPg5kh85tUw9s84wnZl71Z7JUUqiBfHUG2wdU3ha9/MuUjQ cMqHyQrYKV8gGuq0Dx/zhNpQy3LetKLB4JnHwzqKOT/6QPjMWAeeqGnd9o22PRVq 5siS5hTksBV3xjY5cksa5SBp0nQlDwNpw/HRSv1H0Ate4TM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:42 2026 by rpki-client