This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/4xId8u9b8q-lFzit0aeMYHf1aos.roa File: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (raw, json) Hash identifier: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE= Subject key identifier: E3:12:1D:F2:EF:5B:F2:AF:A5:17:38:AD:D1:A7:8C:60:77:F5:6A:8B Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406 Certificate serial: 019B7F851D690AC4190FDD14E959A92126D5 Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/4xId8u9b8q-lFzit0aeMYHf1aos.roa Signing time: Fri 02 Jan 2026 16:23:08 +0000 ROA not before: Fri 02 Jan 2026 16:23:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 185.104.28.0/22 maxlen: 24 2a06:2ec0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1d:69:0a:c4:19:0f:dd:14:e9:59:a9:21:26:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406 Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3121df2ef5bf2afa51738add1a78c6077f56a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:bb:0e:62:2d:f5:b5:ac:d0:dd:8a:1e:58: 36:9c:ca:04:a2:51:3c:39:ca:2e:45:ba:63:30:6c: ed:e1:48:46:36:95:db:81:c1:91:da:c1:db:43:81: 87:56:19:e5:49:0d:07:16:9f:ac:28:6b:91:da:e5: 90:a2:34:65:cb:03:33:9a:9d:f8:39:d5:1d:b1:48: 8e:cb:b1:be:20:2d:a9:34:2d:28:9e:22:9e:b9:14: c4:31:3b:9e:f9:6b:ef:43:1e:eb:e4:e0:c4:05:4b: a4:31:6f:ea:7a:a3:e1:31:0c:11:8d:27:04:ed:cd: b6:da:09:71:bf:95:91:a5:d2:e6:99:67:f0:12:22: 55:ec:3c:9d:cf:d3:82:44:f9:7d:a6:b5:43:f2:31: 8f:db:a3:2d:96:8d:77:21:dc:02:8b:ef:5f:8e:de: c0:5d:96:70:25:0d:43:d3:ad:98:c1:9c:66:35:d1: 22:bf:cb:32:06:7a:12:74:a7:60:b8:44:c3:63:dd: 12:29:72:39:fc:b3:6b:02:b7:31:c1:bb:21:fe:ef: c0:e0:a0:f2:20:2e:d8:9b:03:75:bf:63:a2:0c:f7: 0d:32:02:bb:8d:a3:5d:a9:a1:2e:30:e2:74:c2:5a: 94:6a:e0:26:74:62:ad:74:d3:73:2d:38:f1:5b:a2: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:12:1D:F2:EF:5B:F2:AF:A5:17:38:AD:D1:A7:8C:60:77:F5:6A:8B X509v3 Authority Key Identifier: keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/4xId8u9b8q-lFzit0aeMYHf1aos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.28.0/22 IPv6: 2a06:2ec0::/29 Signature Algorithm: sha256WithRSAEncryption b0:0c:6b:2d:f7:b9:13:9e:76:cb:45:30:b0:20:1c:5a:a3:15: b6:d2:0e:46:1b:f0:d3:ea:9e:a7:83:2a:0e:86:cb:bb:cd:2b: c6:37:45:dc:d6:99:43:d4:02:91:f4:80:62:d7:c2:1c:be:92: 9d:c6:f5:05:76:55:36:a1:c2:fb:ed:f4:3d:2b:75:b9:82:d8: e7:74:12:27:00:d2:63:71:c2:bf:17:12:9e:96:ba:0b:35:0b: 71:d7:80:5e:f8:62:7d:51:fd:43:a6:16:f1:53:3d:57:34:eb: 71:c3:0b:f6:63:a0:5d:29:29:e5:5f:9b:13:42:6e:71:17:9d: 7c:78:b6:9d:0c:12:fd:80:81:fc:8e:0d:4d:1a:05:cc:f7:27: 40:74:0e:ff:06:e4:89:97:99:8c:ae:c6:1a:11:9d:27:cd:08: a3:f4:e1:0d:b9:bb:46:14:6b:9c:7b:60:63:93:5e:17:9c:e2: 69:41:2e:25:ed:11:82:2d:4e:e8:19:b3:1f:76:95:bb:13:22: 66:c8:12:96:b5:b0:1f:83:ab:4b:2f:7f:ca:77:fa:bb:a4:9c: 9e:b8:d5:b7:57:3f:1e:aa:a0:7d:89:7a:88:15:d7:94:51:d4: 12:60:16:bb:06:de:15:54:1f:11:6a:82:41:75:de:44:e6:02: 7b:dc:05:a6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hR1pCsQZD90U6VmpISbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh MWY0MDYwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzEyMWRmMmVmNWJmMmFmYTUxNzM4YWRkMWE3OGM2MDc3ZjU2YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBO7DmIt9bWs0N2KHlg2nMoEolE8 OcouRbpjMGzt4UhGNpXbgcGR2sHbQ4GHVhnlSQ0HFp+sKGuR2uWQojRlywMzmp34 OdUdsUiOy7G+IC2pNC0oniKeuRTEMTue+WvvQx7r5ODEBUukMW/qeqPhMQwRjScE 7c222glxv5WRpdLmmWfwEiJV7Dydz9OCRPl9prVD8jGP26Mtlo13IdwCi+9fjt7A XZZwJQ1D062YwZxmNdEiv8syBnoSdKdguETDY90SKXI5/LNrArcxwbsh/u/A4KDy IC7YmwN1v2OiDPcNMgK7jaNdqaEuMOJ0wlqUauAmdGKtdNNzLTjxW6KV7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOMSHfLvW/KvpRc4rdGnjGB39WqLMB8GA1UdIwQY MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt MGM2NGRlYmU5ZWM0LzEvNHhJZDh1OWI4cS1sRnppdDBhZU1ZSGYxYW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0 LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWgcMA0E AgACMAcDBQMqBi7AMA0GCSqGSIb3DQEBCwUAA4IBAQCwDGst97kTnnbLRTCwIBxa oxW20g5GG/DT6p6ngyoOhsu7zSvGN0Xc1plD1AKR9IBi18IcvpKdxvUFdlU2ocL7 7fQ9K3W5gtjndBInANJjccK/FxKelroLNQtx14Be+GJ9Uf1DphbxUz1XNOtxwwv2 Y6BdKSnlX5sTQm5xF518eLadDBL9gIH8jg1NGgXM9ydAdA7/BuSJl5mMrsYaEZ0n zQij9OENubtGFGuce2Bjk14XnOJpQS4l7RGCLU7oGbMfdpW7EyJmyBKWtbAfg6tL L3/Kd/q7pJyeuNW3Vz8eqqB9iXqIFdeUUdQSYBa7Bt4VVB8RaoJBdd5E5gJ73AWm -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:38 2026 by rpki-client