This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/s4KA3DwYrQJUsZJrjPBP7stbDkA.roa File: s4KA3DwYrQJUsZJrjPBP7stbDkA.roa (raw, json) Hash identifier: C4D/As4F5fcHYHPJJ6R95R5HyZ/76PW92tetLSNxy3s= Subject key identifier: B3:82:80:DC:3C:18:AD:02:54:B1:92:6B:8C:F0:4F:EE:CB:5B:0E:40 Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d Certificate serial: 019B791109556394DB032F1349F5055D547E Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/s4KA3DwYrQJUsZJrjPBP7stbDkA.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 149.236.0.0/16 maxlen: 16 149.236.0.0/17 maxlen: 17 149.236.9.0/24 maxlen: 24 149.236.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:09:55:63:94:db:03:2f:13:49:f5:05:5d:54:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38280dc3c18ad0254b1926b8cf04feecb5b0e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:07:f8:f8:a4:ee:dc:75:5c:27:57:e7:3f: 1a:fb:08:79:c8:27:7e:48:7a:5e:00:26:58:ed:80: 17:a5:f1:b7:4f:e7:1c:c2:c5:1e:6b:c6:83:e2:25: c6:de:60:bb:f5:2b:f9:8c:b4:4d:cb:6f:65:cc:9e: 58:c7:75:3b:a2:ba:32:bf:87:31:da:13:15:cb:a2: b0:42:b1:cc:a2:28:9f:a0:7b:0f:40:e6:c3:80:11: ac:7b:d1:b2:94:ae:69:d3:c0:92:86:d1:19:27:1c: 77:88:75:85:f2:83:6c:a1:c1:99:b2:40:aa:45:97: 24:34:03:d9:7a:0f:8a:84:ba:67:4a:2a:9c:a5:e9: ae:4e:ca:ab:c2:18:01:56:1f:cc:32:a2:28:c1:c6: 05:37:28:b4:f4:e4:68:ac:08:60:19:27:e2:c1:a0: ea:43:d5:14:08:5c:52:61:bc:a4:46:ce:fb:f4:e7: b8:6b:79:2d:c6:7e:d2:70:24:d6:f2:d0:5c:02:c4: 2e:4b:e4:36:06:de:75:69:b9:ea:e4:db:9e:7a:b2: ff:9a:0c:52:ad:fc:97:5f:6f:25:e5:4b:fa:27:55: 1d:02:7b:53:3f:20:17:73:2d:de:da:b2:08:7d:09: c0:13:55:80:3f:34:1e:f8:76:33:5f:ae:4a:87:1d: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:82:80:DC:3C:18:AD:02:54:B1:92:6B:8C:F0:4F:EE:CB:5B:0E:40 X509v3 Authority Key Identifier: keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/s4KA3DwYrQJUsZJrjPBP7stbDkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:1b:51:8c:50:7b:c3:e4:8a:b5:3c:a3:6d:ec:55:ee:50:fd: d9:dd:71:cd:b8:b2:d9:89:fe:97:0e:aa:ee:bc:31:9f:0b:60: 3e:4b:8e:79:51:b8:d4:d9:40:8e:b6:58:80:0d:2f:f3:cf:4a: 8a:8e:e3:12:0d:cd:11:c6:e2:e2:94:a5:ca:b8:b8:83:3b:9c: f2:e8:86:1f:2c:0f:54:81:e9:27:ed:a0:19:9a:8b:b4:68:7d: ee:5b:c2:e3:c6:79:45:3f:4c:54:2c:ae:a1:88:71:98:18:fc: 85:4a:c3:9e:68:d6:b7:62:ff:0c:2e:26:04:c4:ef:d2:39:d1: 2d:25:bf:24:fa:6a:59:53:6d:ab:83:82:79:15:cf:22:dd:f4: 0c:6f:57:0f:3c:7b:c6:8d:1c:3b:c0:76:81:bf:db:44:a2:4d: c6:34:58:55:72:9c:3c:84:13:aa:01:41:8a:b9:a2:10:08:4d: 15:86:8a:12:db:29:bb:6c:64:5a:8c:87:cf:e6:af:c0:18:50: 58:d4:21:ef:02:8c:b6:3a:0f:84:46:65:a0:81:2a:3a:55:2e: 01:cb:6a:da:0e:a9:a2:47:2f:97:70:a3:e2:d5:df:6a:ce:52: 83:66:02:d4:5e:f4:ad:64:d8:47:4e:a0:89:fe:f2:b5:24:93: ff:56:a9:75 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5EQlVY5TbAy8TSfUFXVR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzN2VkNjYwMmJjMjdmMTk2YTQ5ZWU0YjMwNmEwZmE2ZGVl OWQyOWQwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzgyODBkYzNjMThhZDAyNTRiMTkyNmI4Y2YwNGZlZWNiNWIwZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7sH+Pik7tx1XCdX5z8a+wh5yCd+ SHpeACZY7YAXpfG3T+ccwsUea8aD4iXG3mC79Sv5jLRNy29lzJ5Yx3U7oroyv4cx 2hMVy6KwQrHMoiifoHsPQObDgBGse9GylK5p08CShtEZJxx3iHWF8oNsocGZskCq RZckNAPZeg+KhLpnSiqcpemuTsqrwhgBVh/MMqIowcYFNyi09ORorAhgGSfiwaDq Q9UUCFxSYbykRs779Oe4a3ktxn7ScCTW8tBcAsQuS+Q2Bt51abnq5NueerL/mgxS rfyXX28l5Uv6J1UdAntTPyAXcy3e2rIIfQnAE1WAPzQe+HYzX65Khx27aQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFLOCgNw8GK0CVLGSa4zwT+7LWw5AMB8GA1UdIwQY MBaAFIN+1mArwn8ZaknuSzBqD6be6dKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzM3V1lDdkNmeGxxU2U1TE1Hb1BwdDdwMHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80Y2ZiOGMtMjBmMC00N2YxLThiODYt MjhlNjk3YzcxNWNhLzEvczRLQTNEd1lyUUpVc1pKcmpQQlA3c3RiRGtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80Y2ZiOGMtMjBmMC00N2YxLThiODYtMjhlNjk3YzcxNWNh LzEvZzM3V1lDdkNmeGxxU2U1TE1Hb1BwdDdwMHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlewwDQYJ KoZIhvcNAQELBQADggEBACAbUYxQe8PkirU8o23sVe5Q/dndcc24stmJ/pcOqu68 MZ8LYD5LjnlRuNTZQI62WIANL/PPSoqO4xINzRHG4uKUpcq4uIM7nPLohh8sD1SB 6SftoBmai7Rofe5bwuPGeUU/TFQsrqGIcZgY/IVKw55o1rdi/wwuJgTE79I50S0l vyT6allTbauDgnkVzyLd9AxvVw88e8aNHDvAdoG/20SiTcY0WFVynDyEE6oBQYq5 ohAITRWGihLbKbtsZFqMh8/mr8AYUFjUIe8CjLY6D4RGZaCBKjpVLgHLatoOqaJH L5dwo+LV32rOUoNmAtRe9K1k2EdOoIn+8rUkk/9WqXU= -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:32 2026 by rpki-client