This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa File: 4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa (raw, json) Hash identifier: QUBmzyJjWkqAkNmxTIkOKj9TlJBpwjA6voy4B8LR2j0= Subject key identifier: E2:DD:AE:03:87:BB:2E:D7:77:08:CC:67:37:AC:49:96:70:27:09:F1 Certificate issuer: /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3 Certificate serial: 019B7A5A7862B05AC0353D243E2596EADF0B Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa Signing time: Thu 01 Jan 2026 16:18:28 +0000 ROA not before: Thu 01 Jan 2026 16:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199895 IP address blocks: 185.37.12.0/24 maxlen: 24 185.37.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:78:62:b0:5a:c0:35:3d:24:3e:25:96:ea:df:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3 Validity Not Before: Jan 1 16:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ddae0387bb2ed77708cc6737ac4996702709f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:49:81:0d:1f:a8:a9:43:c7:5a:c1:dd:b7: c0:91:25:be:c9:ff:7b:4a:87:10:13:ea:ec:84:16: 03:61:80:38:98:ee:f1:25:06:b6:62:fd:a3:4d:93: c1:12:37:ff:da:48:96:97:b3:ea:3d:a6:1d:53:cc: 90:68:a7:6f:18:2f:08:45:ad:02:b0:ec:20:dc:56: 95:70:4a:e2:48:72:5e:b0:e3:48:a4:50:60:86:09: ed:f7:de:27:09:40:76:d9:dd:48:32:94:39:57:e9: 86:21:88:36:62:b6:5e:16:4f:e1:db:bf:ac:0f:c7: 61:08:91:3f:53:02:09:12:db:00:f0:e3:24:6f:ac: ac:e8:74:15:0c:07:61:42:be:6d:39:75:da:d7:4c: 8b:75:d9:de:6c:7c:b4:d5:f0:d5:35:0f:13:73:ff: 6c:d9:9e:36:e2:2c:e1:42:e8:7a:62:f2:8a:6d:3a: 9f:81:3b:8e:ef:98:28:f2:4b:31:8b:57:75:92:c0: 44:cb:11:0a:1c:60:b0:ca:1a:9a:a9:c6:65:c0:b3: 53:c0:d4:bd:d6:1a:0c:21:53:4f:1b:72:9c:b9:dd: 54:a1:7d:25:5a:20:39:a9:c5:9d:81:58:c3:81:83: 0f:50:10:32:4b:8b:34:b4:19:f4:d3:dd:ef:2e:39: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:AE:03:87:BB:2E:D7:77:08:CC:67:37:AC:49:96:70:27:09:F1 X509v3 Authority Key Identifier: keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/4t2uA4e7Ltd3CMxnN6xJlnAnCfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.12.0/23 Signature Algorithm: sha256WithRSAEncryption 40:06:14:26:cf:49:a5:7e:e7:e2:f8:cf:46:38:af:1c:67:67: 3a:f8:d0:8e:37:29:7d:36:1a:19:50:e4:f0:26:a1:f3:a1:b8: 94:20:68:5f:c9:ff:f4:57:42:f9:4d:25:0a:84:88:0a:5c:d3: 21:5b:35:6f:c9:de:31:3e:69:8a:ce:db:bd:f3:93:7d:b9:c2: a1:72:5e:e5:d5:d6:1e:1d:bf:23:6a:a4:a5:35:ca:78:8d:ba: 96:23:57:9d:17:8e:ff:2e:fa:16:60:ff:86:f0:90:d5:3e:3c: 45:8a:7c:a7:26:eb:8b:3a:65:f3:9b:45:8f:45:86:83:96:28: 8c:76:9f:13:5c:56:90:19:2d:5f:bb:5b:93:f4:fa:73:9a:fd: 12:a5:7b:66:28:c7:7f:a7:56:10:12:95:ca:ff:15:83:de:a5: 44:ad:ce:dd:bb:44:3f:24:46:7d:e2:fe:09:8d:78:97:e7:db: 92:22:18:a5:b7:3d:bc:98:72:b3:da:65:e7:8d:20:0c:cf:b1: 40:ba:7c:c7:6d:04:99:91:3a:93:86:98:8a:d8:55:ce:d6:04: e2:f8:22:78:2f:f8:95:48:8b:d4:67:81:e1:50:68:43:61:fe: 7c:28:88:05:0a:24:f1:bd:37:87:44:8c:c5:4d:13:c7:37:35: 2c:c9:3a:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WnhisFrANT0kPiWW6t8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YjBiY2ZjMmNkYjA1MmI4OWUyOWNhNWE3NWJiZWYyOTIy YzgwYzMwHhcNMjYwMTAxMTYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmRkYWUwMzg3YmIyZWQ3NzcwOGNjNjczN2FjNDk5NjcwMjcwOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NpJgQ0fqKlDx1rB3bfAkSW+yf97 SocQE+rshBYDYYA4mO7xJQa2Yv2jTZPBEjf/2kiWl7PqPaYdU8yQaKdvGC8IRa0C sOwg3FaVcEriSHJesONIpFBghgnt994nCUB22d1IMpQ5V+mGIYg2YrZeFk/h27+s D8dhCJE/UwIJEtsA8OMkb6ys6HQVDAdhQr5tOXXa10yLddnebHy01fDVNQ8Tc/9s 2Z424izhQuh6YvKKbTqfgTuO75go8ksxi1d1ksBEyxEKHGCwyhqaqcZlwLNTwNS9 1hoMIVNPG3Kcud1UoX0lWiA5qcWdgVjDgYMPUBAyS4s0tBn0093vLjkyEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLdrgOHuy7XdwjMZzesSZZwJwnxMB8GA1UdIwQY MBaAFHawvPws2wUrieKcpadbvvKSLIDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTlkODYtY2EyNS00ZDY5LWEwZjQt MTA5YzJhZTU5MzE2LzEvNHQydUE0ZTdMdGQzQ014bk42eEpsbkFuQ2ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTlkODYtY2EyNS00ZDY5LWEwZjQtMTA5YzJhZTU5MzE2 LzEvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSUMMA0G CSqGSIb3DQEBCwUAA4IBAQBABhQmz0mlfufi+M9GOK8cZ2c6+NCONyl9NhoZUOTw JqHzobiUIGhfyf/0V0L5TSUKhIgKXNMhWzVvyd4xPmmKztu985N9ucKhcl7l1dYe Hb8jaqSlNcp4jbqWI1edF47/LvoWYP+G8JDVPjxFinynJuuLOmXzm0WPRYaDliiM dp8TXFaQGS1fu1uT9Ppzmv0SpXtmKMd/p1YQEpXK/xWD3qVErc7du0Q/JEZ94v4J jXiX59uSIhiltz28mHKz2mXnjSAMz7FAunzHbQSZkTqThpiK2FXO1gTi+CJ4L/iV SIvUZ4HhUGhDYf58KIgFCiTxvTeHRIzFTRPHNzUsyTrN -----END CERTIFICATE-----Generated at Tue Jan 27 07:09:42 2026 by rpki-client