This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Q4Mygs7Y-ddK9pGf9Yb-lvFl-m4.roa File: Q4Mygs7Y-ddK9pGf9Yb-lvFl-m4.roa (raw, json) Hash identifier: S095x8PjGP0BDIBL70mlfzvokhhapxj9rG8kMLp9d34= Subject key identifier: 43:83:32:82:CE:D8:F9:D7:4A:F6:91:9F:F5:86:FE:96:F1:65:FA:6E Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97 Certificate serial: 019B7CECC4BAFA6C29F28A4FFCA4832E032A Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Q4Mygs7Y-ddK9pGf9Yb-lvFl-m4.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204793 IP address blocks: 185.136.116.0/22 maxlen: 22 2a06:fc40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c4:ba:fa:6c:29:f2:8a:4f:fc:a4:83:2e:03:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43833282ced8f9d74af6919ff586fe96f165fa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:ec:be:59:bd:30:d6:22:49:0e:15:88:ee: de:2d:10:f5:b3:2e:7f:01:e0:ff:1f:45:7e:7b:8e: b3:c8:56:5f:e9:37:6d:14:11:ef:60:b9:14:08:19: d0:61:59:05:ac:4d:8b:8a:32:2b:dc:d1:0b:b5:8b: 43:90:40:20:cd:61:a6:85:1f:20:ea:7f:df:b4:bd: e7:23:10:a2:39:6f:c8:45:36:f9:73:c8:21:b3:4b: 0e:04:46:11:6a:7f:c7:de:4b:5a:c5:43:a9:13:39: da:ca:e6:82:8a:d8:d3:25:f8:ca:38:3b:45:b7:a4: 79:b1:de:f6:19:9d:8b:5f:38:51:10:ac:58:56:68: c8:11:51:b6:2d:5d:8e:c5:78:53:68:e1:90:b1:83: ea:14:bf:84:5d:1c:2d:76:db:68:b2:18:ad:2a:df: 9b:1d:4e:2c:b5:50:25:ff:1a:2e:b0:48:e1:b8:77: 7f:8d:0b:57:f1:40:1d:2d:6b:85:1f:f0:30:da:b9: d9:6c:ff:0c:da:d1:8f:f2:a7:5c:fc:21:ec:1f:01: 35:95:1f:9c:9b:03:a4:b8:53:3b:78:9a:46:48:0d: d1:bd:ef:95:a0:0a:36:6d:59:2a:78:cf:61:cb:73: ec:6c:44:6c:ec:cf:bf:3c:32:32:44:ac:2d:85:88: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:32:82:CE:D8:F9:D7:4A:F6:91:9F:F5:86:FE:96:F1:65:FA:6E X509v3 Authority Key Identifier: keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Q4Mygs7Y-ddK9pGf9Yb-lvFl-m4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.116.0/22 IPv6: 2a06:fc40::/29 Signature Algorithm: sha256WithRSAEncryption 12:95:95:d2:30:67:4e:7e:35:53:2b:b4:5f:58:48:04:6a:c6: 05:9a:7f:93:ff:64:a0:3b:ac:e9:c0:16:0a:a4:19:82:e0:91: 4a:14:b4:30:fe:f4:7d:0e:d8:bb:e7:de:e7:1b:56:38:98:51: 5b:93:66:a5:38:02:cf:30:22:13:fb:89:e2:04:db:e0:0f:6b: 27:ba:a7:ca:f9:58:7a:bb:3b:c1:de:e6:24:ed:f3:8f:3c:96: fe:19:33:f9:8d:59:e7:1e:a9:7d:73:46:d7:a6:1e:3c:02:83: 5b:5b:45:d5:8b:e9:62:44:01:2c:54:0f:99:45:f9:8b:4a:0d: ed:5f:ea:c8:b5:94:01:80:95:fd:e8:12:8a:c4:40:8c:fd:e3: 7c:95:77:50:c8:63:29:0a:60:e6:74:c4:a8:ee:b5:f3:54:4d: 30:8d:95:32:8b:e6:e9:1c:03:33:c0:d4:ec:00:d8:74:10:22: 6b:85:13:31:74:7b:c5:6a:a1:f2:af:15:b1:95:c5:af:75:bd: 8c:53:4e:5c:df:c5:71:2e:b8:92:b0:52:ac:db:c6:a7:83:89: d0:88:d7:04:ee:46:fd:b5:c0:8b:8b:37:03:f5:dc:44:b9:a3: 9a:e0:5d:dc:42:dc:3f:c3:39:fc:f0:cb:ce:d2:57:30:d5:de: 01:65:41:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87MS6+mwp8opP/KSDLgMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDBjMGQ3YTU5YWMyZjU5ODA0ZTdjMzUxNWYxNGNkMmZk NTBkOTcwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzgzMzI4MmNlZDhmOWQ3NGFmNjkxOWZmNTg2ZmU5NmYxNjVmYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYPsvlm9MNYiSQ4ViO7eLRD1sy5/ AeD/H0V+e46zyFZf6TdtFBHvYLkUCBnQYVkFrE2LijIr3NELtYtDkEAgzWGmhR8g 6n/ftL3nIxCiOW/IRTb5c8ghs0sOBEYRan/H3ktaxUOpEznayuaCitjTJfjKODtF t6R5sd72GZ2LXzhREKxYVmjIEVG2LV2OxXhTaOGQsYPqFL+EXRwtdttoshitKt+b HU4stVAl/xousEjhuHd/jQtX8UAdLWuFH/Aw2rnZbP8M2tGP8qdc/CHsHwE1lR+c mwOkuFM7eJpGSA3Rve+VoAo2bVkqeM9hy3PsbERs7M+/PDIyRKwthYiX8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEODMoLO2PnXSvaRn/WG/pbxZfpuMB8GA1UdIwQY MBaAFBAAwNelmsL1mATnw1FfFM0v1Q2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2It ZWEzODQyMGIyNTc5LzEvUTRNeWdzN1ktZGRLOXBHZjlZYi1sdkZsLW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2ItZWEzODQyMGIyNTc5 LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYh0MA0E AgACMAcDBQMqBvxAMA0GCSqGSIb3DQEBCwUAA4IBAQASlZXSMGdOfjVTK7RfWEgE asYFmn+T/2SgO6zpwBYKpBmC4JFKFLQw/vR9Dti7597nG1Y4mFFbk2alOALPMCIT +4niBNvgD2snuqfK+Vh6uzvB3uYk7fOPPJb+GTP5jVnnHql9c0bXph48AoNbW0XV i+liRAEsVA+ZRfmLSg3tX+rItZQBgJX96BKKxECM/eN8lXdQyGMpCmDmdMSo7rXz VE0wjZUyi+bpHAMzwNTsANh0ECJrhRMxdHvFaqHyrxWxlcWvdb2MU05c38VxLriS sFKs28ang4nQiNcE7kb9tcCLizcD9dxEuaOa4F3cQtw/wzn88MvO0lcw1d4BZUHK -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:01 2026 by rpki-client