This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/4YsLddNMYO5L3qxHPlIKTmlpYd8.roa File: 4YsLddNMYO5L3qxHPlIKTmlpYd8.roa (raw, json) Hash identifier: g+U+FPVZlzXLAwsnouVrAExHzDeQHpof/aevQx4qZR8= Subject key identifier: E1:8B:0B:75:D3:4C:60:EE:4B:DE:AC:47:3E:52:0A:4E:69:69:61:DF Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Certificate serial: 019B7BA4DAA3760F308652DFC74718D19B95 Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/4YsLddNMYO5L3qxHPlIKTmlpYd8.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204754 IP address blocks: 185.241.184.0/24 maxlen: 24 185.241.185.0/24 maxlen: 24 185.241.186.0/24 maxlen: 24 185.241.187.0/24 maxlen: 24 2a0c:a880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:da:a3:76:0f:30:86:52:df:c7:47:18:d1:9b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e18b0b75d34c60ee4bdeac473e520a4e696961df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:78:23:3c:1d:e4:ef:5b:6e:bd:5b:7a:4a: e7:9f:3f:c4:b3:05:44:67:7c:a1:a2:cb:2f:b5:8e: 90:26:9d:70:ec:43:c4:b3:16:47:28:9c:9e:18:f4: 9f:38:a6:e9:16:6f:6a:c2:d3:5d:99:96:df:bb:9d: 94:f6:61:32:3b:ec:26:cb:b9:97:28:71:e8:0a:88: 4f:bb:bd:79:24:e9:31:d3:72:2a:72:b0:42:bc:3d: 53:09:52:2a:f5:2b:17:34:26:64:59:0f:92:94:3a: e4:ff:57:fd:bb:56:fe:8c:1d:f8:bd:d9:e5:d0:e8: 39:5a:e5:98:ab:1b:b5:46:e0:b2:73:f3:23:8d:76: 96:6c:bd:ef:44:9e:d1:15:38:19:84:72:cd:42:d7: 6c:61:a8:cd:09:ca:1c:ee:9d:bd:86:c4:37:25:08: 81:b6:f8:42:a6:9c:0e:d3:1a:cf:3c:2d:26:d5:ba: 73:12:86:c9:77:0e:33:8e:ff:09:23:87:b3:e6:40: 5d:61:bf:69:5f:7d:38:6a:c0:d3:c1:36:a3:6a:19: 16:74:b2:c8:94:b7:c5:19:45:1a:25:6c:20:e3:0a: 09:d1:99:35:0b:d4:2d:db:a7:8f:f7:29:58:9c:8b: 68:d3:ee:0b:77:52:ab:c2:eb:ac:1a:7c:aa:4a:ce: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8B:0B:75:D3:4C:60:EE:4B:DE:AC:47:3E:52:0A:4E:69:69:61:DF X509v3 Authority Key Identifier: keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/4YsLddNMYO5L3qxHPlIKTmlpYd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.184.0/22 IPv6: 2a0c:a880::/29 Signature Algorithm: sha256WithRSAEncryption 4a:b6:48:59:ef:29:99:dc:61:7d:aa:35:77:53:3a:93:5f:5c: 9d:78:4e:36:7b:5f:31:67:bc:db:b7:8d:bf:f4:61:3c:99:29: f2:e5:50:5c:09:d1:3a:ae:a7:12:ae:5d:d0:e7:56:48:cf:a6: c1:fd:cd:5c:da:02:8b:16:13:be:37:66:c0:74:01:d1:7f:4c: d5:31:b9:6f:f2:1a:2b:20:41:09:d0:a7:3a:48:3c:a7:87:b0: 5a:64:66:95:a6:ae:a0:ad:b6:75:99:ba:b9:97:fb:ba:a3:a8: 61:1f:0b:cc:33:c7:4b:0e:38:e0:cd:8e:3e:ad:25:67:14:51: 4c:00:2a:0e:e6:fe:aa:dc:50:5b:dc:c3:f5:bb:65:b8:42:6d: 42:3c:48:2e:1b:44:41:ca:79:b6:45:51:de:8c:58:d5:51:63: ba:74:e4:c3:a8:5a:65:40:2c:89:81:1a:36:d5:8b:e7:28:c4: 8c:43:b0:a3:91:ef:a8:63:3e:fd:01:44:94:f1:df:2b:15:b5: 82:1d:ca:c6:19:f4:7a:09:97:fa:99:16:6c:93:ae:fe:43:5b: cb:82:6a:6d:15:0e:c4:72:6e:2c:38:d4:ea:ea:3e:29:02:16: a5:40:76:1b:f3:25:37:7f:80:ad:bb:bc:d3:60:3e:69:5a:51: 39:17:a3:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pNqjdg8whlLfx0cY0ZuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjkyYjM4ZGYxOTdjYTJjYmFlMzAyNjkzMjI2YjIzZjMy YTNmNzYwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMThiMGI3NWQzNGM2MGVlNGJkZWFjNDczZTUyMGE0ZTY5Njk2MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxax4Izwd5O9bbr1bekrnnz/EswVE Z3yhossvtY6QJp1w7EPEsxZHKJyeGPSfOKbpFm9qwtNdmZbfu52U9mEyO+wmy7mX KHHoCohPu715JOkx03IqcrBCvD1TCVIq9SsXNCZkWQ+SlDrk/1f9u1b+jB34vdnl 0Og5WuWYqxu1RuCyc/MjjXaWbL3vRJ7RFTgZhHLNQtdsYajNCcoc7p29hsQ3JQiB tvhCppwO0xrPPC0m1bpzEobJdw4zjv8JI4ez5kBdYb9pX304asDTwTajahkWdLLI lLfFGUUaJWwg4woJ0Zk1C9Qt26eP9ylYnIto0+4Ld1KrwuusGnyqSs6+iQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOGLC3XTTGDuS96sRz5SCk5paWHfMB8GA1UdIwQY MBaAFH65KzjfGXyiy64wJpMiayPzKj92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUt OTFkMWEwNjg2M2FlLzEvNFlzTGRkTk1ZTzVMM3F4SFBsSUtUbWxwWWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUtOTFkMWEwNjg2M2Fl LzEvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufG4MA0E AgACMAcDBQMqDKiAMA0GCSqGSIb3DQEBCwUAA4IBAQBKtkhZ7ymZ3GF9qjV3UzqT X1ydeE42e18xZ7zbt42/9GE8mSny5VBcCdE6rqcSrl3Q51ZIz6bB/c1c2gKLFhO+ N2bAdAHRf0zVMblv8horIEEJ0Kc6SDynh7BaZGaVpq6grbZ1mbq5l/u6o6hhHwvM M8dLDjjgzY4+rSVnFFFMACoO5v6q3FBb3MP1u2W4Qm1CPEguG0RBynm2RVHejFjV UWO6dOTDqFplQCyJgRo21YvnKMSMQ7Cjke+oYz79AUSU8d8rFbWCHcrGGfR6CZf6 mRZsk67+Q1vLgmptFQ7Ecm4sONTq6j4pAhalQHYb8yU3f4Ctu7zTYD5pWlE5F6NO -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:34 2026 by rpki-client