This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/V4COJnXwmFmnVBuYsVBT_JNYPKo.roa File: V4COJnXwmFmnVBuYsVBT_JNYPKo.roa (raw, json) Hash identifier: BFMhNSaSoYAFpwahbx23UPRsDuVgHkjYqG78fOuGOzs= Subject key identifier: 57:80:8E:26:75:F0:98:59:A7:54:1B:98:B1:50:53:FC:93:58:3C:AA Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf Certificate serial: 019B79111D3B4560FAF545D7C5BE5D576342 Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/V4COJnXwmFmnVBuYsVBT_JNYPKo.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62121 IP address blocks: 185.93.192.0/22 maxlen: 22 195.24.226.0/23 maxlen: 23 195.189.130.0/23 maxlen: 23 2a02:cf40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1d:3b:45:60:fa:f5:45:d7:c5:be:5d:57:63:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57808e2675f09859a7541b98b15053fc93583caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:6a:8e:8b:06:14:fb:e4:a8:63:65:14:21: 27:84:5a:13:27:d5:d5:fe:5c:2d:05:a2:ae:51:5f: 99:04:7a:d0:56:26:6a:c7:41:75:93:f9:b7:57:c0: c9:e9:b5:3d:a8:cd:e9:98:a2:52:f2:68:81:39:44: 58:bd:88:67:46:01:e6:7c:cc:a6:63:fd:d0:18:27: 8c:58:35:59:d4:26:4a:af:84:a6:27:47:f2:06:fb: 67:2e:e3:c3:0d:df:1e:35:72:ef:02:89:5e:09:e6: f4:73:38:c9:48:a0:e2:64:40:87:d8:99:ad:d1:c6: c8:db:bb:e4:b1:8e:0b:a6:5a:54:ff:f6:96:41:d3: 8e:7d:ff:89:2f:ae:04:98:cb:76:dc:eb:97:1a:c6: a6:61:80:5d:6c:36:c8:f6:89:31:6b:d6:8b:6d:43: 1c:55:e9:01:32:b4:d9:5e:79:08:2a:d2:12:65:a9: 4d:52:68:7e:7d:0c:a6:7b:26:aa:3b:95:ba:bf:87: 45:42:76:78:ae:2a:4e:3a:a6:84:79:8e:70:21:10: 59:30:3c:f8:e0:e5:28:f8:1d:45:1c:58:a7:28:50: b0:d3:0a:0d:29:50:75:48:8d:49:4d:ec:84:25:a5: c0:b6:20:38:c2:d8:7e:01:e2:95:6e:17:e4:0f:84: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:8E:26:75:F0:98:59:A7:54:1B:98:B1:50:53:FC:93:58:3C:AA X509v3 Authority Key Identifier: keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/V4COJnXwmFmnVBuYsVBT_JNYPKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.192.0/22 195.24.226.0/23 195.189.130.0/23 IPv6: 2a02:cf40::/29 Signature Algorithm: sha256WithRSAEncryption 54:9a:ad:0d:b2:9f:ab:f5:a3:aa:57:2b:f5:c3:a8:10:1c:06: 2f:2c:b7:6c:36:dc:12:ef:b3:75:24:7e:d3:8c:fb:7b:77:3c: e2:26:92:5b:f1:09:5a:4b:2d:4b:1e:c3:37:63:b0:c9:66:fc: 5e:d6:bc:7b:ac:d8:ad:2b:d5:85:ef:8d:bf:05:ed:81:a1:5c: a5:c9:c7:f5:39:18:84:09:28:11:35:48:3f:72:20:4c:4b:37: b4:a4:8f:9f:6f:ee:26:18:29:f8:4d:73:0b:97:6d:2b:92:16: 92:0f:32:f7:a2:af:dd:32:08:5b:b6:bf:41:91:f5:e9:3f:49: c6:46:c2:86:1f:12:45:11:5f:33:15:5c:3e:5a:e2:ab:cb:5e: b6:ab:27:f1:2c:f6:5f:99:d5:56:72:0f:2e:3b:d4:08:3e:99: 90:0a:ae:6b:6c:c2:b9:0a:ef:60:aa:04:25:2a:b9:16:00:df: 6b:2f:c1:6c:4c:36:b8:21:83:b8:58:9a:30:36:d8:a1:2b:1e: 01:db:16:44:3c:d0:0b:60:4f:2e:d9:d7:e8:fe:40:40:8f:3b: 1b:ed:c7:67:bc:ed:d5:9f:4c:8d:c1:36:f4:41:34:d9:ff:b8: 10:f5:7e:ae:5d:8f:41:3c:f9:2c:ae:52:5b:9f:2c:86:71:d3: 44:57:13:6a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5ER07RWD69UXXxb5dV2NCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NDkxYzIyM2JlNmUxYWFhNTZiZmVjNmRhMGRhOTBjNGE4 NTJhYWYwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzgwOGUyNjc1ZjA5ODU5YTc1NDFiOThiMTUwNTNmYzkzNTgzY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXxqjosGFPvkqGNlFCEnhFoTJ9XV /lwtBaKuUV+ZBHrQViZqx0F1k/m3V8DJ6bU9qM3pmKJS8miBOURYvYhnRgHmfMym Y/3QGCeMWDVZ1CZKr4SmJ0fyBvtnLuPDDd8eNXLvAoleCeb0czjJSKDiZECH2Jmt 0cbI27vksY4LplpU//aWQdOOff+JL64EmMt23OuXGsamYYBdbDbI9okxa9aLbUMc VekBMrTZXnkIKtISZalNUmh+fQymeyaqO5W6v4dFQnZ4ripOOqaEeY5wIRBZMDz4 4OUo+B1FHFinKFCw0woNKVB1SI1JTeyEJaXAtiA4wth+AeKVbhfkD4TAMQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFeAjiZ18JhZp1QbmLFQU/yTWDyqMB8GA1UdIwQY MBaAFEdJHCI75uGqpWv+xtoNqQxKhSqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgt OGFjZGY5NmM5OGEwLzEvVjRDT0puWHdtRm1uVkJ1WXNWQlRfSk5ZUEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgtOGFjZGY5NmM5OGEw LzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuV3AAwQB wxjiAwQBw72CMA0EAgACMAcDBQMqAs9AMA0GCSqGSIb3DQEBCwUAA4IBAQBUmq0N sp+r9aOqVyv1w6gQHAYvLLdsNtwS77N1JH7TjPt7dzziJpJb8QlaSy1LHsM3Y7DJ Zvxe1rx7rNitK9WF742/Be2BoVylycf1ORiECSgRNUg/ciBMSze0pI+fb+4mGCn4 TXMLl20rkhaSDzL3oq/dMghbtr9BkfXpP0nGRsKGHxJFEV8zFVw+WuKry162qyfx LPZfmdVWcg8uO9QIPpmQCq5rbMK5Cu9gqgQlKrkWAN9rL8FsTDa4IYO4WJowNtih Kx4B2xZEPNALYE8u2dfo/kBAjzsb7cdnvO3Vn0yNwTb0QTTZ/7gQ9X6uXY9BPPks rlJbnyyGcdNEVxNq -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:18 2026 by rpki-client