This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/r4NW6IpzP-GUCDSqt6fVhBL0zM8.roa File: r4NW6IpzP-GUCDSqt6fVhBL0zM8.roa (raw, json) Hash identifier: pZ8aEKVcEt06iRGfPsdT3tWqnEV+Lv3p58CyGeIOdNc= Subject key identifier: AF:83:56:E8:8A:73:3F:E1:94:08:34:AA:B7:A7:D5:84:12:F4:CC:CF Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611 Certificate serial: 019B7A5AF0E9B05718251B962A04EB97CD9F Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/r4NW6IpzP-GUCDSqt6fVhBL0zM8.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200994 IP address blocks: 88.83.96.0/19 maxlen: 24 185.89.120.0/22 maxlen: 24 185.93.5.0/24 maxlen: 24 195.80.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f0:e9:b0:57:18:25:1b:96:2a:04:eb:97:cd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611 Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af8356e88a733fe1940834aab7a7d58412f4cccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:e2:24:ac:1a:b8:9b:b2:56:94:3d:60:76: 80:a7:e5:b6:02:79:ca:d7:d2:d5:93:a7:75:33:c6: 33:27:c7:c4:d3:d3:4a:6f:e7:f8:09:a3:40:95:69: 36:43:a5:9a:d9:3d:7a:ec:79:fe:c2:fb:21:1b:42: 96:77:cb:51:61:d8:f5:87:f2:5a:b5:54:23:ac:fb: e3:78:e6:63:6e:cb:2f:c7:9c:5b:78:fc:ef:10:35: fe:62:46:c0:a9:d5:cc:b6:5a:c9:c7:37:13:ae:c7: 70:6d:98:be:ec:c8:a5:51:96:e4:a3:bf:64:33:a6: c8:6a:58:8e:3d:3c:a9:ad:6a:e2:d2:fc:d4:2b:63: 87:3a:e6:a9:8a:3d:39:f8:64:60:f9:bd:2f:6a:88: 45:96:f5:0c:3d:b8:be:23:cb:fe:e8:d0:b6:1d:70: e7:ff:2d:75:fa:de:56:08:05:0d:e3:77:1e:72:4e: c4:ba:bb:52:c5:e8:38:82:d8:c2:1e:97:62:e3:55: c7:57:a8:61:ff:69:80:b0:f4:67:3e:b8:34:af:52: 7c:bb:93:70:58:0a:22:50:ce:df:47:ba:3f:14:ed: 62:71:86:47:b0:0f:d0:5d:72:3c:4e:f0:65:c4:78: fa:83:a6:03:a4:47:7a:ce:60:05:9a:ff:08:3b:d4: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:83:56:E8:8A:73:3F:E1:94:08:34:AA:B7:A7:D5:84:12:F4:CC:CF X509v3 Authority Key Identifier: keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/r4NW6IpzP-GUCDSqt6fVhBL0zM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.83.96.0/19 185.89.120.0/22 185.93.5.0/24 195.80.0.0/19 Signature Algorithm: sha256WithRSAEncryption 75:34:c3:58:b2:56:e9:06:c0:fc:11:33:30:eb:8b:ec:59:13: 25:28:46:c2:5d:db:78:c1:23:a4:20:24:8b:90:e9:fa:23:ab: c4:72:98:93:1a:dc:0a:9a:98:ad:8e:96:9a:ea:62:a8:75:ec: 42:20:88:c7:e6:02:cc:c2:f0:61:fa:a7:fb:3d:f3:f5:3a:93: b2:55:c6:bd:bd:b8:a4:44:8e:95:a0:8d:4f:a2:0e:6e:26:b0: cf:3b:6a:28:b8:ff:94:cb:6b:f1:ce:d5:76:20:59:88:cd:5d: c6:3d:65:21:0d:ad:92:55:f0:51:25:0b:ae:39:43:83:dc:cb: 73:22:97:ca:17:60:e6:fc:a5:21:a0:f6:a4:79:64:5f:54:e7: 22:d2:e3:f2:fc:ed:34:5e:c8:bd:7b:76:48:3d:5c:27:0e:27: b4:7b:b9:31:f2:64:d3:78:03:40:cf:52:01:2d:65:05:dd:45: fa:e6:2a:59:36:f8:1e:ae:8c:74:16:55:0e:69:c4:d0:ae:17: 57:45:fa:1b:f3:65:4d:39:2e:e8:c4:9c:26:53:69:60:b2:12: 2f:6d:d3:37:b4:2e:51:d7:31:18:fe:f0:11:03:ea:99:95:cf: d4:9b:a7:2b:95:0d:62:5d:9b:83:01:6d:1e:9f:87:51:79:33: 7d:9a:97:22 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6WvDpsFcYJRuWKgTrl82fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZTM3M2ZlZTc4MGVlYWIyYTkwNDIyZDBhZDUxNGUwODRh OGQ2MTEwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjgzNTZlODhhNzMzZmUxOTQwODM0YWFiN2E3ZDU4NDEyZjRjY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukniJKwauJuyVpQ9YHaAp+W2AnnK 19LVk6d1M8YzJ8fE09NKb+f4CaNAlWk2Q6Wa2T167Hn+wvshG0KWd8tRYdj1h/Ja tVQjrPvjeOZjbssvx5xbePzvEDX+YkbAqdXMtlrJxzcTrsdwbZi+7MilUZbko79k M6bIaliOPTyprWri0vzUK2OHOuapij05+GRg+b0vaohFlvUMPbi+I8v+6NC2HXDn /y11+t5WCAUN43ceck7EurtSxeg4gtjCHpdi41XHV6hh/2mAsPRnPrg0r1J8u5Nw WAoiUM7fR7o/FO1icYZHsA/QXXI8TvBlxHj6g6YDpEd6zmAFmv8IO9QfQwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFK+DVuiKcz/hlAg0qren1YQS9MzPMB8GA1UdIwQY MBaAFHPjc/7ngO6rKpBCLQrVFOCEqNYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTIt MDQxZmQ0YzZmZmQ0LzEvcjROVzZJcHpQLUdVQ0RTcXQ2ZlZoQkwwek04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMGU0MzMtOWIzNi00N2E2LTkzYTItMDQxZmQ0YzZmZmQ0 LzEvYy1Oel91ZUE3cXNxa0VJdEN0VVU0SVNvMWhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFWFNgAwQC uVl4AwQAuV0FAwQFw1AAMA0GCSqGSIb3DQEBCwUAA4IBAQB1NMNYslbpBsD8ETMw 64vsWRMlKEbCXdt4wSOkICSLkOn6I6vEcpiTGtwKmpitjpaa6mKodexCIIjH5gLM wvBh+qf7PfP1OpOyVca9vbikRI6VoI1Pog5uJrDPO2oouP+Uy2vxztV2IFmIzV3G PWUhDa2SVfBRJQuuOUOD3MtzIpfKF2Dm/KUhoPakeWRfVOci0uPy/O00Xsi9e3ZI PVwnDie0e7kx8mTTeANAz1IBLWUF3UX65ipZNvgerox0FlUOacTQrhdXRfob82VN OS7oxJwmU2lgshIvbdM3tC5R1zEY/vARA+qZlc/Um6crlQ1iXZuDAW0en4dReTN9 mpci -----END CERTIFICATE-----Generated at Tue Jan 27 05:03:16 2026 by rpki-client