This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa File: 4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa (raw, json) Hash identifier: mt8E3NEU/1Vk7ULPjkSFkCldNVP6CbG4KHut2KXn3G4= Subject key identifier: E0:F8:11:37:CA:B7:2B:1C:01:56:FE:9B:3A:FB:F7:75:DD:A2:0B:09 Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Certificate serial: 019B7F8323F65030601B595AD41F6B61106A Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa Signing time: Fri 02 Jan 2026 16:20:59 +0000 ROA not before: Fri 02 Jan 2026 16:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204036 IP address blocks: 185.213.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:23:f6:50:30:60:1b:59:5a:d4:1f:6b:61:10:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb Validity Not Before: Jan 2 16:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f81137cab72b1c0156fe9b3afbf775dda20b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:98:8e:41:88:f2:5d:74:57:f9:e0:41:9e: ed:2b:dc:26:77:c5:2d:7c:83:25:f4:a7:36:24:93: 47:3e:4b:b9:45:cb:98:5d:c6:e1:b2:13:21:db:78: 5e:ce:35:b3:77:9e:17:22:e3:38:a0:2b:67:85:ce: 12:5f:9c:a5:bf:20:cf:31:59:7b:f4:4b:61:90:94: 41:87:d8:a4:1b:58:2b:88:59:d1:ad:ea:3b:9e:31: 59:9c:7c:aa:37:8c:bf:a9:85:32:ec:b8:4e:99:e6: a7:aa:a4:55:31:fa:e4:a7:dc:f5:56:e4:fc:d5:cb: 5a:75:bb:da:ac:43:a9:fa:0c:d8:c8:b8:41:3d:5a: e5:91:e5:e7:0d:4d:54:91:1f:46:79:ea:06:ca:92: 27:0c:53:85:b4:1c:75:a9:96:46:90:94:52:1c:5e: 11:33:68:c6:8f:49:8a:9f:c6:a1:62:8b:02:04:55: be:3d:ea:14:14:d4:55:65:62:8b:b9:41:fe:70:79: 97:89:10:d3:ba:cc:12:69:16:a3:65:b3:b2:b7:18: 10:54:be:78:da:8a:83:fc:e5:54:ca:cb:73:1f:77: 97:4c:b1:49:41:d2:e5:7f:03:99:ef:a3:a5:96:fe: 54:59:88:b6:3f:90:61:30:d5:5a:83:03:be:40:48: 62:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F8:11:37:CA:B7:2B:1C:01:56:FE:9B:3A:FB:F7:75:DD:A2:0B:09 X509v3 Authority Key Identifier: keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/4PgRN8q3KxwBVv6bOvv3dd2iCwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.168.0/24 Signature Algorithm: sha256WithRSAEncryption 17:0e:0a:9a:04:5a:61:dc:93:b8:10:d3:f8:66:56:e8:36:3f: 50:34:0c:9d:76:66:d9:95:48:f1:d3:fc:fb:ca:b8:bc:03:7e: b0:49:90:77:f3:78:38:54:41:e2:3c:18:6c:e9:7f:66:03:0c: 1c:2c:35:ce:73:4a:30:63:1c:07:b9:bc:64:7a:61:00:4b:9a: 75:84:d6:07:60:24:8c:a7:f7:fe:df:f8:34:1c:c4:fe:38:c8: d6:5b:be:7e:9d:9d:7d:ea:6a:2f:e6:d8:85:02:ce:a0:43:80: 99:33:b3:53:f2:82:1e:84:c3:e7:c8:85:eb:01:e0:f4:4e:93: f7:0c:43:67:c6:4d:c3:0e:f0:92:ee:8d:47:35:36:00:58:20: 33:11:63:70:8d:b7:2b:97:f6:2c:8c:7a:51:e0:bb:a9:2a:c7: 09:74:fe:a6:32:bc:c7:c7:91:bb:8b:a5:92:91:52:ec:12:30: ae:e3:b6:6d:ae:63:b6:5d:21:a2:dc:f1:c1:68:f5:db:b4:62: 87:57:fe:44:73:19:d2:4f:92:0e:e8:69:8c:6b:1a:84:7f:3d: e1:93:3d:a9:6b:44:d0:7d:27:5d:9d:d7:40:27:88:7c:53:b6: f3:44:75:e3:50:08:e6:0f:44:33:4e:6e:29:dd:2e:56:c4:73: c9:32:de:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gyP2UDBgG1la1B9rYRBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODkyMjNjMWYzMzVjMGNjNTY5MzU5ZmEyZGRhMzQ5YTIy MzZjY2IwHhcNMjYwMTAyMTYyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGY4MTEzN2NhYjcyYjFjMDE1NmZlOWIzYWZiZjc3NWRkYTIwYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPyYjkGI8l10V/ngQZ7tK9wmd8Ut fIMl9Kc2JJNHPku5RcuYXcbhshMh23hezjWzd54XIuM4oCtnhc4SX5ylvyDPMVl7 9EthkJRBh9ikG1griFnRreo7njFZnHyqN4y/qYUy7LhOmeanqqRVMfrkp9z1VuT8 1ctadbvarEOp+gzYyLhBPVrlkeXnDU1UkR9GeeoGypInDFOFtBx1qZZGkJRSHF4R M2jGj0mKn8ahYosCBFW+PeoUFNRVZWKLuUH+cHmXiRDTuswSaRajZbOytxgQVL54 2oqD/OVUystzH3eXTLFJQdLlfwOZ76Ollv5UWYi2P5BhMNVagwO+QEhi9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOD4ETfKtyscAVb+mzr793XdogsJMB8GA1UdIwQY MBaAFI2JIjwfM1wMxWk1n6Ldo0miI2zLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAt YTEwMjhlZGE2MzgzLzEvNFBnUk44cTNLeHdCVnY2Yk92djNkZDJpQ3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MmExMGQtZDg1MS00MGFlLWE4YjAtYTEwMjhlZGE2Mzgz LzEvallraVBCOHpYQXpGYVRXZm90MmpTYUlqYk1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudWoMA0G CSqGSIb3DQEBCwUAA4IBAQAXDgqaBFph3JO4ENP4ZlboNj9QNAyddmbZlUjx0/z7 yri8A36wSZB383g4VEHiPBhs6X9mAwwcLDXOc0owYxwHubxkemEAS5p1hNYHYCSM p/f+3/g0HMT+OMjWW75+nZ196mov5tiFAs6gQ4CZM7NT8oIehMPnyIXrAeD0TpP3 DENnxk3DDvCS7o1HNTYAWCAzEWNwjbcrl/YsjHpR4LupKscJdP6mMrzHx5G7i6WS kVLsEjCu47ZtrmO2XSGi3PHBaPXbtGKHV/5EcxnST5IO6GmMaxqEfz3hkz2pa0TQ fSddnddAJ4h8U7bzRHXjUAjmD0QzTm4p3S5WxHPJMt5W -----END CERTIFICATE-----Generated at Thu Jan 22 01:24:50 2026 by rpki-client