This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/4mxTt-PUOLyk8c5boNvoqu_BJ7s.roa File: 4mxTt-PUOLyk8c5boNvoqu_BJ7s.roa (raw, json) Hash identifier: 3fs6xu4eP1mjknmS7OMM29xYKyl1NAuQ3X7q4kngxPE= Subject key identifier: E2:6C:53:B7:E3:D4:38:BC:A4:F1:CE:5B:A0:DB:E8:AA:EF:C1:27:BB Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253 Certificate serial: 019B7FF26538ACF49F08BBF4830CF8449019 Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/4mxTt-PUOLyk8c5boNvoqu_BJ7s.roa Signing time: Fri 02 Jan 2026 18:22:30 +0000 ROA not before: Fri 02 Jan 2026 18:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202748 IP address blocks: 185.83.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:65:38:ac:f4:9f:08:bb:f4:83:0c:f8:44:90:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253 Validity Not Before: Jan 2 18:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e26c53b7e3d438bca4f1ce5ba0dbe8aaefc127bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cb:eb:8f:ee:f3:de:5d:b1:11:a6:c9:5a:3e: 7d:90:e6:5f:06:a2:e1:1a:86:16:c0:8c:df:a7:f8: 0b:c6:9d:0e:70:95:16:08:73:f3:3b:67:c9:79:8f: 6f:49:32:1b:a2:6c:99:f8:fb:2b:aa:30:0c:bc:22: 8a:d9:1d:e7:e2:97:0a:16:ea:7e:80:23:f8:d2:ae: 1d:a6:cb:f7:7d:e6:3e:da:92:77:8d:6a:73:9e:4e: 4e:19:31:ab:bb:34:77:17:0f:c3:25:b0:f8:36:ab: 7e:c2:dd:d2:b5:db:e2:cc:3f:11:b6:33:1a:8c:ec: fe:a0:01:d9:db:35:d0:3d:d7:bb:eb:d2:8d:cc:0c: a3:3f:af:99:33:28:23:74:6d:d0:d5:74:99:6c:15: d2:7e:1e:80:6c:c9:de:ad:ae:8a:2f:fe:cc:f8:ff: ef:87:cb:98:50:89:a7:a8:cc:5a:35:ee:7b:19:4e: 3e:fa:50:89:91:53:a7:1e:51:96:5e:9e:33:8b:7f: 27:79:81:05:3e:5a:3c:72:e8:39:00:d3:24:4f:d9: 98:9e:4f:b2:08:23:c2:89:ac:2b:d1:45:41:92:ef: 6b:d5:a7:9e:ca:7d:20:4c:f4:6f:69:a5:6f:a3:85: 85:1c:01:14:76:71:36:12:f1:e8:4c:24:cf:22:80: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:53:B7:E3:D4:38:BC:A4:F1:CE:5B:A0:DB:E8:AA:EF:C1:27:BB X509v3 Authority Key Identifier: keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/4mxTt-PUOLyk8c5boNvoqu_BJ7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.44.0/22 Signature Algorithm: sha256WithRSAEncryption 21:cb:af:15:65:67:bf:e8:0c:5c:d4:a7:6a:9b:80:c0:d5:21: 63:a7:fa:c0:58:3d:31:6a:83:e3:f3:5e:fc:81:22:6a:2a:bf: c8:18:49:db:54:61:8d:97:9e:ab:aa:7c:a9:f1:91:24:fb:cc: f3:32:24:a1:2c:85:29:47:c3:a6:28:a0:46:b5:84:ad:1a:4d: f4:7f:58:59:08:54:85:38:e5:d3:56:52:ff:66:aa:90:50:41: cd:c6:7d:3c:fc:3e:db:ad:0e:e6:26:4d:8f:0f:3e:0c:22:42: 8e:e2:22:37:d2:99:fd:98:67:e3:b8:78:19:ff:e0:16:9a:34: 9b:73:a5:70:be:d2:30:d9:f0:86:88:00:8c:eb:90:d5:0c:6e: 09:93:6c:24:eb:76:26:88:6c:ff:f5:fe:ed:40:13:00:de:d1: 12:35:f8:1f:6e:c3:d7:3a:ff:98:f2:b6:eb:d7:19:4a:14:81: 47:ea:20:52:4d:ef:d0:73:ef:f4:97:6b:6a:64:ec:38:26:6b: 0b:92:57:d3:d4:05:85:eb:89:d9:21:68:5b:60:e8:50:f8:d0: b8:fc:b3:b7:22:a8:16:12:1c:ad:54:a8:23:5e:a0:94:4d:90: b0:dc:e5:e9:f9:40:d7:1c:0f:ce:12:b0:9b:1d:0a:37:55:f8: 9c:5a:7c:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8mU4rPSfCLv0gwz4RJAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZTRjNDY1ZDJkZjM0NThjMDI2MTBmODc4MjBjOWJjMmVi MzMyNTMwHhcNMjYwMTAyMTgyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjZjNTNiN2UzZDQzOGJjYTRmMWNlNWJhMGRiZThhYWVmYzEyN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8vrj+7z3l2xEabJWj59kOZfBqLh GoYWwIzfp/gLxp0OcJUWCHPzO2fJeY9vSTIbomyZ+PsrqjAMvCKK2R3n4pcKFup+ gCP40q4dpsv3feY+2pJ3jWpznk5OGTGruzR3Fw/DJbD4Nqt+wt3StdvizD8RtjMa jOz+oAHZ2zXQPde769KNzAyjP6+ZMygjdG3Q1XSZbBXSfh6AbMnera6KL/7M+P/v h8uYUImnqMxaNe57GU4++lCJkVOnHlGWXp4zi38neYEFPlo8cug5ANMkT9mYnk+y CCPCiawr0UVBku9r1aeeyn0gTPRvaaVvo4WFHAEUdnE2EvHoTCTPIoD1+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJsU7fj1Di8pPHOW6Db6KrvwSe7MB8GA1UdIwQY MBaAFM3kxGXS3zRYwCYQ+HggybwuszJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMmI4MDItZWNjMS00MWFmLTg5ZWUt ZmM5NTQ2OGNiNmFhLzEvNG14VHQtUFVPTHlrOGM1Ym9Odm9xdV9CSjdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMmI4MDItZWNjMS00MWFmLTg5ZWUtZmM5NTQ2OGNiNmFh LzEvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVMsMA0G CSqGSIb3DQEBCwUAA4IBAQAhy68VZWe/6Axc1Kdqm4DA1SFjp/rAWD0xaoPj8178 gSJqKr/IGEnbVGGNl56rqnyp8ZEk+8zzMiShLIUpR8OmKKBGtYStGk30f1hZCFSF OOXTVlL/ZqqQUEHNxn08/D7brQ7mJk2PDz4MIkKO4iI30pn9mGfjuHgZ/+AWmjSb c6VwvtIw2fCGiACM65DVDG4Jk2wk63YmiGz/9f7tQBMA3tESNfgfbsPXOv+Y8rbr 1xlKFIFH6iBSTe/Qc+/0l2tqZOw4JmsLklfT1AWF64nZIWhbYOhQ+NC4/LO3IqgW EhytVKgjXqCUTZCw3OXp+UDXHA/OErCbHQo3VficWnz4 -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:59 2026 by rpki-client