This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/R4biYlru54aTOhXabFWJZhdtNlE.roa File: R4biYlru54aTOhXabFWJZhdtNlE.roa (raw, json) Hash identifier: wWEd9TpnYbM1KpOe7QAvs/pg0aALtJHWzooiwoOKRvU= Subject key identifier: 47:86:E2:62:5A:EE:E7:86:93:3A:15:DA:6C:55:89:66:17:6D:36:51 Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Certificate serial: 019B7C7FC659D8D89F2F994CE06A86371A25 Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/R4biYlru54aTOhXabFWJZhdtNlE.roa Signing time: Fri 02 Jan 2026 02:18:27 +0000 ROA not before: Fri 02 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 185.229.196.0/22 maxlen: 22 2a09:c5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c6:59:d8:d8:9f:2f:99:4c:e0:6a:86:37:1a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4786e2625aeee786933a15da6c558966176d3651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:f8:0d:7c:0c:39:91:c0:0c:92:f0:c8:a5: 9f:a1:70:92:09:7c:76:dc:8e:3b:60:88:30:ca:e2: 90:eb:6c:07:2e:c2:8d:00:96:d0:2e:e7:4a:b0:70: cd:ac:89:61:d3:61:df:a2:17:0e:15:71:fe:9c:05: d0:d0:2d:b6:0b:ce:bf:b3:e3:3b:26:6c:75:ff:3c: cc:3a:0d:e4:a1:e0:a6:ad:b2:fb:6d:1c:e0:f6:e3: af:5b:f3:8e:0a:f8:c7:ff:c0:08:89:c3:50:51:37: c4:c9:a2:19:87:04:3c:31:d3:0a:0c:1d:08:1b:cd: e7:a0:44:be:b5:22:8e:8b:e1:bc:b3:d0:a3:72:71: df:db:c2:90:ce:8f:e1:70:8c:e3:3a:e9:3c:87:6e: fc:d3:89:a3:a9:db:48:83:45:cb:2a:2a:15:0c:d4: a0:28:97:56:cf:b7:3f:48:b0:fc:8a:60:99:b0:1f: 22:7c:d2:0a:ad:a4:ba:09:d0:ef:7a:36:8a:fa:99: 49:80:19:f9:03:68:91:d3:32:5d:54:14:47:d7:54: 08:7e:21:00:58:f6:ab:ec:2d:df:9c:41:e1:cd:52: 96:57:ac:69:fc:10:31:37:f6:37:92:10:36:cc:bf: 4c:f8:04:06:fc:fc:c8:20:8d:01:50:08:25:31:9d: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:86:E2:62:5A:EE:E7:86:93:3A:15:DA:6C:55:89:66:17:6D:36:51 X509v3 Authority Key Identifier: keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/R4biYlru54aTOhXabFWJZhdtNlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.196.0/22 IPv6: 2a09:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:e2:bc:d4:69:a6:95:85:66:59:55:61:f5:0f:f1:5f:d8:7f: f0:54:c4:03:e5:fa:97:21:8e:48:cb:d4:be:09:2e:02:0a:c3: 67:92:07:8f:ce:c3:62:36:d0:49:84:ad:21:b4:f0:16:67:aa: 03:d5:5a:f9:ff:c1:fd:db:d7:61:e7:57:57:d7:b8:ab:b3:b5: 23:63:3d:e7:95:b5:f6:4a:4d:d0:6b:dc:fe:16:f6:03:e7:06: 62:16:eb:a5:97:c1:8c:5a:83:45:f9:60:22:32:3e:8f:32:c0: a6:46:c7:62:8b:84:44:78:ec:23:f8:0a:ba:e7:12:b1:f8:07: 76:a5:29:37:bc:e2:cc:d7:d2:22:1d:51:bc:e4:5e:39:10:0b: 60:6e:57:e8:fa:42:e4:b3:38:6b:67:f2:bc:5f:29:cf:33:9c: ab:39:4d:5a:82:4f:d8:9d:76:2a:82:39:05:d0:b0:73:ba:cb: ff:f1:22:6d:c6:d4:07:70:d7:d6:b3:98:8f:f8:f7:7a:d3:2a: 70:1e:3c:13:28:6f:1d:5b:87:52:60:67:9a:b3:84:e9:e1:d8: 7c:ae:8b:a0:e7:a4:ac:6d:86:47:42:e9:b8:ba:dd:2e:80:b5: 53:4b:81:73:52:b4:d6:01:be:05:bd:96:b3:35:52:1f:a6:d4: 02:8c:8c:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f8ZZ2NifL5lM4GqGNxolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmI1MzI1NWU2YzhmYjc2ZmFjMWNjYjg0OGZlZTQ1NjAw YjU1ZjcwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzg2ZTI2MjVhZWVlNzg2OTMzYTE1ZGE2YzU1ODk2NjE3NmQzNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfb4DXwMOZHADJLwyKWfoXCSCXx2 3I47YIgwyuKQ62wHLsKNAJbQLudKsHDNrIlh02HfohcOFXH+nAXQ0C22C86/s+M7 Jmx1/zzMOg3koeCmrbL7bRzg9uOvW/OOCvjH/8AIicNQUTfEyaIZhwQ8MdMKDB0I G83noES+tSKOi+G8s9CjcnHf28KQzo/hcIzjOuk8h27804mjqdtIg0XLKioVDNSg KJdWz7c/SLD8imCZsB8ifNIKraS6CdDvejaK+plJgBn5A2iR0zJdVBRH11QIfiEA WPar7C3fnEHhzVKWV6xp/BAxN/Y3khA2zL9M+AQG/PzIII0BUAglMZ0cgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEeG4mJa7ueGkzoV2mxViWYXbTZRMB8GA1UdIwQY MBaAFGVrUyVebI+3b6wcy4SP7kVgC1X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgt ZWE0MTgzMmFkMTcyLzEvUjRiaVlscnU1NGFUT2hYYWJGV0paaGR0TmxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgtZWE0MTgzMmFkMTcy LzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueXEMA0E AgACMAcDBQAqCcXAMA0GCSqGSIb3DQEBCwUAA4IBAQCO4rzUaaaVhWZZVWH1D/Ff 2H/wVMQD5fqXIY5Iy9S+CS4CCsNnkgePzsNiNtBJhK0htPAWZ6oD1Vr5/8H929dh 51dX17irs7UjYz3nlbX2Sk3Qa9z+FvYD5wZiFuull8GMWoNF+WAiMj6PMsCmRsdi i4REeOwj+Aq65xKx+Ad2pSk3vOLM19IiHVG85F45EAtgblfo+kLkszhrZ/K8XynP M5yrOU1agk/YnXYqgjkF0LBzusv/8SJtxtQHcNfWs5iP+Pd60ypwHjwTKG8dW4dS YGeas4Tp4dh8roug56SsbYZHQum4ut0ugLVTS4FzUrTWAb4FvZazNVIfptQCjIzI -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:18 2026 by rpki-client