This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa File: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (raw, json) Hash identifier: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A= Subject key identifier: 9F:81:73:19:F3:A7:6A:FD:D2:7C:F2:5F:04:45:D3:D2:EF:F0:E4:6B Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019B7BA3AB0C4DDE643067BA79F4201A327F Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa Signing time: Thu 01 Jan 2026 22:18:02 +0000 ROA not before: Thu 01 Jan 2026 22:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198612 IP address blocks: 37.208.0.0/19 maxlen: 19 185.166.208.0/22 maxlen: 22 2a00:c640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ab:0c:4d:de:64:30:67:ba:79:f4:20:1a:32:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Jan 1 22:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f817319f3a76afdd27cf25f0445d3d2eff0e46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:c6:af:16:5d:ec:00:dd:1e:63:93:62:55: f0:c3:9e:f6:b0:53:1a:13:99:af:28:ae:e9:e5:8f: c8:9a:cd:ef:bd:9e:32:be:68:66:7b:42:ce:6f:61: e6:5f:80:ef:04:61:ee:42:a6:97:2c:fe:e6:0f:bd: cc:d9:1f:dd:ff:ac:0a:4b:32:30:00:16:c4:6d:78: b8:17:78:24:b6:f2:df:bc:dc:9a:80:33:d5:fe:57: 70:2e:f0:c1:a4:66:37:a4:29:5e:c4:eb:97:7a:bd: b6:cb:76:90:64:01:52:dc:7c:c8:1b:ce:01:43:dd: ba:93:1f:c0:a9:33:3b:64:6d:b9:57:51:fc:63:60: 85:12:3b:4b:92:d3:01:98:86:8a:4d:71:08:ea:52: cd:3f:f6:e6:bd:06:34:e6:0f:df:de:78:08:84:42: 3e:5a:ef:97:09:11:88:4d:45:86:b9:da:2b:06:25: 9c:59:6e:cb:59:97:06:04:e3:26:5b:fd:e6:77:4e: fa:89:38:d5:35:da:f1:f3:d8:c9:54:e9:1a:11:42: 9e:24:d3:06:ce:9e:66:79:e1:97:90:60:74:b3:a4: b5:0f:7c:a7:bc:f4:29:95:78:00:1c:aa:d2:ca:97: 46:34:e7:9d:85:60:9b:18:1d:39:6f:f5:1f:a4:67: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:81:73:19:F3:A7:6A:FD:D2:7C:F2:5F:04:45:D3:D2:EF:F0:E4:6B X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.0.0/19 185.166.208.0/22 IPv6: 2a00:c640::/32 Signature Algorithm: sha256WithRSAEncryption b3:a9:7d:b4:0f:b3:64:1b:5d:b2:36:22:4a:f2:5f:9e:5f:03: 67:fd:92:58:ae:46:dc:ff:fa:99:e0:5e:49:7c:e7:ec:00:d0: ee:86:59:cf:a9:a0:fb:20:7c:fc:01:07:c6:a5:29:61:d0:57: 50:35:61:00:fa:f0:36:e7:aa:6a:c4:85:b9:85:5c:76:aa:1f: bb:d2:c9:c2:96:34:eb:c4:e7:aa:be:8f:dd:ef:55:61:14:fb: ee:42:f7:0a:40:98:b3:b3:e2:68:e6:f6:0e:6b:2d:89:5d:bf: af:06:8b:51:92:9a:cc:1e:cf:49:9c:44:35:5c:b3:aa:fa:d4: f9:92:34:f4:f0:b1:43:fe:04:fa:7b:c0:a3:ac:c0:d1:35:56: d8:f6:bf:a0:8b:40:bc:53:d5:92:54:1c:2f:27:73:54:2a:3a: 6e:cb:8a:49:a7:ce:70:56:67:1c:01:32:74:2b:1a:44:b2:b6: 77:4b:95:17:44:43:af:d6:de:5c:07:10:d0:d9:76:85:c8:b2: cf:3f:f2:21:5d:08:51:d3:d8:c0:ea:c8:80:77:a0:2f:80:d9: 17:f6:b6:33:5b:42:5f:4f:b6:c0:c9:2c:a0:00:83:61:b8:ef: 11:a0:3d:bf:4d:57:f6:eb:ee:a4:ca:49:dd:dd:00:85:3b:9c: 6d:e7:63:3d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o6sMTd5kMGe6efQgGjJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjYwMTAxMjIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjgxNzMxOWYzYTc2YWZkZDI3Y2YyNWYwNDQ1ZDNkMmVmZjBlNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNjGrxZd7ADdHmOTYlXww572sFMa E5mvKK7p5Y/Ims3vvZ4yvmhme0LOb2HmX4DvBGHuQqaXLP7mD73M2R/d/6wKSzIw ABbEbXi4F3gktvLfvNyagDPV/ldwLvDBpGY3pClexOuXer22y3aQZAFS3HzIG84B Q926kx/AqTM7ZG25V1H8Y2CFEjtLktMBmIaKTXEI6lLNP/bmvQY05g/f3ngIhEI+ Wu+XCRGITUWGudorBiWcWW7LWZcGBOMmW/3md076iTjVNdrx89jJVOkaEUKeJNMG zp5meeGXkGB0s6S1D3ynvPQplXgAHKrSypdGNOedhWCbGB05b/UfpGeNOwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJ+Bcxnzp2r90nzyXwRF09Lv8ORrMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvbjRGekdmT25hdjNTZlBKZkJFWFQwdV93NUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFJdAAAwQC uabQMA0EAgACMAcDBQAqAMZAMA0GCSqGSIb3DQEBCwUAA4IBAQCzqX20D7NkG12y NiJK8l+eXwNn/ZJYrkbc//qZ4F5JfOfsANDuhlnPqaD7IHz8AQfGpSlh0FdQNWEA +vA256pqxIW5hVx2qh+70snCljTrxOeqvo/d71VhFPvuQvcKQJizs+Jo5vYOay2J Xb+vBotRkprMHs9JnEQ1XLOq+tT5kjT08LFD/gT6e8CjrMDRNVbY9r+gi0C8U9WS VBwvJ3NUKjpuy4pJp85wVmccATJ0KxpEsrZ3S5UXREOv1t5cBxDQ2XaFyLLPP/Ih XQhR09jA6siAd6AvgNkX9rYzW0JfT7bAySygAINhuO8RoD2/TVf26+6kyknd3QCF O5xt52M9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:28 2026 by rpki-client