This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/4rFWGG1hCLjpdzpnntCtvivktok.roa File: 4rFWGG1hCLjpdzpnntCtvivktok.roa (raw, json) Hash identifier: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc= Subject key identifier: E2:B1:56:18:6D:61:08:B8:E9:77:3A:67:9E:D0:AD:BE:2B:E4:B6:89 Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145 Certificate serial: 019B77C75F51E769A4F76598FE7DD1375C1C Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/4rFWGG1hCLjpdzpnntCtvivktok.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.7.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5f:51:e7:69:a4:f7:65:98:fe:7d:d1:37:5c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2b156186d6108b8e9773a679ed0adbe2be4b689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:1e:89:55:63:d1:06:f3:d6:c8:58:ca:59: 56:8e:6d:25:97:3f:c9:a9:ef:b4:39:14:59:a0:0d: 4e:d2:51:e3:a4:eb:1c:7a:c4:da:2c:36:5a:6b:e2: 78:6e:60:a5:14:be:0c:8f:bf:1e:dc:47:9d:3a:f9: 62:a3:74:2f:d3:88:b2:5e:92:83:22:8f:6e:84:5d: 35:b9:db:55:c8:df:fd:c6:7a:09:d8:6a:c7:a5:fb: 86:e7:98:cb:39:fa:cc:d6:a4:17:9f:9b:d9:a0:80: 47:c2:bd:47:cf:9c:f0:e5:bf:f2:a6:c2:6a:0a:0c: 68:20:0b:fa:c7:1f:af:c4:cd:de:cc:bf:33:5a:3f: 6f:b1:a4:88:13:84:d5:7e:8d:aa:29:c4:67:b7:90: d5:aa:54:f4:9e:20:10:3e:8b:0c:4c:e9:bd:d9:7c: ee:b0:d5:ab:f2:87:cf:8a:fe:94:48:f6:be:d6:c4: 4a:06:0a:90:3f:7f:c6:34:60:28:0d:6d:71:00:3b: f6:b9:aa:67:bb:05:47:a9:bf:78:35:b2:d7:5d:f5: fc:ce:98:3c:55:21:4a:02:76:ae:82:88:77:c6:3d: ff:33:55:da:34:67:a9:27:29:dc:ab:8a:90:95:7e: 4b:8c:12:da:da:a5:ab:4f:86:e3:72:4d:cb:6e:ab: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:56:18:6D:61:08:B8:E9:77:3A:67:9E:D0:AD:BE:2B:E4:B6:89 X509v3 Authority Key Identifier: keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/4rFWGG1hCLjpdzpnntCtvivktok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.175.0/24 Signature Algorithm: sha256WithRSAEncryption 59:1f:76:3d:0e:6c:ad:6a:2c:a8:d0:ba:73:fd:d0:bc:d5:76: 45:a6:99:dc:28:c4:ac:d0:12:d4:9e:d6:75:18:ae:65:74:c7: e8:3e:fb:23:29:08:0b:67:98:ef:f9:07:ef:a0:92:68:0a:73: b8:85:ae:b9:1a:0e:f8:d2:08:ac:74:80:70:64:cf:d5:6e:e1: 28:51:e5:87:0a:1b:35:b7:1a:a8:a7:e6:30:30:ac:92:8e:97: 40:3b:c1:19:b5:a4:8f:9d:29:4a:4b:2a:0c:d1:c1:ac:20:02: 3f:94:95:d1:2d:d4:06:a5:18:85:c6:7d:b4:8d:a1:bd:d5:35: ed:a7:5a:23:2c:74:ba:32:f6:f1:69:6f:cd:c4:43:07:d3:7b: 17:cc:17:69:94:f3:81:21:92:1d:d7:76:91:2e:bc:63:3c:99: 13:19:c9:d1:6f:e6:93:a2:bf:a8:57:fc:27:e8:af:7e:b5:b3: b7:a9:62:bc:16:c7:cf:9c:ae:d5:88:29:79:36:56:3b:76:9d: db:9f:06:32:95:f3:48:40:ef:d8:c5:c0:98:72:3e:56:b2:0f: 55:65:1b:8a:e7:63:42:24:89:49:a4:dd:e4:24:9e:22:63:3a: 72:34:83:00:10:d9:b8:1f:fc:99:16:b7:17:be:2a:c2:4a:b4: a1:20:b1:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x19R52mk92WY/n3RN1wcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw NmMxNDUwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmIxNTYxODZkNjEwOGI4ZTk3NzNhNjc5ZWQwYWRiZTJiZTRiNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nQeiVVj0Qbz1shYyllWjm0llz/J qe+0ORRZoA1O0lHjpOscesTaLDZaa+J4bmClFL4Mj78e3EedOvlio3Qv04iyXpKD Io9uhF01udtVyN/9xnoJ2GrHpfuG55jLOfrM1qQXn5vZoIBHwr1Hz5zw5b/ypsJq CgxoIAv6xx+vxM3ezL8zWj9vsaSIE4TVfo2qKcRnt5DVqlT0niAQPosMTOm92Xzu sNWr8ofPiv6USPa+1sRKBgqQP3/GNGAoDW1xADv2uapnuwVHqb94NbLXXfX8zpg8 VSFKAnaugoh3xj3/M1XaNGepJyncq4qQlX5LjBLa2qWrT4bjck3LbqtvSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKxVhhtYQi46Xc6Z57Qrb4r5LaJMB8GA1UdIwQY MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt Njk2YjYxNWNiZWMzLzEvNHJGV0dHMWhDTGpwZHpwbm50Q3R2aXZrdG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQevMA0G CSqGSIb3DQEBCwUAA4IBAQBZH3Y9Dmytaiyo0Lpz/dC81XZFppncKMSs0BLUntZ1 GK5ldMfoPvsjKQgLZ5jv+QfvoJJoCnO4ha65Gg740gisdIBwZM/VbuEoUeWHChs1 txqop+YwMKySjpdAO8EZtaSPnSlKSyoM0cGsIAI/lJXRLdQGpRiFxn20jaG91TXt p1ojLHS6MvbxaW/NxEMH03sXzBdplPOBIZId13aRLrxjPJkTGcnRb+aTor+oV/wn 6K9+tbO3qWK8FsfPnK7ViCl5NlY7dp3bnwYylfNIQO/YxcCYcj5Wsg9VZRuK52NC JIlJpN3kJJ4iYzpyNIMAENm4H/yZFrcXvirCSrShILGU -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:29 2026 by rpki-client