This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/n4jCcgfnjIRQBuc83E5OKmqoWsg.roa File: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (raw, json) Hash identifier: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps= Subject key identifier: 9F:88:C2:72:07:E7:8C:84:50:06:E7:3C:DC:4E:4E:2A:6A:A8:5A:C8 Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Certificate serial: 019B7910C65C0874C62D5208B28C18BA22A4 Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/n4jCcgfnjIRQBuc83E5OKmqoWsg.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 185.25.184.0/22 maxlen: 22 188.213.234.0/23 maxlen: 23 188.215.18.0/23 maxlen: 23 2a00:8220::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c6:5c:08:74:c6:2d:52:08:b2:8c:18:ba:22:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f88c27207e78c845006e73cdc4e4e2a6aa85ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:c9:5b:50:de:b1:50:b3:1a:9c:9d:cb:44: cf:95:ff:72:38:39:34:94:eb:f5:3f:8b:0d:c8:bd: f1:af:bc:81:54:03:09:41:f4:73:bb:83:ab:e6:3c: 49:a2:3b:bc:34:8a:8d:7f:93:ad:8e:ee:83:67:0f: 8b:60:f0:8e:5b:47:43:23:f9:5f:e5:9b:c6:f9:5b: e8:66:c8:e1:02:65:e1:25:70:4a:48:d7:b2:48:bc: 01:0e:42:a9:97:03:fd:bc:9f:8d:64:a8:ed:43:1d: fd:94:12:3f:fc:14:08:f3:4a:b9:cd:f6:fd:ab:04: b4:17:33:aa:0c:83:98:ce:62:a0:c1:e7:30:f0:7b: 9d:48:a2:21:dc:97:e3:bf:8e:ee:3f:e7:27:e1:bd: 32:be:f7:26:56:ba:79:a6:33:3d:47:3a:97:c9:b7: 5a:e1:11:db:72:b0:dd:ff:59:90:5b:de:b3:d8:b6: 7e:01:dd:f8:8f:92:a6:e3:0a:af:75:ef:64:0a:98: f7:27:87:b4:ff:08:fa:e0:a4:5a:63:48:3c:af:c8: 02:05:73:b1:35:45:a3:a2:5d:e2:ee:84:c6:42:87: c0:c6:7b:b2:22:23:d2:d6:d0:5d:fa:6e:41:df:c1: db:17:a6:23:7f:03:89:18:38:6b:16:6f:4e:3c:c1: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:88:C2:72:07:E7:8C:84:50:06:E7:3C:DC:4E:4E:2A:6A:A8:5A:C8 X509v3 Authority Key Identifier: keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/n4jCcgfnjIRQBuc83E5OKmqoWsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.184.0/22 188.213.234.0/23 188.215.18.0/23 IPv6: 2a00:8220::/32 Signature Algorithm: sha256WithRSAEncryption b7:73:ce:11:dd:95:49:9b:26:eb:00:06:00:60:bc:15:28:1c: bf:fd:57:11:1f:b7:7a:1d:b0:1f:84:ab:f6:da:72:11:5f:80: 81:eb:b4:8e:41:87:c4:b2:82:07:08:59:6c:ee:ef:eb:f5:b5: 37:e5:b6:a3:74:2c:56:e7:cf:20:da:b5:19:dd:9c:44:43:67: fb:c3:20:2b:bd:87:9f:a7:77:35:22:8e:a7:db:b7:c5:bd:74: dd:48:3c:1f:d1:2b:f1:85:08:10:62:fc:de:5a:92:08:fe:08: 38:08:05:06:f5:b7:ca:d0:94:cc:1c:d1:42:13:52:2c:2d:0b: 7b:36:22:8b:4a:f3:93:09:18:4b:d3:21:20:cb:40:3b:a7:12: 28:b3:a7:26:07:c5:48:97:d4:dd:c9:c2:9e:37:d7:0b:ae:32: 24:67:63:8c:7d:0c:cb:d9:5d:96:49:7f:e7:e2:45:eb:68:a7: 47:83:3a:ca:03:17:f9:c0:51:48:cf:36:b8:65:71:82:30:b1: 68:c6:0b:95:4c:b1:16:2d:e1:af:c6:2b:cc:68:41:fe:0f:ff: b6:02:7a:b6:24:b4:d2:38:c5:cf:fb:e3:1a:59:7a:fb:15:19: 0c:2a:85:17:46:e1:ab:2e:aa:79:a2:cb:b8:36:e0:a4:f3:f0: 77:e1:73:1c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EMZcCHTGLVIIsowYuiKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm ODJlOTQwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjg4YzI3MjA3ZTc4Yzg0NTAwNmU3M2NkYzRlNGUyYTZhYTg1YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnurJW1DesVCzGpydy0TPlf9yODk0 lOv1P4sNyL3xr7yBVAMJQfRzu4Or5jxJoju8NIqNf5Otju6DZw+LYPCOW0dDI/lf 5ZvG+VvoZsjhAmXhJXBKSNeySLwBDkKplwP9vJ+NZKjtQx39lBI//BQI80q5zfb9 qwS0FzOqDIOYzmKgwecw8HudSKIh3Jfjv47uP+cn4b0yvvcmVrp5pjM9RzqXybda 4RHbcrDd/1mQW96z2LZ+Ad34j5Km4wqvde9kCpj3J4e0/wj64KRaY0g8r8gCBXOx NUWjol3i7oTGQofAxnuyIiPS1tBd+m5B38HbF6YjfwOJGDhrFm9OPMHGLQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJ+IwnIH54yEUAbnPNxOTipqqFrIMB8GA1UdIwQY MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt YmE2MjZkMzI1ZDU5LzEvbjRqQ2NnZm5qSVJRQnVjODNFNU9LbXFvV3NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5 LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuRm4AwQB vNXqAwQBvNcSMA0EAgACMAcDBQAqAIIgMA0GCSqGSIb3DQEBCwUAA4IBAQC3c84R 3ZVJmybrAAYAYLwVKBy//VcRH7d6HbAfhKv22nIRX4CB67SOQYfEsoIHCFls7u/r 9bU35bajdCxW588g2rUZ3ZxEQ2f7wyArvYefp3c1Io6n27fFvXTdSDwf0SvxhQgQ YvzeWpII/gg4CAUG9bfK0JTMHNFCE1IsLQt7NiKLSvOTCRhL0yEgy0A7pxIos6cm B8VIl9TdycKeN9cLrjIkZ2OMfQzL2V2WSX/n4kXraKdHgzrKAxf5wFFIzza4ZXGC MLFoxguVTLEWLeGvxivMaEH+D/+2Anq2JLTSOMXP++MaWXr7FRkMKoUXRuGrLqp5 osu4NuCk8/B34XMc -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:35 2026 by rpki-client