This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/u4_p9gq8PxyzNdqeO2tr-kmMvH0.roa File: u4_p9gq8PxyzNdqeO2tr-kmMvH0.roa (raw, json) Hash identifier: e0t9kEWRvLOzDfbUzdP5JA+w9dbBhqKylm3ESrjwKB4= Subject key identifier: BB:8F:E9:F6:0A:BC:3F:1C:B3:35:DA:9E:3B:6B:6B:FA:49:8C:BC:7D Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c Certificate serial: 019B7E381A3CDCA7C17ACBDBF95BCBCBACCF Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/u4_p9gq8PxyzNdqeO2tr-kmMvH0.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.88.184.0/24 maxlen: 24 185.88.185.0/24 maxlen: 24 185.88.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1a:3c:dc:a7:c1:7a:cb:db:f9:5b:cb:cb:ac:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb8fe9f60abc3f1cb335da9e3b6b6bfa498cbc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:90:35:af:2d:75:b5:a0:ed:b0:ce:76:c1: 36:60:7e:c4:f7:6a:00:65:69:4e:9f:79:38:76:4c: 62:01:e6:55:27:8e:8e:b8:a1:0b:9e:81:e0:e6:8a: b8:f3:15:bb:63:9a:f2:29:93:65:33:5b:b3:e2:49: d4:79:b0:ce:cc:28:34:b5:60:24:eb:f6:59:05:39: fe:0d:77:7e:84:0d:3d:6b:8b:38:52:a5:22:e8:27: 77:5e:e7:34:9a:a2:9b:b0:bd:00:5e:56:ec:53:26: d1:91:50:9c:62:8f:88:f7:86:a7:e3:a2:48:8e:41: b2:4b:83:f9:94:62:25:a1:1f:78:1e:22:82:f3:5c: 6d:09:d6:3d:3c:6f:2f:b5:e8:97:13:ab:48:cf:c1: b6:ce:01:98:b4:04:b9:00:27:06:1e:e2:ed:3d:f4: 75:f6:79:b4:51:51:07:e7:bd:34:4a:f9:72:9c:2f: b4:c2:c6:43:26:5d:59:e5:8a:39:60:32:ff:c7:ae: b2:0f:27:f4:5d:e4:f2:d3:e6:3a:51:56:6d:23:f8: a0:61:17:28:51:fe:0b:be:73:f8:3f:d3:c4:ba:5b: 62:a7:46:ff:93:60:90:26:27:cc:b7:de:52:5b:0b: c5:1c:f2:c7:71:b3:e5:c5:df:d1:02:52:b5:43:57: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:E9:F6:0A:BC:3F:1C:B3:35:DA:9E:3B:6B:6B:FA:49:8C:BC:7D X509v3 Authority Key Identifier: keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/u4_p9gq8PxyzNdqeO2tr-kmMvH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.184.0-185.88.186.255 Signature Algorithm: sha256WithRSAEncryption cf:27:64:88:31:3c:ce:6f:ab:8b:b3:11:a8:9b:62:c5:7d:5a: 68:67:c5:9a:f3:27:fd:ae:a4:71:a0:b9:4d:44:8b:48:91:e9: b3:0d:2e:d9:7f:00:00:4d:67:7c:ab:52:c7:9f:1f:99:75:8e: c3:d7:15:dd:9e:0f:b4:81:21:70:cd:dc:7e:43:36:1b:41:40: f8:09:90:36:34:a8:b8:95:24:c5:cf:96:18:32:3b:99:79:a7: e5:00:12:de:11:de:0a:1c:6f:52:ea:fc:fb:ca:64:6e:6a:c3: 87:a0:ef:1c:c0:48:d5:b7:47:b2:89:d5:b6:61:a3:a1:f2:ae: 87:8f:6b:a6:fa:0e:6e:98:0e:e9:bf:4d:50:a5:15:e0:1c:29: 4f:77:26:33:9e:cd:5a:df:49:ea:dd:9b:ff:29:56:0a:79:01: 63:40:03:37:90:78:15:a2:9b:71:c9:c0:34:6f:a7:c1:20:7e: c8:04:2f:eb:99:72:40:fb:af:f6:a9:e1:60:d7:21:73:e3:9b: 84:7d:b4:b3:1e:3e:5f:ed:90:3d:d7:d8:b4:79:3f:2f:f0:da: f2:df:1e:f0:b9:e0:70:b2:11:22:ed:0b:1a:5f:00:40:ef:a6: e0:df:52:1e:18:32:dc:88:ac:b1:06:99:68:95:fb:e4:4a:a2: 54:b7:38:1e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OBo83KfBesvb+VvLy6zPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzQ0ZGZmNzE4Nzk4NjNlYTcxNDQyMDIzYjdmMzU0ZGMz ZGFkN2MwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjhmZTlmNjBhYmMzZjFjYjMzNWRhOWUzYjZiNmJmYTQ5OGNiYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+6QNa8tdbWg7bDOdsE2YH7E92oA ZWlOn3k4dkxiAeZVJ46OuKELnoHg5oq48xW7Y5ryKZNlM1uz4knUebDOzCg0tWAk 6/ZZBTn+DXd+hA09a4s4UqUi6Cd3Xuc0mqKbsL0AXlbsUybRkVCcYo+I94an46JI jkGyS4P5lGIloR94HiKC81xtCdY9PG8vteiXE6tIz8G2zgGYtAS5ACcGHuLtPfR1 9nm0UVEH5700SvlynC+0wsZDJl1Z5Yo5YDL/x66yDyf0XeTy0+Y6UVZtI/igYRco Uf4LvnP4P9PEultip0b/k2CQJifMt95SWwvFHPLHcbPlxd/RAlK1Q1ckbQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLuP6fYKvD8cszXanjtra/pJjLx9MB8GA1UdIwQY MBaAFGDETf9xh5hj6nFEICO381TcPa18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWIt YjJkNzM2Nzg3MjdiLzEvdTRfcDlncThQeHl6TmRxZU8ydHIta21NdkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWItYjJkNzM2Nzg3Mjdi LzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5WLgD BAC5WLowDQYJKoZIhvcNAQELBQADggEBAM8nZIgxPM5vq4uzEaibYsV9WmhnxZrz J/2upHGguU1Ei0iR6bMNLtl/AABNZ3yrUsefH5l1jsPXFd2eD7SBIXDN3H5DNhtB QPgJkDY0qLiVJMXPlhgyO5l5p+UAEt4R3gocb1Lq/PvKZG5qw4eg7xzASNW3R7KJ 1bZho6HyroePa6b6Dm6YDum/TVClFeAcKU93JjOezVrfSerdm/8pVgp5AWNAAzeQ eBWim3HJwDRvp8EgfsgEL+uZckD7r/ap4WDXIXPjm4R9tLMePl/tkD3X2LR5Py/w 2vLfHvC54HCyESLtCxpfAEDvpuDfUh4YMtyIrLEGmWiV++RKolS3OB4= -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:58 2026 by rpki-client