This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/_N4R_5nFKyrUydAv5kfyq_YCjA0.roa File: _N4R_5nFKyrUydAv5kfyq_YCjA0.roa (raw, json) Hash identifier: yEWgrCGd25JxNB4GGLGD4iJWhDTz2tIiDjFlu5zF5t0= Subject key identifier: FC:DE:11:FF:99:C5:2B:2A:D4:C9:D0:2F:E6:47:F2:AB:F6:02:8C:0D Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f Certificate serial: 019B7B363F64CFBBB68CABC321F4976DCC90 Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/_N4R_5nFKyrUydAv5kfyq_YCjA0.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42336 IP address blocks: 89.45.84.0/22 maxlen: 24 185.39.228.0/22 maxlen: 24 2a01:4aa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3f:64:cf:bb:b6:8c:ab:c3:21:f4:97:6d:cc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcde11ff99c52b2ad4c9d02fe647f2abf6028c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:93:1d:00:9e:3b:6d:6c:84:9c:7b:21:01: e8:c9:2b:33:01:af:53:37:f6:30:90:d1:2b:3c:05: 15:18:eb:6c:96:30:9d:f1:34:87:fd:6e:f2:f4:e3: 0b:af:46:c9:d3:db:fa:39:b6:55:2c:bc:02:0a:d1: 10:0e:cc:c1:dd:ae:ee:4d:b5:3c:40:3d:d4:f3:c2: 71:7d:38:d9:5f:9c:6d:99:1c:38:dd:f9:b9:82:06: b4:77:24:4e:43:b9:81:b4:36:ce:06:0b:fc:9c:d7: 45:0a:cd:a4:8b:9c:8f:6f:28:2b:04:83:e3:32:d4: d6:ba:95:a9:65:52:da:82:a9:45:b9:b5:93:77:f0: ec:08:9e:91:ba:8d:0a:0d:35:c9:e3:4f:0e:59:d8: 22:b8:51:ca:0c:80:8c:35:76:ca:a8:ab:db:b3:68: 3a:d4:0d:76:25:2a:22:d6:0b:d4:cc:a5:f2:ce:e0: c1:9d:51:92:05:19:d7:f0:f2:7c:73:85:ed:28:19: 79:f5:a7:ee:27:2b:b4:eb:6e:f2:41:fa:24:7a:4c: da:96:a8:00:b8:e0:6f:42:30:31:bc:3d:cd:54:2a: f4:4c:0f:2a:67:8c:ea:74:45:43:d7:c2:56:38:f4: 0a:ec:8c:54:05:b3:60:f2:99:9b:60:a6:76:cc:89: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DE:11:FF:99:C5:2B:2A:D4:C9:D0:2F:E6:47:F2:AB:F6:02:8C:0D X509v3 Authority Key Identifier: keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/_N4R_5nFKyrUydAv5kfyq_YCjA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.84.0/22 185.39.228.0/22 IPv6: 2a01:4aa0::/32 Signature Algorithm: sha256WithRSAEncryption 08:34:c1:5a:d1:8a:5f:fb:5b:37:33:72:0f:76:2e:f9:5e:ba: a5:f0:26:00:25:bb:4c:11:a6:ba:9e:6d:16:c0:98:fa:75:ae: 8f:09:f8:b1:74:ec:3f:45:92:d1:20:5d:7d:2a:c7:22:ba:25: 47:be:7b:d6:9b:09:8a:e7:5e:3b:8e:07:ef:ed:a5:09:c3:b1: 82:01:d2:dc:9c:3a:73:19:5d:82:da:3a:07:e2:43:2e:db:83: 37:dd:7e:06:1b:9c:40:3b:b2:38:c7:c0:74:80:83:03:3c:45: b0:9a:4e:d2:e8:52:c4:fa:84:b3:6f:4b:cd:de:55:42:fc:5b: 2b:a1:66:a7:8b:03:62:c3:0d:0e:8d:f4:2e:2a:26:0c:9f:ea: 1f:a4:35:86:33:96:d3:07:88:c2:7b:fc:e1:3b:39:5a:23:30: a6:98:b3:fc:5c:60:ad:56:fc:9c:d3:70:e2:3b:81:9f:18:e9: c9:53:6d:49:c3:07:a6:ed:5d:f8:cc:9c:89:f3:fd:46:3a:03: 09:16:f4:62:72:9e:d8:34:a2:30:4d:b5:ff:71:e3:13:65:17: a3:1c:df:c1:61:ed:cd:1d:40:67:1d:04:38:43:c2:c2:b3:ce: 82:74:e1:62:d0:6e:53:1f:af:ee:67:3f:0b:67:cb:c5:49:59: 80:2b:56:5c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nj9kz7u2jKvDIfSXbcyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZTdkNjYxYWZjYTNkMzM3MGI4ZTYzNDQ5NGQ1MjQ2Yjgz ZDU4NWYwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RlMTFmZjk5YzUyYjJhZDRjOWQwMmZlNjQ3ZjJhYmY2MDI4YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbqTHQCeO21shJx7IQHoySszAa9T N/YwkNErPAUVGOtsljCd8TSH/W7y9OMLr0bJ09v6ObZVLLwCCtEQDszB3a7uTbU8 QD3U88JxfTjZX5xtmRw43fm5gga0dyROQ7mBtDbOBgv8nNdFCs2ki5yPbygrBIPj MtTWupWpZVLagqlFubWTd/DsCJ6Ruo0KDTXJ408OWdgiuFHKDICMNXbKqKvbs2g6 1A12JSoi1gvUzKXyzuDBnVGSBRnX8PJ8c4XtKBl59afuJyu0627yQfokekzalqgA uOBvQjAxvD3NVCr0TA8qZ4zqdEVD18JWOPQK7IxUBbNg8pmbYKZ2zIlJPQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPzeEf+ZxSsq1MnQL+ZH8qv2AowNMB8GA1UdIwQY MBaAFJrn1mGvyj0zcLjmNElNUka4PVhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt M2I2OGE0OWRjMDQyLzEvX040Ul81bkZLeXJVeWRBdjVrZnlxX1lDakEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy LzEvbXVmV1lhX0tQVE53dU9ZMFNVMVNScmc5V0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWS1UAwQC uSfkMA0EAgACMAcDBQAqAUqgMA0GCSqGSIb3DQEBCwUAA4IBAQAINMFa0Ypf+1s3 M3IPdi75Xrql8CYAJbtMEaa6nm0WwJj6da6PCfixdOw/RZLRIF19KsciuiVHvnvW mwmK5147jgfv7aUJw7GCAdLcnDpzGV2C2joH4kMu24M33X4GG5xAO7I4x8B0gIMD PEWwmk7S6FLE+oSzb0vN3lVC/FsroWaniwNiww0OjfQuKiYMn+ofpDWGM5bTB4jC e/zhOzlaIzCmmLP8XGCtVvyc03DiO4GfGOnJU21Jwwem7V34zJyJ8/1GOgMJFvRi cp7YNKIwTbX/ceMTZRejHN/BYe3NHUBnHQQ4Q8LCs86CdOFi0G5TH6/uZz8LZ8vF SVmAK1Zc -----END CERTIFICATE-----Generated at Tue Feb 10 02:26:13 2026 by rpki-client