This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa File: 4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa (raw, json) Hash identifier: XBbtmyDxr/MaSevTjNm0YVLmtgk2DlOz9kdPZzWObLc= Subject key identifier: E3:37:9A:1F:15:5E:38:AB:3F:52:CC:81:31:33:53:4C:AA:35:A3:14 Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be Certificate serial: 019B79ED45FF41973D744A947A2062556A04 Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28850 IP address blocks: 194.59.185.0/24 maxlen: 24 194.116.204.0/23 maxlen: 23 195.190.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:ff:41:97:3d:74:4a:94:7a:20:62:55:6a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3379a1f155e38ab3f52cc813133534caa35a314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:65:27:89:0e:60:73:75:67:86:66:bb:a7: 3e:80:66:ed:f4:53:56:39:db:3e:ab:99:29:bc:83: 6e:5e:60:d5:cb:e2:a7:05:10:4c:b3:10:db:38:fc: f5:b8:90:1e:bc:d8:07:8a:58:6c:8c:65:35:a1:9f: 47:45:64:67:5e:fe:3c:55:d4:3e:21:5d:a5:e8:ac: b7:8a:35:52:fc:f7:e1:c7:ef:bd:f2:44:2d:ad:41: e7:8f:34:35:7e:0a:6e:2e:9c:97:75:39:35:02:4f: 95:b7:52:1c:f8:ac:53:31:d4:6f:f5:e7:bc:66:51: be:df:a4:31:56:6e:87:82:06:e4:ea:e7:d8:77:7b: 81:12:e3:bb:f6:73:7c:82:3c:37:26:66:a1:b9:63: de:bf:e0:04:5d:fe:56:47:32:95:93:cb:6a:bf:a6: 28:10:0e:c7:b3:62:e2:0e:01:52:15:ba:b3:bb:69: e2:f0:90:1e:f3:18:15:65:45:45:42:42:ad:26:05: e8:27:52:80:81:21:29:00:23:d0:31:49:04:f8:a4: d9:23:66:12:8b:e4:04:97:ae:88:db:32:51:2d:41: 9a:4a:17:ad:45:30:ef:a3:63:16:3d:82:49:c8:25: 0d:66:52:5e:95:9f:ba:82:2d:c3:ed:9d:9d:a2:0a: 03:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:37:9A:1F:15:5E:38:AB:3F:52:CC:81:31:33:53:4C:AA:35:A3:14 X509v3 Authority Key Identifier: keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.185.0/24 194.116.204.0/23 195.190.158.0/24 Signature Algorithm: sha256WithRSAEncryption d2:1f:7a:a0:16:bd:2f:18:bd:ac:25:27:08:88:be:db:96:54: b3:78:52:ec:1b:4d:bb:b1:7c:d5:64:24:58:8a:1d:cc:c8:09: de:61:c3:59:f2:01:09:94:86:3a:0a:b0:49:aa:05:68:0a:20: f0:57:5e:f0:c5:79:c7:d0:c2:65:cb:fb:20:b8:c4:8a:78:9c: ca:e1:38:ab:c8:4e:59:3b:06:5b:0e:b7:d6:de:75:e1:1c:ed: 2e:e5:f6:7d:6e:3f:0b:63:9f:f7:5f:a2:3d:c3:5e:6e:da:03: 93:0e:51:07:96:a6:26:e8:72:5a:dd:5d:42:0a:2a:62:0c:90: 98:43:57:05:86:4e:0d:37:56:79:00:d9:92:0e:8d:5d:b3:e9: be:d9:c1:0d:e6:95:07:ed:ab:b2:e8:06:2d:21:02:dc:b0:42: 50:d6:4a:8f:5f:3d:8a:40:bb:7e:3b:8c:10:e6:68:04:a1:5e: ef:12:37:f8:eb:98:13:cf:31:d2:0b:c6:75:01:7d:8d:68:bb: a4:08:be:f1:1a:f8:01:e1:ea:81:02:85:8b:fd:55:e0:65:b6: 7e:73:e1:c2:6b:18:7a:7f:1c:4d:7d:84:9f:fa:4d:17:b4:c8: 47:db:7f:d7:90:5e:40:22:71:8f:67:32:49:74:8e:a1:f5:d4: 39:62:66:2c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57UX/QZc9dEqUeiBiVWoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTYxZGZjNWY3MGJmMWI3NmYwNWU0NGE3NGVkMDI5MzEy NWU0YmUwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzM3OWExZjE1NWUzOGFiM2Y1MmNjODEzMTMzNTM0Y2FhMzVhMzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQFlJ4kOYHN1Z4Zmu6c+gGbt9FNW Ods+q5kpvINuXmDVy+KnBRBMsxDbOPz1uJAevNgHilhsjGU1oZ9HRWRnXv48VdQ+ IV2l6Ky3ijVS/Pfhx++98kQtrUHnjzQ1fgpuLpyXdTk1Ak+Vt1Ic+KxTMdRv9ee8 ZlG+36QxVm6Hggbk6ufYd3uBEuO79nN8gjw3JmahuWPev+AEXf5WRzKVk8tqv6Yo EA7Hs2LiDgFSFbqzu2ni8JAe8xgVZUVFQkKtJgXoJ1KAgSEpACPQMUkE+KTZI2YS i+QEl66I2zJRLUGaShetRTDvo2MWPYJJyCUNZlJelZ+6gi3D7Z2dogoDiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOM3mh8VXjirP1LMgTEzU0yqNaMUMB8GA1UdIwQY MBaAFPyWHfxfcL8bdvBeRKdO0CkxJeS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDIt NTAyOWQwYzk5OWI2LzEvNHplYUh4VmVPS3NfVXN5Qk1UTlRUS28xb3hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mZmU4Y2MtNzg1MS00MzJkLThjMDItNTAyOWQwYzk5OWI2 LzEvX0pZZF9GOXd2eHQyOEY1RXAwN1FLVEVsNUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwju5AwQB wnTMAwQAw76eMA0GCSqGSIb3DQEBCwUAA4IBAQDSH3qgFr0vGL2sJScIiL7bllSz eFLsG027sXzVZCRYih3MyAneYcNZ8gEJlIY6CrBJqgVoCiDwV17wxXnH0MJly/sg uMSKeJzK4TiryE5ZOwZbDrfW3nXhHO0u5fZ9bj8LY5/3X6I9w15u2gOTDlEHlqYm 6HJa3V1CCipiDJCYQ1cFhk4NN1Z5ANmSDo1ds+m+2cEN5pUH7auy6AYtIQLcsEJQ 1kqPXz2KQLt+O4wQ5mgEoV7vEjf465gTzzHSC8Z1AX2NaLukCL7xGvgB4eqBAoWL /VXgZbZ+c+HCaxh6fxxNfYSf+k0XtMhH23/XkF5AInGPZzJJdI6h9dQ5YmYs -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:14 2026 by rpki-client