This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/S4wgEzwu0A2vm1VQWPPTFVYsI9o.roa File: S4wgEzwu0A2vm1VQWPPTFVYsI9o.roa (raw, json) Hash identifier: wQE4gq6WepgedvHZAUnDuDNwD8qtyedRwrEsafYQxBY= Subject key identifier: 4B:8C:20:13:3C:2E:D0:0D:AF:9B:55:50:58:F3:D3:15:56:2C:23:DA Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Certificate serial: 019B7D5B12558069F049D0CD0048A0FF4F7B Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/S4wgEzwu0A2vm1VQWPPTFVYsI9o.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210615 IP address blocks: 87.236.145.0/24 maxlen: 24 2a14:9a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:12:55:80:69:f0:49:d0:cd:00:48:a0:ff:4f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b8c20133c2ed00daf9b555058f3d315562c23da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:21:18:c5:47:fc:78:e4:62:98:0e:6a:d8: 91:ac:a3:d6:e8:4d:10:c1:15:f5:93:f6:3c:dc:1c: bf:f8:79:f1:2f:e8:fd:cf:7c:2d:b2:81:e9:8a:97: ba:f9:84:3a:44:e6:a1:0d:ba:62:6d:e0:f7:1d:31: dc:c2:6e:89:78:11:2f:92:f8:bb:4b:f3:86:a2:62: e4:9b:14:dd:68:dd:64:60:00:e6:a1:30:d7:bd:e3: 58:19:e8:37:ad:74:86:ad:1e:24:c0:ee:65:85:d0: b1:0f:14:73:44:37:0f:a5:0a:f2:1b:91:1e:b8:2a: d7:dc:e0:2f:15:1e:c5:fa:d3:d8:cf:3a:b0:b9:36: 92:fc:51:3f:50:67:d4:92:ee:d6:27:e0:0f:d9:7d: 0b:7e:7c:fb:7e:1a:e7:97:ec:a3:95:8b:d2:33:ef: 71:15:44:dd:9c:70:b7:cb:f8:d2:a6:5d:4b:17:bb: f8:db:35:a0:05:7c:e1:73:02:54:f4:3f:b1:19:ba: aa:ce:37:4c:64:11:ef:3c:3f:5d:51:11:0e:54:ab: bc:97:69:ad:b3:b3:2e:d4:0e:f3:69:0b:9e:2c:f9: 2e:79:d7:b0:e7:9a:71:8a:30:03:e7:03:bc:7b:cb: 67:c1:19:c0:3c:62:7b:4d:d0:6f:24:5b:4a:3e:fb: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8C:20:13:3C:2E:D0:0D:AF:9B:55:50:58:F3:D3:15:56:2C:23:DA X509v3 Authority Key Identifier: keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/S4wgEzwu0A2vm1VQWPPTFVYsI9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.145.0/24 IPv6: 2a14:9a80::/29 Signature Algorithm: sha256WithRSAEncryption b2:47:7e:92:74:90:b8:b6:12:4f:83:3a:61:46:c7:98:34:0c: 7c:e1:2d:2c:ab:d9:fb:4f:f0:4b:85:76:27:60:38:62:bc:42: 13:d3:31:ae:bd:8b:bf:a8:01:e7:ba:fa:94:bd:b3:54:80:e5: 60:12:e5:fc:29:9e:70:13:07:ef:2c:cd:2a:c4:5e:52:78:18: c8:26:03:c6:cc:c7:e2:c8:73:4d:21:9c:d7:69:67:68:59:7d: c7:4a:90:2a:62:a7:35:e3:60:a6:31:31:57:ec:f1:6f:a4:40: 98:26:60:5f:7b:85:28:68:7e:c2:f4:32:d8:b7:04:01:22:5a: 02:81:d0:03:46:64:db:83:e8:4e:69:c5:b0:90:22:98:98:bb: e2:99:6e:4a:5a:80:c2:67:7d:35:c4:49:7c:3c:26:52:00:68: 20:3a:fb:a5:55:ba:9c:e8:e5:77:19:16:cd:3e:bc:a8:5c:11: 42:03:2e:95:e8:ef:45:87:24:4a:d1:fa:07:c3:5e:1d:23:e1: 4a:6c:69:17:fe:d6:2d:88:dd:18:af:6c:4e:c2:2e:af:04:88: 1a:bc:cf:23:8d:1c:fd:c7:f5:af:51:c1:25:3b:ef:71:11:2a: c8:be:55:da:02:46:57:66:50:3a:b8:13:22:71:9b:6a:d7:69: 09:43:43:67 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9WxJVgGnwSdDNAEig/097MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjI2NDhlOTEzYTM2NDBmMDMxYjYzYTZiZDkyYjBlMjhl MTM5ZmIwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjhjMjAxMzNjMmVkMDBkYWY5YjU1NTA1OGYzZDMxNTU2MmMyM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVYhGMVH/HjkYpgOatiRrKPW6E0Q wRX1k/Y83By/+HnxL+j9z3wtsoHpipe6+YQ6ROahDbpibeD3HTHcwm6JeBEvkvi7 S/OGomLkmxTdaN1kYADmoTDXveNYGeg3rXSGrR4kwO5lhdCxDxRzRDcPpQryG5Ee uCrX3OAvFR7F+tPYzzqwuTaS/FE/UGfUku7WJ+AP2X0Lfnz7fhrnl+yjlYvSM+9x FUTdnHC3y/jSpl1LF7v42zWgBXzhcwJU9D+xGbqqzjdMZBHvPD9dUREOVKu8l2mt s7Mu1A7zaQueLPkuedew55pxijAD5wO8e8tnwRnAPGJ7TdBvJFtKPvvrWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEuMIBM8LtANr5tVUFjz0xVWLCPaMB8GA1UdIwQY MBaAFJtiZI6ROjZA8DG2OmvZKw4o4Tn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMt OThiZDE1NjAyOWMwLzEvUzR3Z0V6d3UwQTJ2bTFWUVdQUFRGVllzSTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMtOThiZDE1NjAyOWMw LzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAV+yRMA0E AgACMAcDBQMqFJqAMA0GCSqGSIb3DQEBCwUAA4IBAQCyR36SdJC4thJPgzphRseY NAx84S0sq9n7T/BLhXYnYDhivEIT0zGuvYu/qAHnuvqUvbNUgOVgEuX8KZ5wEwfv LM0qxF5SeBjIJgPGzMfiyHNNIZzXaWdoWX3HSpAqYqc142CmMTFX7PFvpECYJmBf e4UoaH7C9DLYtwQBIloCgdADRmTbg+hOacWwkCKYmLvimW5KWoDCZ301xEl8PCZS AGggOvulVbqc6OV3GRbNPryoXBFCAy6V6O9FhyRK0foHw14dI+FKbGkX/tYtiN0Y r2xOwi6vBIgavM8jjRz9x/WvUcElO+9xESrIvlXaAkZXZlA6uBMicZtq12kJQ0Nn -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:19 2026 by rpki-client