This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/4jGHXl6kWOAh36sYuELN1LaN2J8.roa File: 4jGHXl6kWOAh36sYuELN1LaN2J8.roa (raw, json) Hash identifier: pteCQ8qTw2Dl8AAbMQbGtibM3E4YRXrmS1BWfb6Hkt0= Subject key identifier: E2:31:87:5E:5E:A4:58:E0:21:DF:AB:18:B8:42:CD:D4:B6:8D:D8:9F Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Certificate serial: 019B7911234E2A90CDCB61BDCD937F427794 Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/4jGHXl6kWOAh36sYuELN1LaN2J8.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203951 IP address blocks: 185.119.4.0/22 maxlen: 22 185.119.4.0/24 maxlen: 24 185.119.5.0/24 maxlen: 24 185.119.6.0/24 maxlen: 24 185.119.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:23:4e:2a:90:cd:cb:61:bd:cd:93:7f:42:77:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e231875e5ea458e021dfab18b842cdd4b68dd89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:8c:93:21:d8:01:5d:83:6c:3f:fb:a7:61: ec:a2:29:9b:1f:f5:98:86:94:4e:f6:3d:0e:de:1e: 59:b1:d0:19:a7:c6:c5:6a:8c:db:8c:1b:bd:83:5a: 46:86:91:07:29:d4:f8:8d:0b:1a:15:10:29:88:ee: 6a:99:fe:37:9e:07:6a:a0:c5:e8:27:9f:be:fd:71: 82:e7:1f:77:36:2d:d2:00:be:7e:84:df:f6:24:6a: 0d:2d:03:81:7c:d5:d4:4a:5b:eb:e2:9c:61:03:f8: 75:d5:80:1e:04:7f:78:19:20:0e:65:d6:c4:0f:43: 84:5e:91:58:0e:7d:4f:a0:25:f0:90:e8:65:18:26: fa:93:00:2c:e0:66:66:a8:e2:7c:1f:b8:da:72:03: 83:2d:06:57:1b:9c:de:ce:e5:ee:18:10:b9:2d:e4: 06:57:10:13:08:9d:19:2c:2f:8f:f1:bd:73:57:33: 32:25:3c:26:97:73:1e:1c:bc:8a:e9:25:30:d1:b4: 23:4f:87:d8:3a:9e:41:b9:2c:c4:f9:29:f4:26:dc: 2f:65:ce:96:4b:10:c6:f8:11:f1:41:68:59:ad:ec: f1:0b:e1:07:f1:6b:7c:1b:ba:8b:71:54:aa:a3:af: 91:a9:65:39:08:47:5d:30:b1:7c:9d:8b:07:7d:41: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:87:5E:5E:A4:58:E0:21:DF:AB:18:B8:42:CD:D4:B6:8D:D8:9F X509v3 Authority Key Identifier: keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/4jGHXl6kWOAh36sYuELN1LaN2J8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.4.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:d6:34:8a:3c:85:dc:78:10:cf:91:28:5b:4a:92:2c:63:d3: ae:c9:e2:c4:e3:cf:93:d4:d8:8f:51:27:80:93:90:f1:18:8b: 94:e3:e9:58:b5:07:51:f0:8e:d9:7c:7e:e6:ee:39:93:13:5b: 7c:84:30:b8:80:fb:54:93:a3:82:e8:7c:ae:0e:95:5a:2c:0f: 5e:76:53:3f:4e:12:48:25:ab:90:c1:c5:6f:df:83:15:16:3d: 8b:b6:6b:f1:98:22:3f:01:e7:be:49:dc:0c:f7:fd:84:bc:01: 80:e2:fa:67:b6:5c:ce:55:2f:db:33:c4:a9:f2:6b:40:d3:f5: 9a:27:c3:54:18:13:3a:3a:41:a5:18:cb:dd:de:af:49:a6:45: 5d:f4:06:43:cb:d3:01:51:1b:b8:02:6f:ea:7a:04:27:82:f2: 0f:f9:37:ea:09:ee:03:5a:f7:ae:5a:4b:72:f5:3b:58:7c:86: 86:b6:16:35:cf:42:90:10:c5:59:82:06:bf:98:3a:60:8a:bc: 10:44:99:a9:84:c7:b7:a4:4c:78:a7:6b:dd:5b:21:7f:d0:44: c9:f3:3c:70:42:19:eb:93:62:33:cc:45:07:91:68:d9:51:65: 9f:01:b9:d2:c9:a4:e4:6b:54:3b:c8:38:0f:69:df:30:74:c4: c1:7b:9e:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESNOKpDNy2G9zZN/QneUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGY5NGU0MGM5OWUxOWEzMjIzYTI5MzVkOGVjOTRlM2Q5 MjcwYmIwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjMxODc1ZTVlYTQ1OGUwMjFkZmFiMThiODQyY2RkNGI2OGRkODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6KMkyHYAV2DbD/7p2HsoimbH/WY hpRO9j0O3h5ZsdAZp8bFaozbjBu9g1pGhpEHKdT4jQsaFRApiO5qmf43ngdqoMXo J5++/XGC5x93Ni3SAL5+hN/2JGoNLQOBfNXUSlvr4pxhA/h11YAeBH94GSAOZdbE D0OEXpFYDn1PoCXwkOhlGCb6kwAs4GZmqOJ8H7jacgODLQZXG5zezuXuGBC5LeQG VxATCJ0ZLC+P8b1zVzMyJTwml3MeHLyK6SUw0bQjT4fYOp5BuSzE+Sn0JtwvZc6W SxDG+BHxQWhZrezxC+EH8Wt8G7qLcVSqo6+RqWU5CEddMLF8nYsHfUHccwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIxh15epFjgId+rGLhCzdS2jdifMB8GA1UdIwQY MBaAFC9PlOQMmeGaMiOik12OyU49knC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQt MDhlMDBkYTQwNDQ0LzEvNGpHSFhsNmtXT0FoMzZzWXVFTE4xTGFOMko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81MDRhMGUtNWNhMi00MzE3LWE4YWQtMDhlMDBkYTQwNDQ0 LzEvTDAtVTVBeVo0Wm95STZLVFhZN0pUajJTY0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXcEMA0G CSqGSIb3DQEBCwUAA4IBAQAa1jSKPIXceBDPkShbSpIsY9OuyeLE48+T1NiPUSeA k5DxGIuU4+lYtQdR8I7ZfH7m7jmTE1t8hDC4gPtUk6OC6HyuDpVaLA9edlM/ThJI JauQwcVv34MVFj2LtmvxmCI/Aee+SdwM9/2EvAGA4vpntlzOVS/bM8Sp8mtA0/Wa J8NUGBM6OkGlGMvd3q9JpkVd9AZDy9MBURu4Am/qegQngvIP+TfqCe4DWveuWkty 9TtYfIaGthY1z0KQEMVZgga/mDpgirwQRJmphMe3pEx4p2vdWyF/0ETJ8zxwQhnr k2IzzEUHkWjZUWWfAbnSyaTka1Q7yDgPad8wdMTBe57q -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:26 2026 by rpki-client