This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/_4I_-jCH3XR23JxHVWzlSOPi3_M.roa File: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (raw, json) Hash identifier: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4= Subject key identifier: FF:82:3F:FA:30:87:DD:74:76:DC:9C:47:55:6C:E5:48:E3:E2:DF:F3 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019B77C70CA03FE8EEC6AF7E2B41390A8F00 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/_4I_-jCH3XR23JxHVWzlSOPi3_M.roa Signing time: Thu 01 Jan 2026 04:18:12 +0000 ROA not before: Thu 01 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 37.58.128.0/17 maxlen: 24 91.206.156.0/23 maxlen: 24 91.229.230.0/23 maxlen: 24 185.15.128.0/22 maxlen: 24 194.177.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0c:a0:3f:e8:ee:c6:af:7e:2b:41:39:0a:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jan 1 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff823ffa3087dd7476dc9c47556ce548e3e2dff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:d9:64:84:1c:61:7a:80:01:55:3a:da:fb: 37:b4:99:4b:79:07:53:f9:79:64:7b:30:d8:88:32: 90:a7:ff:ee:bd:28:a6:de:ab:8e:7b:0b:4b:b2:c0: 0b:88:75:5a:07:03:6b:d8:ea:28:6c:93:9b:81:db: f2:91:3d:7d:78:f6:d1:44:cd:02:68:47:89:fe:fe: 4c:ca:0c:bf:91:f9:72:fb:dd:ba:91:69:41:68:28: 84:76:cf:88:4c:c1:9f:ad:c0:14:71:be:ec:4e:a2: 64:41:a6:0d:24:cc:df:a1:97:dd:de:c6:d8:25:f4: a8:40:74:38:71:ac:d9:8b:5d:b8:62:c7:6b:a9:92: a0:15:db:83:0b:79:f2:47:66:bc:14:92:60:6c:67: 1d:d1:5a:41:dc:6c:c6:62:9a:b4:0a:7c:0d:25:88: 8e:0b:47:f7:2d:c3:19:c3:32:db:40:43:da:8c:c5: 23:91:55:86:78:58:58:55:47:5f:ef:d3:d9:e2:57: c1:e1:1b:bc:78:05:26:26:ad:18:c2:f1:ed:fb:9b: 45:94:4b:a5:b9:55:7a:e4:bf:02:06:5e:21:97:b1: 8e:3a:65:18:1e:14:84:6d:9e:39:00:97:fd:35:b3: 8a:3d:63:6f:5a:23:67:c2:13:53:18:f7:bf:0f:d4: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:3F:FA:30:87:DD:74:76:DC:9C:47:55:6C:E5:48:E3:E2:DF:F3 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/_4I_-jCH3XR23JxHVWzlSOPi3_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.58.128.0/17 91.206.156.0/23 91.229.230.0/23 185.15.128.0/22 194.177.32.0/19 Signature Algorithm: sha256WithRSAEncryption 41:5c:13:a5:48:f0:b8:4b:f1:b9:f5:8d:5f:9f:bb:c2:86:50: 17:dc:d2:1a:91:c0:93:77:06:96:42:ce:a6:3c:66:11:b6:a3: 27:1d:44:08:d7:00:34:85:10:67:cf:3f:4c:67:8c:0f:f4:9f: 52:ba:02:ba:c4:f4:68:76:c9:e5:39:12:36:85:23:bf:44:19: 5b:1a:b7:07:a1:d2:24:08:a1:fb:99:7d:22:72:8a:81:18:c0: 8b:39:03:4e:db:d0:b7:7f:e3:90:df:58:cf:b3:55:74:b2:21: 08:89:7f:7d:12:c3:d4:59:26:f8:bd:84:60:a3:a7:59:e9:51: b9:8c:05:7b:68:a6:1e:5d:f3:56:2a:aa:2a:76:30:cc:f1:13: 51:5b:89:10:86:59:34:64:ce:2d:3a:9a:17:71:d8:8d:4d:44: ab:25:85:f2:cf:bf:58:d4:10:f4:26:58:77:15:97:e4:a1:34: 96:e1:c8:af:77:2e:9e:eb:96:5e:3c:37:dc:0e:61:e7:82:bf: 6b:1d:e9:af:7a:90:13:c0:bb:12:4e:b9:ea:d8:e4:db:d8:c8: 5f:2b:b0:77:b4:8b:e9:e2:75:6c:ce:09:39:b1:f5:c3:74:01: 90:c4:06:cf:07:56:f6:cb:8e:24:e9:b5:ed:ab:eb:c6:b1:50: 1e:79:07:c0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xwygP+juxq9+K0E5Co8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwMTAxMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjgyM2ZmYTMwODdkZDc0NzZkYzljNDc1NTZjZTU0OGUzZTJkZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGjZZIQcYXqAAVU62vs3tJlLeQdT +XlkezDYiDKQp//uvSim3quOewtLssALiHVaBwNr2OoobJObgdvykT19ePbRRM0C aEeJ/v5Mygy/kfly+926kWlBaCiEds+ITMGfrcAUcb7sTqJkQaYNJMzfoZfd3sbY JfSoQHQ4cazZi124YsdrqZKgFduDC3nyR2a8FJJgbGcd0VpB3GzGYpq0CnwNJYiO C0f3LcMZwzLbQEPajMUjkVWGeFhYVUdf79PZ4lfB4Ru8eAUmJq0YwvHt+5tFlEul uVV65L8CBl4hl7GOOmUYHhSEbZ45AJf9NbOKPWNvWiNnwhNTGPe/D9T7ewIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFP+CP/owh910dtycR1Vs5Ujj4t/zMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvXzRJXy1qQ0gzWFIyM0p4SFZXemxTT1BpM19NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHJTqAAwQB W86cAwQBW+XmAwQCuQ+AAwQFwrEgMA0GCSqGSIb3DQEBCwUAA4IBAQBBXBOlSPC4 S/G59Y1fn7vChlAX3NIakcCTdwaWQs6mPGYRtqMnHUQI1wA0hRBnzz9MZ4wP9J9S ugK6xPRodsnlORI2hSO/RBlbGrcHodIkCKH7mX0icoqBGMCLOQNO29C3f+OQ31jP s1V0siEIiX99EsPUWSb4vYRgo6dZ6VG5jAV7aKYeXfNWKqoqdjDM8RNRW4kQhlk0 ZM4tOpoXcdiNTUSrJYXyz79Y1BD0Jlh3FZfkoTSW4civdy6e65ZePDfcDmHngr9r HemvepATwLsSTrnq2OTb2MhfK7B3tIvp4nVszgk5sfXDdAGQxAbPB1b2y44k6bXt q+vGsVAeeQfA -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:26 2026 by rpki-client