This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa File: 4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa (raw, json) Hash identifier: k8WIMVFcRpJlyoFhqw0jvwfZZEEvQUGCcnVD6bn529U= Subject key identifier: E0:F3:2F:F3:FC:A6:01:BE:A0:99:0C:5D:0E:CE:E1:E5:25:BF:7D:EE Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Certificate serial: 019B7D5AD5FAE585BB652401650FDCA90508 Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa Signing time: Fri 02 Jan 2026 06:17:43 +0000 ROA not before: Fri 02 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33869 IP address blocks: 194.150.206.0/23 maxlen: 23 217.113.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d5:fa:e5:85:bb:65:24:01:65:0f:dc:a9:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Validity Not Before: Jan 2 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f32ff3fca601bea0990c5d0ecee1e525bf7dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:ac:a7:1c:53:e0:f6:59:d1:21:67:3d:f8: 24:17:49:f5:18:c6:c4:0f:77:46:93:ed:da:56:fd: f8:85:c6:52:dd:d3:74:af:8c:a5:77:5c:2b:b7:14: 40:9f:30:f5:02:6c:17:1d:b1:54:77:16:99:69:e4: ba:ec:2a:49:fb:31:16:e2:12:6b:4d:f0:4b:8b:ee: 72:36:0a:2c:ab:7d:91:e7:5a:dd:83:b2:69:69:eb: ab:4e:d5:64:76:8d:a9:35:14:75:d5:bc:1c:b7:ff: 1f:6f:30:c6:97:6e:c7:4c:90:26:34:1e:38:98:5a: 7a:85:5f:28:74:0a:0d:5d:c2:a3:da:09:b1:cd:cb: 18:b6:f7:52:37:53:9e:0c:52:db:8d:e6:b0:63:74: 51:dd:33:18:4a:d0:53:fd:b8:2b:34:f7:0a:e2:c2: c9:1b:43:6f:96:e4:e0:dd:3f:3f:9f:cc:f3:c9:e9: 1e:c6:f4:89:88:3e:ae:4c:4e:26:4d:4a:09:37:e0: 1a:ba:9c:dd:62:57:39:83:ce:85:47:e6:a7:ba:d4: 5b:a9:43:17:d3:fc:20:0c:0a:0b:81:3c:64:b6:a0: b3:5f:1d:25:95:df:3e:7f:af:e7:48:47:fd:f5:f0: f0:00:d3:ac:c8:00:16:dd:73:ff:35:95:ae:26:f2: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F3:2F:F3:FC:A6:01:BE:A0:99:0C:5D:0E:CE:E1:E5:25:BF:7D:EE X509v3 Authority Key Identifier: keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/4PMv8_ymAb6gmQxdDs7h5SW_fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.150.206.0/23 217.113.128.0/20 Signature Algorithm: sha256WithRSAEncryption 5f:c5:b1:63:1c:eb:2a:07:01:ab:20:61:65:41:33:9a:d6:9a: 57:96:36:5b:ba:c1:89:79:f6:60:27:5e:5b:3c:a8:a6:e8:e6: 1b:7f:84:3b:fb:13:ce:fd:f0:a8:4c:8d:85:8d:00:4a:59:19: b8:ef:75:34:aa:f6:ec:3e:45:bc:b7:9a:be:ce:67:2d:c5:72: d5:68:77:1c:e0:09:da:28:8c:1f:4b:aa:a6:62:b3:ec:9b:96: 6a:1f:00:4a:ef:6b:3e:c6:0f:24:7f:3b:42:69:76:22:d3:8e: 33:31:df:f9:b6:bb:85:a5:f5:e6:1e:aa:72:35:c6:22:d7:f0: c5:56:a3:f0:c8:1c:6b:ca:fe:0b:cc:fc:93:35:52:bc:47:50: cb:58:c4:ed:55:3a:47:d4:10:ca:c0:ee:89:a7:8a:b8:20:7f: 83:a4:d8:75:53:31:c1:b7:ca:9e:66:99:fe:2a:42:76:b5:a0: f4:a7:4f:8b:55:0b:c7:85:90:5a:e8:a1:dc:99:00:58:bb:32: 71:cf:6b:b6:a2:cf:95:f5:0e:fc:56:6b:6b:98:3e:cf:f8:c0: 21:b0:c2:6c:43:a1:a7:7f:52:68:e4:a8:14:1f:ec:18:f3:7e: 21:09:eb:6a:1d:28:73:ac:c5:64:13:10:2d:a5:78:a4:13:3c: a8:4e:1b:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WtX65YW7ZSQBZQ/cqQUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz YmMwNzgwHhcNMjYwMTAyMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGYzMmZmM2ZjYTYwMWJlYTA5OTBjNWQwZWNlZTFlNTI1YmY3ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiOspxxT4PZZ0SFnPfgkF0n1GMbE D3dGk+3aVv34hcZS3dN0r4yld1wrtxRAnzD1AmwXHbFUdxaZaeS67CpJ+zEW4hJr TfBLi+5yNgosq32R51rdg7JpaeurTtVkdo2pNRR11bwct/8fbzDGl27HTJAmNB44 mFp6hV8odAoNXcKj2gmxzcsYtvdSN1OeDFLbjeawY3RR3TMYStBT/bgrNPcK4sLJ G0NvluTg3T8/n8zzyekexvSJiD6uTE4mTUoJN+AaupzdYlc5g86FR+anutRbqUMX 0/wgDAoLgTxktqCzXx0lld8+f6/nSEf99fDwANOsyAAW3XP/NZWuJvJ5IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFODzL/P8pgG+oJkMXQ7O4eUlv33uMB8GA1UdIwQY MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt ZTc0ZDhkMWQ0ZTAyLzEvNFBNdjhfeW1BYjZnbVF4ZERzN2g1U1dfZmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwpbOAwQE 2XGAMA0GCSqGSIb3DQEBCwUAA4IBAQBfxbFjHOsqBwGrIGFlQTOa1ppXljZbusGJ efZgJ15bPKim6OYbf4Q7+xPO/fCoTI2FjQBKWRm473U0qvbsPkW8t5q+zmctxXLV aHcc4AnaKIwfS6qmYrPsm5ZqHwBK72s+xg8kfztCaXYi044zMd/5truFpfXmHqpy NcYi1/DFVqPwyBxryv4LzPyTNVK8R1DLWMTtVTpH1BDKwO6Jp4q4IH+DpNh1UzHB t8qeZpn+KkJ2taD0p0+LVQvHhZBa6KHcmQBYuzJxz2u2os+V9Q78VmtrmD7P+MAh sMJsQ6Gnf1Jo5KgUH+wY834hCetqHShzrMVkExAtpXikEzyoThtd -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:58 2026 by rpki-client