This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/p4Ci63x1biX5rkNwdgShagWDKiQ.roa File: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (raw, json) Hash identifier: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8= Subject key identifier: A7:80:A2:EB:7C:75:6E:25:F9:AE:43:70:76:04:A1:6A:05:83:2A:24 Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Certificate serial: 019B7BA477B9E768BB60F0848BA2B0741028 Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/p4Ci63x1biX5rkNwdgShagWDKiQ.roa Signing time: Thu 01 Jan 2026 22:18:54 +0000 ROA not before: Thu 01 Jan 2026 22:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20542 IP address blocks: 185.55.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:77:b9:e7:68:bb:60:f0:84:8b:a2:b0:74:10:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Validity Not Before: Jan 1 22:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a780a2eb7c756e25f9ae43707604a16a05832a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:ef:f2:93:7a:ff:82:82:86:0d:c3:6a:e8: 4c:28:66:ce:ee:1a:da:53:0e:ef:46:70:02:04:c1: 7f:1e:bb:56:d7:87:df:35:77:0e:09:4e:23:d2:0b: 70:dd:c4:36:ac:90:05:f9:61:8e:f1:1f:d5:78:14: fc:77:67:d3:16:24:0a:d6:61:77:8e:f2:d7:eb:fc: a4:b8:07:56:c6:85:d0:07:1f:84:d1:52:e5:56:c8: 22:6c:c7:25:76:8b:78:16:39:fb:09:d6:4f:66:0b: 85:19:8f:db:f8:cf:70:98:53:30:f3:e1:1d:ff:30: d1:59:bf:df:b1:55:68:06:2f:05:4d:5c:88:82:b8: 44:c7:e9:a8:b4:80:f7:c5:c4:95:9d:ca:51:1e:b9: 33:cf:25:51:18:4f:7a:c2:37:bf:44:61:dd:7e:0e: d1:de:05:f7:aa:3f:30:27:b6:24:ff:78:3a:ae:34: e3:cc:3a:ca:29:0d:90:18:bc:f3:37:84:d4:5a:35: 98:ba:ab:f0:4b:88:b0:59:ca:19:eb:2b:ba:b2:54: 72:30:26:b3:ac:2f:1f:96:1d:3a:8a:70:92:d9:59: d1:85:d5:54:ea:a3:4c:9e:40:b9:95:19:f3:49:04: b9:38:f5:ec:bf:92:25:e2:87:4a:67:46:00:dd:d5: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:80:A2:EB:7C:75:6E:25:F9:AE:43:70:76:04:A1:6A:05:83:2A:24 X509v3 Authority Key Identifier: keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/p4Ci63x1biX5rkNwdgShagWDKiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.32.0/22 Signature Algorithm: sha256WithRSAEncryption c4:7c:01:4d:f3:59:2f:99:66:ab:37:f1:0c:af:ce:69:92:95: 51:b7:e9:0a:ff:d7:e7:c1:b1:72:d2:e7:40:7b:ad:0d:d7:36: 89:67:8c:64:98:d7:3b:6a:e5:9a:0d:48:e6:d7:d9:87:ad:10: eb:70:57:32:ce:0f:89:21:90:95:11:48:91:7c:0a:bd:4f:09: cf:83:bf:db:e1:97:4b:59:6b:40:f4:53:99:aa:40:9a:a8:66: 74:dd:a1:4c:5b:fa:df:15:4e:93:6a:76:0a:9f:92:6e:6f:0d: a7:88:c9:94:c0:12:f1:4f:9d:45:4b:f7:08:6b:b0:48:23:60: 2c:d2:f3:c4:13:37:75:84:19:2a:95:e4:6c:2a:cf:b5:5c:6c: c7:fb:e9:a9:2a:f9:62:6a:2a:df:3a:f4:58:af:69:25:81:19: c4:97:49:de:80:13:3a:6b:8e:d1:9d:18:8d:20:87:7b:25:16: 82:15:3b:35:4a:25:84:3a:33:2f:ab:d0:c4:2e:d1:08:7f:3c: d1:da:a3:58:2a:5e:da:8d:0f:b4:ce:61:1c:7d:90:68:1a:78: 71:a1:27:da:3a:3a:8d:d7:ba:0c:54:1c:b9:cc:f1:6e:a8:16: 25:a3:57:8e:de:c7:f9:09:d3:3a:4b:b7:e7:1b:b9:44:0b:39: 9d:b3:93:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pHe552i7YPCEi6KwdBAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi MzZlODEwHhcNMjYwMTAxMjIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzgwYTJlYjdjNzU2ZTI1ZjlhZTQzNzA3NjA0YTE2YTA1ODMyYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBPv8pN6/4KChg3DauhMKGbO7hra Uw7vRnACBMF/HrtW14ffNXcOCU4j0gtw3cQ2rJAF+WGO8R/VeBT8d2fTFiQK1mF3 jvLX6/ykuAdWxoXQBx+E0VLlVsgibMcldot4Fjn7CdZPZguFGY/b+M9wmFMw8+Ed /zDRWb/fsVVoBi8FTVyIgrhEx+motID3xcSVncpRHrkzzyVRGE96wje/RGHdfg7R 3gX3qj8wJ7Yk/3g6rjTjzDrKKQ2QGLzzN4TUWjWYuqvwS4iwWcoZ6yu6slRyMCaz rC8flh06inCS2VnRhdVU6qNMnkC5lRnzSQS5OPXsv5Il4odKZ0YA3dWvcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeAout8dW4l+a5DcHYEoWoFgyokMB8GA1UdIwQY MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt NTEwMWJlNWRkNjE1LzEvcDRDaTYzeDFiaVg1cmtOd2RnU2hhZ1dES2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1 LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTcgMA0G CSqGSIb3DQEBCwUAA4IBAQDEfAFN81kvmWarN/EMr85pkpVRt+kK/9fnwbFy0udA e60N1zaJZ4xkmNc7auWaDUjm19mHrRDrcFcyzg+JIZCVEUiRfAq9TwnPg7/b4ZdL WWtA9FOZqkCaqGZ03aFMW/rfFU6TanYKn5Jubw2niMmUwBLxT51FS/cIa7BII2As 0vPEEzd1hBkqleRsKs+1XGzH++mpKvliairfOvRYr2klgRnEl0negBM6a47RnRiN IId7JRaCFTs1SiWEOjMvq9DELtEIfzzR2qNYKl7ajQ+0zmEcfZBoGnhxoSfaOjqN 17oMVBy5zPFuqBYlo1eO3sf5CdM6S7fnG7lECzmds5My -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:06 2026 by rpki-client