This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/4-75SqKybK6_eeP2dIZh56LuVjs.roa File: 4-75SqKybK6_eeP2dIZh56LuVjs.roa (raw, json) Hash identifier: uDRIV5xJtyJLjYz1uVVuFgg/7FAFgTx2RSpRb7N8B64= Subject key identifier: E3:EE:F9:4A:A2:B2:6C:AE:BF:79:E3:F6:74:86:61:E7:A2:EE:56:3B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B08FAA22931388045A74FFE2B8ACB Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/4-75SqKybK6_eeP2dIZh56LuVjs.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 87.236.38.0/24 maxlen: 24 194.26.195.0/24 maxlen: 24 2a05:9080::/48 maxlen: 48 2a05:9080:4::/48 maxlen: 48 2a05:9080:7::/48 maxlen: 48 2a05:9080:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:fa:a2:29:31:38:80:45:a7:4f:fe:2b:8a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3eef94aa2b26caebf79e3f6748661e7a2ee563b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:34:89:07:0d:e2:a2:d8:8a:da:89:cd:26: 6c:16:59:09:8a:dd:c1:ee:64:b1:f8:b8:4d:3a:82: 93:43:a7:8a:0d:6d:20:47:b2:4c:cc:e5:d2:20:42: 2c:5c:04:0d:a1:bb:c3:fd:77:37:2c:34:fc:31:21: 25:a8:8a:96:a2:35:c8:80:70:be:76:42:ac:3c:5d: 38:ba:78:0b:ab:8c:4f:5a:d8:05:2b:61:b8:8e:2a: 3f:d7:46:de:7c:2d:82:91:6e:ba:2c:84:17:2e:ad: 83:7d:a0:a7:b4:67:0a:99:56:9a:1d:c0:a5:8d:02: d7:44:7b:65:e0:cf:8e:ef:47:41:56:6d:06:f6:e7: 85:54:a9:2e:d6:0a:e1:eb:7c:70:51:f8:12:71:c4: fb:e0:71:6c:f7:e6:8a:b2:e5:b3:fc:64:65:22:93: 1b:bf:dc:31:97:6b:55:eb:03:2e:eb:b1:8d:d7:3d: 99:ca:a9:f7:0e:d4:3b:7f:4f:06:16:bf:b3:9a:21: ad:2b:1a:61:7e:e2:ec:0d:aa:b8:d4:fe:63:e5:20: d9:99:e5:8c:fa:2d:03:cc:7a:4c:42:32:3c:93:73: da:d9:a2:f8:d7:cf:6a:9c:d5:97:3f:be:41:c1:a8: 01:b5:8d:16:b8:94:07:60:c1:2c:25:3d:6e:8d:fd: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:F9:4A:A2:B2:6C:AE:BF:79:E3:F6:74:86:61:E7:A2:EE:56:3B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/4-75SqKybK6_eeP2dIZh56LuVjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.38.0/24 194.26.195.0/24 IPv6: 2a05:9080::/48 2a05:9080:4::/48 2a05:9080:7::/48 2a05:9080:10::/48 Signature Algorithm: sha256WithRSAEncryption a7:a3:bc:ba:ae:a1:fd:42:cb:be:3b:67:dc:dd:b1:72:8c:45: 0c:2b:bb:d8:63:56:2e:03:ec:e0:8d:ea:6e:5a:22:d2:36:7c: 7e:4f:44:ad:59:d2:f3:0f:27:73:67:02:31:09:6f:e8:11:37: 3a:3c:7b:33:f1:d3:24:0b:5a:99:d1:f3:9b:b1:f7:eb:52:b7: 0a:43:05:ea:de:a1:d7:81:de:bc:e0:a3:13:77:f8:04:7e:83: 11:eb:3c:ad:cb:26:2d:25:21:9d:c4:c3:ad:d8:10:10:81:da: b3:de:8c:82:04:31:e1:be:96:58:cb:b5:c7:20:94:3b:e4:0c: 4e:42:2b:af:6f:61:63:81:5e:78:85:f6:45:ff:e5:53:3e:8f: 25:2a:b8:52:89:41:da:4a:2b:0f:dd:07:df:fa:ca:9d:c7:bb: 78:da:d2:e8:6e:eb:ca:7e:26:8d:bc:a6:cd:b1:57:b5:f2:5e: ba:67:08:32:b3:bd:9f:eb:0b:b6:23:07:da:ac:b3:97:f5:b4: ae:76:f9:7e:c5:80:45:13:0c:98:93:60:04:63:22:40:37:43: d4:ef:37:05:f4:97:c5:72:21:74:79:0c:60:bf:e7:a0:e8:f4: f1:c9:83:d6:a8:ce:58:7f:30:5a:a6:31:e0:14:3c:eb:19:21: c6:85:e2:a3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt6Wwj6oikxOIBFp0/+K4rLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2VlZjk0YWEyYjI2Y2FlYmY3OWUzZjY3NDg2NjFlN2EyZWU1NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxA0iQcN4qLYitqJzSZsFlkJit3B 7mSx+LhNOoKTQ6eKDW0gR7JMzOXSIEIsXAQNobvD/Xc3LDT8MSElqIqWojXIgHC+ dkKsPF04ungLq4xPWtgFK2G4jio/10befC2CkW66LIQXLq2DfaCntGcKmVaaHcCl jQLXRHtl4M+O70dBVm0G9ueFVKku1grh63xwUfgSccT74HFs9+aKsuWz/GRlIpMb v9wxl2tV6wMu67GN1z2Zyqn3DtQ7f08GFr+zmiGtKxphfuLsDaq41P5j5SDZmeWM +i0DzHpMQjI8k3Pa2aL4189qnNWXP75BwagBtY0WuJQHYMEsJT1ujf0RRQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFOPu+Uqismyuv3nj9nSGYeei7lY7MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvNC03NVNxS3liSzZfZWVQMmRJWmg1Nkx1VmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQAV+wmAwQA whrDMCoEAgACMCQDBwAqBZCAAAADBwAqBZCAAAQDBwAqBZCAAAcDBwAqBZCAABAw DQYJKoZIhvcNAQELBQADggEBAKejvLquof1Cy747Z9zdsXKMRQwru9hjVi4D7OCN 6m5aItI2fH5PRK1Z0vMPJ3NnAjEJb+gRNzo8ezPx0yQLWpnR85ux9+tStwpDBere odeB3rzgoxN3+AR+gxHrPK3LJi0lIZ3Ew63YEBCB2rPejIIEMeG+lljLtccglDvk DE5CK69vYWOBXniF9kX/5VM+jyUquFKJQdpKKw/dB9/6yp3Hu3ja0uhu68p+Jo28 ps2xV7XyXrpnCDKzvZ/rC7YjB9qss5f1tK52+X7FgEUTDJiTYARjIkA3Q9TvNwX0 l8VyIXR5DGC/56Do9PHJg9aozlh/MFqmMeAUPOsZIcaF4qM= -----END CERTIFICATE-----Generated at Mon Jan 5 13:05:26 2026 by rpki-client