This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4tQVaNV0x9Ey2wTHnR0Jedq3bAs.roa File: 4tQVaNV0x9Ey2wTHnR0Jedq3bAs.roa (raw, json) Hash identifier: zfYkJfqNvQADiZYjh0mIgSr8sY+dcyAtkFLs9urliN8= Subject key identifier: E2:D4:15:68:D5:74:C7:D1:32:DB:04:C7:9D:1D:09:79:DA:B7:6C:0B Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B9D2C746F5A5D59673DA41ADB54D65DEA Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4tQVaNV0x9Ey2wTHnR0Jedq3bAs.roa Signing time: Thu 08 Jan 2026 10:34:54 +0000 ROA not before: Thu 08 Jan 2026 10:34:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 185.214.108.0/24 maxlen: 24 185.227.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:2c:74:6f:5a:5d:59:67:3d:a4:1a:db:54:d6:5d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 8 10:34:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d41568d574c7d132db04c79d1d0979dab76c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:34:a1:f3:27:02:f7:34:72:b1:22:24:82: 2b:0c:6c:63:8d:1b:53:57:cd:39:2f:fb:62:53:32: eb:93:22:62:6e:71:58:b3:72:eb:47:b3:95:ef:8a: 42:7b:c6:50:26:04:57:8a:de:40:55:80:3a:10:8a: 23:ae:2d:26:a7:d8:62:5e:77:2b:93:37:e4:d7:b0: 7a:02:32:65:7a:3f:08:78:f1:cc:3c:b3:9f:b8:6d: b3:54:d6:54:41:62:b4:2d:74:a4:4b:94:7d:43:27: 98:74:54:19:7e:44:de:ff:4a:c1:b4:8a:bc:4b:21: 9a:14:f4:3f:38:c4:c9:0d:78:e0:1c:d4:bb:73:bb: 16:9c:1f:e1:f7:ae:7c:47:9f:18:ed:1d:4b:86:d4: 18:37:a2:8f:00:df:1f:22:2d:9d:93:91:c5:27:7f: 06:1a:64:10:6e:5c:70:cb:67:1c:95:83:74:09:80: 0a:3c:0a:df:b3:8f:a1:85:7e:f9:52:67:a3:8d:30: ce:c5:33:57:44:c4:9c:3b:95:55:ac:cc:43:9d:40: 3c:9d:2b:ca:d8:52:87:59:4e:9b:13:9b:18:67:a1: ca:2c:09:be:89:09:00:b0:dc:5d:fb:c4:07:39:18: 18:3a:a1:4e:9a:f6:26:7c:39:86:49:09:84:fc:ff: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:15:68:D5:74:C7:D1:32:DB:04:C7:9D:1D:09:79:DA:B7:6C:0B X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4tQVaNV0x9Ey2wTHnR0Jedq3bAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.108.0/24 185.227.144.0/24 Signature Algorithm: sha256WithRSAEncryption a7:5a:49:c7:9a:63:1c:62:67:7a:7f:10:37:52:e7:65:13:d9: 63:d9:15:c0:a7:1a:24:cc:02:fb:4f:47:d8:bb:7d:d7:d6:ad: 08:ad:fb:58:3b:c1:33:59:50:31:e1:d5:eb:6d:cd:91:80:7f: b1:e1:0d:2d:a3:09:7e:c6:a1:e4:b7:9f:ef:58:51:7f:d0:8b: f8:1d:17:e3:01:78:d9:36:61:92:10:70:51:45:38:6b:8d:0c: 33:25:f7:4e:bf:fa:9d:e1:8d:1f:ee:93:c9:cb:0e:bf:26:01: 95:e7:66:d0:fa:6a:ad:ed:7d:b3:3a:27:35:d5:7a:6a:4f:05: 5a:18:56:6e:2e:cc:fd:9f:21:8d:31:92:11:0d:6e:2e:7b:ab: f1:3f:2c:87:87:01:f2:4f:51:d2:9f:bc:fa:3a:46:1b:47:12: 51:ba:02:69:ec:2f:65:82:a3:9d:c4:ae:4d:b8:47:16:bc:08: ef:3d:9e:6c:95:a3:b7:01:37:c3:e1:29:54:50:20:ba:00:0b: 73:82:9a:ad:ee:ae:e9:19:73:50:26:7d:a5:df:c1:75:80:3c: db:80:31:41:28:ce:fe:fa:81:c0:7e:13:49:b7:0f:53:94:78: 3a:9d:93:52:59:b5:99:94:ee:75:e3:9a:6f:fa:b2:45:13:6c: e9:02:87:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZudLHRvWl1ZZz2kGttU1l3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTA4MTAzNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQ0MTU2OGQ1NzRjN2QxMzJkYjA0Yzc5ZDFkMDk3OWRhYjc2YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDc0ofMnAvc0crEiJIIrDGxjjRtT V805L/tiUzLrkyJibnFYs3LrR7OV74pCe8ZQJgRXit5AVYA6EIojri0mp9hiXncr kzfk17B6AjJlej8IePHMPLOfuG2zVNZUQWK0LXSkS5R9QyeYdFQZfkTe/0rBtIq8 SyGaFPQ/OMTJDXjgHNS7c7sWnB/h9658R58Y7R1LhtQYN6KPAN8fIi2dk5HFJ38G GmQQblxwy2cclYN0CYAKPArfs4+hhX75UmejjTDOxTNXRMScO5VVrMxDnUA8nSvK 2FKHWU6bE5sYZ6HKLAm+iQkAsNxd+8QHORgYOqFOmvYmfDmGSQmE/P/2gQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOLUFWjVdMfRMtsEx50dCXnat2wLMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNHRRVmFOVjB4OUV5MndUSG5SMEplZHEzYkFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudZsAwQA ueOQMA0GCSqGSIb3DQEBCwUAA4IBAQCnWknHmmMcYmd6fxA3UudlE9lj2RXApxok zAL7T0fYu33X1q0IrftYO8EzWVAx4dXrbc2RgH+x4Q0towl+xqHkt5/vWFF/0Iv4 HRfjAXjZNmGSEHBRRThrjQwzJfdOv/qd4Y0f7pPJyw6/JgGV52bQ+mqt7X2zOic1 1XpqTwVaGFZuLsz9nyGNMZIRDW4ue6vxPyyHhwHyT1HSn7z6OkYbRxJRugJp7C9l gqOdxK5NuEcWvAjvPZ5slaO3ATfD4SlUUCC6AAtzgpqt7q7pGXNQJn2l38F1gDzb gDFBKM7++oHAfhNJtw9TlHg6nZNSWbWZlO5145pv+rJFE2zpAoeB -----END CERTIFICATE-----Generated at Fri Jan 9 18:38:14 2026 by rpki-client