This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/4sUUJ2plPGrlHgJqJEpnOT8db0k.roa File: 4sUUJ2plPGrlHgJqJEpnOT8db0k.roa (raw, json) Hash identifier: 9TkCWduhIaGb7gCxKXssPcvjYmu7Zi+zWKigf1ePUnI= Subject key identifier: E2:C5:14:27:6A:65:3C:6A:E5:1E:02:6A:24:4A:67:39:3F:1D:6F:49 Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Certificate serial: 019B7EA6C784A49A90F29749343B27427E47 Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/4sUUJ2plPGrlHgJqJEpnOT8db0k.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13045 IP address blocks: 81.14.128.0/17 maxlen: 24 89.182.0.0/15 maxlen: 16 185.93.136.0/22 maxlen: 24 193.254.18.0/24 maxlen: 24 212.59.32.0/19 maxlen: 24 2a02:560::/29 maxlen: 32 2a02:560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c7:84:a4:9a:90:f2:97:49:34:3b:27:42:7e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2c514276a653c6ae51e026a244a67393f1d6f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:ae:68:1f:2b:b5:e0:74:62:29:7c:e0:73: 2b:ec:1d:e7:3c:74:30:ea:eb:f2:68:fe:f6:e7:b0: 56:bc:85:4a:16:41:e6:d6:aa:0f:db:2b:a5:8c:e8: da:38:45:cd:f6:f4:54:99:24:5a:6b:43:0c:05:5d: 18:ab:9a:c8:2e:e1:98:52:e9:47:12:74:56:a2:d3: 78:f9:5f:de:31:29:2c:d9:26:98:0c:ed:b3:01:eb: d6:ad:6d:27:43:85:44:45:9f:4a:76:e3:94:86:8b: 4d:da:f4:58:23:dd:0f:dc:f3:cd:e6:93:7c:72:bc: 83:fc:25:ea:3a:87:de:d5:73:95:7f:46:05:aa:b2: a6:41:3e:e2:d3:74:b3:53:cf:da:ed:18:88:0f:4f: 76:dd:5f:c0:1b:e1:bd:a3:7c:d9:7d:0b:75:53:64: 1a:31:e3:a3:b7:8d:6d:0f:21:5d:b0:a5:c1:1e:c2: a3:a7:a9:5c:dc:aa:a7:b2:c7:a4:5d:df:69:62:10: f3:6e:8e:07:a3:10:75:3b:6c:e8:69:35:94:5e:bd: d8:7b:4e:6b:2f:4c:ee:8b:80:9b:b9:ca:d6:ed:ae: 41:f1:75:b7:e2:30:8c:aa:67:b0:6e:ec:53:02:8c: 1d:b2:aa:89:77:ff:26:92:b1:03:21:2e:98:1b:72: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C5:14:27:6A:65:3C:6A:E5:1E:02:6A:24:4A:67:39:3F:1D:6F:49 X509v3 Authority Key Identifier: keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/4sUUJ2plPGrlHgJqJEpnOT8db0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.14.128.0/17 89.182.0.0/15 185.93.136.0/22 193.254.18.0/24 212.59.32.0/19 IPv6: 2a02:560::/29 Signature Algorithm: sha256WithRSAEncryption 2b:45:f3:c3:6f:31:ec:e1:0b:cc:c2:a9:02:71:a7:61:8f:cb: 99:b3:be:73:04:47:fe:19:85:96:3d:a9:cb:dd:ac:b6:89:41: bc:f8:46:20:a7:ac:7d:dd:53:47:b5:18:e8:68:de:ba:10:ed: 66:2a:89:0f:41:a1:09:94:6d:fa:73:6e:b1:8e:c2:8f:38:fa: a1:e5:17:ed:48:10:0c:b3:70:ca:48:a5:da:50:8a:4f:71:7c: 4c:bf:79:0c:fa:1f:8c:35:9e:6f:c2:f6:21:87:81:d5:12:ab: ab:1b:c3:d6:3d:70:ca:d3:be:c6:dd:29:08:f0:86:26:a2:98: 44:33:a9:c1:40:af:c3:54:af:37:cc:bd:96:bf:df:c8:2b:59: 26:6d:72:1f:68:00:bd:70:b9:db:5c:d1:3c:f8:32:df:bb:0b: 9c:75:4d:f9:cc:7d:34:a4:fb:f7:bf:0f:49:8e:31:f8:21:32: 25:69:26:0f:63:89:e4:10:16:d9:48:04:5d:09:61:ba:32:da: e2:e3:88:08:21:20:18:59:a8:d7:98:7c:63:b4:ab:9e:82:af: 7c:64:28:b3:bd:1a:6f:e3:27:b1:81:2d:7c:fe:3a:5e:aa:de: 09:f2:5d:11:40:26:fd:a4:3e:35:64:14:13:b4:c1:d8:73:5f: ad:b2:5a:59 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+pseEpJqQ8pdJNDsnQn5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi ZjJlMDEwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmM1MTQyNzZhNjUzYzZhZTUxZTAyNmEyNDRhNjczOTNmMWQ2ZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUCuaB8rteB0Yil84HMr7B3nPHQw 6uvyaP7257BWvIVKFkHm1qoP2yuljOjaOEXN9vRUmSRaa0MMBV0Yq5rILuGYUulH EnRWotN4+V/eMSks2SaYDO2zAevWrW0nQ4VERZ9KduOUhotN2vRYI90P3PPN5pN8 cryD/CXqOofe1XOVf0YFqrKmQT7i03SzU8/a7RiID0923V/AG+G9o3zZfQt1U2Qa MeOjt41tDyFdsKXBHsKjp6lc3KqnssekXd9pYhDzbo4HoxB1O2zoaTWUXr3Ye05r L0zui4CbucrW7a5B8XW34jCMqmewbuxTAowdsqqJd/8mkrEDIS6YG3KktQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFOLFFCdqZTxq5R4CaiRKZzk/HW9JMB8GA1UdIwQY MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt NTliMGZjOTEzZDM2LzEvNHNVVUoycGxQR3JsSGdKcUpFcG5PVDhkYjBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2 LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwQHUQ6AAwMB WbYDBAK5XYgDBADB/hIDBAXUOyAwDQQCAAIwBwMFAyoCBWAwDQYJKoZIhvcNAQEL BQADggEBACtF88NvMezhC8zCqQJxp2GPy5mzvnMER/4ZhZY9qcvdrLaJQbz4RiCn rH3dU0e1GOho3roQ7WYqiQ9BoQmUbfpzbrGOwo84+qHlF+1IEAyzcMpIpdpQik9x fEy/eQz6H4w1nm/C9iGHgdUSq6sbw9Y9cMrTvsbdKQjwhiaimEQzqcFAr8NUrzfM vZa/38grWSZtch9oAL1wudtc0Tz4Mt+7C5x1TfnMfTSk+/e/D0mOMfghMiVpJg9j ieQQFtlIBF0JYboy2uLjiAghIBhZqNeYfGO0q56Cr3xkKLO9Gm/jJ7GBLXz+Ol6q 3gnyXRFAJv2kPjVkFBO0wdhzX62yWlk= -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:29 2026 by rpki-client