This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/4Et2FEuVd4yMRqu4nNmNFk3gGwQ.roa File: 4Et2FEuVd4yMRqu4nNmNFk3gGwQ.roa (raw, json) Hash identifier: jjoiLF44l4+yah2U1/vSTzToVAf877+4InBXrM7HTBw= Subject key identifier: E0:4B:76:14:4B:95:77:8C:8C:46:AB:B8:9C:D9:8D:16:4D:E0:1B:04 Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2 Certificate serial: 019B7AC8EC368AF93558C8A5D7D73295D124 Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/4Et2FEuVd4yMRqu4nNmNFk3gGwQ.roa Signing time: Thu 01 Jan 2026 18:19:06 +0000 ROA not before: Thu 01 Jan 2026 18:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214484 IP address blocks: 185.188.17.0/24 maxlen: 24 2a01:e800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ec:36:8a:f9:35:58:c8:a5:d7:d7:32:95:d1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2 Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e04b76144b95778c8c46abb89cd98d164de01b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:a0:c3:ad:4f:e3:fa:fd:f3:be:3f:8d:c2: e3:b1:bf:b7:83:c1:05:11:0e:f6:bb:b9:d5:4a:55: 45:fc:d5:99:19:28:e4:cb:c3:f0:21:70:32:a7:92: 29:94:8f:88:a3:2e:7f:b6:e1:28:e2:c8:60:5d:24: 3e:5d:18:9d:7d:c3:90:88:0e:9c:11:ee:b1:48:72: 9b:36:05:e7:a1:da:01:68:93:1f:26:62:f0:ce:dd: 54:99:56:68:30:c3:13:fb:ee:21:dd:2b:ca:3b:18: 41:34:ac:19:dd:31:82:e0:a4:e3:62:f1:ff:c8:7e: db:64:07:02:d2:24:8f:5b:27:ee:b6:b7:33:83:6a: 15:3f:43:ae:75:7f:c6:50:be:0e:b0:2c:ef:dc:18: e3:42:d5:48:69:f6:1a:9f:11:88:64:2d:aa:0e:11: 25:51:de:68:3f:cc:d7:29:cd:99:be:24:da:50:4d: fe:b6:00:c7:b3:4d:51:43:f7:11:77:c3:e6:41:00: 01:5d:73:d6:1e:01:b6:ef:5c:ff:c6:f6:35:21:20: c4:f4:d9:da:98:95:61:ae:56:11:97:66:c7:41:42: 89:0a:d4:9d:f7:c2:66:6e:56:99:91:51:4a:91:c1: f0:51:c3:d2:4e:52:64:89:17:25:7d:f4:a1:83:19: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4B:76:14:4B:95:77:8C:8C:46:AB:B8:9C:D9:8D:16:4D:E0:1B:04 X509v3 Authority Key Identifier: keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/4Et2FEuVd4yMRqu4nNmNFk3gGwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.17.0/24 IPv6: 2a01:e800::/29 Signature Algorithm: sha256WithRSAEncryption 21:5a:ed:d7:e8:27:67:5e:9b:77:aa:e4:f9:d2:07:51:17:51: d3:e7:ca:81:2b:24:fc:45:eb:56:ba:c6:bb:b9:df:4d:92:41: ac:d4:63:1d:ef:01:08:55:a4:49:ed:97:3a:c2:04:9e:29:ac: 20:d8:98:b0:b6:50:ce:e9:c5:34:42:3d:34:f4:17:c0:ea:9f: 32:65:21:23:35:19:35:19:01:34:6e:cf:63:14:23:f7:7d:b9: a7:37:39:f9:16:3c:d9:9c:ab:95:48:84:8e:06:e2:87:8a:2b: eb:7c:16:e2:81:a9:aa:d1:81:d2:fa:2f:23:12:d3:27:d5:89: b6:d1:13:d4:d0:94:f4:e9:2d:d8:31:6d:5b:da:55:cf:ce:52: b2:72:12:43:b2:db:37:42:31:0c:1a:99:43:1f:49:8a:23:0b: 81:a6:66:b7:58:7b:c5:26:53:d5:54:d3:25:05:eb:6b:42:ce: 22:56:52:92:df:c2:99:f1:5d:96:40:42:82:11:1e:5c:bd:fc: 61:95:cd:48:ab:d2:63:78:5f:5a:03:f3:aa:14:ed:9e:59:8d: 0b:17:91:65:a7:1e:0d:9a:d7:3f:07:be:51:a5:ae:4a:0e:38: a5:4e:13:1b:31:0a:bf:53:13:ab:12:28:31:0d:18:ff:30:e7: bf:ad:1f:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yOw2ivk1WMil19cyldEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTE2YzJjYTM2YjUwMDk2ZWUyZmU0NGI5NDUyOWMyZGEz YzNlYzIwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDRiNzYxNDRiOTU3NzhjOGM0NmFiYjg5Y2Q5OGQxNjRkZTAxYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupmgw61P4/r9874/jcLjsb+3g8EF EQ72u7nVSlVF/NWZGSjky8PwIXAyp5IplI+Ioy5/tuEo4shgXSQ+XRidfcOQiA6c Ee6xSHKbNgXnodoBaJMfJmLwzt1UmVZoMMMT++4h3SvKOxhBNKwZ3TGC4KTjYvH/ yH7bZAcC0iSPWyfutrczg2oVP0OudX/GUL4OsCzv3BjjQtVIafYanxGIZC2qDhEl Ud5oP8zXKc2ZviTaUE3+tgDHs01RQ/cRd8PmQQABXXPWHgG271z/xvY1ISDE9Nna mJVhrlYRl2bHQUKJCtSd98JmblaZkVFKkcHwUcPSTlJkiRclffShgxkkgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOBLdhRLlXeMjEaruJzZjRZN4BsEMB8GA1UdIwQY MBaAFA6RbCyja1AJbuL+RLlFKcLaPD7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAt NWZjNDRmZDZiYWZjLzEvNEV0MkZFdVZkNHlNUnF1NG5ObU5GazNnR3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAtNWZjNDRmZDZiYWZj LzEvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubwRMA0E AgACMAcDBQMqAegAMA0GCSqGSIb3DQEBCwUAA4IBAQAhWu3X6CdnXpt3quT50gdR F1HT58qBKyT8RetWusa7ud9NkkGs1GMd7wEIVaRJ7Zc6wgSeKawg2JiwtlDO6cU0 Qj009BfA6p8yZSEjNRk1GQE0bs9jFCP3fbmnNzn5FjzZnKuVSISOBuKHiivrfBbi gamq0YHS+i8jEtMn1Ym20RPU0JT06S3YMW1b2lXPzlKychJDsts3QjEMGplDH0mK IwuBpma3WHvFJlPVVNMlBetrQs4iVlKS38KZ8V2WQEKCER5cvfxhlc1Iq9JjeF9a A/OqFO2eWY0LF5Flpx4Nmtc/B75Rpa5KDjilThMbMQq/UxOrEigxDRj/MOe/rR8h -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:02 2026 by rpki-client