This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/g4mhQkZ-W3DH7w32kDilwhWh3UI.roa File: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (raw, json) Hash identifier: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI= Subject key identifier: 83:89:A1:42:46:7E:5B:70:C7:EF:0D:F6:90:38:A5:C2:15:A1:DD:42 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2E7BBE182E49C624A605CBC1576E2 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/g4mhQkZ-W3DH7w32kDilwhWh3UI.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 249 IP address blocks: 85.237.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e7:bb:e1:82:e4:9c:62:4a:60:5c:bc:15:76:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8389a142467e5b70c7ef0df69038a5c215a1dd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:52:9c:74:51:81:4d:c5:a8:1b:51:ae:4b: 4c:b3:c8:b1:30:10:cd:55:14:57:0e:66:e7:e8:97: 8f:aa:8d:4e:97:9b:d6:1f:41:7b:19:10:98:fd:71: 15:89:42:7d:9e:3a:2c:87:9b:a6:01:59:0f:43:55: 98:6e:40:c6:92:5c:3c:57:3d:c8:c0:30:07:af:be: 69:36:59:38:55:a5:f2:71:e0:2c:43:dd:37:e7:2d: f7:82:b4:a6:cd:e1:9a:f4:2b:28:ed:c7:14:5f:c4: cd:1a:5e:0e:9b:5b:fc:31:12:8c:28:7c:5b:6d:f1: e1:8c:76:0e:b9:83:a6:df:47:d0:52:b1:b5:f3:5f: 5b:5e:9e:ff:e6:6b:8d:47:3c:f8:45:19:bb:5b:a6: 38:ef:53:e9:4c:9e:b3:1a:9d:5c:bd:a9:9c:53:14: 5d:68:67:3e:7a:07:45:3d:61:e3:53:c2:3d:c8:d8: b3:48:d2:ab:a8:27:ba:60:b8:23:74:10:b9:8d:01: 0f:40:e2:9a:2a:93:d8:ac:e6:5c:cc:12:6e:d9:b9: 3b:f8:37:e1:55:81:4a:f2:b7:d8:94:71:4d:e8:9f: 6e:be:17:18:74:71:44:87:78:c3:55:fe:15:20:ae: a9:97:b9:3a:bf:77:f3:96:44:6f:c0:af:53:d6:49: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:A1:42:46:7E:5B:70:C7:EF:0D:F6:90:38:A5:C2:15:A1:DD:42 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/g4mhQkZ-W3DH7w32kDilwhWh3UI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.80.0/22 Signature Algorithm: sha256WithRSAEncryption a0:db:f2:8b:80:bc:4e:a4:dd:aa:66:3b:0f:29:32:69:97:62: bc:7e:9d:fc:d6:fe:e8:9f:7a:65:de:25:a0:c1:6b:82:c9:80: 65:b0:13:6b:59:e4:92:d3:85:73:1b:34:d2:c9:eb:1e:b2:ae: c4:57:af:06:b1:6a:b1:37:ec:ba:5f:39:eb:4d:05:9f:78:f9: 2c:cf:c4:ab:68:cc:f8:90:97:b9:7d:74:d5:87:e7:5d:7c:6e: f0:aa:e2:1b:4f:33:75:5f:18:7c:56:8a:ba:5d:3a:75:5f:d1: 25:a1:1e:9a:c3:34:d3:a9:5a:a0:50:b5:c8:ef:4f:5e:81:49: 6c:5a:af:09:29:0a:e9:a9:c5:2a:40:01:a0:2a:f2:94:c0:98: 37:ef:4d:82:82:f5:99:e2:a6:58:d0:da:cc:a3:f9:65:ad:dc: b8:46:ae:49:7c:b8:d3:65:8d:54:11:b1:89:6d:15:c1:c6:0a: 48:f1:34:ac:e2:99:f2:76:20:b9:fa:0b:3c:62:97:69:c6:80: 04:62:78:4d:18:17:22:3f:41:c6:d1:44:08:1d:12:62:e2:08: dd:80:72:3c:49:57:58:ee:5b:24:cc:9d:ae:98:50:2a:c6:17: a1:99:72:98:2c:54:c6:fb:f9:b1:03:49:d8:cd:3c:92:85:10: 03:26:b9:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oue74YLknGJKYFy8FXbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzg5YTE0MjQ2N2U1YjcwYzdlZjBkZjY5MDM4YTVjMjE1YTFkZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGtSnHRRgU3FqBtRrktMs8ixMBDN VRRXDmbn6JePqo1Ol5vWH0F7GRCY/XEViUJ9njosh5umAVkPQ1WYbkDGklw8Vz3I wDAHr75pNlk4VaXyceAsQ9035y33grSmzeGa9Cso7ccUX8TNGl4Om1v8MRKMKHxb bfHhjHYOuYOm30fQUrG1819bXp7/5muNRzz4RRm7W6Y471PpTJ6zGp1cvamcUxRd aGc+egdFPWHjU8I9yNizSNKrqCe6YLgjdBC5jQEPQOKaKpPYrOZczBJu2bk7+Dfh VYFK8rfYlHFN6J9uvhcYdHFEh3jDVf4VIK6pl7k6v3fzlkRvwK9T1klWYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOJoUJGfltwx+8N9pA4pcIVod1CMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvZzRtaFFrWi1XM0RIN3czMmtEaWx3aFdoM1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1QMA0G CSqGSIb3DQEBCwUAA4IBAQCg2/KLgLxOpN2qZjsPKTJpl2K8fp381v7on3pl3iWg wWuCyYBlsBNrWeSS04VzGzTSyesesq7EV68GsWqxN+y6XznrTQWfePksz8SraMz4 kJe5fXTVh+ddfG7wquIbTzN1Xxh8Voq6XTp1X9EloR6awzTTqVqgULXI709egUls Wq8JKQrpqcUqQAGgKvKUwJg3702CgvWZ4qZY0NrMo/llrdy4Rq5JfLjTZY1UEbGJ bRXBxgpI8TSs4pnydiC5+gs8YpdpxoAEYnhNGBciP0HG0UQIHRJi4gjdgHI8SVdY 7lskzJ2umFAqxhehmXKYLFTG+/mxA0nYzTyShRADJrlR -----END CERTIFICATE-----Generated at Wed Jan 21 04:21:25 2026 by rpki-client