This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/DE4eWYMqD_V_TW9RHCPnXwS869o.roa File: DE4eWYMqD_V_TW9RHCPnXwS869o.roa (raw, json) Hash identifier: B3QCN3c0NtaCxyXkiY1LF3q86AMCDmY0V4HgIvdlpZw= Subject key identifier: 0C:4E:1E:59:83:2A:0F:F5:7F:4D:6F:51:1C:23:E7:5F:04:BC:EB:DA Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Certificate serial: 019B7B3600C55D1148B7037F681512CED6D3 Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/DE4eWYMqD_V_TW9RHCPnXwS869o.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206610 IP address blocks: 85.208.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:00:c5:5d:11:48:b7:03:7f:68:15:12:ce:d6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c4e1e59832a0ff57f4d6f511c23e75f04bcebda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:1e:a2:3e:d5:88:e7:8b:e6:2d:4a:ef:aa: 83:9f:61:2a:89:70:16:f2:09:bf:06:9a:ec:06:08: ff:54:12:b1:55:19:d5:82:3a:cd:6a:3b:56:28:c0: 05:38:a5:e9:66:8c:b1:41:61:0c:29:64:8e:f1:30: 1d:01:8b:e6:31:5f:bc:9e:15:76:a4:92:cd:35:42: 8d:ae:99:27:f9:b1:54:19:6e:18:50:8d:02:a8:74: 4b:38:29:2b:1c:73:84:a4:65:0d:0a:fa:02:2e:e3: 6f:82:62:a4:74:73:0f:9e:a4:62:a8:0f:f3:92:ba: a9:8f:75:43:a8:de:09:b5:59:b6:6b:10:c2:bd:55: c0:ac:ff:43:22:b3:ac:88:b8:1e:c3:bd:2f:fa:e5: fe:8a:36:eb:e8:8a:40:e5:db:b3:75:27:54:f2:87: ec:a5:50:ba:9d:95:f2:1f:2f:4c:15:fb:a3:97:83: 8e:5d:83:05:4c:e2:e8:40:2c:8e:86:f3:de:a0:6c: cf:7c:fd:fb:76:9f:c5:24:82:c4:fb:02:00:06:aa: 70:67:75:8f:86:f3:be:30:0f:59:d8:73:b4:5b:f0: 54:6d:74:9d:88:fd:9c:96:4e:09:c9:43:44:e0:83: 28:f3:41:09:72:18:7e:f1:bc:2d:99:8f:db:af:d1: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:1E:59:83:2A:0F:F5:7F:4D:6F:51:1C:23:E7:5F:04:BC:EB:DA X509v3 Authority Key Identifier: keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/DE4eWYMqD_V_TW9RHCPnXwS869o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.4.0/22 Signature Algorithm: sha256WithRSAEncryption 24:e3:6f:85:91:95:95:f4:e2:e9:22:30:b5:c8:5d:a8:2c:af: 43:0a:fe:45:bf:aa:07:e0:db:a4:bb:3f:13:c8:bb:d5:f6:77: e7:d0:b8:e9:9f:ef:c8:a1:cc:c3:88:cb:e6:47:79:eb:c4:20: 08:5d:c1:7d:fb:75:80:9a:32:cf:72:b8:61:f4:64:19:ae:27: 55:5e:fc:f9:48:14:41:bf:6f:1e:c9:71:51:79:a7:9a:76:af: 17:8b:2c:bd:e8:4b:36:e9:78:d2:c2:e7:22:44:64:81:56:e6: a8:a8:c4:3a:7a:a9:2e:72:48:73:e1:d6:1a:75:bc:a9:5b:30: bc:22:2d:25:87:55:d3:c5:bd:a6:4f:cf:74:3b:90:14:bf:52: 5f:7c:72:4d:3a:56:e6:3e:0f:e2:51:ab:33:97:ca:fb:60:50: 5f:11:c2:39:88:24:0e:06:fb:f1:8b:f8:59:35:1e:4f:94:11: 18:b6:02:93:a8:96:26:c6:d0:9c:02:58:0e:62:7c:cf:11:75: c6:f0:75:1b:f4:06:21:b6:dc:ba:ee:a5:f4:ad:e4:51:a2:a5: 6d:03:66:18:a7:23:3f:63:0e:d2:32:4b:45:ed:9e:e0:8b:ae: af:35:f7:db:1c:f7:d5:18:dd:6d:7d:13:fd:36:93:fc:df:0c: d0:26:f5:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgDFXRFItwN/aBUSztbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MWM3OGIzMDVmYjQ5Y2JkNDAwNWQ0NDI3YzFmNjJjNmE0 NTVhNjgwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzRlMWU1OTgzMmEwZmY1N2Y0ZDZmNTExYzIzZTc1ZjA0YmNlYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylYeoj7ViOeL5i1K76qDn2EqiXAW 8gm/BprsBgj/VBKxVRnVgjrNajtWKMAFOKXpZoyxQWEMKWSO8TAdAYvmMV+8nhV2 pJLNNUKNrpkn+bFUGW4YUI0CqHRLOCkrHHOEpGUNCvoCLuNvgmKkdHMPnqRiqA/z krqpj3VDqN4JtVm2axDCvVXArP9DIrOsiLgew70v+uX+ijbr6IpA5duzdSdU8ofs pVC6nZXyHy9MFfujl4OOXYMFTOLoQCyOhvPeoGzPfP37dp/FJILE+wIABqpwZ3WP hvO+MA9Z2HO0W/BUbXSdiP2clk4JyUNE4IMo80EJchh+8bwtmY/br9HvzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxOHlmDKg/1f01vURwj518EvOvaMB8GA1UdIwQY MBaAFJcceLMF+0nL1ABdRCfB9ixqRVpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEt MWMyNzU4NjUxZWZhLzEvREU0ZVdZTXFEX1ZfVFc5UkhDUG5Yd1M4NjlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEtMWMyNzU4NjUxZWZh LzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdAEMA0G CSqGSIb3DQEBCwUAA4IBAQAk42+FkZWV9OLpIjC1yF2oLK9DCv5Fv6oH4Nukuz8T yLvV9nfn0Ljpn+/IoczDiMvmR3nrxCAIXcF9+3WAmjLPcrhh9GQZridVXvz5SBRB v28eyXFReaeadq8Xiyy96Es26XjSwuciRGSBVuaoqMQ6eqkuckhz4dYadbypWzC8 Ii0lh1XTxb2mT890O5AUv1JffHJNOlbmPg/iUaszl8r7YFBfEcI5iCQOBvvxi/hZ NR5PlBEYtgKTqJYmxtCcAlgOYnzPEXXG8HUb9AYhtty67qX0reRRoqVtA2YYpyM/ Yw7SMktF7Z7gi66vNffbHPfVGN1tfRP9NpP83wzQJvWT -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:04 2026 by rpki-client