This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa File: u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa (raw, json) Hash identifier: RjVOex1KtOTitdhI4w1UNBYIq1OmgpAnHu9XT16yu5U= Subject key identifier: BB:81:11:58:C8:3C:D8:FA:93:56:DE:C6:79:FF:D2:58:AF:9C:64:64 Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85 Certificate serial: 019B7EA6935616F993F77F890FB22745196A Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199557 IP address blocks: 185.83.86.0/24 maxlen: 24 2a13:fa80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:93:56:16:f9:93:f7:7f:89:0f:b2:27:45:19:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb811158c83cd8fa9356dec679ffd258af9c6464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:0f:f4:90:88:56:55:15:1b:35:c9:94:5e: fe:dd:c7:82:7c:65:69:6a:13:bd:d5:90:56:7a:9f: 00:0f:34:04:0b:c1:35:4d:27:12:46:61:7a:3f:03: 4b:7c:6a:30:be:f8:08:ac:d4:b9:22:70:1d:7a:6a: 51:4d:e1:21:93:04:e9:c5:7b:50:03:7b:c3:1e:01: 45:c7:cb:f5:5d:4c:55:38:5f:fe:cc:a5:6d:f0:c8: b0:d0:0f:7f:50:d4:92:f9:0c:48:00:fd:e6:68:be: ea:8d:a4:c0:8e:4a:06:7e:15:55:aa:17:be:ca:63: c8:ad:10:5d:6c:28:cb:6d:6f:b0:5f:be:94:ae:4d: 01:ef:b4:98:1a:61:c0:40:84:cb:6a:0d:13:9f:7c: 51:a9:32:08:db:f0:43:86:9b:cf:fc:5d:7e:28:f5: da:9c:e5:0a:c8:63:ed:95:e7:25:b8:f2:e1:b1:11: 6d:5a:21:51:cc:78:dd:86:93:99:d0:2b:5a:3b:45: 65:af:cb:d3:a9:a1:03:68:60:09:84:74:4f:55:14: d3:5e:86:cd:20:ae:ed:7d:85:55:b3:81:54:b3:34: d1:da:ff:77:bc:0c:4a:f3:16:22:00:fa:da:44:68: 6a:06:06:a5:07:ab:ca:ee:33:ec:c0:25:0e:e9:34: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:81:11:58:C8:3C:D8:FA:93:56:DE:C6:79:FF:D2:58:AF:9C:64:64 X509v3 Authority Key Identifier: keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/u4ERWMg82PqTVt7Gef_SWK-cZGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.86.0/24 IPv6: 2a13:fa80::/29 Signature Algorithm: sha256WithRSAEncryption 44:57:75:c5:7a:84:6f:93:38:f6:27:e1:88:dd:f2:dc:ae:1c: 2a:9d:f6:74:35:a4:67:0c:25:ec:1c:6c:53:ae:b7:0e:b1:a8: 38:59:fc:43:06:08:8f:f8:a7:90:58:68:64:b5:9d:76:00:aa: 56:0e:e0:3d:b2:d6:94:6f:fc:2e:cf:ef:be:ce:de:8c:fa:fa: a2:ab:4c:c2:33:d3:11:f0:49:22:59:c0:94:fa:f8:89:40:b3: 42:37:0a:7b:90:61:cc:83:91:50:05:d8:3f:79:12:e9:1b:47: 17:97:c2:73:b9:5a:93:43:29:4b:62:68:a7:ef:e7:ae:b8:fd: 24:3e:c2:f0:b1:df:2e:19:aa:1f:a6:f4:c7:45:fc:17:77:e3: 6e:b7:c5:f3:d2:e1:a1:67:4e:7b:b5:a4:ec:08:c6:f9:dc:48: a4:4f:68:03:cc:9e:95:61:91:f0:a1:34:37:06:15:7a:e1:4b: b8:71:60:3c:f8:8a:0a:ac:51:09:f9:71:46:a0:44:c4:20:07: 92:47:b1:e3:08:18:57:bf:e8:9b:b3:e1:5a:15:81:f2:72:fd: dc:0b:9b:12:a0:f1:0c:50:be:7f:f9:d2:58:e9:a8:c5:3d:c2: 9d:38:a1:de:51:f1:ac:a8:f5:02:93:71:0d:5d:b8:bd:55:b0: 46:53:6e:56 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ppNWFvmT93+JD7InRRlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDcwYmY4MGEwN2M5ZmZjYmVmMGNkODQ2NWI0NThkNjEz ZGNjODUwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjgxMTE1OGM4M2NkOGZhOTM1NmRlYzY3OWZmZDI1OGFmOWM2NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGoP9JCIVlUVGzXJlF7+3ceCfGVp ahO91ZBWep8ADzQEC8E1TScSRmF6PwNLfGowvvgIrNS5InAdempRTeEhkwTpxXtQ A3vDHgFFx8v1XUxVOF/+zKVt8Miw0A9/UNSS+QxIAP3maL7qjaTAjkoGfhVVqhe+ ymPIrRBdbCjLbW+wX76Urk0B77SYGmHAQITLag0Tn3xRqTII2/BDhpvP/F1+KPXa nOUKyGPtlecluPLhsRFtWiFRzHjdhpOZ0CtaO0Vlr8vTqaEDaGAJhHRPVRTTXobN IK7tfYVVs4FUszTR2v93vAxK8xYiAPraRGhqBgalB6vK7jPswCUO6TQuCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLuBEVjIPNj6k1bexnn/0livnGRkMB8GA1UdIwQY MBaAFJXXC/gKB8n/y+8M2EZbRY1hPcyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEt NjY3OGViODFiOGIwLzEvdTRFUldNZzgyUHFUVnQ3R2VmX1NXSy1jWkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yYjBlMTEtZjE4ZC00NzU3LTkwMTEtNjY3OGViODFiOGIw LzEvbGRjTC1Bb0h5Zl9MN3d6WVJsdEZqV0U5eklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuVNWMA0E AgACMAcDBQMqE/qAMA0GCSqGSIb3DQEBCwUAA4IBAQBEV3XFeoRvkzj2J+GI3fLc rhwqnfZ0NaRnDCXsHGxTrrcOsag4WfxDBgiP+KeQWGhktZ12AKpWDuA9staUb/wu z+++zt6M+vqiq0zCM9MR8EkiWcCU+viJQLNCNwp7kGHMg5FQBdg/eRLpG0cXl8Jz uVqTQylLYmin7+euuP0kPsLwsd8uGaofpvTHRfwXd+Nut8Xz0uGhZ057taTsCMb5 3EikT2gDzJ6VYZHwoTQ3BhV64Uu4cWA8+IoKrFEJ+XFGoETEIAeSR7HjCBhXv+ib s+FaFYHycv3cC5sSoPEMUL5/+dJY6ajFPcKdOKHeUfGsqPUCk3ENXbi9VbBGU25W -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:31 2026 by rpki-client