This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/4rvg74R2gZlKQSt9MtPUhs19Sxs.roa File: 4rvg74R2gZlKQSt9MtPUhs19Sxs.roa (raw, json) Hash identifier: aa4t3U7R1vbR/QCIG7/Vzi9UpwOLBuhEx3X56aBs6+Y= Subject key identifier: E2:BB:E0:EF:84:76:81:99:4A:41:2B:7D:32:D3:D4:86:CD:7D:4B:1B Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Certificate serial: 019B76EB82A835FF9B2AA27D260489E4E8CC Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/4rvg74R2gZlKQSt9MtPUhs19Sxs.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44536 IP address blocks: 66.132.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:82:a8:35:ff:9b:2a:a2:7d:26:04:89:e4:e8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2bbe0ef847681994a412b7d32d3d486cd7d4b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:b0:7c:94:fc:d2:9b:17:56:b8:26:19:62: c0:b0:8f:06:62:42:5a:35:f7:84:29:2b:53:3c:36: 68:6c:98:9d:51:0c:e1:9f:19:b8:34:87:fc:4c:88: 9f:ef:43:6c:84:bd:f5:28:c4:ca:82:74:58:4b:14: 70:d8:43:8a:6e:78:9d:73:7a:83:ce:c0:0f:49:ee: 9e:dc:a6:27:61:fe:45:b4:5b:94:b5:8a:5a:f1:28: 0e:e8:e6:a8:c0:37:1d:66:e7:7c:19:aa:e2:7c:c6: 44:06:67:80:c0:17:2b:98:6c:3b:4a:90:ed:df:46: d6:19:34:13:c8:cc:f0:e8:a9:33:1f:e7:b1:9a:7d: c7:84:0f:d9:f0:5c:1c:9a:f2:6e:a6:52:18:de:bd: a6:55:c6:b7:a9:ac:cf:d3:c3:67:aa:32:f9:11:05: fb:a0:a3:a2:cb:e0:8a:e9:1e:f8:0b:f3:d6:f1:84: 80:25:a1:e9:80:b5:2f:4f:9a:17:32:ad:c8:5d:82: 01:80:88:46:1a:b9:91:85:59:5e:71:0c:1f:0a:f5: 11:b6:fd:8e:dc:48:45:10:d0:63:c7:8c:4f:b0:31: 62:ef:82:72:ac:42:55:e7:b7:7d:34:ce:1f:a1:e1: 86:f3:85:2c:54:9f:50:cb:ec:4f:d6:ff:b6:77:31: 0a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BB:E0:EF:84:76:81:99:4A:41:2B:7D:32:D3:D4:86:CD:7D:4B:1B X509v3 Authority Key Identifier: keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/4rvg74R2gZlKQSt9MtPUhs19Sxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.132.134.0/24 Signature Algorithm: sha256WithRSAEncryption e0:fa:fc:e1:18:6b:70:a7:c5:25:e0:e7:41:ca:7b:af:3d:8e: 13:fe:74:94:a8:33:00:0f:f1:3c:12:76:08:b5:97:80:40:3c: 6f:a4:62:23:f7:26:96:a5:c7:3c:66:db:51:27:75:14:77:9f: b2:f9:af:0b:c1:48:fa:c6:4c:d6:66:9e:76:6e:3a:99:cd:50: 4c:bc:c9:c4:9f:78:e6:99:91:dc:e4:57:98:29:50:e5:c7:6a: 93:c7:66:f9:6b:ef:db:86:fc:71:30:de:75:17:9b:c7:3e:20: 1a:24:78:b4:4f:2e:05:da:49:e2:ae:a3:0b:1c:54:73:fd:17: 82:1a:fa:69:5d:0d:9e:7a:56:78:c8:9a:20:5e:8a:6d:bc:03: 7d:67:35:f9:8c:d5:16:cf:4b:1c:ab:95:7e:36:32:78:c0:04: 17:9a:65:e9:54:99:47:b3:06:e1:fb:65:4b:b1:e6:b6:bb:6f: cf:b1:40:3d:3c:03:ad:4a:e3:31:a1:c8:9d:5f:fb:9e:08:df: a5:4f:d1:d6:2d:47:1f:2d:c1:95:a7:bf:07:d5:f0:dd:81:46: 61:e9:06:7c:51:45:6a:f3:5f:18:ee:03:4b:7d:93:46:77:64: c3:36:2b:8b:86:6c:89:6f:7a:86:ed:4e:2c:a8:86:e6:31:8e: f0:08:9e:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264KoNf+bKqJ9JgSJ5OjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew Nzc4NzAwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmJiZTBlZjg0NzY4MTk5NGE0MTJiN2QzMmQzZDQ4NmNkN2Q0YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d2wfJT80psXVrgmGWLAsI8GYkJa NfeEKStTPDZobJidUQzhnxm4NIf8TIif70NshL31KMTKgnRYSxRw2EOKbnidc3qD zsAPSe6e3KYnYf5FtFuUtYpa8SgO6OaowDcdZud8GarifMZEBmeAwBcrmGw7SpDt 30bWGTQTyMzw6KkzH+exmn3HhA/Z8FwcmvJuplIY3r2mVca3qazP08NnqjL5EQX7 oKOiy+CK6R74C/PW8YSAJaHpgLUvT5oXMq3IXYIBgIhGGrmRhVlecQwfCvURtv2O 3EhFENBjx4xPsDFi74JyrEJV57d9NM4foeGG84UsVJ9Qy+xP1v+2dzEKHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOK74O+EdoGZSkErfTLT1IbNfUsbMB8GA1UdIwQY MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt NDQ5NzNhNjAyZDlmLzEvNHJ2Zzc0UjJnWmxLUVN0OU10UFVoczE5U3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoSGMA0G CSqGSIb3DQEBCwUAA4IBAQDg+vzhGGtwp8Ul4OdBynuvPY4T/nSUqDMAD/E8EnYI tZeAQDxvpGIj9yaWpcc8ZttRJ3UUd5+y+a8LwUj6xkzWZp52bjqZzVBMvMnEn3jm mZHc5FeYKVDlx2qTx2b5a+/bhvxxMN51F5vHPiAaJHi0Ty4F2knirqMLHFRz/ReC GvppXQ2eelZ4yJogXoptvAN9ZzX5jNUWz0scq5V+NjJ4wAQXmmXpVJlHswbh+2VL sea2u2/PsUA9PAOtSuMxocidX/ueCN+lT9HWLUcfLcGVp78H1fDdgUZh6QZ8UUVq 818Y7gNLfZNGd2TDNiuLhmyJb3qG7U4sqIbmMY7wCJ7T -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:36 2026 by rpki-client