This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/4-pw4uLEo4VnWcR86rkNPjJNRVs.roa File: 4-pw4uLEo4VnWcR86rkNPjJNRVs.roa (raw, json) Hash identifier: WG5Ck6gXAP87uE0pDUMDgFNMmC5kc/oQd4zsYjgc8g8= Subject key identifier: E3:EA:70:E2:E2:C4:A3:85:67:59:C4:7C:EA:B9:0D:3E:32:4D:45:5B Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87 Certificate serial: 019B7DCADDC832AF018FCE3C733B3E6F8DD0 Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/4-pw4uLEo4VnWcR86rkNPjJNRVs.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203109 IP address blocks: 185.144.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:dd:c8:32:af:01:8f:ce:3c:73:3b:3e:6f:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ea70e2e2c4a3856759c47ceab90d3e324d455b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:26:d5:bd:0b:83:f8:8a:fe:db:ab:f1:db: 0b:97:35:4a:16:92:35:63:aa:6d:f7:c1:3b:aa:c6: 3b:0e:86:e2:f5:0e:77:4a:aa:51:e7:ae:0a:92:0a: 07:e7:9a:f3:31:41:34:03:10:7b:b1:19:7f:ec:9a: 51:c5:f1:02:87:5a:64:ba:af:27:28:0f:5e:28:c7: 96:17:57:85:d8:0f:d9:f6:f5:fc:6c:40:98:45:60: a3:49:7a:2d:b0:35:d1:3e:96:98:4d:4b:ee:c0:9f: db:ff:dc:9e:90:52:e1:5e:d0:cd:44:68:60:82:41: 9f:b7:6b:de:76:4a:8f:c4:ec:f5:c0:0c:8d:a3:a3: 1c:47:d5:0e:de:ed:0c:48:dd:2e:a4:41:8b:39:86: 4e:02:6c:36:0b:51:c3:a1:f0:54:08:c3:21:a2:ba: 64:04:29:b5:9a:25:45:dc:37:71:89:2b:bf:89:da: d2:66:c6:c5:ea:b6:55:0b:c6:14:26:24:72:26:51: e5:33:b5:b2:f6:d7:03:ae:11:ce:ef:9a:7c:2e:1b: 52:2b:8d:20:9e:c9:da:e6:19:d1:6a:45:9e:cf:5b: 3f:0d:4d:5c:5f:26:ec:3a:01:d8:03:53:c2:ce:a8: a1:da:eb:d7:8f:6d:19:6d:7c:02:d3:7e:10:2c:38: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EA:70:E2:E2:C4:A3:85:67:59:C4:7C:EA:B9:0D:3E:32:4D:45:5B X509v3 Authority Key Identifier: keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/4-pw4uLEo4VnWcR86rkNPjJNRVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.124.0/22 Signature Algorithm: sha256WithRSAEncryption a2:37:3a:05:d5:64:d5:76:6a:9d:34:35:4f:59:d7:de:65:8a: 3e:2c:fb:3e:7b:23:9f:ed:ee:11:f6:e0:c1:3c:c8:1b:1f:bc: e5:50:87:07:4f:b2:63:ca:ad:44:5f:6e:19:ac:ba:72:0f:89: cf:5c:f4:a5:ae:94:5d:01:06:ca:c3:34:35:20:3f:d1:c5:a7: 78:9e:51:06:d3:bc:c8:6f:a1:77:2f:80:d1:e6:3b:13:79:79: 86:bf:d1:cc:8c:a6:29:b6:3a:86:09:a5:7c:c6:b1:70:da:44: 50:9b:72:7a:ca:c4:9f:83:27:d5:b8:1a:82:44:83:12:e8:f0: 4f:e6:3e:e8:3e:13:b1:cd:1d:40:f3:e7:68:11:07:48:49:a5: c4:80:ad:74:c7:d1:1c:5d:f9:14:f6:89:e3:91:f2:2c:cf:49: 05:94:e8:e1:32:09:14:ef:05:6a:7d:67:0d:67:8f:63:98:91: d2:d4:1f:ef:e0:17:7c:68:f1:18:34:9d:91:7c:49:77:f9:e1: f5:f7:e9:82:96:ff:d5:ab:67:fe:4c:d7:55:ab:ce:10:29:84: 4f:af:33:a8:79:4d:67:df:5d:35:79:48:5c:7c:e2:91:08:77: 27:2f:19:1e:16:a8:d7:05:6c:3c:a1:dc:d4:3f:4f:0e:2a:07: c5:40:a9:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yt3IMq8Bj848czs+b43QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTE5NjMxMGE3ZjdkZDk5OTllYzQzZTkzOGZkOTA2OTg1 YTNmODcwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2VhNzBlMmUyYzRhMzg1Njc1OWM0N2NlYWI5MGQzZTMyNGQ0NTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg8m1b0Lg/iK/tur8dsLlzVKFpI1 Y6pt98E7qsY7Dobi9Q53SqpR564KkgoH55rzMUE0AxB7sRl/7JpRxfECh1pkuq8n KA9eKMeWF1eF2A/Z9vX8bECYRWCjSXotsDXRPpaYTUvuwJ/b/9yekFLhXtDNRGhg gkGft2vedkqPxOz1wAyNo6McR9UO3u0MSN0upEGLOYZOAmw2C1HDofBUCMMhorpk BCm1miVF3DdxiSu/idrSZsbF6rZVC8YUJiRyJlHlM7Wy9tcDrhHO75p8LhtSK40g nsna5hnRakWez1s/DU1cXybsOgHYA1PCzqih2uvXj20ZbXwC034QLDj0UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOPqcOLixKOFZ1nEfOq5DT4yTUVbMB8GA1UdIwQY MBaAFEKRljEKf33ZmZ7EPpOP2QaYWj+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQt MGFhOWQ5N2M4Yzk4LzEvNC1wdzR1TEVvNFZuV2NSODZya05QakpOUlZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQtMGFhOWQ5N2M4Yzk4 LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZB8MA0G CSqGSIb3DQEBCwUAA4IBAQCiNzoF1WTVdmqdNDVPWdfeZYo+LPs+eyOf7e4R9uDB PMgbH7zlUIcHT7Jjyq1EX24ZrLpyD4nPXPSlrpRdAQbKwzQ1ID/Rxad4nlEG07zI b6F3L4DR5jsTeXmGv9HMjKYptjqGCaV8xrFw2kRQm3J6ysSfgyfVuBqCRIMS6PBP 5j7oPhOxzR1A8+doEQdISaXEgK10x9EcXfkU9onjkfIsz0kFlOjhMgkU7wVqfWcN Z49jmJHS1B/v4Bd8aPEYNJ2RfEl3+eH19+mClv/Vq2f+TNdVq84QKYRPrzOoeU1n 3101eUhcfOKRCHcnLxkeFqjXBWw8odzUP08OKgfFQKkl -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:27 2026 by rpki-client