This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa File: e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa (raw, json) Hash identifier: 5c/2d20TsHc5uK5yVLQ9OB9Bt6Agm7Sts7MBlakKwT8= Subject key identifier: 7B:8B:23:33:57:D7:5A:4F:C0:FD:9C:D7:69:90:51:67:35:65:49:91 Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019B79ED6432EF02AE491050E37666618A63 Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202660 IP address blocks: 89.126.208.0/22 maxlen: 22 92.63.206.0/24 maxlen: 24 92.63.207.0/24 maxlen: 24 109.94.172.0/24 maxlen: 24 185.100.52.0/22 maxlen: 22 198.163.206.0/24 maxlen: 24 198.163.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:64:32:ef:02:ae:49:10:50:e3:76:66:61:8a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b8b233357d75a4fc0fd9cd76990516735654991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:4b:df:c6:96:88:f1:96:fa:de:99:18:c5: 79:95:24:57:da:7d:04:a4:bb:34:cb:d8:66:0b:cb: 28:00:3e:e3:99:5b:fe:12:a7:0b:ef:8c:c4:9d:1a: 4f:7d:a5:f6:db:bf:1b:48:d2:36:5f:cd:7f:ee:ad: e8:a5:c7:e3:fd:5e:fc:02:d1:0f:05:35:1d:9c:39: 53:73:bc:27:6f:6a:36:19:89:97:9d:a7:83:53:80: 5d:51:13:d0:74:44:c8:5a:52:f3:3d:6d:00:29:bf: 66:cc:af:df:46:29:44:f5:91:cd:f1:42:71:f0:e5: f5:42:79:10:9f:68:ea:67:62:9f:2b:bf:89:5c:7d: f1:f1:0b:a3:f7:de:b0:82:73:24:31:b5:e0:53:d0: 4f:78:c7:c8:e2:b1:54:eb:3e:fa:13:3a:76:b2:e2: 64:fd:97:12:48:3e:84:7f:58:8b:5f:17:76:3b:02: 74:25:96:f3:eb:cf:79:bb:46:f1:8e:7f:c2:6c:fd: e5:4a:11:59:76:5a:e2:94:4e:2a:e5:53:65:2d:e0: 95:2b:78:8f:c9:44:cf:1b:68:88:23:14:c0:5d:33: e3:d5:31:5c:22:2f:00:b3:a0:32:44:15:66:de:45: ae:bf:07:f4:ee:b2:90:62:22:a2:94:37:29:1d:6e: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:23:33:57:D7:5A:4F:C0:FD:9C:D7:69:90:51:67:35:65:49:91 X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.126.208.0/22 92.63.206.0/23 109.94.172.0/24 185.100.52.0/22 198.163.206.0/23 Signature Algorithm: sha256WithRSAEncryption 57:c4:5c:db:00:34:66:8e:11:bf:c9:96:73:2e:8c:44:20:04: 40:aa:56:46:4f:b5:c0:66:a3:de:e4:2c:d0:6f:c6:56:75:79: 13:e3:5e:f3:c4:a2:5b:4c:e0:c8:43:84:23:22:10:2d:81:f4: 03:12:40:9a:65:92:55:cf:37:80:2d:46:a0:3d:fa:90:26:61: ba:54:d3:a6:35:2e:01:53:11:df:42:93:77:ac:90:6c:19:f6: ab:3d:d5:fe:dd:06:ef:3c:cf:49:bf:8e:71:9c:79:56:bb:c6: 1f:cf:91:34:16:90:b1:82:bf:aa:e8:8c:9f:76:cf:25:1f:18: d2:aa:e9:9e:5e:32:a5:98:84:83:0a:e0:f1:bc:93:b8:3c:13: 87:6f:be:93:06:19:4d:b6:3a:4e:a6:20:7d:fb:75:5e:48:e5: 7a:0f:9b:a6:e2:0e:17:5a:82:49:e7:33:cc:62:05:42:8a:99: c8:58:a2:26:f9:18:1b:37:26:50:1b:a4:e2:75:5f:24:85:a5: bd:33:28:0b:80:fd:c4:91:af:7e:98:5f:b7:95:14:7c:33:13: 70:ea:52:2c:4f:d8:e6:85:bb:43:03:8b:92:fe:48:9d:07:09: 26:3a:88:45:35:61:78:bb:0b:1a:d2:ef:57:2e:ac:35:c9:34: 42:b5:9d:cd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57WQy7wKuSRBQ43ZmYYpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjhiMjMzMzU3ZDc1YTRmYzBmZDljZDc2OTkwNTE2NzM1NjU0OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp9L38aWiPGW+t6ZGMV5lSRX2n0E pLs0y9hmC8soAD7jmVv+EqcL74zEnRpPfaX2278bSNI2X81/7q3opcfj/V78AtEP BTUdnDlTc7wnb2o2GYmXnaeDU4BdURPQdETIWlLzPW0AKb9mzK/fRilE9ZHN8UJx 8OX1QnkQn2jqZ2KfK7+JXH3x8Quj996wgnMkMbXgU9BPeMfI4rFU6z76Ezp2suJk /ZcSSD6Ef1iLXxd2OwJ0JZbz6895u0bxjn/CbP3lShFZdlrilE4q5VNlLeCVK3iP yUTPG2iIIxTAXTPj1TFcIi8As6AyRBVm3kWuvwf07rKQYiKilDcpHW5TmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHuLIzNX11pPwP2c12mQUWc1ZUmRMB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvZTRzak0xZlhXa19BX1p6WGFaQlJaelZsU1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCWX7QAwQB XD/OAwQAbV6sAwQCuWQ0AwQBxqPOMA0GCSqGSIb3DQEBCwUAA4IBAQBXxFzbADRm jhG/yZZzLoxEIARAqlZGT7XAZqPe5CzQb8ZWdXkT417zxKJbTODIQ4QjIhAtgfQD EkCaZZJVzzeALUagPfqQJmG6VNOmNS4BUxHfQpN3rJBsGfarPdX+3QbvPM9Jv45x nHlWu8Yfz5E0FpCxgr+q6Iyfds8lHxjSqumeXjKlmISDCuDxvJO4PBOHb76TBhlN tjpOpiB9+3VeSOV6D5um4g4XWoJJ5zPMYgVCipnIWKIm+RgbNyZQG6TidV8khaW9 MygLgP3Eka9+mF+3lRR8MxNw6lIsT9jmhbtDA4uS/kidBwkmOohFNWF4uwsa0u9X Lqw1yTRCtZ3N -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:15 2026 by rpki-client