This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/4SDEWo-xQsKLEV5N5c74kcSp4oo.roa File: 4SDEWo-xQsKLEV5N5c74kcSp4oo.roa (raw, json) Hash identifier: Mn5HgxK6d1bhThHGyve20eCsHoaIqihBEBC3lrXSKiQ= Subject key identifier: E1:20:C4:5A:8F:B1:42:C2:8B:11:5E:4D:E5:CE:F8:91:C4:A9:E2:8A Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91 Certificate serial: 019B77C66BB6B20E4F54814543EBC682A88A Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/4SDEWo-xQsKLEV5N5c74kcSp4oo.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57204 IP address blocks: 185.83.108.0/23 maxlen: 23 2a05:9a80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6b:b6:b2:0e:4f:54:81:45:43:eb:c6:82:a8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e120c45a8fb142c28b115e4de5cef891c4a9e28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:a3:91:a5:c2:2b:89:18:a7:60:4f:a2:8c: 12:fb:ac:0d:e2:73:c6:f9:0c:de:51:8d:74:fa:a9: 01:82:8a:79:c7:29:19:fb:bb:cb:cd:21:bd:58:01: c0:ac:51:01:1e:60:3d:20:92:84:68:28:62:5b:aa: bf:a0:c7:b5:12:e8:0d:2c:45:7e:95:54:07:bb:03: ef:f6:d1:41:8e:c5:f5:8b:96:37:19:04:c5:6a:02: a1:48:fe:e8:aa:4d:81:78:cd:32:10:2d:f9:16:29: d9:71:aa:56:78:00:54:4f:19:78:76:23:c6:c9:a1: 74:43:fd:6b:2c:46:6c:2a:cf:74:2a:6e:6b:a5:9c: 5e:d3:12:ef:7a:91:43:5e:76:2f:59:26:69:7c:f1: 4b:02:a7:6f:cd:8b:ae:3e:17:1a:a0:50:a9:ab:25: e4:2d:3d:81:5d:4c:92:59:30:87:1a:df:09:e0:23: e0:2f:73:e8:e1:f1:82:02:8b:f7:fa:a7:28:f4:9d: 31:ed:f2:ae:1c:d7:0a:9f:d0:91:52:83:29:15:f8: 9e:c2:d9:9e:87:53:40:ce:e0:80:19:9a:cf:56:48: 70:e1:cf:f5:79:69:b5:0f:d0:b4:44:d0:0b:a4:9e: 93:d7:3b:b7:ac:98:a8:15:dd:c5:30:d0:46:5b:cb: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:20:C4:5A:8F:B1:42:C2:8B:11:5E:4D:E5:CE:F8:91:C4:A9:E2:8A X509v3 Authority Key Identifier: keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/4SDEWo-xQsKLEV5N5c74kcSp4oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.108.0/23 IPv6: 2a05:9a80::/29 Signature Algorithm: sha256WithRSAEncryption 09:16:fa:4e:1c:8c:2e:df:05:e2:1b:6d:e0:62:55:ce:9c:f4: 4e:5a:2e:57:b8:7f:99:62:38:0c:9e:af:41:15:36:1e:bb:00: f3:fa:34:16:80:0a:9c:41:f9:65:a9:a3:87:b4:77:fe:06:f3: 57:69:77:20:8e:9c:21:61:90:3e:63:08:fd:d3:9f:8d:7e:f4: ee:08:d9:e1:88:7d:fa:aa:6d:f7:a5:5b:b6:70:0a:73:1c:83: 7f:cf:89:2b:42:98:e0:b2:62:f5:ec:6b:30:ea:ca:25:d4:3b: 86:4e:8a:4e:62:f4:21:b8:4b:d9:8b:b8:59:30:21:f1:ca:67: 5d:c1:13:fb:b6:05:3b:94:b7:81:b1:b1:8a:07:b9:d0:31:e4: f4:59:4d:ef:c4:ce:42:4f:b9:94:7d:1d:61:80:34:ca:d5:c6: b8:22:b0:5f:45:de:30:ee:55:0d:a6:9c:c1:44:95:89:54:eb: 52:da:64:bd:48:ec:89:1c:ba:ed:a4:8f:a9:54:b3:3b:f6:33: b6:a7:9e:ed:8a:68:68:c3:d5:b7:c0:25:5a:d6:c3:ff:83:59: a5:41:a3:85:39:02:fc:15:30:4c:6e:df:b0:82:b7:e0:7e:28: 81:24:12:f3:0e:3e:9d:2f:70:17:51:96:96:4a:9f:c1:f0:34: be:37:f2:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xmu2sg5PVIFFQ+vGgqiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi MjJiOTEwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTIwYzQ1YThmYjE0MmMyOGIxMTVlNGRlNWNlZjg5MWM0YTllMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyyjkaXCK4kYp2BPoowS+6wN4nPG +QzeUY10+qkBgop5xykZ+7vLzSG9WAHArFEBHmA9IJKEaChiW6q/oMe1EugNLEV+ lVQHuwPv9tFBjsX1i5Y3GQTFagKhSP7oqk2BeM0yEC35FinZcapWeABUTxl4diPG yaF0Q/1rLEZsKs90Km5rpZxe0xLvepFDXnYvWSZpfPFLAqdvzYuuPhcaoFCpqyXk LT2BXUySWTCHGt8J4CPgL3Po4fGCAov3+qco9J0x7fKuHNcKn9CRUoMpFfiewtme h1NAzuCAGZrPVkhw4c/1eWm1D9C0RNALpJ6T1zu3rJioFd3FMNBGW8u0bQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOEgxFqPsULCixFeTeXO+JHEqeKKMB8GA1UdIwQY MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt NzQzNzY1YmQwZjNlLzEvNFNERVdvLXhRc0tMRVY1TjVjNzRrY1NwNG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuVNsMA0E AgACMAcDBQMqBZqAMA0GCSqGSIb3DQEBCwUAA4IBAQAJFvpOHIwu3wXiG23gYlXO nPROWi5XuH+ZYjgMnq9BFTYeuwDz+jQWgAqcQfllqaOHtHf+BvNXaXcgjpwhYZA+ Ywj905+NfvTuCNnhiH36qm33pVu2cApzHIN/z4krQpjgsmL17Gsw6sol1DuGTopO YvQhuEvZi7hZMCHxymddwRP7tgU7lLeBsbGKB7nQMeT0WU3vxM5CT7mUfR1hgDTK 1ca4IrBfRd4w7lUNppzBRJWJVOtS2mS9SOyJHLrtpI+pVLM79jO2p57timhow9W3 wCVa1sP/g1mlQaOFOQL8FTBMbt+wgrfgfiiBJBLzDj6dL3AXUZaWSp/B8DS+N/Jq -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:22 2026 by rpki-client