This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa File: 4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa (raw, json) Hash identifier: D0yakznjZ4GLkw8PJfZndlmaCDEdQxVUthJnURjvcH4= Subject key identifier: E1:99:0A:61:3E:2D:44:00:56:C0:83:C5:B5:B2:B0:15:2B:AF:EE:11 Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc Certificate serial: 019B7CED587A6A9D0DCA0A0A5E2B7B1E9A88 Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204249 IP address blocks: 185.37.162.0/24 maxlen: 24 185.54.164.0/24 maxlen: 24 185.54.165.0/24 maxlen: 24 185.54.166.0/24 maxlen: 24 185.54.167.0/24 maxlen: 24 2a00:f7a0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:58:7a:6a:9d:0d:ca:0a:0a:5e:2b:7b:1e:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1990a613e2d440056c083c5b5b2b0152bafee11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:b7:b5:32:c8:23:fa:d4:3f:b9:37:d8:c6: ad:79:6f:8a:63:53:e7:03:79:7f:37:7a:de:47:04: 37:67:59:2a:4a:1e:b0:e5:1a:c3:ea:30:df:6c:20: 0a:86:03:eb:25:19:d9:f8:39:3a:77:66:8c:5f:ad: 92:7a:78:ff:47:07:93:3a:15:6c:16:ae:e1:34:84: 13:a9:24:3b:7a:39:61:13:40:63:8b:2d:e6:f7:5d: 21:dd:63:e8:27:7c:13:9e:9f:37:33:26:f5:f6:cb: 92:d3:48:c8:40:1b:1a:d4:08:73:94:88:cd:48:70: c2:0b:40:b9:04:54:37:6b:b2:d6:00:24:1d:14:c4: 8a:c5:f7:85:d9:81:0d:a7:bd:3f:dd:1f:9e:78:cf: 12:42:60:97:6e:46:ea:93:d9:e9:44:50:31:1b:ea: e9:bf:cf:c3:76:be:7e:69:e2:45:fa:22:48:34:93: 6d:17:60:fd:ca:df:76:34:e4:c3:47:0e:0f:6f:18: 28:a5:60:32:db:00:19:a5:07:31:c9:35:8d:31:b8: 2f:37:d0:aa:cf:aa:1f:b4:89:d4:61:14:2e:3f:b1: a1:03:c1:60:21:31:16:fb:e6:c9:b6:65:6b:d4:62: 24:e3:20:43:e2:6a:a0:42:a8:b8:25:b1:e0:23:b3: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:99:0A:61:3E:2D:44:00:56:C0:83:C5:B5:B2:B0:15:2B:AF:EE:11 X509v3 Authority Key Identifier: keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/4ZkKYT4tRABWwIPFtbKwFSuv7hE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.162.0/24 185.54.164.0/22 IPv6: 2a00:f7a0:100::/48 Signature Algorithm: sha256WithRSAEncryption 36:07:4f:d7:44:7f:d4:30:2f:7e:ad:68:e7:f7:a3:28:c0:7e: 3e:11:ba:59:d1:6f:c2:09:5d:46:5d:1e:1c:8b:22:6f:c7:cd: 36:dd:46:e8:66:04:d5:5a:64:14:42:e6:fe:20:e8:7f:f3:75: 96:58:b2:96:67:23:09:c6:d5:3a:e3:df:5e:e7:4f:a4:54:55: d5:40:1a:cc:70:c6:f8:55:4a:04:9e:b6:c0:c8:ea:6d:fe:6e: 79:f4:a1:ae:3b:61:b0:39:de:c4:3d:23:df:f8:83:24:65:f9: 01:4b:17:4f:41:33:fd:2c:d3:79:cf:91:0e:16:8c:78:97:4f: bc:dc:e9:c0:ea:ef:68:60:45:2d:39:6f:26:03:01:73:12:42: c6:97:8b:26:cf:f4:23:f1:9b:49:2c:7f:1e:ec:b4:c6:50:71: 8c:e8:2c:9b:1d:57:3f:64:4e:20:87:04:51:e8:67:e3:48:31: 31:9c:2a:d8:9c:64:96:3e:07:37:22:86:39:1b:51:1b:e4:e4: 96:a1:80:ea:03:11:73:95:af:6e:92:9a:62:8a:d6:26:01:51: d5:27:cc:2e:20:86:b9:97:48:f0:f8:ae:8b:db:c1:14:ab:6b: ac:58:04:42:9b:24:f9:d9:df:de:ca:29:8d:a2:18:2c:47:7e: a4:af:cf:56 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87Vh6ap0NygoKXit7HpqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzY1NmYyMjAxNTU4OWZmN2NjNjYwNTY4NjdmNjA1ZDgx NDQ5YmMwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTk5MGE2MTNlMmQ0NDAwNTZjMDgzYzViNWIyYjAxNTJiYWZlZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4u3tTLII/rUP7k32MateW+KY1Pn A3l/N3reRwQ3Z1kqSh6w5RrD6jDfbCAKhgPrJRnZ+Dk6d2aMX62Senj/RweTOhVs Fq7hNIQTqSQ7ejlhE0Bjiy3m910h3WPoJ3wTnp83Myb19suS00jIQBsa1AhzlIjN SHDCC0C5BFQ3a7LWACQdFMSKxfeF2YENp70/3R+eeM8SQmCXbkbqk9npRFAxG+rp v8/Ddr5+aeJF+iJINJNtF2D9yt92NOTDRw4PbxgopWAy2wAZpQcxyTWNMbgvN9Cq z6oftInUYRQuP7GhA8FgITEW++bJtmVr1GIk4yBD4mqgQqi4JbHgI7MUFQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOGZCmE+LUQAVsCDxbWysBUrr+4RMB8GA1UdIwQY MBaAFOl2VvIgFVif98xmBWhn9gXYFEm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1Mzct NjgxMmJhYmM1YThiLzEvNFprS1lUNHRSQUJXd0lQRnRiS3dGU3V2N2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84ZmEwNTEtNDM1Ny00ZDMxLTg1MzctNjgxMmJhYmM1YThi LzEvNlhaVzhpQVZXSl8zekdZRmFHZjJCZGdVU2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuSWiAwQC uTakMA8EAgACMAkDBwAqAPegAQAwDQYJKoZIhvcNAQELBQADggEBADYHT9dEf9Qw L36taOf3oyjAfj4RulnRb8IJXUZdHhyLIm/HzTbdRuhmBNVaZBRC5v4g6H/zdZZY spZnIwnG1Trj317nT6RUVdVAGsxwxvhVSgSetsDI6m3+bnn0oa47YbA53sQ9I9/4 gyRl+QFLF09BM/0s03nPkQ4WjHiXT7zc6cDq72hgRS05byYDAXMSQsaXiybP9CPx m0ksfx7stMZQcYzoLJsdVz9kTiCHBFHoZ+NIMTGcKticZJY+BzcihjkbURvk5Jah gOoDEXOVr26SmmKK1iYBUdUnzC4ghrmXSPD4rovbwRSra6xYBEKbJPnZ397KKY2i GCxHfqSvz1Y= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:53 2026 by rpki-client