This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/4VSpfmlsrY-xnIiTTrPaodx2tV4.roa File: 4VSpfmlsrY-xnIiTTrPaodx2tV4.roa (raw, json) Hash identifier: EdL3j+0Ly732QbelcRDG7cQjRw+dDjXO5L0RRW5d50k= Subject key identifier: E1:54:A9:7E:69:6C:AD:8F:B1:9C:88:93:4E:B3:DA:A1:DC:76:B5:5E Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Certificate serial: 019B7F147E07599FC9BB357F8F882D4BF440 Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/4VSpfmlsrY-xnIiTTrPaodx2tV4.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201089 IP address blocks: 185.124.148.0/24 maxlen: 24 185.124.150.0/24 maxlen: 24 185.124.151.0/24 maxlen: 24 193.58.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:7e:07:59:9f:c9:bb:35:7f:8f:88:2d:4b:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e154a97e696cad8fb19c88934eb3daa1dc76b55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:84:8e:3e:42:cb:f2:7c:cb:b1:cc:e0:73: 0e:9c:ba:10:4a:4f:64:79:53:6f:21:88:02:ac:ac: 29:14:bb:cc:e1:9a:2b:3c:87:6f:a2:3a:b8:ba:50: eb:d9:7a:28:62:0d:7e:a4:2c:ab:9a:af:96:d2:77: 36:db:c2:1a:1e:2b:e3:33:a2:f0:26:ea:f4:ce:a7: 00:a2:48:90:4e:d0:86:94:46:37:11:f8:81:30:c6: 51:80:3b:48:4a:d0:b0:d9:26:f1:32:cd:5c:5a:c5: b9:c8:07:59:fd:e8:20:8c:d7:31:5e:e8:95:ad:d9: a1:f4:c0:2e:f7:8c:46:49:80:38:30:e8:f2:ee:0d: 69:0a:04:dc:34:26:6f:a2:20:62:5f:27:15:3e:33: 95:8c:44:4c:40:cb:65:4a:51:fc:29:67:e3:1b:e9: 47:09:c4:1b:f0:87:02:85:07:e8:f1:c0:0d:20:23: 08:2f:8c:95:92:73:a2:45:1e:30:93:be:0f:48:8d: b0:83:96:43:aa:9b:d4:60:72:a7:4d:0e:fa:a3:d1: ce:b6:b2:e7:82:ad:d9:56:a4:ee:78:ce:a7:a9:17: 5f:6d:28:4c:ce:bd:ad:82:e5:f0:51:8d:f4:3c:5e: ee:64:e6:71:b7:d2:ec:cf:b1:32:26:8b:eb:0c:bd: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:A9:7E:69:6C:AD:8F:B1:9C:88:93:4E:B3:DA:A1:DC:76:B5:5E X509v3 Authority Key Identifier: keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/4VSpfmlsrY-xnIiTTrPaodx2tV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.148.0/24 185.124.150.0/23 193.58.117.0/24 Signature Algorithm: sha256WithRSAEncryption ac:6e:89:48:26:94:ae:64:0f:96:67:37:54:2b:40:3d:a6:cf: d3:8f:c1:a0:d4:7a:84:cf:3d:6e:3d:39:d8:08:e3:45:9c:e1: 11:8c:7b:c5:7a:ac:27:a5:0d:1d:d2:9f:0b:9e:20:e6:75:1e: f4:a0:59:1a:36:71:d9:94:26:3b:6a:62:fe:4b:b8:e0:48:ec: 6d:02:b6:94:4b:31:5b:be:bc:53:a8:0f:e4:e6:0b:13:c7:b8: 2b:2f:5b:3f:82:80:37:37:b4:4a:84:52:c4:ac:a4:a7:d7:05: ac:e2:ee:31:67:e5:62:44:b2:fc:d5:93:f4:4f:8f:01:32:6f: e4:09:05:75:67:1d:93:4a:11:e0:fb:45:da:c5:49:b5:61:1a: 60:96:e2:24:55:b3:30:63:39:f3:5e:49:34:9d:89:a4:10:c7: 59:92:59:0c:39:6c:cb:0b:d1:6f:66:0e:b8:3c:1c:99:41:1c: c7:9b:fc:29:60:f6:0f:22:ab:1e:fb:13:f6:55:29:a3:7f:1f: 29:d8:f5:3d:54:e6:c6:b1:38:3b:71:75:a4:5e:da:5e:af:3e: c5:6b:ea:e6:c7:49:1a:3f:86:2f:1d:e9:9a:57:11:94:ee:12: 64:8d:54:8f:f4:45:c5:1b:df:fe:b7:28:c1:d5:4e:f9:1a:61: e2:a9:15:87 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FH4HWZ/JuzV/j4gtS/RAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy NTI1MGUwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTU0YTk3ZTY5NmNhZDhmYjE5Yzg4OTM0ZWIzZGFhMWRjNzZiNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws6Ejj5Cy/J8y7HM4HMOnLoQSk9k eVNvIYgCrKwpFLvM4ZorPIdvojq4ulDr2XooYg1+pCyrmq+W0nc228IaHivjM6Lw Jur0zqcAokiQTtCGlEY3EfiBMMZRgDtIStCw2SbxMs1cWsW5yAdZ/eggjNcxXuiV rdmh9MAu94xGSYA4MOjy7g1pCgTcNCZvoiBiXycVPjOVjERMQMtlSlH8KWfjG+lH CcQb8IcChQfo8cANICMIL4yVknOiRR4wk74PSI2wg5ZDqpvUYHKnTQ76o9HOtrLn gq3ZVqTueM6nqRdfbShMzr2tguXwUY30PF7uZOZxt9Lsz7EyJovrDL3XeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOFUqX5pbK2PsZyIk06z2qHcdrVeMB8GA1UdIwQY MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt Yjg0ZWRhMmU4NDZhLzEvNFZTcGZtbHNyWS14bklpVFRyUGFvZHgydFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuXyUAwQB uXyWAwQAwTp1MA0GCSqGSIb3DQEBCwUAA4IBAQCsbolIJpSuZA+WZzdUK0A9ps/T j8Gg1HqEzz1uPTnYCONFnOERjHvFeqwnpQ0d0p8LniDmdR70oFkaNnHZlCY7amL+ S7jgSOxtAraUSzFbvrxTqA/k5gsTx7grL1s/goA3N7RKhFLErKSn1wWs4u4xZ+Vi RLL81ZP0T48BMm/kCQV1Zx2TShHg+0XaxUm1YRpgluIkVbMwYznzXkk0nYmkEMdZ klkMOWzLC9FvZg64PByZQRzHm/wpYPYPIqse+xP2VSmjfx8p2PU9VObGsTg7cXWk Xtperz7Fa+rmx0kaP4YvHemaVxGU7hJkjVSP9EXFG9/+tyjB1U75GmHiqRWH -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:54 2026 by rpki-client