This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa File: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (raw, json) Hash identifier: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU= Subject key identifier: AF:85:EF:5F:A1:22:D4:B9:6E:20:4F:29:6A:F8:E9:11:D2:CB:C4:9E Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Certificate serial: 019B7F15D5CFC1D44D18E8F968A69F9B2DDD Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28725 IP address blocks: 80.74.32.0/20 maxlen: 24 85.162.0.0/15 maxlen: 24 194.147.12.0/22 maxlen: 24 2a07:1f40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d5:cf:c1:d4:4d:18:e8:f9:68:a6:9f:9b:2d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af85ef5fa122d4b96e204f296af8e911d2cbc49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:5c:6e:d1:b9:05:a6:28:d8:74:62:25:cc: 42:55:83:2b:da:48:e6:73:2d:26:7a:54:a2:b0:c5: f4:1a:88:ec:9f:83:69:92:0a:a5:8d:ce:d3:af:2f: a1:9a:13:0d:2b:30:b8:ff:c4:a3:2b:f3:b7:da:cb: 43:ab:d4:86:c6:0e:d4:30:5a:83:78:ec:eb:b2:db: 2f:05:8d:67:90:2a:09:c0:bf:02:3b:17:98:a0:88: 7e:02:bb:96:05:34:3c:73:42:80:a6:39:1f:0b:01: 4b:5d:1a:c0:27:eb:45:8a:85:f1:9c:80:f4:48:f9: 55:50:6b:ff:78:81:0a:7f:20:ba:7a:64:9c:9e:8b: c8:4c:67:f9:6e:6a:3b:cc:96:50:8c:4b:f7:a2:e4: 1d:b8:b2:b5:1f:86:96:d0:36:6f:4b:20:2c:42:76: 47:cf:14:45:55:d0:04:53:7d:4f:36:19:53:87:69: 16:9b:a5:30:86:ab:80:65:eb:08:6a:c4:34:88:05: 08:d4:a8:b7:7a:94:48:f7:32:b8:ac:eb:45:49:b3: 0d:3a:08:84:9a:ca:03:41:0b:11:34:ee:ad:24:91: 69:34:17:db:f5:9c:21:23:e7:25:2f:fe:86:7f:81: 78:c2:d4:45:00:92:8d:31:aa:a3:5b:00:48:1e:0d: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:EF:5F:A1:22:D4:B9:6E:20:4F:29:6A:F8:E9:11:D2:CB:C4:9E X509v3 Authority Key Identifier: keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.74.32.0/20 85.162.0.0/15 194.147.12.0/22 IPv6: 2a07:1f40::/29 Signature Algorithm: sha256WithRSAEncryption 7f:27:72:d7:5b:8f:d5:1d:79:38:f3:96:77:4b:55:fc:45:81: a2:a2:04:e9:ba:64:9a:d2:a3:aa:e9:4a:98:c3:01:bc:8f:7f: c4:96:a8:72:af:1b:50:d7:72:fd:4a:15:45:7f:7b:d6:08:60: 28:33:27:ed:c5:0f:04:ed:13:69:e9:a4:9d:c0:ad:da:ba:cb: 7a:e4:27:ea:c4:c7:20:46:ff:a3:10:53:ce:ae:5f:d8:6e:7b: 59:15:e2:ed:54:64:c4:6e:83:0d:e7:87:fc:35:1f:88:d5:a8: 8e:4e:6a:a8:7e:be:23:2b:90:92:7d:4b:cd:90:45:cd:55:d1: da:8f:f7:16:8d:51:32:fe:86:27:83:00:8d:c1:98:bb:8f:ae: ea:06:ad:ad:ca:a7:27:78:5f:41:61:d8:23:7a:dc:d4:1e:e8: 6a:35:54:89:65:24:fe:a0:87:b6:32:ab:1c:5a:34:ef:8e:c3: 2a:f1:df:4f:15:1f:7a:28:36:5c:28:03:86:c9:64:13:ce:19: 46:22:08:e1:ff:9a:3d:ef:9e:36:70:76:63:2c:3a:10:d3:4c: 46:08:1a:ba:a5:51:ab:3d:25:b7:d7:ab:88:08:26:f8:11:09: b7:2b:8d:ed:11:1c:b1:ac:bd:dc:75:f2:0a:91:c4:8f:01:dd: eb:19:2e:b6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FdXPwdRNGOj5aKafmy3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy MWZjMDIwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg1ZWY1ZmExMjJkNGI5NmUyMDRmMjk2YWY4ZTkxMWQyY2JjNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTVcbtG5BaYo2HRiJcxCVYMr2kjm cy0melSisMX0Gojsn4Npkgqljc7Try+hmhMNKzC4/8SjK/O32stDq9SGxg7UMFqD eOzrstsvBY1nkCoJwL8COxeYoIh+AruWBTQ8c0KApjkfCwFLXRrAJ+tFioXxnID0 SPlVUGv/eIEKfyC6emScnovITGf5bmo7zJZQjEv3ouQduLK1H4aW0DZvSyAsQnZH zxRFVdAEU31PNhlTh2kWm6UwhquAZesIasQ0iAUI1Ki3epRI9zK4rOtFSbMNOgiE msoDQQsRNO6tJJFpNBfb9ZwhI+clL/6Gf4F4wtRFAJKNMaqjWwBIHg1crQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFK+F71+hItS5biBPKWr46RHSy8SeMB8GA1UdIwQY MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct YmZjZjlhOTIyYThiLzEvcjRYdlg2RWkxTGx1SUU4cGF2anBFZExMeEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQEUEogAwMB VaIDBALCkwwwDQQCAAIwBwMFAyoHH0AwDQYJKoZIhvcNAQELBQADggEBAH8nctdb j9UdeTjzlndLVfxFgaKiBOm6ZJrSo6rpSpjDAbyPf8SWqHKvG1DXcv1KFUV/e9YI YCgzJ+3FDwTtE2nppJ3Ardq6y3rkJ+rExyBG/6MQU86uX9hue1kV4u1UZMRugw3n h/w1H4jVqI5Oaqh+viMrkJJ9S82QRc1V0dqP9xaNUTL+hieDAI3BmLuPruoGra3K pyd4X0Fh2CN63NQe6Go1VIllJP6gh7YyqxxaNO+Owyrx308VH3ooNlwoA4bJZBPO GUYiCOH/mj3vnjZwdmMsOhDTTEYIGrqlUas9JbfXq4gIJvgRCbcrje0RHLGsvdx1 8gqRxI8B3esZLrY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:27 2026 by rpki-client