This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/4da3-XmLEkYcc3sAjFZripmjHEs.roa File: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (raw, json) Hash identifier: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU= Subject key identifier: E1:D6:B7:F9:79:8B:12:46:1C:73:7B:00:8C:56:6B:8A:99:A3:1C:4B Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Certificate serial: 019B79ECF8EAFCF7606C19F1E5897326AC89 Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/4da3-XmLEkYcc3sAjFZripmjHEs.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 185.173.20.0/22 maxlen: 22 185.173.20.0/24 maxlen: 24 185.173.21.0/24 maxlen: 24 185.173.22.0/24 maxlen: 24 2a0b:3100::/40 maxlen: 48 2a0b:3100:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f8:ea:fc:f7:60:6c:19:f1:e5:89:73:26:ac:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1d6b7f9798b12461c737b008c566b8a99a31c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:b2:81:9f:ec:0b:01:02:82:07:f4:63:78: b8:50:60:c7:97:69:0b:58:b5:45:2c:44:36:90:40: fd:53:e2:95:0b:96:bc:c3:12:01:ce:f6:0f:32:ac: d8:cd:96:55:9a:0d:fe:e3:b7:9d:38:c6:31:7e:5f: e0:45:01:de:d6:e4:02:bf:55:b4:aa:b0:c0:ed:9b: 0d:1b:b5:82:f4:b8:6b:17:50:3c:07:f7:ee:2f:32: 4c:20:ab:b6:0e:e0:1b:4f:13:4a:98:c0:70:49:d7: b4:e8:d2:e6:bd:5f:7b:9a:2c:bf:3d:51:20:72:45: eb:61:d4:9c:b4:a0:c4:00:51:37:f3:ab:7f:9f:37: 04:84:a3:61:61:5c:1f:ff:60:5a:08:06:ef:cf:cb: 5a:2b:86:41:45:2f:fa:eb:0d:86:cb:7c:2c:04:62: 4c:2a:08:bb:a0:60:1b:f0:1a:f1:76:4e:32:f7:70: 69:48:bb:c4:fa:6e:a2:a2:6b:38:ca:e3:16:49:a9: 94:75:0c:40:02:19:fd:8c:ff:87:40:6c:af:a2:d3: cb:29:d9:b6:2e:f2:56:af:e8:95:d2:d8:d5:9d:81: 24:ba:ce:d1:ff:23:5e:f7:a2:40:48:d2:aa:af:d2: 83:2b:b9:99:78:64:51:ab:67:99:65:50:86:a9:1c: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:B7:F9:79:8B:12:46:1C:73:7B:00:8C:56:6B:8A:99:A3:1C:4B X509v3 Authority Key Identifier: keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/4da3-XmLEkYcc3sAjFZripmjHEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.20.0/22 IPv6: 2a0b:3100::/39 Signature Algorithm: sha256WithRSAEncryption 41:83:25:de:bb:29:08:55:49:96:fb:ba:7a:3f:a1:bd:b1:39: 93:cc:34:54:af:d8:92:39:6c:e5:0c:3c:00:3c:85:92:8b:86: 5f:83:1f:8d:d3:7b:ad:b3:db:0c:dc:fd:e2:41:05:a5:54:45: 96:74:ea:a1:30:67:61:90:1f:18:20:4c:6d:4c:16:b5:78:97: c7:67:64:1f:a5:16:c3:08:51:1a:2d:7b:5a:0b:14:b0:ef:0a: 7b:11:bb:e1:7b:1a:8d:78:df:97:d9:d1:72:72:75:be:32:a1: 81:c7:3c:c3:ff:62:b8:a3:b6:96:95:c1:24:e2:76:9f:37:b6: b1:76:9b:5b:9a:bb:f1:eb:79:5f:66:e1:32:e9:95:ca:6f:96: 46:f8:81:62:41:b0:dd:2a:78:87:e1:ad:8e:7a:85:fb:52:2e: 3a:da:c9:8b:d6:83:88:5f:24:5b:a6:75:69:03:d1:60:eb:ee: 63:83:c0:2b:0c:d4:db:e9:6b:6e:68:55:76:fd:14:57:55:46: 88:68:cc:dd:90:db:d1:ae:6d:ec:cd:e5:7d:c9:d8:25:af:b4: f4:b3:51:97:ce:07:53:68:3e:92:06:39:16:f8:4c:90:ba:51: e7:32:03:38:62:70:3e:37:78:91:2d:f6:7b:3f:d1:bd:d3:a7: 24:68:e9:1a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt57Pjq/PdgbBnx5YlzJqyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5 Nzg4MjUwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWQ2YjdmOTc5OGIxMjQ2MWM3MzdiMDA4YzU2NmI4YTk5YTMxYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwaygZ/sCwECggf0Y3i4UGDHl2kL WLVFLEQ2kED9U+KVC5a8wxIBzvYPMqzYzZZVmg3+47edOMYxfl/gRQHe1uQCv1W0 qrDA7ZsNG7WC9LhrF1A8B/fuLzJMIKu2DuAbTxNKmMBwSde06NLmvV97miy/PVEg ckXrYdSctKDEAFE386t/nzcEhKNhYVwf/2BaCAbvz8taK4ZBRS/66w2Gy3wsBGJM Kgi7oGAb8Brxdk4y93BpSLvE+m6ioms4yuMWSamUdQxAAhn9jP+HQGyvotPLKdm2 LvJWr+iV0tjVnYEkus7R/yNe96JASNKqr9KDK7mZeGRRq2eZZVCGqRxIsQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOHWt/l5ixJGHHN7AIxWa4qZoxxLMB8GA1UdIwQY MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt ZDc4NTE0ZTllODEyLzEvNGRhMy1YbUxFa1ljYzNzQWpGWnJpcG1qSEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCua0UMA4E AgACMAgDBgEqCzEAADANBgkqhkiG9w0BAQsFAAOCAQEAQYMl3rspCFVJlvu6ej+h vbE5k8w0VK/Ykjls5Qw8ADyFkouGX4MfjdN7rbPbDNz94kEFpVRFlnTqoTBnYZAf GCBMbUwWtXiXx2dkH6UWwwhRGi17WgsUsO8KexG74XsajXjfl9nRcnJ1vjKhgcc8 w/9iuKO2lpXBJOJ2nze2sXabW5q78et5X2bhMumVym+WRviBYkGw3Sp4h+GtjnqF +1IuOtrJi9aDiF8kW6Z1aQPRYOvuY4PAKwzU2+lrbmhVdv0UV1VGiGjM3ZDb0a5t 7M3lfcnYJa+09LNRl84HU2g+kgY5FvhMkLpR5zIDOGJwPjd4kS32ez/RvdOnJGjp Gg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:57 2026 by rpki-client