This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa File: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (raw, json) Hash identifier: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc= Subject key identifier: E0:C2:E8:3E:BB:D6:C0:4B:E5:BE:45:DD:80:C0:AD:4C:5F:15:0B:71 Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Certificate serial: 019B7B36AD5753614F8A69CA13E4C3B2EB15 Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60423 IP address blocks: 185.83.113.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ad:57:53:61:4f:8a:69:ca:13:e4:c3:b2:eb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0c2e83ebbd6c04be5be45dd80c0ad4c5f150b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:b9:fc:25:8f:de:2b:d8:8e:46:8c:b1:1b: 7d:95:3e:68:04:bb:b6:12:99:f1:7b:b3:77:42:d8: 8c:c4:be:60:7e:0b:f0:bc:c6:b5:a5:93:77:2c:aa: 23:0e:61:c4:4e:12:8c:c5:65:b4:d2:83:83:6d:76: aa:e1:d4:47:71:42:1f:5d:24:e2:9c:26:56:1b:74: f5:9e:20:c2:86:24:53:8d:e3:4c:77:ad:60:ab:fb: 6a:f2:2f:03:36:95:00:de:66:44:d9:c5:16:22:3e: 6c:47:85:15:21:78:b1:38:a7:3c:6c:47:4f:a7:29: 51:ea:33:fb:02:48:dd:06:54:1e:01:78:11:4b:30: 77:d5:9f:6f:2e:bd:37:b9:66:2a:bf:d0:6c:12:d3: 97:aa:f9:9e:f7:92:35:7f:c8:be:6d:0f:d2:2e:81: ee:d6:23:23:db:63:db:de:79:77:75:a3:93:ee:41: 1e:33:7d:83:8b:a4:06:20:5d:a7:f1:aa:e6:49:36: 26:6f:43:41:43:56:a7:c1:f7:0b:14:a4:92:9a:14: e7:95:bd:a4:c8:02:dd:cc:81:1e:0e:4e:c7:65:a5: 5c:9b:62:ca:f9:b5:7c:1b:8e:dd:bd:a2:ab:04:84: 00:22:80:6e:ee:ea:ce:65:03:10:68:d2:69:f1:ef: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C2:E8:3E:BB:D6:C0:4B:E5:BE:45:DD:80:C0:AD:4C:5F:15:0B:71 X509v3 Authority Key Identifier: keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.113.0/24 Signature Algorithm: sha256WithRSAEncryption a7:9d:3a:ef:f5:81:83:51:f5:60:79:03:4b:36:4a:c5:a4:ef: 90:18:1d:1c:ae:b4:59:c4:a0:cf:b0:5f:93:3c:f9:8d:9e:6f: 6d:d0:71:ca:a9:07:61:95:39:63:c6:8f:26:cd:3d:8c:56:3e: 63:b7:00:42:29:b4:e6:76:b3:a9:e2:96:b0:f7:f3:b3:14:1c: f8:1c:89:85:ae:46:85:0d:2d:91:47:08:ee:79:92:9b:f9:67: 15:05:2f:5e:d6:3b:04:0a:15:08:44:09:17:f5:70:73:0d:d0: b0:30:8d:d6:09:0c:d9:30:c4:77:79:f0:1b:17:da:1a:b5:74: ce:6c:60:f7:58:16:b3:4e:e0:25:d3:7b:c7:44:b7:b1:32:0b: 62:7c:38:a0:f7:f3:d9:a0:db:cf:93:db:75:7f:ff:96:2e:b9: 8c:75:e3:2f:94:f2:b2:4e:87:58:d1:29:d4:be:bb:0c:3d:77: 05:d1:f8:57:22:bd:e1:a7:08:31:4e:ad:33:f5:25:1b:1c:12: 76:3d:41:e3:0c:23:f7:6b:27:e7:ff:7f:23:d2:a9:f7:9a:0b: a7:12:e0:59:34:10:7a:d9:3f:3c:8a:8e:27:0d:ae:2a:94:5d: 3c:d9:b2:f6:16:e2:b4:39:32:1c:31:85:18:e8:6a:78:10:91: 37:f0:9a:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nq1XU2FPimnKE+TDsusVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZWUxMTk0YmQ4MWQxOTQ2YzM5ZjEwZjdmZGZkZjIyZDFh MDMxMTIwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGMyZTgzZWJiZDZjMDRiZTViZTQ1ZGQ4MGMwYWQ0YzVmMTUwYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2e5/CWP3ivYjkaMsRt9lT5oBLu2 Epnxe7N3QtiMxL5gfgvwvMa1pZN3LKojDmHEThKMxWW00oODbXaq4dRHcUIfXSTi nCZWG3T1niDChiRTjeNMd61gq/tq8i8DNpUA3mZE2cUWIj5sR4UVIXixOKc8bEdP pylR6jP7AkjdBlQeAXgRSzB31Z9vLr03uWYqv9BsEtOXqvme95I1f8i+bQ/SLoHu 1iMj22Pb3nl3daOT7kEeM32Di6QGIF2n8armSTYmb0NBQ1anwfcLFKSSmhTnlb2k yALdzIEeDk7HZaVcm2LK+bV8G47dvaKrBIQAIoBu7urOZQMQaNJp8e9FAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODC6D671sBL5b5F3YDArUxfFQtxMB8GA1UdIwQY MBaAFEnuEZS9gdGUbDnxD3/f3yLRoDESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYt ZDYyZmE2MzE5ZmQ0LzEvNE1Mb1Bydld3RXZsdmtYZGdNQ3RURjhWQzNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMzI0ZjQtOTc3MC00YTU4LWE2ZWYtZDYyZmE2MzE5ZmQ0 LzEvU2U0UmxMMkIwWlJzT2ZFUGY5X2ZJdEdnTVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVNxMA0G CSqGSIb3DQEBCwUAA4IBAQCnnTrv9YGDUfVgeQNLNkrFpO+QGB0crrRZxKDPsF+T PPmNnm9t0HHKqQdhlTljxo8mzT2MVj5jtwBCKbTmdrOp4paw9/OzFBz4HImFrkaF DS2RRwjueZKb+WcVBS9e1jsEChUIRAkX9XBzDdCwMI3WCQzZMMR3efAbF9oatXTO bGD3WBazTuAl03vHRLexMgtifDig9/PZoNvPk9t1f/+WLrmMdeMvlPKyTodY0SnU vrsMPXcF0fhXIr3hpwgxTq0z9SUbHBJ2PUHjDCP3ayfn/38j0qn3mgunEuBZNBB6 2T88io4nDa4qlF082bL2FuK0OTIcMYUY6Gp4EJE38Jqr -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:55 2026 by rpki-client