This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/v9i47anpnbrdLEZ-n1nwTrZVjyg.roa File: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (raw, json) Hash identifier: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw= Subject key identifier: BF:D8:B8:ED:A9:E9:9D:BA:DD:2C:46:7E:9F:59:F0:4E:B6:55:8F:28 Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Certificate serial: 019B7C7F9D3D491F34496A1AC1D87D27C4D3 Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/v9i47anpnbrdLEZ-n1nwTrZVjyg.roa Signing time: Fri 02 Jan 2026 02:18:16 +0000 ROA not before: Fri 02 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2094 IP address blocks: 185.4.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:9d:3d:49:1f:34:49:6a:1a:c1:d8:7d:27:c4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Validity Not Before: Jan 2 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd8b8eda9e99dbadd2c467e9f59f04eb6558f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:1a:cb:ad:20:21:68:2d:ac:9b:49:cc:7c: 95:87:17:13:3c:37:c0:89:05:f8:af:7e:8e:5f:4d: dc:56:b9:eb:4a:12:20:76:7e:bb:04:20:b1:de:71: 2f:d8:38:f1:38:c7:1c:11:62:b4:e7:eb:95:51:9a: 72:03:37:e6:17:d2:47:f2:21:0a:eb:db:51:7a:c4: 39:ed:d0:48:02:21:c3:c2:c3:27:99:fc:61:d1:7e: 22:48:d3:7e:69:50:6c:f4:ff:16:b5:d0:fe:38:87: 20:f5:9f:cb:e0:56:a2:98:62:17:8d:d3:35:a4:e4: 54:12:a5:86:69:3c:2a:d5:ad:39:aa:31:d3:f2:f5: 3e:d6:b7:f5:1f:bc:d5:5a:8d:72:33:6d:04:f1:c9: 6f:bb:38:5d:3e:4c:06:72:3b:4c:b8:53:fc:6a:b7: a7:85:c5:c3:43:b9:36:96:bc:18:13:bf:f2:f2:1f: cb:ef:a1:ff:63:0f:b5:87:50:b4:93:b4:4e:79:09: ab:79:fb:39:39:b1:75:5a:90:19:2a:92:2c:f3:79: 4f:da:d5:41:aa:36:e7:3d:00:98:b7:04:4c:c0:2d: 52:8d:29:de:5a:ec:21:b0:80:43:59:1b:d7:d6:47: d8:9a:c8:9d:db:3b:e7:f4:a5:8f:ac:03:61:4f:5b: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D8:B8:ED:A9:E9:9D:BA:DD:2C:46:7E:9F:59:F0:4E:B6:55:8F:28 X509v3 Authority Key Identifier: keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/v9i47anpnbrdLEZ-n1nwTrZVjyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.250.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:58:9c:9c:e5:a7:9c:57:cd:91:a4:95:52:92:6d:1e:6f:ba: 5b:a3:d8:94:25:38:ce:b6:1b:cd:bc:ad:e0:28:9b:84:12:b3: 4f:2f:db:02:df:46:03:07:87:4c:3b:de:97:56:fc:0d:76:c5: ef:08:77:0e:7c:44:5a:4f:03:75:17:c1:bb:1f:a0:38:78:fe: 04:22:69:94:50:57:a6:ba:67:37:e8:45:5e:63:63:92:e0:33: 8a:2c:46:05:63:f3:34:6e:9d:5d:ed:13:c5:23:78:c5:96:8a: ca:78:b5:29:b5:1f:b8:0f:37:e0:81:15:b2:85:2c:99:52:d3: f8:a3:77:6c:8e:b2:4d:35:5f:57:37:8f:c1:28:42:2f:f2:48: ca:3c:22:5e:a7:4f:04:e7:90:52:b9:99:aa:d0:7d:84:41:84: e3:28:b5:24:5f:c4:ec:9a:b3:e4:e5:ba:06:f1:24:11:74:26: 20:9f:bb:39:b8:73:31:70:45:16:f9:6f:57:7f:b2:39:72:2d: 7e:28:fe:14:e8:62:57:3f:26:86:ae:c8:fe:3a:61:b5:f9:c9: 33:e4:af:91:bc:07:32:ac:f5:6c:7c:66:51:7b:4d:d2:3a:fe: 6b:5d:e4:5c:b6:70:f3:ec:79:b8:8d:28:91:74:21:aa:c9:fb: 32:71:7e:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f509SR80SWoawdh9J8TTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmEyOTlmMTgyYTFmZDUxZDRiMDM2Mjk5N2FmN2FhYWUw ZDZiZTkwHhcNMjYwMTAyMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQ4YjhlZGE5ZTk5ZGJhZGQyYzQ2N2U5ZjU5ZjA0ZWI2NTU4ZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4way60gIWgtrJtJzHyVhxcTPDfA iQX4r36OX03cVrnrShIgdn67BCCx3nEv2DjxOMccEWK05+uVUZpyAzfmF9JH8iEK 69tResQ57dBIAiHDwsMnmfxh0X4iSNN+aVBs9P8WtdD+OIcg9Z/L4FaimGIXjdM1 pORUEqWGaTwq1a05qjHT8vU+1rf1H7zVWo1yM20E8clvuzhdPkwGcjtMuFP8aren hcXDQ7k2lrwYE7/y8h/L76H/Yw+1h1C0k7ROeQmrefs5ObF1WpAZKpIs83lP2tVB qjbnPQCYtwRMwC1SjSneWuwhsIBDWRvX1kfYmsid2zvn9KWPrANhT1vIsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/YuO2p6Z263SxGfp9Z8E62VY8oMB8GA1UdIwQY MBaAFE4qKZ8YKh/VHUsDYpl696quDWvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAt ZjJjZTc3ZTMxOTFlLzEvdjlpNDdhbnBuYnJkTEVaLW4xbndUclpWanlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kM2RmMjYtM2RiNS00NTM5LTgwMzAtZjJjZTc3ZTMxOTFl LzEvVGlvcG54Z3FIOVVkU3dOaW1YcjNxcTROYS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQT6MA0G CSqGSIb3DQEBCwUAA4IBAQA8WJyc5aecV82RpJVSkm0eb7pbo9iUJTjOthvNvK3g KJuEErNPL9sC30YDB4dMO96XVvwNdsXvCHcOfERaTwN1F8G7H6A4eP4EImmUUFem umc36EVeY2OS4DOKLEYFY/M0bp1d7RPFI3jFlorKeLUptR+4DzfggRWyhSyZUtP4 o3dsjrJNNV9XN4/BKEIv8kjKPCJep08E55BSuZmq0H2EQYTjKLUkX8TsmrPk5boG 8SQRdCYgn7s5uHMxcEUW+W9Xf7I5ci1+KP4U6GJXPyaGrsj+OmG1+ckz5K+RvAcy rPVsfGZRe03SOv5rXeRctnDz7Hm4jSiRdCGqyfsycX7J -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:21 2026 by rpki-client