This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/4EuRKSkKUxM9egQ_E38-x94Ksco.roa File: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (raw, json) Hash identifier: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8= Subject key identifier: E0:4B:91:29:29:0A:53:13:3D:7A:04:3F:13:7F:3E:C7:DE:0A:B1:CA Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517 Certificate serial: 019B77C6B4AAE63A5D1A1BD0171F4DC8369E Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/4EuRKSkKUxM9egQ_E38-x94Ksco.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204695 IP address blocks: 185.242.100.0/22 maxlen: 22 185.242.100.0/24 maxlen: 24 185.242.101.0/24 maxlen: 24 185.242.102.0/24 maxlen: 24 185.242.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b4:aa:e6:3a:5d:1a:1b:d0:17:1f:4d:c8:36:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e04b9129290a53133d7a043f137f3ec7de0ab1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:a6:88:03:e4:3a:5d:75:b1:af:72:b8:7d: 58:7d:cd:2c:f6:43:4c:93:16:4b:a8:3f:08:05:51: 46:ce:14:5c:86:c1:46:04:3a:c4:71:db:f0:21:0d: 0b:b1:8b:6e:d2:fb:ab:58:8d:c2:c4:f4:a0:da:c7: b9:3b:3f:bd:1c:a2:9d:70:c1:75:6e:74:25:0c:e9: ff:bd:9e:7d:a3:2d:ef:f5:61:6b:de:77:92:9a:72: 24:77:87:83:3d:4c:56:1f:29:81:a1:1e:44:95:ae: a3:1b:6c:e7:0e:df:47:82:dc:6d:d9:9d:d2:41:1c: b6:51:6d:c9:81:55:ec:a9:b0:5e:c1:ac:df:ba:00: 77:57:eb:1e:4d:53:ef:0b:14:0d:73:c3:6c:95:4a: cb:0a:71:24:07:61:39:07:8e:f4:00:c2:d3:91:59: 07:5e:5a:1e:ec:53:a2:f4:a4:a6:5d:66:0c:a0:6d: 4e:05:9b:1a:19:1d:80:fd:eb:0a:90:50:c3:7c:03: 6c:ea:b3:13:9b:ac:c0:78:ea:a6:93:2a:2f:13:f0: b1:ee:ec:c7:62:5e:cb:d9:e0:87:4a:7e:e8:bd:17: 53:0e:a8:fb:bf:3f:ca:a7:76:0d:1c:ea:c3:e1:5c: 94:f5:5e:02:de:90:9f:d4:f0:49:39:17:2f:bd:b9: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4B:91:29:29:0A:53:13:3D:7A:04:3F:13:7F:3E:C7:DE:0A:B1:CA X509v3 Authority Key Identifier: keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/4EuRKSkKUxM9egQ_E38-x94Ksco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.100.0/22 Signature Algorithm: sha256WithRSAEncryption 05:68:d2:0a:cf:fe:99:7a:58:0d:84:b6:0f:2b:f5:dc:91:ec: 32:ca:9b:ab:f0:b0:a6:40:ac:b1:51:f4:60:4b:cc:3e:a0:d9: 39:6e:e8:30:6f:e6:e5:da:ba:88:63:f7:99:fb:55:58:41:55: f3:a5:96:d7:e6:94:84:f5:db:e2:45:23:a7:e3:78:75:ed:1e: c2:de:03:e4:c0:69:c9:03:40:af:56:9f:06:f8:04:21:78:8d: 98:8c:c2:86:f7:c5:b5:61:d0:4b:2b:00:26:9e:bd:2d:c6:b7: 15:cf:b7:65:d4:6c:04:03:3d:5f:f8:ab:de:f5:83:51:bc:6a: 81:09:23:e8:68:89:2d:a6:7e:9b:69:3d:9c:c7:30:61:0d:88: ce:c5:f3:be:c0:17:d9:1f:a8:fb:04:cf:24:5b:4d:4e:80:05: 53:aa:08:39:b9:4d:2d:14:70:4d:92:80:cf:1c:b8:46:3d:9d: 32:ed:b2:fb:60:03:11:98:c2:05:43:72:9a:ce:0d:6d:6a:85: 6d:24:f9:d7:5c:9b:25:81:66:ed:f9:cf:37:cf:f2:87:b0:c5: ca:b7:3b:19:ca:c4:a6:c7:e6:7c:4a:8e:f2:37:41:26:0c:f1: cf:ef:7b:e5:15:5a:06:19:01:4f:ea:80:22:53:97:e2:a6:01: df:a2:a7:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrSq5jpdGhvQFx9NyDaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj OTM1MTcwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDRiOTEyOTI5MGE1MzEzM2Q3YTA0M2YxMzdmM2VjN2RlMGFiMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoWmiAPkOl11sa9yuH1Yfc0s9kNM kxZLqD8IBVFGzhRchsFGBDrEcdvwIQ0LsYtu0vurWI3CxPSg2se5Oz+9HKKdcMF1 bnQlDOn/vZ59oy3v9WFr3neSmnIkd4eDPUxWHymBoR5Ela6jG2znDt9Hgtxt2Z3S QRy2UW3JgVXsqbBewazfugB3V+seTVPvCxQNc8NslUrLCnEkB2E5B470AMLTkVkH Xloe7FOi9KSmXWYMoG1OBZsaGR2A/esKkFDDfANs6rMTm6zAeOqmkyovE/Cx7uzH Yl7L2eCHSn7ovRdTDqj7vz/Kp3YNHOrD4VyU9V4C3pCf1PBJORcvvbnFrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOBLkSkpClMTPXoEPxN/PsfeCrHKMB8GA1UdIwQY MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt OTA1NjliYzZjYTU0LzEvNEV1UktTa0tVeE05ZWdRX0UzOC14OTRLc2NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0 LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufJkMA0G CSqGSIb3DQEBCwUAA4IBAQAFaNIKz/6ZelgNhLYPK/Xckewyypur8LCmQKyxUfRg S8w+oNk5bugwb+bl2rqIY/eZ+1VYQVXzpZbX5pSE9dviRSOn43h17R7C3gPkwGnJ A0CvVp8G+AQheI2YjMKG98W1YdBLKwAmnr0txrcVz7dl1GwEAz1f+Kve9YNRvGqB CSPoaIktpn6baT2cxzBhDYjOxfO+wBfZH6j7BM8kW01OgAVTqgg5uU0tFHBNkoDP HLhGPZ0y7bL7YAMRmMIFQ3Kazg1taoVtJPnXXJslgWbt+c83z/KHsMXKtzsZysSm x+Z8So7yN0EmDPHP73vlFVoGGQFP6oAiU5fipgHfoqdf -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:43 2026 by rpki-client