This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4rdTxE4U8SWi3axBDMycJ1e2dVc.roa File: 4rdTxE4U8SWi3axBDMycJ1e2dVc.roa (raw, json) Hash identifier: Xdko31FAcZqa8CKzUmvaPLbn8FzZeXlJr3Mz2L3FEGY= Subject key identifier: E2:B7:53:C4:4E:14:F1:25:A2:DD:AC:41:0C:CC:9C:27:57:B6:75:57 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB4389DBE65747CF1AFEB3570DAC5A Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4rdTxE4U8SWi3axBDMycJ1e2dVc.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50104 IP address blocks: 185.65.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:43:89:db:e6:57:47:cf:1a:fe:b3:57:0d:ac:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2b753c44e14f125a2ddac410ccc9c2757b67557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:d1:93:3b:eb:c7:a1:06:eb:a5:d1:04:bd: 0c:a1:b9:12:48:10:8e:ac:44:01:d4:c8:84:bb:11: 67:1f:66:f1:cd:70:3a:fe:be:6f:33:99:fd:01:85: bb:0a:9e:b3:63:97:99:47:1b:f5:41:48:9e:c8:93: a2:ce:11:82:ce:c0:be:68:9f:b7:38:4d:20:4b:d2: e6:b3:49:41:dd:21:b3:d1:42:b2:f4:43:b6:5f:53: 69:be:2e:2a:f0:6c:b7:5d:64:92:6b:c5:eb:53:e3: aa:44:0f:ba:24:1a:4d:ac:51:2c:e7:7b:f6:71:98: 3e:57:b2:f2:35:2c:f0:05:57:bd:62:1a:b5:68:95: 7d:1b:ea:53:b6:cd:3a:f9:86:2b:4c:af:f9:4f:5b: 45:b7:16:22:3b:0f:56:15:88:4e:68:3d:35:7d:77: b1:21:6d:a7:5d:38:3f:ed:79:cf:5a:73:4b:3f:90: 7d:4e:55:ac:b2:e1:1e:5a:2e:23:d7:fa:f8:98:83: 61:4a:9a:c3:0d:a2:91:24:b8:35:3d:9f:a1:6a:0a: c7:37:09:7f:ab:0f:7a:a2:6b:00:f7:98:1f:d4:42: ee:d9:06:b3:ce:70:42:f2:bc:7f:7d:b8:4a:02:3e: 79:7d:ee:90:df:46:c7:e4:12:ac:a0:be:66:41:eb: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:53:C4:4E:14:F1:25:A2:DD:AC:41:0C:CC:9C:27:57:B6:75:57 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4rdTxE4U8SWi3axBDMycJ1e2dVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.203.0/24 Signature Algorithm: sha256WithRSAEncryption 51:53:6a:d3:bd:c9:b8:6b:ce:a5:e2:4d:93:d0:94:eb:f6:d3: e9:1d:6a:23:e1:ed:df:05:52:c4:13:cf:a2:9f:a8:48:4c:5f: fb:0b:9a:04:81:44:2b:cb:1f:7a:87:4a:cc:e7:8e:31:be:19: 56:89:7f:7c:87:8b:3e:f7:c6:2e:84:b2:ae:b8:23:c8:85:41: 6e:86:0f:f9:f6:57:76:f0:c5:a2:55:66:6a:e3:c4:f7:c4:2a: d9:2e:37:51:0d:2a:08:d9:94:77:4e:67:f2:cc:68:04:47:ce: de:61:2b:50:d6:8e:6d:10:30:f0:c8:b2:a0:fd:bd:81:b6:d5: 11:02:02:dd:7b:d5:db:34:43:84:01:87:6e:ef:09:c2:84:a0: a1:e7:92:24:c1:2e:06:5f:72:77:11:ed:23:a9:6b:a9:ce:81: 12:a3:9c:43:8f:89:f5:cf:7d:57:b8:af:d7:b6:5c:b5:33:b3: 72:2e:61:31:ff:41:d7:33:fb:fc:f3:e3:f9:01:7f:e2:40:cc: cb:b4:17:fc:c6:17:17:f4:9c:35:a8:1c:4c:b4:d1:e1:07:13: 57:93:3a:9d:a5:cf:03:4f:2f:ca:77:5d:73:00:51:b9:e8:db: 0c:5b:8d:b8:bc:8f:52:aa:f8:70:71:f4:af:a8:53:a3:80:de: f3:1f:6b:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0OJ2+ZXR88a/rNXDaxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmI3NTNjNDRlMTRmMTI1YTJkZGFjNDEwY2NjOWMyNzU3YjY3NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkbRkzvrx6EG66XRBL0MobkSSBCO rEQB1MiEuxFnH2bxzXA6/r5vM5n9AYW7Cp6zY5eZRxv1QUieyJOizhGCzsC+aJ+3 OE0gS9Lms0lB3SGz0UKy9EO2X1Npvi4q8Gy3XWSSa8XrU+OqRA+6JBpNrFEs53v2 cZg+V7LyNSzwBVe9Yhq1aJV9G+pTts06+YYrTK/5T1tFtxYiOw9WFYhOaD01fXex IW2nXTg/7XnPWnNLP5B9TlWssuEeWi4j1/r4mINhSprDDaKRJLg1PZ+hagrHNwl/ qw96omsA95gf1ELu2QazznBC8rx/fbhKAj55fe6Q30bH5BKsoL5mQeu5GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOK3U8ROFPElot2sQQzMnCdXtnVXMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvNHJkVHhFNFU4U1dpM2F4QkRNeWNKMWUyZFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUHLMA0G CSqGSIb3DQEBCwUAA4IBAQBRU2rTvcm4a86l4k2T0JTr9tPpHWoj4e3fBVLEE8+i n6hITF/7C5oEgUQryx96h0rM544xvhlWiX98h4s+98YuhLKuuCPIhUFuhg/59ld2 8MWiVWZq48T3xCrZLjdRDSoI2ZR3TmfyzGgER87eYStQ1o5tEDDwyLKg/b2BttUR AgLde9XbNEOEAYdu7wnChKCh55IkwS4GX3J3Ee0jqWupzoESo5xDj4n1z31XuK/X tly1M7NyLmEx/0HXM/v88+P5AX/iQMzLtBf8xhcX9Jw1qBxMtNHhBxNXkzqdpc8D Ty/Kd11zAFG56NsMW424vI9SqvhwcfSvqFOjgN7zH2s0 -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:53 2026 by rpki-client