This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa File: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (raw, json) Hash identifier: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g= Subject key identifier: E0:FD:B3:2A:B2:67:F1:F2:59:9B:9E:98:F5:7A:86:62:B2:5F:BF:57 Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019B7B35C6BCF195D3FE392E5331B8458432 Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207680 IP address blocks: 185.128.80.0/22 maxlen: 22 185.128.80.0/24 maxlen: 24 185.128.81.0/24 maxlen: 24 185.128.82.0/24 maxlen: 24 185.128.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c6:bc:f1:95:d3:fe:39:2e:53:31:b8:45:84:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0fdb32ab267f1f2599b9e98f57a8662b25fbf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:32:dd:d7:8a:e4:56:6a:af:85:8d:79:fa: cb:cf:e4:32:27:0c:2f:55:55:c7:48:67:de:4f:1b: f9:56:59:d5:6f:2b:86:2e:0e:53:eb:42:91:a7:24: e4:f0:e9:bf:b0:70:bf:7b:11:24:26:61:76:7d:5b: 81:03:c1:65:78:a6:02:96:7b:be:b3:ff:1e:84:84: 13:21:29:a3:6e:de:ea:ea:1f:ff:00:13:4c:bd:8d: 11:da:15:1c:77:6b:48:46:88:49:c3:d1:12:32:af: 6c:6c:b2:78:45:a5:f9:4c:ff:74:35:4b:ec:52:1b: df:00:cc:12:aa:ab:da:f8:e1:14:cc:f4:4a:ba:df: fe:18:6e:e0:dd:4f:19:c6:39:8f:5d:67:d4:77:46: 3a:a2:f8:9e:3f:68:30:79:29:b2:57:5a:70:ef:4b: 4e:bf:21:37:86:b7:77:fa:b5:53:70:8c:fc:6d:1d: 94:13:75:db:4b:c7:96:76:74:47:13:74:cc:74:1c: cb:45:5b:2c:c4:dc:09:5f:41:80:9d:35:46:d5:53: 99:ca:5b:3e:1b:d5:d4:91:3e:0c:d5:9d:84:2f:f4: 3a:86:7b:10:1b:d3:2b:9f:be:38:a0:b5:72:bd:7f: 8b:28:b7:30:e5:84:78:0c:a7:18:be:9c:bd:4d:bc: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FD:B3:2A:B2:67:F1:F2:59:9B:9E:98:F5:7A:86:62:B2:5F:BF:57 X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.80.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:f4:25:c4:ac:69:c6:4c:b4:48:46:0a:29:69:01:ae:0f:09: c8:a4:f6:10:18:e2:b3:8f:50:c2:86:5d:9d:bd:ed:fb:54:03: 95:6f:7f:31:05:d9:2e:68:e2:a3:b6:d8:26:6f:8f:eb:ae:79: 0c:b3:76:13:fa:2e:90:0f:fc:4a:7a:37:bd:11:be:61:b6:dc: 9b:d3:72:57:b5:0b:de:96:e8:5e:b5:1c:98:04:2a:25:aa:1d: b7:ca:8f:06:f3:a2:50:56:d0:dd:34:83:67:e9:5b:93:7e:3f: ee:3d:04:47:04:e1:6b:0c:c5:09:52:7d:54:97:d0:01:e0:7e: 4c:c5:9b:03:22:7c:a4:1d:6b:d3:36:fa:b2:43:00:f1:e2:83: 5e:c5:ad:5a:33:63:c3:47:f0:0b:a8:22:18:7c:ee:52:5f:12: 21:6f:b4:56:c7:f8:38:57:1d:84:32:32:4d:ca:9c:98:dc:d9: 84:5e:1f:88:39:23:23:f6:cd:6a:03:73:b1:a9:03:e3:64:59: bc:e6:b3:5b:47:59:c6:d4:de:90:ac:6c:64:e0:55:e4:77:16: 22:19:0f:db:03:4c:c4:60:c5:48:f6:07:e3:95:fb:25:58:d7: 7e:dd:52:78:35:05:55:05:15:6f:da:66:3a:a2:2c:2d:3b:c8: c7:f7:e7:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nca88ZXT/jkuUzG4RYQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGZkYjMyYWIyNjdmMWYyNTk5YjllOThmNTdhODY2MmIyNWZiZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWEy3deK5FZqr4WNefrLz+QyJwwv VVXHSGfeTxv5VlnVbyuGLg5T60KRpyTk8Om/sHC/exEkJmF2fVuBA8FleKYClnu+ s/8ehIQTISmjbt7q6h//ABNMvY0R2hUcd2tIRohJw9ESMq9sbLJ4RaX5TP90NUvs UhvfAMwSqqva+OEUzPRKut/+GG7g3U8ZxjmPXWfUd0Y6ovieP2gweSmyV1pw70tO vyE3hrd3+rVTcIz8bR2UE3XbS8eWdnRHE3TMdBzLRVssxNwJX0GAnTVG1VOZyls+ G9XUkT4M1Z2EL/Q6hnsQG9Mrn744oLVyvX+LKLcw5YR4DKcYvpy9TbzY+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOD9syqyZ/HyWZuemPV6hmKyX79XMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvNFAyektySm44ZkpabTU2WTlYcUdZckpmdjFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYBQMA0G CSqGSIb3DQEBCwUAA4IBAQBr9CXErGnGTLRIRgopaQGuDwnIpPYQGOKzj1DChl2d ve37VAOVb38xBdkuaOKjttgmb4/rrnkMs3YT+i6QD/xKeje9Eb5httyb03JXtQve luhetRyYBColqh23yo8G86JQVtDdNINn6VuTfj/uPQRHBOFrDMUJUn1Ul9AB4H5M xZsDInykHWvTNvqyQwDx4oNexa1aM2PDR/ALqCIYfO5SXxIhb7RWx/g4Vx2EMjJN ypyY3NmEXh+IOSMj9s1qA3OxqQPjZFm85rNbR1nG1N6QrGxk4FXkdxYiGQ/bA0zE YMVI9gfjlfslWNd+3VJ4NQVVBRVv2mY6oiwtO8jH9+f0 -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:33 2026 by rpki-client