This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/A4n1QfD0iscTrbBktYKciEddwcY.roa File: A4n1QfD0iscTrbBktYKciEddwcY.roa (raw, json) Hash identifier: cgPbG6MU76mOSTBkpemcWJ21uY8j3EL3AxxbDcih+VE= Subject key identifier: 03:89:F5:41:F0:F4:8A:C7:13:AD:B0:64:B5:82:9C:88:47:5D:C1:C6 Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b Certificate serial: 019B77C72470D05CF4BEABED7CFADAD631A3 Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/A4n1QfD0iscTrbBktYKciEddwcY.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42065 IP address blocks: 185.26.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:24:70:d0:5c:f4:be:ab:ed:7c:fa:da:d6:31:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0389f541f0f48ac713adb064b5829c88475dc1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:6f:a6:dc:e1:4b:e5:b2:6e:5d:2a:aa:3f: a8:8c:0f:4d:3b:c5:eb:e3:38:bf:18:f8:75:c3:c9: 84:40:02:de:38:ab:ac:f4:f0:b0:9f:f8:c2:5b:f0: d4:7b:cc:42:98:03:49:fc:8c:d7:56:0f:cc:49:31: c6:53:aa:24:ac:a6:44:2a:95:6c:01:c7:50:7b:01: 0c:67:71:9c:d6:09:b3:b2:ea:d3:a0:d4:b4:72:8c: 60:23:ef:35:6c:46:40:fe:72:cf:ad:44:14:6b:2b: c5:ef:de:8b:54:92:f6:82:68:c2:60:4e:f1:6c:1b: b2:29:4c:8a:87:4b:43:6f:15:19:40:a6:64:7e:17: 0b:95:a2:f8:6d:e6:6e:39:f8:f5:94:37:92:39:fe: 45:c9:f1:04:60:9b:c8:b4:4e:50:cb:51:ea:3d:1a: 13:a6:69:4b:6b:44:23:a4:0b:be:d1:6e:3c:2a:c9: 38:0b:1a:05:43:a2:a8:a4:cb:2b:10:b8:47:42:65: 24:64:df:c3:d9:11:01:92:b2:1a:f0:fe:d1:a7:06: dd:ae:cf:7a:5e:a0:a5:14:b1:4d:db:ee:4f:98:4c: 2d:5d:23:e4:25:db:68:e6:88:62:23:ca:e4:3b:50: 68:4a:7b:57:ef:ed:53:51:ea:cd:6c:ac:f1:8c:99: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:F5:41:F0:F4:8A:C7:13:AD:B0:64:B5:82:9C:88:47:5D:C1:C6 X509v3 Authority Key Identifier: keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/A4n1QfD0iscTrbBktYKciEddwcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.74.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:7d:c6:d5:88:4e:15:d4:ef:de:4c:18:32:39:59:ed:07:7c: f8:05:10:7f:09:06:ad:76:66:2d:e4:a5:36:72:b3:ae:14:c7: f4:37:c9:2e:28:fd:f8:0b:34:45:62:3d:ef:fe:f2:07:d5:70: fe:7b:cd:dd:ef:3c:4a:b5:4b:13:34:7d:c5:97:43:77:31:09: a3:a7:c6:39:45:66:ef:ae:3d:a6:c9:e7:f0:c5:eb:e6:4d:9b: f8:c9:a7:2f:6d:0a:a3:d0:e3:10:d8:dd:37:00:57:0f:9c:b4: f9:e9:45:1d:f6:c6:7c:3c:b4:a7:89:0b:53:3d:e5:db:21:c5: 0b:3a:26:19:56:8e:98:40:db:37:42:1e:5b:2f:77:98:6b:b1: 88:e2:9a:32:8f:49:01:6e:db:38:67:ad:86:51:50:14:e4:34: 61:51:1d:de:7d:71:f1:5e:d3:35:ff:66:2e:90:43:7b:57:73: bb:79:92:c9:8b:d6:95:94:c1:b9:e2:23:2b:31:5f:09:e3:16: 08:59:a4:a3:d3:49:10:b5:04:ed:9a:ca:07:f3:f6:fe:91:82: 39:f3:c2:88:b7:16:eb:75:4e:53:2f:24:d0:c8:4d:76:d7:e6: b3:44:bd:01:23:8c:46:97:dd:e1:a1:58:bc:5f:2d:78:3d:67: b1:13:e5:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyRw0Fz0vqvtfPra1jGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz ODBiMmIwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzg5ZjU0MWYwZjQ4YWM3MTNhZGIwNjRiNTgyOWM4ODQ3NWRjMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrBvptzhS+Wybl0qqj+ojA9NO8Xr 4zi/GPh1w8mEQALeOKus9PCwn/jCW/DUe8xCmANJ/IzXVg/MSTHGU6okrKZEKpVs AcdQewEMZ3Gc1gmzsurToNS0coxgI+81bEZA/nLPrUQUayvF796LVJL2gmjCYE7x bBuyKUyKh0tDbxUZQKZkfhcLlaL4beZuOfj1lDeSOf5FyfEEYJvItE5Qy1HqPRoT pmlLa0QjpAu+0W48Ksk4CxoFQ6KopMsrELhHQmUkZN/D2REBkrIa8P7Rpwbdrs96 XqClFLFN2+5PmEwtXSPkJdto5ohiI8rkO1BoSntX7+1TUerNbKzxjJmVQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOJ9UHw9IrHE62wZLWCnIhHXcHGMB8GA1UdIwQY MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt NGJhM2ZjMzQ4NGNlLzEvQTRuMVFmRDBpc2NUcmJCa3RZS2NpRWRkd2NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRpKMA0G CSqGSIb3DQEBCwUAA4IBAQAOfcbViE4V1O/eTBgyOVntB3z4BRB/CQatdmYt5KU2 crOuFMf0N8kuKP34CzRFYj3v/vIH1XD+e83d7zxKtUsTNH3Fl0N3MQmjp8Y5RWbv rj2myefwxevmTZv4yacvbQqj0OMQ2N03AFcPnLT56UUd9sZ8PLSniQtTPeXbIcUL OiYZVo6YQNs3Qh5bL3eYa7GI4poyj0kBbts4Z62GUVAU5DRhUR3efXHxXtM1/2Yu kEN7V3O7eZLJi9aVlMG54iMrMV8J4xYIWaSj00kQtQTtmsoH8/b+kYI588KItxbr dU5TLyTQyE121+azRL0BI4xGl93hoVi8Xy14PWexE+WF -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:58 2026 by rpki-client