This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/4e7ahtukuDD9v0DBSPR_moHY4zI.roa File: 4e7ahtukuDD9v0DBSPR_moHY4zI.roa (raw, json) Hash identifier: c9S2a0s4aMrl9rYn1z2bRbzkVr+5WcdFQcYn2M/ymYE= Subject key identifier: E1:EE:DA:86:DB:A4:B8:30:FD:BF:40:C1:48:F4:7F:9A:81:D8:E3:32 Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c Certificate serial: 019B7A5B134C00FB7D0E19C2AF5331D1C6F7 Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/4e7ahtukuDD9v0DBSPR_moHY4zI.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204737 IP address blocks: 185.242.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:13:4c:00:fb:7d:0e:19:c2:af:53:31:d1:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1eeda86dba4b830fdbf40c148f47f9a81d8e332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:27:86:c6:92:5c:63:bc:97:69:d7:c9:a7: 0a:90:31:bc:20:d1:46:bd:58:68:8f:69:0b:37:70: 13:28:54:80:82:a3:95:df:c0:7d:58:97:4d:91:fa: e4:7b:0f:bb:ad:fd:69:d1:22:5c:86:eb:7b:53:de: d4:9d:ed:79:0d:7c:eb:84:77:34:65:f5:81:65:ea: 54:7b:28:13:cb:68:d3:cc:f2:95:9e:a6:b3:06:8e: 8e:f3:0c:45:20:38:bc:ed:61:e8:22:5a:ad:92:0f: 0b:9a:c2:37:24:fe:41:98:8d:be:db:db:e8:f6:2d: 2e:d2:40:ec:91:f0:26:20:a7:f9:f6:50:3a:79:b6: 95:39:f8:ad:b3:5a:d4:00:5c:ce:e6:b0:8a:56:3d: 97:6f:6a:8c:8c:a8:e6:e8:70:80:66:6b:61:d3:96: 05:c9:de:a8:53:00:a8:47:1f:8d:c7:cc:37:9a:da: d0:82:80:d7:89:3a:fa:ae:01:1b:78:77:09:c0:20: ee:e7:19:4a:24:e9:8c:a2:2f:9e:ff:fb:1a:51:5e: b6:38:90:c9:1c:83:0c:66:eb:a6:f8:ad:24:8d:8e: e1:f5:6a:7c:4a:a2:c7:91:f5:88:fb:21:af:03:4f: ce:be:bc:c8:c1:24:c2:0c:6a:bf:c8:ff:62:17:88: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EE:DA:86:DB:A4:B8:30:FD:BF:40:C1:48:F4:7F:9A:81:D8:E3:32 X509v3 Authority Key Identifier: keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/4e7ahtukuDD9v0DBSPR_moHY4zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.52.0/22 Signature Algorithm: sha256WithRSAEncryption 16:3b:94:0f:69:59:b8:d3:eb:71:e9:8b:c0:3a:fc:42:4c:84: 86:72:b9:a6:9a:fb:da:9e:e3:fd:82:3a:3d:e9:ba:c3:c7:74: 25:79:d3:b1:49:ca:9d:47:21:ac:15:21:f8:ca:1a:c8:58:83: cd:51:0e:1e:b4:87:9c:f3:9d:6c:d7:7d:92:2b:17:6a:81:f4: 20:34:9a:3a:2d:b1:ea:f3:56:ed:57:b4:31:a8:3c:e0:12:65: f6:d5:b4:64:d1:27:00:34:cf:61:cb:72:ea:7a:e0:6d:d4:f5: 69:69:7e:0a:96:61:e6:f6:ad:28:fc:8c:56:2d:c9:ca:55:21: 2c:17:72:3d:c0:b2:42:f6:5c:49:eb:e6:8b:c0:32:b6:45:d6: a5:49:01:3a:3c:74:08:c3:39:2e:60:f9:00:21:81:b3:63:c2: 10:eb:29:7e:f2:7e:b0:37:78:c2:66:e3:56:f4:eb:26:2e:ab: aa:59:ce:40:38:c2:a1:52:79:8e:49:f3:c0:c1:a0:d3:84:dd: 1d:db:64:f2:b8:18:22:aa:7b:68:fa:cf:f0:a9:cf:90:a8:ec: ec:0e:71:8b:5f:b7:09:5e:2b:73:1e:73:79:93:d8:fe:f3:1c: 45:46:46:30:25:7a:7e:d9:aa:b3:52:f8:fb:c3:9d:9a:34:26: b9:3d:25:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WxNMAPt9DhnCr1Mx0cb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZGRhMmM2MDc0YzU2MjQxZjVjN2UwNjBjYWNjYjY1N2Y2 NGU5MWMwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWVlZGE4NmRiYTRiODMwZmRiZjQwYzE0OGY0N2Y5YTgxZDhlMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/0nhsaSXGO8l2nXyacKkDG8INFG vVhoj2kLN3ATKFSAgqOV38B9WJdNkfrkew+7rf1p0SJchut7U97Une15DXzrhHc0 ZfWBZepUeygTy2jTzPKVnqazBo6O8wxFIDi87WHoIlqtkg8LmsI3JP5BmI2+29vo 9i0u0kDskfAmIKf59lA6ebaVOfits1rUAFzO5rCKVj2Xb2qMjKjm6HCAZmth05YF yd6oUwCoRx+Nx8w3mtrQgoDXiTr6rgEbeHcJwCDu5xlKJOmMoi+e//saUV62OJDJ HIMMZuum+K0kjY7h9Wp8SqLHkfWI+yGvA0/OvrzIwSTCDGq/yP9iF4j9LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHu2obbpLgw/b9AwUj0f5qB2OMyMB8GA1UdIwQY MBaAFA7dosYHTFYkH1x+Bgysy2V/ZOkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUt NjcxMTU4YTYzYzIzLzEvNGU3YWh0dWt1REQ5djBEQlNQUl9tb0hZNHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iYTQ1OWYtODQ2Zi00N2E5LWE2MjUtNjcxMTU4YTYzYzIz LzEvRHQyaXhnZE1WaVFmWEg0R0RLekxaWDlrNlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufI0MA0G CSqGSIb3DQEBCwUAA4IBAQAWO5QPaVm40+tx6YvAOvxCTISGcrmmmvvanuP9gjo9 6brDx3QledOxScqdRyGsFSH4yhrIWIPNUQ4etIec851s132SKxdqgfQgNJo6LbHq 81btV7QxqDzgEmX21bRk0ScANM9hy3LqeuBt1PVpaX4KlmHm9q0o/IxWLcnKVSEs F3I9wLJC9lxJ6+aLwDK2RdalSQE6PHQIwzkuYPkAIYGzY8IQ6yl+8n6wN3jCZuNW 9OsmLquqWc5AOMKhUnmOSfPAwaDThN0d22TyuBgiqnto+s/wqc+QqOzsDnGLX7cJ XitzHnN5k9j+8xxFRkYwJXp+2aqzUvj7w52aNCa5PSU8 -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:54 2026 by rpki-client