This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa File: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (raw, json) Hash identifier: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s= Subject key identifier: E2:4C:96:AD:3F:57:CB:50:7B:4C:BB:4D:0C:FE:87:B8:FC:FE:EE:1C Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1 Certificate serial: 019B797F12D761B739AEC1DE74CEC45BD16F Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199987 IP address blocks: 185.40.35.0/24 maxlen: 24 2a01:4ba0::/29 maxlen: 29 2a01:4ba0::/48 maxlen: 48 2a01:4ba0:1::/48 maxlen: 48 2a01:4ba0:2::/48 maxlen: 48 2a01:4ba0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:12:d7:61:b7:39:ae:c1:de:74:ce:c4:5b:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1 Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e24c96ad3f57cb507b4cbb4d0cfe87b8fcfeee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:ff:50:d6:e5:04:d2:ca:d5:69:54:51:6f: 13:d9:4f:0d:3b:b5:06:31:31:e7:61:80:bb:d5:c2: f6:18:72:7e:f7:89:4c:9c:90:53:61:a3:86:99:c3: 91:ad:8c:12:b9:78:b1:b8:cd:59:f8:a1:34:52:83: 2d:53:06:4f:00:6c:5b:d4:ca:25:e1:23:ac:25:c3: 52:61:d0:f9:b0:4d:44:d8:63:15:40:85:e1:c5:ad: e2:e9:6b:90:4d:7c:4f:54:14:db:ea:25:39:e7:ca: 4f:a2:3e:c2:be:25:79:c2:1f:28:66:dd:be:de:7e: 5d:f4:db:80:5e:0a:67:5b:e5:b1:10:b4:0e:a4:0f: 96:4a:7e:ca:bd:46:84:5f:44:33:69:0f:f5:72:06: e8:2c:86:74:ff:21:5f:36:2f:3a:40:6c:5a:ca:12: 42:f4:68:96:60:05:cc:08:5a:9e:d0:c1:c0:0e:8f: 4a:07:40:c0:dd:16:63:0a:82:c3:81:a9:35:81:68: 88:78:ca:30:e7:9f:34:60:bc:6d:52:36:d4:11:e8: 44:61:32:a7:8e:81:df:df:de:cc:df:92:4d:c7:6c: 84:b5:5b:47:2e:56:09:3d:85:28:46:76:3e:48:99: 24:3f:ea:11:78:6b:b0:84:6c:6e:69:bf:9c:d3:11: 90:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:96:AD:3F:57:CB:50:7B:4C:BB:4D:0C:FE:87:B8:FC:FE:EE:1C X509v3 Authority Key Identifier: keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.35.0/24 IPv6: 2a01:4ba0::/29 Signature Algorithm: sha256WithRSAEncryption 53:dd:ad:d0:93:16:d6:f7:b7:83:4b:18:d4:b9:96:cd:6d:d3: 32:ba:a2:96:f9:df:33:09:51:ce:7f:46:3d:36:06:37:e6:a6: 5f:f7:56:a3:be:99:8f:cd:99:74:10:77:85:14:1c:69:b6:8e: b5:ea:8e:0b:14:37:75:8a:e4:70:dd:36:17:3a:09:61:85:87: a3:68:e9:7c:3a:f4:30:fe:79:6c:2a:66:32:71:dd:25:11:fb: b3:92:04:5b:28:da:34:83:50:0f:8c:38:42:75:cd:bc:9d:e0: 90:5a:f1:df:d8:ed:9e:82:e8:29:52:b8:7f:fc:c9:99:e4:be: 1a:14:0f:bb:8a:58:48:2b:00:ff:20:8a:11:75:5b:ba:78:1e: 2e:a0:bf:3a:44:95:57:09:da:2c:e4:81:a7:60:96:6a:68:c8: ac:6f:39:a7:cf:c3:a4:09:6b:93:d3:ee:6b:85:a2:99:3d:9e: a5:d7:59:d0:2f:2c:d0:41:a6:f3:77:fd:c9:84:3b:de:18:cc: f2:c8:52:ba:86:a0:15:0c:81:f7:d1:bf:6d:84:06:ed:a3:62: 75:31:71:d1:ac:e8:18:1e:e9:0e:da:e9:a5:02:3b:8b:c8:a7: 17:e1:02:21:29:e3:bc:04:56:0c:a1:d6:a5:3f:0c:a5:ff:f0: 22:a9:a9:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fxLXYbc5rsHedM7EW9FvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0 MjY1ZjEwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjRjOTZhZDNmNTdjYjUwN2I0Y2JiNGQwY2ZlODdiOGZjZmVlZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tH/UNblBNLK1WlUUW8T2U8NO7UG MTHnYYC71cL2GHJ+94lMnJBTYaOGmcORrYwSuXixuM1Z+KE0UoMtUwZPAGxb1Mol 4SOsJcNSYdD5sE1E2GMVQIXhxa3i6WuQTXxPVBTb6iU558pPoj7CviV5wh8oZt2+ 3n5d9NuAXgpnW+WxELQOpA+WSn7KvUaEX0QzaQ/1cgboLIZ0/yFfNi86QGxayhJC 9GiWYAXMCFqe0MHADo9KB0DA3RZjCoLDgak1gWiIeMow5580YLxtUjbUEehEYTKn joHf397M35JNx2yEtVtHLlYJPYUoRnY+SJkkP+oReGuwhGxuab+c0xGQCwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOJMlq0/V8tQe0y7TQz+h7j8/u4cMB8GA1UdIwQY MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt OWZmNWMxYTNiMGUwLzEvNGt5V3JUOVh5MUI3VEx0TkRQNkh1UHotN2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSgjMA0E AgACMAcDBQMqAUugMA0GCSqGSIb3DQEBCwUAA4IBAQBT3a3QkxbW97eDSxjUuZbN bdMyuqKW+d8zCVHOf0Y9NgY35qZf91ajvpmPzZl0EHeFFBxpto616o4LFDd1iuRw 3TYXOglhhYejaOl8OvQw/nlsKmYycd0lEfuzkgRbKNo0g1APjDhCdc28neCQWvHf 2O2egugpUrh//MmZ5L4aFA+7ilhIKwD/IIoRdVu6eB4uoL86RJVXCdos5IGnYJZq aMisbzmnz8OkCWuT0+5rhaKZPZ6l11nQLyzQQabzd/3JhDveGMzyyFK6hqAVDIH3 0b9thAbto2J1MXHRrOgYHukO2umlAjuLyKcX4QIhKeO8BFYModalPwyl//Aiqakl -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:55 2026 by rpki-client