This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/4Pf-r_SG4WPumX9UfrM-bZenj0w.roa File: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (raw, json) Hash identifier: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY= Subject key identifier: E0:F7:FE:AF:F4:86:E1:63:EE:99:7F:54:7E:B3:3E:6D:97:A7:8F:4C Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Certificate serial: 019B7C127541DEA91E51EAF1465B87E40F82 Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/4Pf-r_SG4WPumX9UfrM-bZenj0w.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207151 IP address blocks: 185.234.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:75:41:de:a9:1e:51:ea:f1:46:5b:87:e4:0f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f7feaff486e163ee997f547eb33e6d97a78f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:95:b7:2d:4a:18:62:d0:d1:21:6f:a8:9f: ea:65:6f:5e:7f:54:1f:07:51:91:6d:bd:09:12:72: b8:6a:e8:1f:d7:f7:a0:bd:d2:0b:25:16:67:ee:9e: 12:00:c2:18:44:f7:eb:d1:8f:6d:d0:8c:e4:2c:7d: 9a:1c:4b:3e:f7:39:91:7c:f4:e5:de:f0:13:74:8b: 74:e5:30:16:8f:56:ce:11:38:bc:09:00:fc:04:72: 15:d7:29:ef:4c:99:02:66:d0:4f:2e:e6:dd:6c:cd: ba:d4:06:7e:2c:c1:28:e7:d0:b9:87:c3:27:d2:91: 92:df:50:a5:e0:c3:e4:80:d7:57:3c:30:74:45:ec: 07:e4:4a:35:62:27:4d:74:12:62:e1:17:68:9b:c4: 89:89:0e:73:73:c8:fd:d3:d4:87:37:1f:66:c6:84: 4c:fd:80:55:79:b5:63:61:23:5e:c8:22:04:fc:49: 1a:00:bf:68:9b:f5:23:57:5f:e9:cd:85:fc:2f:b3: a0:aa:f0:61:07:27:39:7c:7b:07:6c:54:5a:49:64: a1:c8:4d:32:4a:22:7e:bf:92:e0:19:17:3f:46:ce: 96:c4:ca:51:db:45:21:f6:2e:f3:54:4b:d0:a0:14: 26:24:00:b9:c7:88:19:f6:43:54:37:d6:c8:01:26: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F7:FE:AF:F4:86:E1:63:EE:99:7F:54:7E:B3:3E:6D:97:A7:8F:4C X509v3 Authority Key Identifier: keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/4Pf-r_SG4WPumX9UfrM-bZenj0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.104.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:91:b6:1d:f2:3e:4d:02:88:11:fd:c3:49:c6:b1:7f:8d:04: 60:f0:e7:f2:70:09:7d:ed:ac:51:30:e0:d7:de:fb:29:95:7a: d7:62:19:10:b7:79:e5:d3:48:cd:27:b0:ac:dc:a5:2a:73:0e: d6:dc:9a:b5:1c:c4:f1:f9:33:c4:24:0c:44:9e:55:85:8b:80: 48:8e:09:bb:e8:d1:75:18:f3:cc:0a:42:0c:94:c5:1f:e6:67: 68:e4:f4:a3:34:76:97:bb:5f:64:ba:aa:f9:79:bc:14:86:b8: 8f:ce:72:89:a3:b4:ad:50:70:66:ca:00:95:e6:d6:35:3d:35: f1:1a:aa:56:29:52:a9:86:e4:d0:b2:2e:01:1d:d0:c3:5d:40: f8:4b:29:66:02:47:bd:dc:d8:5a:3e:5f:20:47:f0:58:99:4f: c6:be:86:6e:96:c0:ec:0a:93:79:0c:e4:3a:56:37:8e:91:da: 7f:22:03:7c:19:02:ad:25:d3:e2:1b:83:57:bd:10:bc:d0:2d: ed:93:07:d5:d4:a8:14:12:01:26:6c:6c:16:5d:2d:7a:d5:68: fe:16:d9:f6:ed:75:b1:ea:07:37:bc:48:0c:f9:d3:58:99:f6: c6:3c:8f:fd:c1:f3:f9:12:bf:69:2c:58:47:17:39:19:fd:36: b8:71:b4:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnVB3qkeUerxRluH5A+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzY5MmYyYTFkMWJjNzZmZjdmOWQyOTA5MWJlZGEwOGI3 YmM5NmMwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGY3ZmVhZmY0ODZlMTYzZWU5OTdmNTQ3ZWIzM2U2ZDk3YTc4ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui+Vty1KGGLQ0SFvqJ/qZW9ef1Qf B1GRbb0JEnK4augf1/egvdILJRZn7p4SAMIYRPfr0Y9t0IzkLH2aHEs+9zmRfPTl 3vATdIt05TAWj1bOETi8CQD8BHIV1ynvTJkCZtBPLubdbM261AZ+LMEo59C5h8Mn 0pGS31Cl4MPkgNdXPDB0RewH5Eo1YidNdBJi4Rdom8SJiQ5zc8j909SHNx9mxoRM /YBVebVjYSNeyCIE/EkaAL9om/UjV1/pzYX8L7OgqvBhByc5fHsHbFRaSWShyE0y SiJ+v5LgGRc/Rs6WxMpR20Uh9i7zVEvQoBQmJAC5x4gZ9kNUN9bIASbnvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOD3/q/0huFj7pl/VH6zPm2Xp49MMB8GA1UdIwQY MBaAFAQ2kvKh0bx2/3+dKQkb7aCLe8lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUt MjU1ZjBjNTFiYmUwLzEvNFBmLXJfU0c0V1B1bVg5VWZyTS1iWmVuajB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jNmUyMTctMDNmZi00Mzk2LWFkZmUtMjU1ZjBjNTFiYmUw LzEvQkRhUzhxSFJ2SGJfZjUwcENSdnRvSXQ3eVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuepoMA0G CSqGSIb3DQEBCwUAA4IBAQB9kbYd8j5NAogR/cNJxrF/jQRg8OfycAl97axRMODX 3vsplXrXYhkQt3nl00jNJ7Cs3KUqcw7W3Jq1HMTx+TPEJAxEnlWFi4BIjgm76NF1 GPPMCkIMlMUf5mdo5PSjNHaXu19kuqr5ebwUhriPznKJo7StUHBmygCV5tY1PTXx GqpWKVKphuTQsi4BHdDDXUD4SylmAke93NhaPl8gR/BYmU/GvoZulsDsCpN5DOQ6 VjeOkdp/IgN8GQKtJdPiG4NXvRC80C3tkwfV1KgUEgEmbGwWXS161Wj+Ftn27XWx 6gc3vEgM+dNYmfbGPI/9wfP5Er9pLFhHFzkZ/Ta4cbTS -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:26 2026 by rpki-client