This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/4Q1d_1qJStY2YgdMtFxWByd43xk.roa File: 4Q1d_1qJStY2YgdMtFxWByd43xk.roa (raw, json) Hash identifier: Nb2kU2nUmYaxXRwakXUCnJcu98fiO67U+luM1LfGDUA= Subject key identifier: E1:0D:5D:FF:5A:89:4A:D6:36:62:07:4C:B4:5C:56:07:27:78:DF:19 Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Certificate serial: 019A6A3B39B986640703E6C29996425A0E32 Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/4Q1d_1qJStY2YgdMtFxWByd43xk.roa Signing time: Sun 09 Nov 2025 20:07:37 +0000 ROA not before: Sun 09 Nov 2025 20:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60470 IP address blocks: 88.201.236.0/23 maxlen: 23 185.84.32.0/22 maxlen: 24 185.88.156.0/22 maxlen: 24 185.123.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6a:3b:39:b9:86:64:07:03:e6:c2:99:96:42:5a:0e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563 Validity Not Before: Nov 9 20:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e10d5dff5a894ad63662074cb45c56072778df19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:b9:a8:1f:44:86:ed:02:02:73:96:48:b0: 52:dc:af:42:92:9c:ba:77:01:14:42:08:f3:07:17: 3e:1d:0d:dc:5b:1a:8f:9f:b8:9f:0c:0b:64:8e:bb: 07:61:84:96:6b:81:e4:f6:43:3f:06:ee:01:ef:a4: d0:af:aa:84:33:3a:76:03:b0:c0:31:49:e0:24:13: 1f:21:4f:93:4c:f3:45:30:79:ba:34:84:23:7e:a7: d1:10:c4:c8:4b:0a:4e:7d:6e:9b:68:b2:de:dc:bc: 78:63:a8:42:17:96:27:5d:a6:0e:d4:60:db:75:57: 02:11:c2:ab:11:20:04:03:cb:19:a2:ba:ef:b8:08: f3:96:5b:54:b2:21:cc:ac:07:64:66:ad:31:5a:3c: df:9b:b8:c6:8c:be:43:d2:13:2b:d1:2e:98:37:d0: 29:a9:c4:a2:de:09:72:5b:e2:9e:a7:5d:a2:c4:23: b0:a2:29:1c:0e:67:09:66:65:f3:cf:6d:82:18:ad: 31:4e:bc:7c:5e:6e:45:d6:be:dd:6f:dc:92:c0:bc: 74:32:bc:36:5d:04:1b:6d:01:d3:9d:50:c2:c8:a7: 27:cf:25:dd:46:e9:55:b7:ed:0d:ed:a8:bd:54:7a: a1:99:f0:1c:54:55:02:bf:f1:70:4c:95:3b:c1:dd: 3a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:5D:FF:5A:89:4A:D6:36:62:07:4C:B4:5C:56:07:27:78:DF:19 X509v3 Authority Key Identifier: keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/4Q1d_1qJStY2YgdMtFxWByd43xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.201.236.0/23 185.84.32.0/22 185.88.156.0/22 185.123.64.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:e5:13:46:06:5d:f3:7c:d1:4e:d2:fa:1f:ec:89:ec:86:2c: 45:1b:f6:ad:14:51:8e:e9:f1:7d:6e:21:6d:1a:c1:ce:7d:ad: 82:e7:94:e6:21:38:f0:87:23:40:6d:1b:b5:d9:a0:fd:9e:d4: 16:c8:d7:d7:8c:56:57:61:1f:a4:21:e3:b1:7f:56:d6:73:cb: a1:76:36:51:f5:56:11:57:2c:e3:34:00:56:f4:d6:a2:07:33: 98:3f:b6:3f:d1:46:ad:12:9a:3e:3b:ca:44:7c:88:b9:b0:98: 8c:87:8b:99:c9:b1:5d:29:3c:52:e7:c6:ba:d2:9b:11:15:b5: a4:21:e8:6f:29:8e:33:ae:f6:e6:0d:52:bd:40:eb:66:be:2f: ec:c7:93:3e:73:7d:4a:96:40:6e:f3:e6:41:68:39:f5:05:41: f2:56:4b:21:5a:52:42:2b:61:fc:e4:97:f0:46:02:07:b1:c0: e7:70:54:2e:c7:7d:93:aa:19:04:26:aa:76:05:aa:3a:87:ce: 6f:20:e7:22:16:5a:77:62:71:ea:2d:ff:1b:21:06:11:00:4b: 72:e9:76:1f:c0:9b:c8:d3:37:7a:1b:94:5f:a5:fb:3d:b5:71: 18:92:3b:aa:04:89:5e:5e:54:11:63:8e:5a:de:e4:16:26:bf: 05:5a:74:b0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpqOzm5hmQHA+bCmZZCWg4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc5YmY0YzYyN2Q4NWZlZTJjZTEzYTUzYzQ0ODUxYjlk ZjA1NjMwHhcNMjUxMTA5MjAwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBkNWRmZjVhODk0YWQ2MzY2MjA3NGNiNDVjNTYwNzI3NzhkZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydm5qB9Ehu0CAnOWSLBS3K9Ckpy6 dwEUQgjzBxc+HQ3cWxqPn7ifDAtkjrsHYYSWa4Hk9kM/Bu4B76TQr6qEMzp2A7DA MUngJBMfIU+TTPNFMHm6NIQjfqfREMTISwpOfW6baLLe3Lx4Y6hCF5YnXaYO1GDb dVcCEcKrESAEA8sZorrvuAjzlltUsiHMrAdkZq0xWjzfm7jGjL5D0hMr0S6YN9Ap qcSi3glyW+Kep12ixCOwoikcDmcJZmXzz22CGK0xTrx8Xm5F1r7db9ySwLx0Mrw2 XQQbbQHTnVDCyKcnzyXdRulVt+0N7ai9VHqhmfAcVFUCv/FwTJU7wd06nQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOENXf9aiUrWNmIHTLRcVgcneN8ZMB8GA1UdIwQY MBaAFKNnm/TGJ9hf7izhOlPESFG53wVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjct NTU2NzI2MzRjYmMxLzEvNFExZF8xcUpTdFkyWWdkTXRGeFdCeWQ0M3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iNjJlNTktZTJjNS00YTc2LThiNjctNTU2NzI2MzRjYmMx LzEvbzJlYjlNWW4yRl91TE9FNlU4UklVYm5mQldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBWMnsAwQC uVQgAwQCuVicAwQBuXtAMA0GCSqGSIb3DQEBCwUAA4IBAQCd5RNGBl3zfNFO0vof 7InshixFG/atFFGO6fF9biFtGsHOfa2C55TmITjwhyNAbRu12aD9ntQWyNfXjFZX YR+kIeOxf1bWc8uhdjZR9VYRVyzjNABW9NaiBzOYP7Y/0UatEpo+O8pEfIi5sJiM h4uZybFdKTxS58a60psRFbWkIehvKY4zrvbmDVK9QOtmvi/sx5M+c31KlkBu8+ZB aDn1BUHyVkshWlJCK2H85JfwRgIHscDncFQux32TqhkEJqp2Bao6h85vIOciFlp3 YnHqLf8bIQYRAEty6XYfwJvI0zd6G5Rfpfs9tXEYkjuqBIleXlQRY45a3uQWJr8F WnSw -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:11 2025 by rpki-client