This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/4PbBmUyLuxLv-cUA03I8pir9Yjc.roa File: 4PbBmUyLuxLv-cUA03I8pir9Yjc.roa (raw, json) Hash identifier: a1gE193XGaR38T2QebTbBivsOQsnQ3miMhS+HKnlQAE= Subject key identifier: E0:F6:C1:99:4C:8B:BB:12:EF:F9:C5:00:D3:72:3C:A6:2A:FD:62:37 Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa Certificate serial: 019B7EA516028406423B163A5448CF52376B Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/4PbBmUyLuxLv-cUA03I8pir9Yjc.roa Signing time: Fri 02 Jan 2026 12:18:26 +0000 ROA not before: Fri 02 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50919 IP address blocks: 185.96.34.0/24 maxlen: 24 2a13:eb00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:16:02:84:06:42:3b:16:3a:54:48:cf:52:37:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa Validity Not Before: Jan 2 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f6c1994c8bbb12eff9c500d3723ca62afd6237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:72:df:af:4a:e9:fd:3f:27:54:62:d4:e9: 97:9f:0d:da:ee:c2:23:d7:d7:ab:a8:2c:f1:6e:2d: 0e:f9:c3:2b:14:34:28:cd:e4:ec:42:b0:a1:61:7e: b3:6b:35:1c:9d:d3:90:da:d6:cb:8e:14:53:45:0f: a7:32:1b:e0:7c:62:50:da:fe:8a:8e:0f:8d:73:55: 2a:2a:e4:4b:e9:b8:33:6c:8d:29:c3:1a:f8:14:15: 20:04:ed:ed:a5:ec:b2:44:cf:9a:37:c1:32:8d:31: 54:3f:52:2b:88:1e:b9:e6:d7:ba:86:a9:17:6f:ff: 28:18:6a:e5:9d:4a:98:72:67:c5:f0:d0:9b:7f:2b: e5:7a:5e:37:e9:f0:d1:25:ad:09:c5:40:4f:d7:e2: 33:5b:fc:88:09:4a:3c:30:d9:11:81:ff:2f:f5:e7: bb:b2:8a:9b:0d:20:27:72:24:34:75:8c:97:61:78: 15:69:7b:66:d2:6e:e6:f5:aa:3b:27:ec:93:a9:af: cc:e8:a5:36:09:0c:29:8f:d4:4a:98:c4:e0:89:bb: 94:6e:28:8b:63:a9:dd:1d:82:60:ab:2c:96:da:57: 80:65:05:cd:a6:dc:13:92:9e:6f:01:03:ca:98:4e: ab:a8:18:16:37:97:51:1c:ff:e1:31:29:7c:43:cb: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:C1:99:4C:8B:BB:12:EF:F9:C5:00:D3:72:3C:A6:2A:FD:62:37 X509v3 Authority Key Identifier: keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/4PbBmUyLuxLv-cUA03I8pir9Yjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.34.0/24 IPv6: 2a13:eb00::/48 Signature Algorithm: sha256WithRSAEncryption 45:3f:12:c4:bf:63:4c:2f:be:33:71:88:0d:c0:53:03:76:7a: 07:c0:17:d1:fb:88:91:b9:fa:11:4e:7f:8b:3d:77:84:10:f9: 38:1e:6d:d4:80:b3:ac:3d:4c:38:d2:1a:70:6b:37:1f:5b:00: 38:2a:c7:cc:94:63:55:29:8f:b4:09:f3:e9:f6:3c:ca:d4:2f: a4:d1:38:ac:31:39:e7:62:dc:37:01:9b:59:7e:87:5b:16:42: 0a:4d:53:7e:21:36:00:cf:85:ab:83:80:01:8a:55:d9:f8:5b: 3d:0b:5c:da:7c:4c:1f:26:cf:d3:7c:b1:5f:77:44:99:38:07: eb:17:7c:3e:27:ff:02:94:de:64:fd:b2:78:9b:7e:d9:48:a2: ef:20:ba:ad:7a:b3:2a:54:fd:1b:fa:c7:4b:b4:8a:70:d9:ae: bf:ee:e1:71:84:fd:ab:a5:ef:f8:80:6a:a7:a1:77:fc:e7:b7: 29:89:11:7e:61:ca:16:f1:7d:ca:a5:5b:b8:23:08:cd:b0:75: dd:9b:ff:99:1b:96:19:17:c5:b1:cc:fa:df:54:d3:aa:d6:1a: d6:ab:44:97:10:e4:0c:34:61:a3:63:e7:a7:0c:59:fb:b2:76: e2:0b:26:91:65:b3:33:16:b4:6b:19:8c:45:ab:da:e6:63:f9: 18:d9:2d:a1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pRYChAZCOxY6VEjPUjdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw NzQ1YWEwHhcNMjYwMTAyMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGY2YzE5OTRjOGJiYjEyZWZmOWM1MDBkMzcyM2NhNjJhZmQ2MjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn41y369K6f0/J1Ri1OmXnw3a7sIj 19erqCzxbi0O+cMrFDQozeTsQrChYX6zazUcndOQ2tbLjhRTRQ+nMhvgfGJQ2v6K jg+Nc1UqKuRL6bgzbI0pwxr4FBUgBO3tpeyyRM+aN8EyjTFUP1IriB655te6hqkX b/8oGGrlnUqYcmfF8NCbfyvlel436fDRJa0JxUBP1+IzW/yICUo8MNkRgf8v9ee7 soqbDSAnciQ0dYyXYXgVaXtm0m7m9ao7J+yTqa/M6KU2CQwpj9RKmMTgibuUbiiL Y6ndHYJgqyyW2leAZQXNptwTkp5vAQPKmE6rqBgWN5dRHP/hMSl8Q8vDawIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOD2wZlMi7sS7/nFANNyPKYq/WI3MB8GA1UdIwQY MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt MzQzNjI0MTUxODJhLzEvNFBiQm1VeUx1eEx2LWNVQTAzSThwaXI5WWpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWAiMA8E AgACMAkDBwAqE+sAAAAwDQYJKoZIhvcNAQELBQADggEBAEU/EsS/Y0wvvjNxiA3A UwN2egfAF9H7iJG5+hFOf4s9d4QQ+TgebdSAs6w9TDjSGnBrNx9bADgqx8yUY1Up j7QJ8+n2PMrUL6TROKwxOedi3DcBm1l+h1sWQgpNU34hNgDPhauDgAGKVdn4Wz0L XNp8TB8mz9N8sV93RJk4B+sXfD4n/wKU3mT9snibftlIou8guq16sypU/Rv6x0u0 inDZrr/u4XGE/aul7/iAaqehd/zntymJEX5hyhbxfcqlW7gjCM2wdd2b/5kblhkX xbHM+t9U06rWGtarRJcQ5Aw0YaNj56cMWfuyduILJpFlszMWtGsZjEWr2uZj+RjZ LaE= -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:49 2026 by rpki-client