This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/4iLxM73eLW6tqIqIEVi5DZshAX8.roa File: 4iLxM73eLW6tqIqIEVi5DZshAX8.roa (raw, json) Hash identifier: 5ekQWavsM+QKT46VPj3wV4euAzrbD/nttRzyJzRT1UQ= Subject key identifier: E2:22:F1:33:BD:DE:2D:6E:AD:A8:8A:88:11:58:B9:0D:9B:21:01:7F Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019B7CED4B6FD0EAA2CF39D91BDE589532DB Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/4iLxM73eLW6tqIqIEVi5DZshAX8.roa Signing time: Fri 02 Jan 2026 04:18:04 +0000 ROA not before: Fri 02 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202421 IP address blocks: 185.85.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4b:6f:d0:ea:a2:cf:39:d9:1b:de:58:95:32:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e222f133bdde2d6eada88a881158b90d9b21017f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:2d:ef:24:35:e8:6d:ba:2a:00:f7:73:02: a8:35:2a:b6:aa:46:9d:67:36:73:21:36:8e:bd:f0: 26:bd:0d:05:c2:4f:a1:3c:79:c3:e0:17:1c:41:9e: cb:1a:00:fe:8e:56:b5:30:51:7f:94:3a:fc:c9:f5: d0:50:74:22:2a:79:7e:c8:ba:47:d9:dd:25:cb:c7: 8e:7a:33:4d:54:74:a6:a4:83:d2:6c:ee:93:b4:8f: fb:9b:26:01:79:7e:f3:03:d0:08:3c:32:34:cf:19: 1c:73:96:57:2e:3a:2d:b4:02:e4:71:53:a0:6c:c5: 53:ab:95:2d:10:9d:1b:6f:6b:3a:43:e9:8b:82:87: 05:84:a1:a8:71:03:f9:f5:0f:3c:77:9b:49:c4:26: e7:45:0d:0d:53:be:80:3c:1b:1c:ea:1d:8c:d5:02: 42:b9:30:54:f2:26:03:57:20:8a:a6:48:8d:b3:43: db:5e:82:bd:01:2c:f0:bf:3d:fc:4b:61:c9:b3:37: c3:39:a7:cb:b5:3a:e1:8a:be:d3:2a:c6:cb:e2:fd: 16:91:9c:41:c8:98:7c:96:e1:9f:22:35:55:b5:02: 4b:9d:ed:36:ef:51:92:5b:1e:1f:8a:e5:fa:10:3d: 74:12:23:06:37:61:16:b2:ee:b7:92:3a:57:be:40: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:22:F1:33:BD:DE:2D:6E:AD:A8:8A:88:11:58:B9:0D:9B:21:01:7F X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/4iLxM73eLW6tqIqIEVi5DZshAX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.254.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c3:13:ba:65:06:5c:66:60:bc:1e:4f:cc:5f:78:79:e8:d4: 2f:2a:38:38:a6:b2:fb:e4:a3:66:a8:72:e0:11:99:38:98:22: 00:fb:e9:5c:0c:c2:dc:68:97:b0:80:48:78:8a:c0:63:0f:26: e8:2a:70:34:32:35:05:ae:ee:e5:11:15:e1:77:3f:da:8d:8f: 76:8c:75:b5:27:96:2c:fc:49:2c:39:d0:53:a9:26:f9:cf:24: 85:2a:eb:b9:72:24:fb:ad:1b:c3:38:1b:8a:7e:98:c7:97:c7: 79:58:a0:01:ae:16:e4:0b:f7:c6:7f:d2:95:35:bf:00:c5:92: 77:15:75:86:3e:6e:37:d3:ad:90:b2:36:25:97:e0:ca:0a:62: cb:0c:2b:9e:85:2a:23:4d:e0:b5:a6:c9:1d:77:cf:78:e2:44: 6c:1e:6a:63:37:55:76:7a:d4:11:87:b9:41:fa:eb:60:0b:e5: b4:a4:bc:3b:e7:84:8e:80:38:f7:98:8f:c8:3c:54:3d:0a:77: b3:7a:c3:94:5e:f8:5d:a1:10:74:58:1d:ea:5b:f1:b8:b3:91: 88:ef:02:36:ac:2d:86:35:01:98:d5:da:56:6e:05:18:c7:29: 7c:3f:0d:5c:9a:dd:0a:ee:2f:06:71:0b:bc:d0:84:13:1a:93: 88:60:20:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Utv0OqizznZG95YlTLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjIyZjEzM2JkZGUyZDZlYWRhODhhODgxMTU4YjkwZDliMjEwMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHgt7yQ16G26KgD3cwKoNSq2qkad ZzZzITaOvfAmvQ0Fwk+hPHnD4BccQZ7LGgD+jla1MFF/lDr8yfXQUHQiKnl+yLpH 2d0ly8eOejNNVHSmpIPSbO6TtI/7myYBeX7zA9AIPDI0zxkcc5ZXLjottALkcVOg bMVTq5UtEJ0bb2s6Q+mLgocFhKGocQP59Q88d5tJxCbnRQ0NU76APBsc6h2M1QJC uTBU8iYDVyCKpkiNs0PbXoK9ASzwvz38S2HJszfDOafLtTrhir7TKsbL4v0WkZxB yJh8luGfIjVVtQJLne0271GSWx4fiuX6ED10EiMGN2EWsu63kjpXvkBHLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIi8TO93i1uraiKiBFYuQ2bIQF/MB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvNGlMeE03M2VMVzZ0cUlxSUVWaTVEWnNoQVg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVX+MA0G CSqGSIb3DQEBCwUAA4IBAQA6wxO6ZQZcZmC8Hk/MX3h56NQvKjg4prL75KNmqHLg EZk4mCIA++lcDMLcaJewgEh4isBjDyboKnA0MjUFru7lERXhdz/ajY92jHW1J5Ys /EksOdBTqSb5zySFKuu5ciT7rRvDOBuKfpjHl8d5WKABrhbkC/fGf9KVNb8AxZJ3 FXWGPm43062QsjYll+DKCmLLDCuehSojTeC1pskdd8944kRsHmpjN1V2etQRh7lB +utgC+W0pLw754SOgDj3mI/IPFQ9CnezesOUXvhdoRB0WB3qW/G4s5GI7wI2rC2G NQGY1dpWbgUYxyl8Pw1cmt0K7i8GcQu80IQTGpOIYCAx -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:26 2026 by rpki-client