This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/4y1EBk6dbLscu7TuubVQpj3p-s8.roa File: 4y1EBk6dbLscu7TuubVQpj3p-s8.roa (raw, json) Hash identifier: TBvo1eP+imsTzppJhBpYDx8zDpINfxOs1/vehmwqpe0= Subject key identifier: E3:2D:44:06:4E:9D:6C:BB:1C:BB:B4:EE:B9:B5:50:A6:3D:E9:FA:CF Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df Certificate serial: 019B79106EEE4C31F8CC8C61FD2918DD3081 Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/4y1EBk6dbLscu7TuubVQpj3p-s8.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50563 IP address blocks: 85.209.180.0/22 maxlen: 22 85.209.180.0/23 maxlen: 23 85.209.180.0/24 maxlen: 24 85.209.181.0/24 maxlen: 24 85.209.182.0/23 maxlen: 23 85.209.182.0/24 maxlen: 24 85.209.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:ee:4c:31:f8:cc:8c:61:fd:29:18:dd:30:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e32d44064e9d6cbb1cbbb4eeb9b550a63de9facf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:22:60:e9:ad:83:94:f1:22:d3:b4:04:56: 8f:e1:9e:9b:8a:60:69:84:75:68:47:68:f7:64:72: 5f:42:be:28:95:05:b7:75:50:bc:ee:23:f4:3a:d0: 12:bd:90:71:64:9b:4d:9c:e2:b1:9d:73:e2:27:46: 56:55:fc:fb:c0:dc:27:4c:2f:36:d8:f7:f8:76:d5: 6e:a9:fa:f5:15:08:c6:e7:2f:82:30:5a:95:7f:87: 2a:de:7d:42:48:bb:0a:e3:c6:d8:cc:fd:b6:97:40: 55:70:73:69:b9:f7:75:5f:dd:a5:dc:0b:20:76:d8: e9:97:13:a1:c9:17:4a:32:20:f1:63:be:16:56:d6: 04:ae:e2:1f:4f:41:a9:f4:a1:cb:bd:5c:e8:43:f8: d7:c5:42:f0:89:f9:97:8a:e4:d4:e6:28:3b:e8:f7: 05:ae:e4:fc:0f:8f:79:d5:e1:f0:b9:e0:ee:72:1f: e3:70:c7:16:5b:75:1e:82:84:49:4a:dd:df:85:1e: 4b:d8:ca:95:7f:8d:0c:44:d3:99:be:30:cb:a9:12: d1:5e:c4:ac:94:68:0b:c7:b5:e6:e9:87:29:c2:f2: ad:bf:44:15:42:db:2d:e9:8e:79:f7:a1:a5:91:10: 51:d3:d2:c3:68:22:f2:4a:9d:b1:5a:55:b3:b1:42: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:44:06:4E:9D:6C:BB:1C:BB:B4:EE:B9:B5:50:A6:3D:E9:FA:CF X509v3 Authority Key Identifier: keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/4y1EBk6dbLscu7TuubVQpj3p-s8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.180.0/22 Signature Algorithm: sha256WithRSAEncryption 16:cd:a9:29:55:bd:12:84:09:28:e4:b6:1d:dd:d4:32:6b:02: 24:69:b9:47:d3:39:ec:73:a6:69:b8:04:24:d7:de:45:da:3e: d4:79:6c:86:21:51:c9:89:cf:b6:8b:4e:59:04:f9:23:4a:7b: 9e:30:89:6c:e5:84:96:d7:aa:7d:cc:93:52:a2:26:cb:4e:3b: 3e:aa:a2:f6:f8:ee:dc:20:cf:e4:13:f8:9e:b1:55:e3:14:5c: ef:02:7f:f0:0c:cd:15:45:8e:98:29:71:f2:94:df:9a:17:08: 35:cc:52:2b:85:ea:1a:57:36:9e:da:c8:fb:ca:35:b4:f3:4c: 5a:ec:5a:f4:5e:6e:d5:f4:ba:b8:a0:d4:f0:4b:ce:77:a8:68: 0b:74:44:2a:e4:26:20:7c:dd:b2:e4:6a:bb:33:62:96:a2:41: 77:9e:56:58:4f:ae:b0:c1:5f:ca:2f:c8:84:c4:8a:c1:3a:ea: eb:00:78:81:87:8a:18:48:62:80:3f:fd:41:89:aa:74:2b:c1: c3:8c:3e:f8:57:df:65:0a:4f:ac:18:45:6d:82:5e:0a:6f:a0: 74:cd:ab:51:35:92:53:dd:7e:65:63:9b:68:f8:fd:7b:89:8c: 4e:38:8f:ed:b2:7d:29:59:25:08:3a:30:9a:b0:6b:f9:ca:8e: 35:8b:e2:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG7uTDH4zIxh/SkY3TCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNmQ3ZWE0MTAzMzgzN2YwOGMyOGM0NzQyOTg0YjgyYjhm NDQzZGYwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzJkNDQwNjRlOWQ2Y2JiMWNiYmI0ZWViOWI1NTBhNjNkZTlmYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LIiYOmtg5TxItO0BFaP4Z6bimBp hHVoR2j3ZHJfQr4olQW3dVC87iP0OtASvZBxZJtNnOKxnXPiJ0ZWVfz7wNwnTC82 2Pf4dtVuqfr1FQjG5y+CMFqVf4cq3n1CSLsK48bYzP22l0BVcHNpufd1X92l3Asg dtjplxOhyRdKMiDxY74WVtYEruIfT0Gp9KHLvVzoQ/jXxULwifmXiuTU5ig76PcF ruT8D4951eHwueDuch/jcMcWW3UegoRJSt3fhR5L2MqVf40MRNOZvjDLqRLRXsSs lGgLx7Xm6YcpwvKtv0QVQtst6Y5596GlkRBR09LDaCLySp2xWlWzsUJ3xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMtRAZOnWy7HLu07rm1UKY96frPMB8GA1UdIwQY MBaAFEttfqQQM4N/CMKMR0KYS4K49EPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xZDA2ODEtZmUyMC00N2EzLTk0ZGYt NWVlODcyMWMxY2ZjLzEvNHkxRUJrNmRiTHNjdTdUdXViVlFwajNwLXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xZDA2ODEtZmUyMC00N2EzLTk0ZGYtNWVlODcyMWMxY2Zj LzEvUzIxLXBCQXpnMzhJd294SFFwaExncmowUTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdG0MA0G CSqGSIb3DQEBCwUAA4IBAQAWzakpVb0ShAko5LYd3dQyawIkablH0znsc6ZpuAQk 195F2j7UeWyGIVHJic+2i05ZBPkjSnueMIls5YSW16p9zJNSoibLTjs+qqL2+O7c IM/kE/iesVXjFFzvAn/wDM0VRY6YKXHylN+aFwg1zFIrheoaVzae2sj7yjW080xa 7Fr0Xm7V9Lq4oNTwS853qGgLdEQq5CYgfN2y5Gq7M2KWokF3nlZYT66wwV/KL8iE xIrBOurrAHiBh4oYSGKAP/1Biap0K8HDjD74V99lCk+sGEVtgl4Kb6B0zatRNZJT 3X5lY5to+P17iYxOOI/tsn0pWSUIOjCasGv5yo41i+Kj -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:52 2026 by rpki-client