This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa File: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (raw, json) Hash identifier: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps= Subject key identifier: E0:CA:A7:0F:CD:01:9B:84:3D:57:08:B7:80:29:51:81:1C:21:6F:6A Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Certificate serial: 019B79EC1A56A32C5BB86AAA4CC699A012DF Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47719 IP address blocks: 185.61.48.0/24 maxlen: 24 185.61.49.0/24 maxlen: 24 185.61.50.0/24 maxlen: 24 185.61.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1a:56:a3:2c:5b:b8:6a:aa:4c:c6:99:a0:12:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0caa70fcd019b843d5708b7802951811c216f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:4f:7a:e6:05:49:a0:40:b3:38:0f:f1:e1: 77:40:34:0c:c0:7b:b7:6e:ad:ba:62:04:76:f3:ee: c1:ce:58:bc:c1:d4:10:15:3c:46:e8:7b:43:4c:3c: 44:a6:c3:ba:53:0d:0f:94:1b:f6:7b:b7:ff:ee:18: 55:ef:af:49:8a:39:8c:c3:2d:03:cc:a0:e1:ad:82: e5:4f:17:b7:e9:ff:cb:b8:6a:c0:e6:25:e0:12:82: df:9d:fd:10:d5:58:7e:00:54:0b:4a:c5:55:a2:c7: 68:4e:46:5b:8a:d6:03:6a:73:ec:d4:7a:b9:2b:74: af:50:45:8c:fe:e8:c9:bc:1e:7d:a3:6d:24:f3:98: cd:cf:fa:b4:c2:1c:2a:f4:a0:b8:4f:4a:ab:23:9e: b9:d8:7e:96:e3:56:9f:24:27:fd:fd:25:ed:c3:9a: e9:0f:5a:12:9b:54:cc:b5:6f:a7:fc:00:4e:cf:3a: a8:42:c9:31:d4:43:a8:7c:05:5d:80:96:f7:96:4c: cc:95:4b:75:3f:bd:1b:39:08:0d:f6:fc:64:0d:78: 83:92:1d:7a:7c:63:25:9a:fb:1a:92:c4:27:2a:ae: bf:fa:dc:b7:4d:68:ac:2a:c2:62:8b:f7:5c:c0:59: 7f:92:06:7e:04:15:4a:e5:5f:e2:ba:bb:bb:bf:22: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CA:A7:0F:CD:01:9B:84:3D:57:08:B7:80:29:51:81:1C:21:6F:6A X509v3 Authority Key Identifier: keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.48.0/22 Signature Algorithm: sha256WithRSAEncryption 33:1e:88:e6:3f:a5:3c:9d:47:95:3e:da:97:bd:64:17:10:91: 74:a1:0b:6b:40:af:45:be:0d:8a:a2:b3:05:b4:54:56:e1:00: 2c:d4:2d:cb:23:cb:12:7a:cb:40:29:1d:49:fa:32:ee:ff:48: 29:6f:54:68:8d:1f:ec:b9:db:63:0f:77:89:5e:33:a5:31:d0: 8b:33:4f:16:0f:5b:2c:14:fb:30:dc:a9:47:be:7d:81:9a:2b: 30:c7:9b:d4:86:8c:27:bb:d0:f9:0c:87:ef:0f:b4:d2:25:f9: cf:26:fe:e2:d8:b8:06:46:78:50:9e:1f:99:b6:f8:28:6a:9c: 7a:95:ab:d2:75:34:c0:59:6e:7b:8c:e5:7e:80:a4:88:58:4c: ea:af:18:cb:14:ef:09:ab:c8:35:2d:56:4b:9a:c7:65:62:c7: fb:c3:58:9d:a7:eb:77:50:9e:c6:33:c5:3d:5d:4f:5b:97:88: e9:dc:2e:a9:1f:d6:a6:dc:a6:07:5c:c7:ed:c2:9e:b1:b4:ac: b3:25:86:88:2e:be:b2:a6:69:02:c8:fc:68:46:b0:c6:a2:61: 3d:bb:74:1d:3d:24:b4:d9:c3:27:a7:57:ba:ee:3a:31:02:5e: 41:9a:70:2d:93:1d:a1:1c:76:ee:5b:36:19:8a:46:be:dd:b2: a1:a0:ca:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57BpWoyxbuGqqTMaZoBLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk OWRjYzgwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGNhYTcwZmNkMDE5Yjg0M2Q1NzA4Yjc4MDI5NTE4MTFjMjE2ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJtPeuYFSaBAszgP8eF3QDQMwHu3 bq26YgR28+7Bzli8wdQQFTxG6HtDTDxEpsO6Uw0PlBv2e7f/7hhV769JijmMwy0D zKDhrYLlTxe36f/LuGrA5iXgEoLfnf0Q1Vh+AFQLSsVVosdoTkZbitYDanPs1Hq5 K3SvUEWM/ujJvB59o20k85jNz/q0whwq9KC4T0qrI5652H6W41afJCf9/SXtw5rp D1oSm1TMtW+n/ABOzzqoQskx1EOofAVdgJb3lkzMlUt1P70bOQgN9vxkDXiDkh16 fGMlmvsaksQnKq6/+ty3TWisKsJii/dcwFl/kgZ+BBVK5V/iuru7vyLh1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODKpw/NAZuEPVcIt4ApUYEcIW9qMB8GA1UdIwQY MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut NmQyZTExZmUwOGNkLzEvNE1xbkQ4MEJtNFE5VndpM2dDbFJnUndoYjJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT0wMA0G CSqGSIb3DQEBCwUAA4IBAQAzHojmP6U8nUeVPtqXvWQXEJF0oQtrQK9Fvg2KorMF tFRW4QAs1C3LI8sSestAKR1J+jLu/0gpb1RojR/sudtjD3eJXjOlMdCLM08WD1ss FPsw3KlHvn2Bmiswx5vUhownu9D5DIfvD7TSJfnPJv7i2LgGRnhQnh+Ztvgoapx6 lavSdTTAWW57jOV+gKSIWEzqrxjLFO8Jq8g1LVZLmsdlYsf7w1idp+t3UJ7GM8U9 XU9bl4jp3C6pH9am3KYHXMftwp6xtKyzJYaILr6ypmkCyPxoRrDGomE9u3QdPSS0 2cMnp1e67joxAl5BmnAtkx2hHHbuWzYZika+3bKhoMpk -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:51 2026 by rpki-client