This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4TLc-RZQvXpmyF7h4Csz7X13aCg.roa File: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (raw, json) Hash identifier: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo= Subject key identifier: E1:32:DC:F9:16:50:BD:7A:66:C8:5E:E1:E0:2B:33:ED:7D:77:68:28 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F3B91DCBE7CACA5C72F46ECA3CFB Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4TLc-RZQvXpmyF7h4Csz7X13aCg.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214010 IP address blocks: 185.225.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:b9:1d:cb:e7:ca:ca:5c:72:f4:6e:ca:3c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e132dcf91650bd7a66c85ee1e02b33ed7d776828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:45:65:29:bc:21:7f:82:81:38:30:2d:64: 3c:76:4d:7b:b3:d9:64:a0:99:82:2b:55:ff:74:0b: 7a:38:a2:9a:0b:6c:f5:52:68:83:b7:07:8b:a0:a5: ed:f9:5d:62:57:56:36:48:1b:df:a3:77:c9:c1:be: 31:e9:da:91:97:17:22:bb:f9:2d:0f:3f:ab:59:13: 99:3f:af:94:ba:33:77:88:35:3f:6a:1e:ff:18:9d: 80:5e:11:07:a1:36:7a:69:0d:fa:37:03:ab:be:3f: 9a:11:4a:3e:9e:35:80:6c:23:71:75:f0:15:cf:c0: 16:6f:f9:2f:e4:ab:2c:27:15:74:c0:2a:18:3a:83: 8c:2c:c1:b3:33:27:1a:9f:3b:1d:ed:83:b0:9a:93: df:ce:5b:a3:9d:c4:1b:f3:7e:f9:df:a3:ad:54:9d: 10:41:d3:6a:8e:f7:b5:bc:e0:cc:8a:54:37:02:f5: 33:a9:d9:7c:82:2c:bc:a7:e3:9f:f1:f6:2c:20:f6: 5a:00:12:6a:9b:8d:7d:9c:f1:6f:a9:5f:fe:ba:9c: 4f:21:76:22:c2:81:f2:92:ba:ad:71:f7:ce:66:00: 29:e4:c1:f1:e4:7a:b5:7c:3e:3a:60:00:73:19:7a: 7c:2a:12:7f:f8:0f:39:06:c4:bd:e2:24:c6:a4:18: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:32:DC:F9:16:50:BD:7A:66:C8:5E:E1:E0:2B:33:ED:7D:77:68:28 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4TLc-RZQvXpmyF7h4Csz7X13aCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.206.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d3:ff:d0:82:b2:76:11:73:db:52:ea:6e:19:4e:d8:2d:de: 11:15:25:42:82:42:84:84:6b:92:bb:c9:85:ea:79:05:7f:7e: 05:b1:02:1c:6b:70:c7:a9:ae:ee:4e:c4:0f:bd:70:1c:07:df: 6e:73:0b:f6:44:7a:53:da:6f:cc:63:17:c1:e5:2a:18:ab:e4: 9c:57:7d:55:4e:31:d0:a9:d8:e5:61:79:b3:4a:7a:e3:3d:0f: 10:c2:db:95:ed:82:be:dd:cf:2f:cd:eb:a6:c8:22:23:28:da: 25:82:b3:de:d6:6d:31:77:bf:f6:b2:f7:bd:94:67:4a:65:5c: 32:e6:1e:66:7d:27:ed:4a:48:ea:ac:98:c2:fd:64:2d:85:02: cc:42:87:e9:7b:c5:19:05:d6:dc:52:4c:7f:07:e3:5b:6a:31: 6a:81:2c:b1:c7:80:a8:12:e3:bd:59:5d:f4:47:6d:5f:c9:8b: f3:9b:f7:fb:83:37:de:0d:4d:22:1f:dc:b2:2d:aa:af:10:e4: 07:0a:50:56:7b:17:85:a4:68:e1:67:2b:a4:a7:80:02:22:5a: 3e:56:ec:a9:d4:f6:81:5e:b7:6b:b5:c8:6e:05:32:90:3e:e7: 3c:62:f4:08:00:13:38:68:4a:9b:cf:c6:d6:a4:91:8d:4f:86: 33:e6:cd:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPO5HcvnyspccvRuyjz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTMyZGNmOTE2NTBiZDdhNjZjODVlZTFlMDJiMzNlZDdkNzc2ODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1FZSm8IX+CgTgwLWQ8dk17s9lk oJmCK1X/dAt6OKKaC2z1UmiDtweLoKXt+V1iV1Y2SBvfo3fJwb4x6dqRlxciu/kt Dz+rWROZP6+UujN3iDU/ah7/GJ2AXhEHoTZ6aQ36NwOrvj+aEUo+njWAbCNxdfAV z8AWb/kv5KssJxV0wCoYOoOMLMGzMycanzsd7YOwmpPfzlujncQb837536OtVJ0Q QdNqjve1vODMilQ3AvUzqdl8giy8p+Of8fYsIPZaABJqm419nPFvqV/+upxPIXYi woHykrqtcffOZgAp5MHx5Hq1fD46YABzGXp8KhJ/+A85BsS94iTGpBgiHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEy3PkWUL16Zshe4eArM+19d2goMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvNFRMYy1SWlF2WHBteUY3aDRDc3o3WDEzYUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHOMA0G CSqGSIb3DQEBCwUAA4IBAQCj0//QgrJ2EXPbUupuGU7YLd4RFSVCgkKEhGuSu8mF 6nkFf34FsQIca3DHqa7uTsQPvXAcB99ucwv2RHpT2m/MYxfB5SoYq+ScV31VTjHQ qdjlYXmzSnrjPQ8QwtuV7YK+3c8vzeumyCIjKNolgrPe1m0xd7/2sve9lGdKZVwy 5h5mfSftSkjqrJjC/WQthQLMQofpe8UZBdbcUkx/B+NbajFqgSyxx4CoEuO9WV30 R21fyYvzm/f7gzfeDU0iH9yyLaqvEOQHClBWexeFpGjhZyukp4ACIlo+Vuyp1PaB XrdrtchuBTKQPuc8YvQIABM4aEqbz8bWpJGNT4Yz5s1W -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:28 2026 by rpki-client