This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/4mvw711lnQzyvs4Hvdkp66DN8WA.roa File: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (raw, json) Hash identifier: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY= Subject key identifier: E2:6B:F0:EF:5D:65:9D:0C:F2:BE:CE:07:BD:D9:29:EB:A0:CD:F1:60 Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Certificate serial: 019B7BA3CFA94D7A2E21A164AAF5F77AA9DF Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/4mvw711lnQzyvs4Hvdkp66DN8WA.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.207.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cf:a9:4d:7a:2e:21:a1:64:aa:f5:f7:7a:a9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e26bf0ef5d659d0cf2bece07bdd929eba0cdf160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:31:b0:31:61:e5:65:5c:8d:78:e6:ba:dc: 47:8c:ae:a4:66:69:37:4d:23:54:c0:1d:73:b0:90: 72:b0:a0:ac:73:0e:11:f4:a5:4e:40:7c:7c:ea:74: 44:50:f6:6b:fd:f1:6f:98:ed:44:99:66:44:e8:95: c9:bf:a3:0d:70:43:56:a8:ba:89:30:83:ae:38:a7: 08:19:d4:1a:2e:30:f9:d9:be:79:38:d6:0c:40:c5: d4:f1:ea:b3:1f:a8:b0:77:fb:72:33:f4:74:57:2a: 40:e3:05:a4:83:d9:2e:8e:ba:f8:30:68:3c:9a:dd: 6f:1f:80:d0:9f:0c:df:cb:13:7b:68:9d:06:f5:62: c0:52:05:be:76:1f:ce:e3:5c:3e:3d:64:fc:e1:4a: ac:9d:73:15:e2:9b:af:57:6f:8b:3c:fe:ce:df:81: b6:c7:d5:08:60:34:e0:f3:b8:a3:95:27:ec:d7:1d: 98:9b:5a:86:06:dd:4c:98:00:87:fb:86:cd:db:91: 58:9d:d0:94:99:ac:76:bf:fd:cd:c1:9e:c9:60:b9: 54:20:73:77:02:d1:73:bb:77:c2:a1:fc:b0:cf:27: 5b:1d:c4:c9:03:fc:64:86:1d:44:09:e2:b6:b6:5a: 95:8f:72:c3:eb:c5:0a:0e:64:85:0c:af:34:ef:73: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:F0:EF:5D:65:9D:0C:F2:BE:CE:07:BD:D9:29:EB:A0:CD:F1:60 X509v3 Authority Key Identifier: keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/4mvw711lnQzyvs4Hvdkp66DN8WA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.100.0/22 Signature Algorithm: sha256WithRSAEncryption b8:15:d4:18:05:f8:b1:b2:c4:a2:e0:37:07:2a:4d:e5:6f:31: e7:7f:5d:d8:6e:91:96:23:c5:f5:25:91:f5:6f:a6:f5:94:97: ca:58:2b:e6:0a:47:c7:94:7f:af:e2:67:a9:50:0a:b6:a6:9d: 55:72:28:8d:4e:9a:ac:a5:bf:c4:66:28:fb:e9:8a:9b:54:8f: 93:33:b2:ef:be:39:2a:41:67:f5:ee:57:76:67:5e:48:5d:63: 05:cf:77:4e:50:dd:e6:52:3c:86:24:72:48:fe:7f:55:4a:76: 92:f9:43:48:e1:44:a8:06:6a:27:7b:4a:f9:9c:84:3c:ae:d8: bc:8c:8d:48:2c:1b:ac:c1:f9:87:09:54:77:33:35:b0:e7:47: d8:2e:76:87:61:9f:fb:d4:cc:1b:c6:93:93:78:f0:13:11:13: 3e:56:14:76:98:1c:b1:8f:75:20:21:e0:7a:60:44:91:e1:0f: 7f:38:af:7f:c5:5e:f0:ff:0d:dc:ee:6a:8d:ed:29:31:9a:5e: bd:c3:55:57:02:d7:c0:f5:db:f0:5b:e1:19:64:1b:48:75:ba: e4:7f:6a:42:b2:f2:ec:5b:42:af:ff:2c:e9:96:e0:83:13:74: 2d:3c:32:95:06:5a:be:a9:be:71:e3:e7:ba:dc:6f:3f:c7:b4: 2d:c2:03:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8+pTXouIaFkqvX3eqnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4 NThlYjIwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjZiZjBlZjVkNjU5ZDBjZjJiZWNlMDdiZGQ5MjllYmEwY2RmMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3oxsDFh5WVcjXjmutxHjK6kZmk3 TSNUwB1zsJBysKCscw4R9KVOQHx86nREUPZr/fFvmO1EmWZE6JXJv6MNcENWqLqJ MIOuOKcIGdQaLjD52b55ONYMQMXU8eqzH6iwd/tyM/R0VypA4wWkg9kujrr4MGg8 mt1vH4DQnwzfyxN7aJ0G9WLAUgW+dh/O41w+PWT84UqsnXMV4puvV2+LPP7O34G2 x9UIYDTg87ijlSfs1x2Ym1qGBt1MmACH+4bN25FYndCUmax2v/3NwZ7JYLlUIHN3 AtFzu3fCofywzydbHcTJA/xkhh1ECeK2tlqVj3LD68UKDmSFDK8073NylwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJr8O9dZZ0M8r7OB73ZKeugzfFgMB8GA1UdIwQY MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt MDJjMzdmZWI4YTllLzEvNG12dzcxMWxuUXp5dnM0SHZka3A2NkROOFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc9kMA0G CSqGSIb3DQEBCwUAA4IBAQC4FdQYBfixssSi4DcHKk3lbzHnf13YbpGWI8X1JZH1 b6b1lJfKWCvmCkfHlH+v4mepUAq2pp1VciiNTpqspb/EZij76YqbVI+TM7Lvvjkq QWf17ld2Z15IXWMFz3dOUN3mUjyGJHJI/n9VSnaS+UNI4USoBmone0r5nIQ8rti8 jI1ILBuswfmHCVR3MzWw50fYLnaHYZ/71MwbxpOTePATERM+VhR2mByxj3UgIeB6 YESR4Q9/OK9/xV7w/w3c7mqN7Skxml69w1VXAtfA9dvwW+EZZBtIdbrkf2pCsvLs W0Kv/yzpluCDE3QtPDKVBlq+qb5x4+e63G8/x7QtwgMq -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:42 2026 by rpki-client