This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4ZIMQ6sATn5J_4X40E1o3twJpg4.roa File: 4ZIMQ6sATn5J_4X40E1o3twJpg4.roa (raw, json) Hash identifier: lJxaYDae64r4+SGqk1WIMx7H0Fwsny/f5KO0yavSaMY= Subject key identifier: E1:92:0C:43:AB:00:4E:7E:49:FF:85:F8:D0:4D:68:DE:DC:09:A6:0E Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019BE5BA4F0306657EB6FB13B8EBC531F33F Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4ZIMQ6sATn5J_4X40E1o3twJpg4.roa Signing time: Thu 22 Jan 2026 12:42:30 +0000 ROA not before: Thu 22 Jan 2026 12:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213999 IP address blocks: 95.214.251.0/24 maxlen: 24 171.22.121.0/24 maxlen: 24 185.161.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:ba:4f:03:06:65:7e:b6:fb:13:b8:eb:c5:31:f3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 22 12:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1920c43ab004e7e49ff85f8d04d68dedc09a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:bc:92:3c:a2:28:a0:e6:f3:f9:59:06:e1: 2d:60:33:fc:2a:6d:4e:e5:fc:b4:02:74:a3:4e:6e: 64:40:67:8e:21:c2:19:d3:e6:c9:8f:29:83:33:d3: 90:8a:5a:f3:10:bf:71:9b:b0:a2:4c:dd:b6:f9:7a: f7:ad:c9:f3:c4:f7:be:38:dd:d0:c1:90:7e:02:bc: 55:39:90:4d:9c:aa:2a:99:da:39:bb:08:38:1d:fa: 27:92:0d:56:82:77:39:ec:84:fb:0f:06:aa:12:3c: 9d:cc:13:d7:c2:72:b0:0b:41:b1:9e:a5:8c:c9:0b: 6c:a9:7a:06:6f:d8:16:00:71:a6:89:3c:ac:1f:5e: 65:5e:28:ee:85:ac:10:32:a4:f8:5a:71:10:5a:44: be:4d:f1:51:d4:72:a3:cc:5b:0f:c4:2b:1b:27:a1: cb:0a:23:f1:6d:d6:42:8b:97:a7:62:7d:97:00:86: 35:7d:27:16:26:84:02:11:25:57:c0:11:5a:ca:5e: f1:60:e3:a5:02:dc:38:7c:b9:a1:80:b1:3c:46:99: 76:76:68:7e:ea:7d:70:93:bf:cb:32:d5:3e:b4:29: c5:30:72:45:b1:31:fb:86:af:56:a3:e9:b3:80:8c: d5:b4:88:12:07:7e:2b:a8:5b:c3:5b:42:aa:d5:58: 88:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:92:0C:43:AB:00:4E:7E:49:FF:85:F8:D0:4D:68:DE:DC:09:A6:0E X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4ZIMQ6sATn5J_4X40E1o3twJpg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.251.0/24 171.22.121.0/24 185.161.69.0/24 Signature Algorithm: sha256WithRSAEncryption 89:3a:b5:89:5c:d6:09:2b:ef:76:29:d8:51:24:ff:77:1b:01: 36:07:1e:28:5e:83:6f:62:7c:50:63:82:71:4a:5f:f5:73:5f: 89:49:52:bd:35:e7:c9:f0:5f:c4:d3:c3:94:ef:9e:0f:df:5f: 02:67:9f:a1:ab:e4:d9:cd:a3:fb:97:56:d5:d8:29:90:54:89: 62:91:7a:8f:11:e7:c4:8c:bf:19:fc:86:d2:7c:82:10:9c:0c: b6:1f:0c:9e:ea:41:c1:fb:86:52:a9:b3:dd:84:98:24:3e:8d: db:8f:0e:83:41:9a:cd:ef:75:5e:69:86:b2:84:7e:3d:52:fc: 81:91:d3:5a:da:9f:08:4e:16:1c:cb:4f:af:54:7e:e5:38:1f: 52:14:86:42:7d:c2:55:c0:01:18:64:af:cf:4e:18:0b:81:fe: e7:97:c2:cc:7d:23:e4:17:47:a2:2e:d5:63:88:81:17:ec:44: cf:36:14:50:47:86:22:30:b4:88:98:44:b5:3e:62:1d:98:27: c9:a8:f4:92:5c:27:1b:62:38:82:b2:09:35:1e:6f:28:1d:6d: 3c:98:df:b9:1b:10:01:09:e0:84:c6:f5:96:c6:57:ea:57:a6: b3:46:dd:bd:00:3d:96:8c:6d:9a:36:f0:1c:0a:56:39:e7:39: 05:da:78:df -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvluk8DBmV+tvsTuOvFMfM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTIyMTI0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTkyMGM0M2FiMDA0ZTdlNDlmZjg1ZjhkMDRkNjhkZWRjMDlhNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8O8kjyiKKDm8/lZBuEtYDP8Km1O 5fy0AnSjTm5kQGeOIcIZ0+bJjymDM9OQilrzEL9xm7CiTN22+Xr3rcnzxPe+ON3Q wZB+ArxVOZBNnKoqmdo5uwg4Hfonkg1Wgnc57IT7DwaqEjydzBPXwnKwC0GxnqWM yQtsqXoGb9gWAHGmiTysH15lXijuhawQMqT4WnEQWkS+TfFR1HKjzFsPxCsbJ6HL CiPxbdZCi5enYn2XAIY1fScWJoQCESVXwBFayl7xYOOlAtw4fLmhgLE8Rpl2dmh+ 6n1wk7/LMtU+tCnFMHJFsTH7hq9Wo+mzgIzVtIgSB34rqFvDW0Kq1ViIwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOGSDEOrAE5+Sf+F+NBNaN7cCaYOMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvNFpJTVE2c0FUbjVKXzRYNDBFMW8zdHdKcGc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX9b7AwQA qxZ5AwQAuaFFMA0GCSqGSIb3DQEBCwUAA4IBAQCJOrWJXNYJK+92KdhRJP93GwE2 Bx4oXoNvYnxQY4JxSl/1c1+JSVK9NefJ8F/E08OU754P318CZ5+hq+TZzaP7l1bV 2CmQVIlikXqPEefEjL8Z/IbSfIIQnAy2Hwye6kHB+4ZSqbPdhJgkPo3bjw6DQZrN 73VeaYayhH49UvyBkdNa2p8IThYcy0+vVH7lOB9SFIZCfcJVwAEYZK/PThgLgf7n l8LMfSPkF0eiLtVjiIEX7ETPNhRQR4YiMLSImES1PmIdmCfJqPSSXCcbYjiCsgk1 Hm8oHW08mN+5GxABCeCExvWWxlfqV6azRt29AD2WjG2aNvAcClY55zkF2njf -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:21 2026 by rpki-client