This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa File: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (raw, json) Hash identifier: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA= Subject key identifier: 17:83:70:8C:46:0B:0C:8F:B2:05:9D:39:0E:73:21:DB:12:2C:64:5B Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Certificate serial: 019B7A5B9D9231534970C290A7725AA0A22A Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197075 IP address blocks: 185.49.56.0/22 maxlen: 24 185.203.124.0/22 maxlen: 24 2a0a:e6c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9d:92:31:53:49:70:c2:90:a7:72:5a:a0:a2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1783708c460b0c8fb2059d390e7321db122c645b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:01:c2:17:f5:28:a4:53:61:3a:9f:4c:93: ac:55:5a:c0:c8:95:5f:3a:db:f0:67:9e:95:67:35: 90:0d:8f:8f:db:01:d2:d5:03:b2:98:35:d7:fd:70: 47:8b:0f:13:7d:f4:50:44:30:35:06:0b:43:f0:c7: aa:c3:34:89:4f:df:1b:92:80:88:6d:e3:a6:98:9e: ce:f8:04:54:6b:03:18:26:52:03:6e:c6:7b:7b:39: d2:e3:30:cc:e5:ed:f6:ff:76:4a:55:d1:52:0b:5e: 14:d5:f6:3a:77:ac:61:df:aa:ec:c2:93:7c:b9:19: c6:24:a2:7a:0f:56:1f:8d:2c:19:9e:e8:ab:fd:59: 1b:cc:7e:75:10:12:80:6d:aa:c1:c9:48:d5:d2:f4: 2b:6d:e8:b0:86:f3:a0:04:bf:0a:f7:18:f7:ed:f4: e8:fe:9a:c8:c0:dc:99:0c:af:17:07:9c:8e:82:d1: 79:dc:63:09:87:25:98:eb:76:01:ad:c5:d5:d6:1f: c7:a9:77:d3:54:57:e6:06:26:18:94:53:b2:de:80: b1:ce:f7:78:6f:56:ba:df:81:a7:97:cf:50:eb:b3: c5:07:1f:41:95:78:26:15:3b:9d:2e:f3:f9:a1:3b: 5e:25:5d:84:15:17:fd:32:01:3a:ee:36:69:ef:c3: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:83:70:8C:46:0B:0C:8F:B2:05:9D:39:0E:73:21:DB:12:2C:64:5B X509v3 Authority Key Identifier: keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.56.0/22 185.203.124.0/22 IPv6: 2a0a:e6c0::/29 Signature Algorithm: sha256WithRSAEncryption 60:f7:e1:e8:be:cd:9c:02:47:7c:45:e7:2f:82:2b:c0:30:f3: 40:6e:ff:19:89:f4:27:69:1b:dc:58:dd:72:7f:7d:aa:49:09: ac:83:4d:41:17:05:06:63:8c:42:e7:53:77:85:07:9f:40:88: 35:0a:c1:5b:ab:ab:8b:12:6a:a3:64:d7:89:b9:83:73:71:af: b8:3f:be:6e:9b:43:a4:ec:97:c6:81:34:13:f7:a8:d7:e1:a4: a9:a5:2d:10:62:a3:fb:1e:71:64:9f:7b:df:ec:70:3a:2f:6d: 6c:58:94:a2:0b:fa:55:a2:ae:d6:6b:13:26:c5:7d:0b:83:ae: 8d:61:9b:bb:d0:cb:55:88:73:31:f8:87:6e:40:06:19:04:88: 21:ae:90:f4:e6:91:e7:02:46:88:1f:f3:1a:4f:4b:db:1e:d8: c1:5e:46:fb:1e:39:6e:4b:53:c2:9f:e0:34:26:ec:ed:38:36: 72:d6:49:9f:3e:f2:1c:fd:e1:d9:dd:2d:b6:cb:c0:80:ca:ca: f9:65:bd:1a:7f:b2:89:cc:8a:c1:e5:ee:a0:67:c9:0f:8f:a8: 66:3f:5e:13:5f:fc:89:f0:97:9b:d2:a2:ef:03:17:37:d8:cf: 27:bc:93:56:68:87:c3:9c:f1:82:0b:2d:65:84:01:2e:86:db: b4:45:ac:12 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W52SMVNJcMKQp3JaoKIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1 YzBiODEwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzgzNzA4YzQ2MGIwYzhmYjIwNTlkMzkwZTczMjFkYjEyMmM2NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7QBwhf1KKRTYTqfTJOsVVrAyJVf OtvwZ56VZzWQDY+P2wHS1QOymDXX/XBHiw8TffRQRDA1BgtD8MeqwzSJT98bkoCI beOmmJ7O+ARUawMYJlIDbsZ7eznS4zDM5e32/3ZKVdFSC14U1fY6d6xh36rswpN8 uRnGJKJ6D1YfjSwZnuir/VkbzH51EBKAbarByUjV0vQrbeiwhvOgBL8K9xj37fTo /prIwNyZDK8XB5yOgtF53GMJhyWY63YBrcXV1h/HqXfTVFfmBiYYlFOy3oCxzvd4 b1a634Gnl89Q67PFBx9BlXgmFTudLvP5oTteJV2EFRf9MgE67jZp78OEQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBeDcIxGCwyPsgWdOQ5zIdsSLGRbMB8GA1UdIwQY MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt YTZmNTM0YzMwN2YxLzEvRjROd2pFWUxESS15QlowNURuTWgyeElzWkZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTE4AwQC uct8MA0EAgACMAcDBQMqCubAMA0GCSqGSIb3DQEBCwUAA4IBAQBg9+Hovs2cAkd8 RecvgivAMPNAbv8ZifQnaRvcWN1yf32qSQmsg01BFwUGY4xC51N3hQefQIg1CsFb q6uLEmqjZNeJuYNzca+4P75um0Ok7JfGgTQT96jX4aSppS0QYqP7HnFkn3vf7HA6 L21sWJSiC/pVoq7WaxMmxX0Lg66NYZu70MtViHMx+IduQAYZBIghrpD05pHnAkaI H/MaT0vbHtjBXkb7HjluS1PCn+A0JuztODZy1kmfPvIc/eHZ3S22y8CAysr5Zb0a f7KJzIrB5e6gZ8kPj6hmP14TX/yJ8Jeb0qLvAxc32M8nvJNWaIfDnPGCCy1lhAEu htu0RawS -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:03 2026 by rpki-client