This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa File: 4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa (raw, json) Hash identifier: nUClw79qayz71Sc4V6xVjW6UfUubOR4LTlNu0VRIsdI= Subject key identifier: E1:24:8F:16:49:0B:E1:13:1B:05:2B:D3:03:54:00:64:33:D6:BC:7C Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Certificate serial: 019B7E37BCBBB4F0094B038C50579DE45A68 Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30742 IP address blocks: 185.204.96.0/22 maxlen: 24 185.204.96.0/24 maxlen: 24 185.204.97.0/24 maxlen: 24 185.204.98.0/24 maxlen: 24 185.204.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bc:bb:b4:f0:09:4b:03:8c:50:57:9d:e4:5a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06 Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1248f16490be1131b052bd30354006433d6bc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:4d:e8:63:b8:4c:12:39:69:6f:f8:09:77: ab:30:f1:e0:5e:fe:5d:82:5d:c8:7a:50:70:af:89: b0:d8:8e:0e:4e:55:11:6a:47:cd:0d:62:c7:7b:69: c5:4f:bb:b7:be:e8:25:05:ba:7f:ef:55:0f:9b:a9: a6:e4:d3:43:9d:24:3b:8b:19:58:8d:3a:80:b2:77: e7:81:f2:9a:18:f7:60:42:d1:72:17:41:7b:1d:36: 43:82:57:5b:85:27:81:92:83:05:fe:bf:0a:b6:07: 0e:93:82:da:d1:a5:7c:0d:5f:4a:d6:b7:23:ea:85: 08:dd:07:35:54:1a:6a:c4:e5:18:bf:95:f1:4a:8e: 8d:e5:d7:c4:3d:ae:15:e5:e2:2b:7d:ee:33:a5:b1: 6e:1e:d1:a5:09:90:71:10:ac:29:63:94:3a:13:87: 42:59:b7:9f:a5:84:5c:b9:ee:ad:8a:b1:3e:75:0c: 02:e6:11:6b:e2:fb:8c:de:c6:ee:69:7e:4a:e5:68: f2:45:9e:81:4e:93:ba:90:b5:58:17:2a:50:1e:99: 3d:dd:0a:20:2b:6a:32:8d:14:86:a5:0b:f4:26:2f: 7c:e0:04:32:02:4f:b8:5d:1e:05:8d:3c:de:c7:5b: ae:fd:5c:01:dd:cd:b0:be:06:c6:f3:87:7f:d3:2d: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:8F:16:49:0B:E1:13:1B:05:2B:D3:03:54:00:64:33:D6:BC:7C X509v3 Authority Key Identifier: keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/4SSPFkkL4RMbBSvTA1QAZDPWvHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.96.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:c8:79:15:be:41:21:6d:f5:ac:24:77:ca:3a:ac:6d:1a:e9: f8:e4:5f:e7:f5:37:f8:fe:26:96:b1:ca:9c:c3:9b:85:4b:ad: 18:4d:b4:f5:83:e5:4e:91:f6:12:85:19:5e:01:19:8f:7b:0a: 70:cb:37:a1:0b:c3:ff:fa:31:05:10:36:9b:9d:f2:58:37:ab: 21:f9:ca:62:79:f3:05:77:2d:5e:f1:9b:5e:7f:75:c9:b2:d7: d8:85:61:39:59:12:36:dd:53:ef:71:f5:fa:3d:1a:83:2a:4f: f8:f6:6d:ee:ca:82:f0:6b:35:ea:a0:31:2e:e7:db:9e:30:77: a7:ea:51:b6:f6:d8:be:91:a4:78:b3:2d:9f:1a:5f:25:f3:a8: 8d:a0:e2:58:61:eb:83:38:9b:00:7d:24:e1:8e:c8:c2:47:e9: 16:ea:fa:d9:a1:b5:a2:ab:08:3b:e5:c6:49:02:f7:24:6b:95: 99:f3:95:1a:8b:d9:60:0d:9e:cb:2f:8e:08:9b:a4:e4:61:1b: 13:79:60:5f:f8:4c:a1:75:81:7d:35:67:e3:62:5f:6a:e1:7b: b9:0f:cd:55:cc:a9:37:bb:a5:48:8f:f8:fe:0f:39:91:6b:7e: 15:c4:ee:82:b1:8f:ae:e0:53:4a:40:a6:89:d9:f8:80:29:c3: 78:a3:39:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7y7tPAJSwOMUFed5FpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Yzc0NmY2N2I3YWM1NmVhNmRkODU5NTFlYzAyMmNiYmQ2 N2FmMDYwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTI0OGYxNjQ5MGJlMTEzMWIwNTJiZDMwMzU0MDA2NDMzZDZiYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHlN6GO4TBI5aW/4CXerMPHgXv5d gl3IelBwr4mw2I4OTlURakfNDWLHe2nFT7u3vuglBbp/71UPm6mm5NNDnSQ7ixlY jTqAsnfngfKaGPdgQtFyF0F7HTZDgldbhSeBkoMF/r8KtgcOk4La0aV8DV9K1rcj 6oUI3Qc1VBpqxOUYv5XxSo6N5dfEPa4V5eIrfe4zpbFuHtGlCZBxEKwpY5Q6E4dC WbefpYRcue6tirE+dQwC5hFr4vuM3sbuaX5K5WjyRZ6BTpO6kLVYFypQHpk93Qog K2oyjRSGpQv0Ji984AQyAk+4XR4FjTzex1uu/VwB3c2wvgbG84d/0y1CaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEkjxZJC+ETGwUr0wNUAGQz1rx8MB8GA1UdIwQY MBaAFAnHRvZ7esVupt2FlR7AIsu9Z68GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQt YTZmNjExYThhYjkzLzEvNFNTUEZra0w0Uk1iQlN2VEExUUFaRFBXdkh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85M2FmOTctM2I5ZS00OTYxLTg5MDQtYTZmNjExYThhYjkz LzEvQ2NkRzludDZ4VzZtM1lXVkhzQWl5NzFucndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucxgMA0G CSqGSIb3DQEBCwUAA4IBAQBqyHkVvkEhbfWsJHfKOqxtGun45F/n9Tf4/iaWscqc w5uFS60YTbT1g+VOkfYShRleARmPewpwyzehC8P/+jEFEDabnfJYN6sh+cpiefMF dy1e8Ztef3XJstfYhWE5WRI23VPvcfX6PRqDKk/49m3uyoLwazXqoDEu59ueMHen 6lG29ti+kaR4sy2fGl8l86iNoOJYYeuDOJsAfSThjsjCR+kW6vrZobWiqwg75cZJ Avcka5WZ85Uai9lgDZ7LL44Im6TkYRsTeWBf+EyhdYF9NWfjYl9q4Xu5D81VzKk3 u6VIj/j+DzmRa34VxO6CsY+u4FNKQKaJ2fiAKcN4ozkq -----END CERTIFICATE-----Generated at Mon Jan 26 18:42:50 2026 by rpki-client