This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa File: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (raw, json) Hash identifier: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY= Subject key identifier: 7B:8F:E3:2F:C2:A1:BA:B7:5F:58:62:0A:75:9E:0D:C5:E0:C2:2C:06 Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f Certificate serial: 019B797F147951124504BFC75D9748306E8B Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203247 IP address blocks: 185.141.48.0/24 maxlen: 24 185.141.49.0/24 maxlen: 24 185.141.50.0/24 maxlen: 24 185.141.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:14:79:51:12:45:04:bf:c7:5d:97:48:30:6e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b8fe32fc2a1bab75f58620a759e0dc5e0c22c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:c6:44:bd:7e:b1:44:4e:00:80:8d:1e:6d: 55:f5:7c:c0:f7:8b:60:fd:6a:5b:b7:9b:20:09:e4: 8f:9e:2e:28:17:41:90:80:51:20:03:92:ab:17:e3: 70:96:13:e8:f8:3b:c0:c3:07:7a:dc:9c:0b:84:b6: 7a:4d:1a:fd:3d:27:ee:37:e8:25:d7:a1:b4:be:89: 2f:cb:5e:6f:df:2e:49:a7:de:19:55:fe:90:8a:3a: 73:80:66:d0:70:51:6e:73:21:c6:59:97:28:cf:b3: 05:30:f2:c4:9c:10:c6:6f:eb:a8:1b:4e:0d:87:15: 81:8d:05:51:31:ee:f1:b4:84:07:1d:30:73:a6:dc: 4c:78:ed:c3:07:d9:fd:e7:cb:d0:5a:7c:28:12:5d: de:52:c8:9a:9f:f2:1d:1b:85:91:ed:57:66:7e:f8: eb:62:fc:be:8b:4d:12:eb:7d:b0:a7:72:ff:95:ae: 71:ac:8c:3b:25:1e:1d:09:5a:c7:a7:05:4b:57:a3: 38:8f:67:d2:05:a8:60:5f:3a:10:55:ad:d9:3b:af: 19:4d:6a:a1:10:3d:97:f1:c0:15:5a:54:93:75:da: f8:9e:d7:9d:87:63:1f:bc:54:06:ca:a9:6e:16:0c: 0f:3e:5a:c0:1f:98:e9:03:8f:9b:20:88:f0:11:3e: 8c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8F:E3:2F:C2:A1:BA:B7:5F:58:62:0A:75:9E:0D:C5:E0:C2:2C:06 X509v3 Authority Key Identifier: keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.48.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:8b:9b:fa:0a:69:fa:50:7d:91:9b:85:1d:eb:fb:63:78:fc: a4:23:9f:85:cb:2c:0f:be:3d:e6:c7:f0:e3:c5:8e:4b:c2:5f: ea:bb:e1:a3:49:e2:7c:52:59:c7:dd:1d:69:fb:a8:ea:02:f2: 7d:25:e2:50:91:d8:ad:15:92:6a:d8:d3:f6:c1:83:48:41:e3: 46:44:5e:80:9e:23:16:72:78:38:6b:1f:f2:24:68:ad:a4:0b: eb:96:69:d1:58:44:ca:14:0b:7d:04:e5:bc:09:9e:7c:c0:39: 0d:d7:d7:72:79:c5:ad:6f:29:d2:91:e2:35:c8:93:b0:9f:a3: b5:99:be:64:08:5d:75:bb:db:59:3e:09:a4:e2:0f:d9:a4:16: 1b:e0:75:db:d7:0f:c2:f9:4a:31:31:0a:1e:77:5a:7f:79:f5: 74:1c:6c:3b:29:42:2b:23:f7:7e:e8:63:f7:e3:b1:a8:44:94: da:28:ab:84:81:c0:6d:a6:d7:2a:f0:06:e8:65:28:ad:fd:c8: 68:d2:29:b8:16:a7:16:84:67:71:ee:be:01:bf:1f:21:ad:29: a5:36:73:b7:52:8e:67:93:be:72:23:5e:2f:c1:5f:6d:e7:ef: 25:43:17:69:01:cf:36:8f:20:23:a0:f3:41:63:9b:88:16:cd: 03:1e:13:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxR5URJFBL/HXZdIMG6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5 OThiNGYwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjhmZTMyZmMyYTFiYWI3NWY1ODYyMGE3NTllMGRjNWUwYzIyYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qzGRL1+sUROAICNHm1V9XzA94tg /Wpbt5sgCeSPni4oF0GQgFEgA5KrF+NwlhPo+DvAwwd63JwLhLZ6TRr9PSfuN+gl 16G0vokvy15v3y5Jp94ZVf6QijpzgGbQcFFucyHGWZcoz7MFMPLEnBDGb+uoG04N hxWBjQVRMe7xtIQHHTBzptxMeO3DB9n958vQWnwoEl3eUsian/IdG4WR7Vdmfvjr Yvy+i00S632wp3L/la5xrIw7JR4dCVrHpwVLV6M4j2fSBahgXzoQVa3ZO68ZTWqh ED2X8cAVWlSTddr4ntedh2MfvFQGyqluFgwPPlrAH5jpA4+bIIjwET6MUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHuP4y/Cobq3X1hiCnWeDcXgwiwGMB8GA1UdIwQY MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt OWU0ZTQ2ZjYwYTY4LzEvZTRfakw4S2h1cmRmV0dJS2RaNE54ZURDTEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4 LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY0wMA0G CSqGSIb3DQEBCwUAA4IBAQAbi5v6Cmn6UH2Rm4Ud6/tjePykI5+FyywPvj3mx/Dj xY5Lwl/qu+GjSeJ8UlnH3R1p+6jqAvJ9JeJQkditFZJq2NP2wYNIQeNGRF6AniMW cng4ax/yJGitpAvrlmnRWETKFAt9BOW8CZ58wDkN19dyecWtbynSkeI1yJOwn6O1 mb5kCF11u9tZPgmk4g/ZpBYb4HXb1w/C+UoxMQoed1p/efV0HGw7KUIrI/d+6GP3 47GoRJTaKKuEgcBtptcq8AboZSit/cho0im4FqcWhGdx7r4Bvx8hrSmlNnO3Uo5n k75yI14vwV9t5+8lQxdpAc82jyAjoPNBY5uIFs0DHhN5 -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:44 2026 by rpki-client