This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/4FrplW2P0skTJUa1sCtVMSIppcM.roa File: 4FrplW2P0skTJUa1sCtVMSIppcM.roa (raw, json) Hash identifier: D9MVNJi9010IKib/p9TXKfT7aX0EYXNgCDs72hr1/ps= Subject key identifier: E0:5A:E9:95:6D:8F:D2:C9:13:25:46:B5:B0:2B:55:31:22:29:A5:C3 Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Certificate serial: 019B7FF1E76817B241D0A4BAD96239349F85 Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/4FrplW2P0skTJUa1sCtVMSIppcM.roa Signing time: Fri 02 Jan 2026 18:21:58 +0000 ROA not before: Fri 02 Jan 2026 18:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206055 IP address blocks: 185.238.118.0/23 maxlen: 23 2a13:9f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e7:68:17:b2:41:d0:a4:ba:d9:62:39:34:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4 Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e05ae9956d8fd2c9132546b5b02b55312229a5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:87:6e:32:bf:3d:e0:c0:21:9a:7b:6b:db: b8:69:24:41:ef:3d:19:29:a9:83:55:9a:d7:c7:e0: 0b:bd:ad:55:93:0b:d9:98:a8:46:2d:d4:fa:8a:2e: d4:69:5a:40:6a:3a:7f:5c:29:2f:ae:7c:a0:60:3c: d7:e3:43:28:30:a7:02:8a:b2:c0:68:44:c6:46:80: e3:f2:02:be:92:f4:60:3c:c3:cc:d9:86:f4:e0:86: 4a:57:b0:61:56:5d:e0:42:55:56:b1:4a:e6:93:6d: 7f:53:cb:f1:25:f7:b0:41:08:4d:0a:a0:ee:c8:36: 6b:4d:29:a5:7f:6f:13:2f:13:8c:b7:f4:c8:2a:fb: 51:ab:d9:45:5d:09:16:68:7b:bc:93:ed:2d:53:6b: d3:c5:f2:90:d8:ad:94:5b:c5:8e:cf:da:df:f8:6f: 5a:e2:ea:0c:55:20:d6:d4:05:75:a0:61:e3:bc:59: 10:04:af:db:40:0d:13:3d:25:4d:1e:d5:d4:6f:d9: ab:53:54:a4:30:67:d5:8b:8c:3b:27:ea:f8:be:ea: 8b:89:ae:e7:76:c7:b8:b5:2d:16:db:5a:68:83:63: 9a:cd:98:8f:c0:ba:e4:0a:85:0d:0e:8d:67:08:f5: ab:a8:70:72:72:33:4d:67:37:61:2a:15:a2:83:d1: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5A:E9:95:6D:8F:D2:C9:13:25:46:B5:B0:2B:55:31:22:29:A5:C3 X509v3 Authority Key Identifier: keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/4FrplW2P0skTJUa1sCtVMSIppcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.118.0/23 IPv6: 2a13:9f80::/32 Signature Algorithm: sha256WithRSAEncryption 48:fe:1a:a9:49:c4:5d:25:c9:e1:0a:1e:f3:e0:8d:a7:c0:33: 0f:3d:d4:ff:f1:f0:c4:60:07:89:ea:ec:4e:57:78:d7:7a:cc: 39:2e:da:81:82:dd:a9:05:f9:6f:83:00:42:ea:34:1e:55:44: 82:4f:9c:0e:b0:44:4b:d5:30:45:00:3a:07:20:56:8a:f5:8a: 36:bf:58:a9:a6:c8:a6:8c:5f:68:4f:c0:ee:4f:0c:34:d9:76: 59:bb:df:b7:cb:cd:d8:ac:0d:f5:f9:88:fd:b6:98:41:6e:23: 36:9c:62:6a:39:03:79:3b:dd:f8:90:17:75:a5:c1:89:bb:56: 43:e3:52:bf:ce:80:91:5c:1a:63:ec:1b:22:99:a8:29:b7:be: fc:08:20:1e:11:3b:2f:d3:47:12:9c:25:f2:43:5e:6b:da:e9: de:cd:e4:92:05:7c:f9:de:77:1b:de:08:70:86:aa:e4:76:3f: 3a:17:fa:d2:4c:a5:77:e6:9a:29:50:70:64:f7:e3:61:b9:7e: ac:2a:0e:2f:b4:ba:a2:be:88:21:f1:54:06:ce:c8:7f:79:dd: f4:5d:5d:92:ac:89:31:9b:d2:da:c5:7f:1f:7e:a7:87:0e:fe: 37:69:61:5d:c2:92:b8:46:2f:12:2d:c4:ed:42:d2:2d:6b:63: 3a:40:09:b7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8edoF7JB0KS62WI5NJ+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1 ZjU2ZTQwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDVhZTk5NTZkOGZkMmM5MTMyNTQ2YjViMDJiNTUzMTIyMjlhNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgeHbjK/PeDAIZp7a9u4aSRB7z0Z KamDVZrXx+ALva1VkwvZmKhGLdT6ii7UaVpAajp/XCkvrnygYDzX40MoMKcCirLA aETGRoDj8gK+kvRgPMPM2Yb04IZKV7BhVl3gQlVWsUrmk21/U8vxJfewQQhNCqDu yDZrTSmlf28TLxOMt/TIKvtRq9lFXQkWaHu8k+0tU2vTxfKQ2K2UW8WOz9rf+G9a 4uoMVSDW1AV1oGHjvFkQBK/bQA0TPSVNHtXUb9mrU1SkMGfVi4w7J+r4vuqLia7n dse4tS0W21pog2OazZiPwLrkCoUNDo1nCPWrqHBycjNNZzdhKhWig9FoGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOBa6ZVtj9LJEyVGtbArVTEiKaXDMB8GA1UdIwQY MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt MDY2NzZiZTEzOGZhLzEvNEZycGxXMlAwc2tUSlVhMXNDdFZNU0lwcGNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBue52MA0E AgACMAcDBQAqE5+AMA0GCSqGSIb3DQEBCwUAA4IBAQBI/hqpScRdJcnhCh7z4I2n wDMPPdT/8fDEYAeJ6uxOV3jXesw5LtqBgt2pBflvgwBC6jQeVUSCT5wOsERL1TBF ADoHIFaK9Yo2v1ippsimjF9oT8DuTww02XZZu9+3y83YrA31+Yj9tphBbiM2nGJq OQN5O934kBd1pcGJu1ZD41K/zoCRXBpj7Bsimagpt778CCAeETsv00cSnCXyQ15r 2unezeSSBXz53ncb3ghwhqrkdj86F/rSTKV35popUHBk9+NhuX6sKg4vtLqivogh 8VQGzsh/ed30XV2SrIkxm9LaxX8ffqeHDv43aWFdwpK4Ri8SLcTtQtIta2M6QAm3 -----END CERTIFICATE-----Generated at Mon Jan 26 14:43:23 2026 by rpki-client