This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa File: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (raw, json) Hash identifier: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc= Subject key identifier: ED:9E:2F:4F:FA:46:9F:08:C5:B4:C9:9E:9C:B7:11:A2:A9:94:3E:B7 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019BEAA526EA20B5B0F553E67D0A3B52F795 Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa Signing time: Fri 23 Jan 2026 11:37:30 +0000 ROA not before: Fri 23 Jan 2026 11:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211859 IP address blocks: 185.40.84.0/24 maxlen: 24 185.40.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:a5:26:ea:20:b5:b0:f5:53:e6:7d:0a:3b:52:f7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Jan 23 11:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed9e2f4ffa469f08c5b4c99e9cb711a2a9943eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:3a:ff:3a:07:25:53:0b:57:c8:d6:48:01: 56:d4:4d:49:bd:a4:2c:41:b4:4d:d9:a9:32:b5:ca: 08:89:ea:23:14:70:2f:94:21:8d:7d:70:ea:2a:58: ba:1c:43:b7:e2:2f:ef:60:14:c2:0e:e8:85:1d:04: 4d:d0:66:74:3e:1d:4f:f3:27:18:e0:24:a5:d7:a7: b0:2e:4a:43:b1:96:d2:bf:74:5c:3e:fe:e3:bb:10: 6f:d2:fe:68:0c:d2:5f:37:76:49:9c:16:1e:4f:2e: 2d:50:b8:03:0d:ab:00:dc:46:5e:d3:99:de:29:e6: da:36:45:43:05:57:18:40:26:d8:4c:2a:17:2b:be: 1a:c5:a3:63:11:4a:e7:f1:a4:4c:77:be:25:bb:c9: a4:84:d6:c7:1a:70:bc:d1:44:d6:90:07:c2:15:ba: 47:dc:ce:af:db:06:73:aa:5c:59:eb:2d:ce:32:7a: 6b:9c:46:7f:11:60:0c:30:f4:0b:2b:1e:dd:2d:b2: 15:a7:d0:25:f0:6d:15:f6:02:eb:94:ee:94:de:31: 23:3d:03:67:19:68:72:fb:ef:ce:c4:2b:48:45:03: 2c:99:54:23:52:5e:35:1c:e6:06:7d:20:ac:cd:b8: a7:c9:98:c0:3e:36:2c:8f:c7:fc:e7:e3:63:8d:15: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:2F:4F:FA:46:9F:08:C5:B4:C9:9E:9C:B7:11:A2:A9:94:3E:B7 X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.84.0/23 Signature Algorithm: sha256WithRSAEncryption 69:00:c6:31:a2:ab:52:39:ff:8f:29:a7:af:d1:7c:4e:aa:2f: 8c:f7:1a:76:95:60:ac:14:6a:8a:ec:4b:e8:2e:88:c3:86:ce: 5c:c4:ff:9e:f2:71:31:ab:d9:08:cb:20:e6:74:2b:1a:09:25: 22:22:97:75:7a:a3:f1:f6:ab:3a:58:6c:41:9b:24:1f:ea:b0: 5d:f5:ec:fe:bc:97:39:d8:6c:c2:3d:50:b5:a4:ae:66:13:7a: e7:d0:74:47:95:90:0e:f6:e6:b9:f6:4a:99:42:3f:9f:25:0e: 40:c5:85:44:76:39:a6:f7:89:ed:22:46:29:04:41:4b:ff:ba: dc:c0:50:08:5e:c2:90:ad:63:0a:0a:21:b9:51:92:0c:d7:82: 55:90:12:b8:4c:d5:8f:5c:a8:49:39:86:be:78:ee:b5:14:f4: 47:34:90:41:90:e1:8f:5c:8b:3e:b0:f1:be:63:a5:d1:5a:1b: 38:c9:c7:07:39:8f:b8:af:03:e0:91:32:6b:ff:37:3e:29:e1: 16:cd:f9:c9:8e:a1:a2:c2:40:bf:87:cc:d3:0c:27:73:75:4c: 64:ef:fc:fb:77:90:32:c0:54:51:78:d8:2c:a4:d6:4a:d5:8a: 58:b7:bb:2a:1a:8d:f3:08:6d:78:ab:f9:1a:05:43:b7:83:3b: 1f:12:1b:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvqpSbqILWw9VPmfQo7UveVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjYwMTIzMTEzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDllMmY0ZmZhNDY5ZjA4YzViNGM5OWU5Y2I3MTFhMmE5OTQzZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOo6/zoHJVMLV8jWSAFW1E1JvaQs QbRN2akytcoIieojFHAvlCGNfXDqKli6HEO34i/vYBTCDuiFHQRN0GZ0Ph1P8ycY 4CSl16ewLkpDsZbSv3RcPv7juxBv0v5oDNJfN3ZJnBYeTy4tULgDDasA3EZe05ne KebaNkVDBVcYQCbYTCoXK74axaNjEUrn8aRMd74lu8mkhNbHGnC80UTWkAfCFbpH 3M6v2wZzqlxZ6y3OMnprnEZ/EWAMMPQLKx7dLbIVp9Al8G0V9gLrlO6U3jEjPQNn GWhy++/OxCtIRQMsmVQjUl41HOYGfSCszbinyZjAPjYsj8f85+NjjRUPTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2eL0/6Rp8IxbTJnpy3EaKplD63MB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvN1o0dlRfcEdud2pGdE1tZW5MY1JvcW1VUHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuShUMA0G CSqGSIb3DQEBCwUAA4IBAQBpAMYxoqtSOf+PKaev0XxOqi+M9xp2lWCsFGqK7Evo LojDhs5cxP+e8nExq9kIyyDmdCsaCSUiIpd1eqPx9qs6WGxBmyQf6rBd9ez+vJc5 2GzCPVC1pK5mE3rn0HRHlZAO9ua59kqZQj+fJQ5AxYVEdjmm94ntIkYpBEFL/7rc wFAIXsKQrWMKCiG5UZIM14JVkBK4TNWPXKhJOYa+eO61FPRHNJBBkOGPXIs+sPG+ Y6XRWhs4yccHOY+4rwPgkTJr/zc+KeEWzfnJjqGiwkC/h8zTDCdzdUxk7/z7d5Ay wFRReNgspNZK1YpYt7sqGo3zCG14q/kaBUO3gzsfEhum -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:11 2026 by rpki-client