This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa File: S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa (raw, json) Hash identifier: HWieGKn5oMIm/cd+NltvfFL1DEkHDM7h4JKc/BDbryw= Subject key identifier: 4B:86:5D:59:DA:E9:6F:7A:98:C7:E7:BA:81:13:6A:CB:14:BD:5D:75 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F835FF8118C0E43B709A7392212F450 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa Signing time: Fri 02 Jan 2026 16:21:14 +0000 ROA not before: Fri 02 Jan 2026 16:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50941 IP address blocks: 185.88.135.0/24 maxlen: 24 185.172.50.0/24 maxlen: 24 185.172.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5f:f8:11:8c:0e:43:b7:09:a7:39:22:12:f4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b865d59dae96f7a98c7e7ba81136acb14bd5d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:cd:16:c8:91:39:6d:96:81:8e:e7:b4:66: 6b:73:2d:79:5a:4e:2f:cc:7b:05:50:f9:77:66:41: 2c:19:6f:c8:4d:fa:18:5d:7a:5a:54:df:d9:ab:50: f8:77:ee:0b:ed:3d:6f:6c:8f:1c:8b:98:c4:6e:56: 6a:2f:19:c7:13:08:48:49:1d:53:fa:49:31:ba:2a: cd:d4:29:98:8a:35:42:27:e3:83:90:64:2c:1a:9d: 7f:11:37:0b:1b:9e:5b:e6:e2:b7:b1:23:ab:33:09: 3f:40:8c:94:80:d2:5c:1e:91:6d:0d:df:76:9b:bf: 56:85:e2:3f:04:25:cf:0e:3c:89:93:55:03:8e:85: bc:95:15:12:5c:11:72:ea:e4:2c:f9:c0:dc:96:0f: 9e:c0:ae:8e:32:b5:33:3a:91:ca:8c:d6:40:94:06: 37:67:c8:01:2d:5b:25:c6:89:c8:eb:98:21:ae:b1: 64:c5:de:43:25:9b:ec:c1:f4:31:7c:b8:cb:2b:56: dc:98:d4:c5:b2:26:ed:2d:d9:67:96:bb:94:dd:2e: fd:ef:95:07:ca:18:f0:f1:59:84:3e:42:80:c0:f0: 11:c3:05:22:8f:b4:2d:2b:d8:37:84:32:3e:11:a0: 2c:4d:8e:06:b0:6d:e3:77:86:06:0b:5b:0a:31:f6: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:5D:59:DA:E9:6F:7A:98:C7:E7:BA:81:13:6A:CB:14:BD:5D:75 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/S4ZdWdrpb3qYx-e6gRNqyxS9XXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.135.0/24 185.172.50.0/23 Signature Algorithm: sha256WithRSAEncryption 60:aa:1c:42:52:f3:ea:25:0d:72:dd:1d:d6:18:71:f5:30:97: 07:72:ae:c9:3b:82:04:13:49:31:36:fb:40:60:57:25:a3:11: a1:c4:29:b7:7d:3a:ca:b8:8c:cb:62:51:19:72:30:ef:0b:b7: 5b:b2:d2:11:d6:c4:29:4c:e1:3a:ff:71:d7:3b:65:87:e1:92: 42:03:49:29:b5:af:90:ff:55:bb:59:a3:9e:c3:16:bd:66:18: e3:c2:5a:ee:99:88:62:56:59:aa:dd:04:3d:cf:b2:3e:e9:53: 19:38:6d:9e:24:13:02:95:71:33:2d:25:b4:45:df:06:f3:52: 5a:6b:ff:c5:da:9b:4c:00:7a:cb:05:04:e1:32:b0:eb:35:6c: fb:cd:d8:f8:ea:5e:2e:96:ab:54:21:48:51:d3:64:76:7a:c9: e5:18:d9:79:ba:39:d4:8a:51:e5:78:2d:9b:24:fd:12:68:fe: ae:e8:7f:8c:19:ab:76:4f:71:df:35:b8:9e:a6:c4:6c:16:4a: 20:e4:e1:ba:8d:89:de:a2:c4:de:db:77:bb:bb:4b:10:94:33: 70:cd:d7:f6:c1:37:57:bf:b1:56:c7:0a:75:50:73:84:de:c6: 9a:33:71:03:be:dd:be:57:e1:2a:c5:1c:ca:6c:04:b7:6a:dd: fd:51:bf:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g1/4EYwOQ7cJpzkiEvRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yjg2NWQ1OWRhZTk2ZjdhOThjN2U3YmE4MTEzNmFjYjE0YmQ1ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4rNFsiROW2WgY7ntGZrcy15Wk4v zHsFUPl3ZkEsGW/ITfoYXXpaVN/Zq1D4d+4L7T1vbI8ci5jEblZqLxnHEwhISR1T +kkxuirN1CmYijVCJ+ODkGQsGp1/ETcLG55b5uK3sSOrMwk/QIyUgNJcHpFtDd92 m79WheI/BCXPDjyJk1UDjoW8lRUSXBFy6uQs+cDclg+ewK6OMrUzOpHKjNZAlAY3 Z8gBLVslxonI65ghrrFkxd5DJZvswfQxfLjLK1bcmNTFsibtLdlnlruU3S7975UH yhjw8VmEPkKAwPARwwUij7QtK9g3hDI+EaAsTY4GsG3jd4YGC1sKMfblFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEuGXVna6W96mMfnuoETassUvV11MB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvUzRaZFdkcnBiM3FZeC1lNmdSTnF5eFM5WFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuViHAwQB uawyMA0GCSqGSIb3DQEBCwUAA4IBAQBgqhxCUvPqJQ1y3R3WGHH1MJcHcq7JO4IE E0kxNvtAYFcloxGhxCm3fTrKuIzLYlEZcjDvC7dbstIR1sQpTOE6/3HXO2WH4ZJC A0kpta+Q/1W7WaOewxa9ZhjjwlrumYhiVlmq3QQ9z7I+6VMZOG2eJBMClXEzLSW0 Rd8G81Jaa//F2ptMAHrLBQThMrDrNWz7zdj46l4ulqtUIUhR02R2esnlGNl5ujnU ilHleC2bJP0SaP6u6H+MGat2T3HfNbiepsRsFkog5OG6jYneosTe23e7u0sQlDNw zdf2wTdXv7FWxwp1UHOE3saaM3EDvt2+V+EqxRzKbAS3at39Ub8D -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:36 2026 by rpki-client