This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa File: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (raw, json) Hash identifier: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU= Subject key identifier: E3:2D:49:42:5D:10:2C:40:52:FC:13:5D:AC:B4:2E:48:2E:8B:85:1D Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5 Certificate serial: 019B7CEE58CCD371D958863045CA24B38A97 Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206898 IP address blocks: 185.172.110.0/23 maxlen: 24 185.172.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:58:cc:d3:71:d9:58:86:30:45:ca:24:b3:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e32d49425d102c4052fc135dacb42e482e8b851d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:cd:90:cb:2f:8c:8c:2a:56:d0:9e:19:2f: c5:f2:c7:ab:06:a0:f0:e8:6b:a3:8e:2e:48:80:92: 5c:1c:8c:77:ad:4f:63:6a:78:43:cd:ad:52:52:ca: 8d:05:86:98:38:d5:72:0b:26:31:74:a8:53:3c:a6: 6f:0b:1e:98:37:31:af:fa:47:8f:94:14:8a:49:61: c7:84:3a:c3:55:4b:15:11:99:38:54:19:24:5a:95: a8:e1:b8:d5:32:89:74:b7:b6:a9:f1:80:fe:3f:58: ed:c9:d2:48:e8:64:4e:83:15:e2:17:f7:1b:d6:76: 98:e5:e4:6c:f9:f5:ca:3e:b6:25:65:e9:16:a4:c5: ac:3f:4e:bf:73:c5:14:7b:77:a5:78:1b:9d:90:d9: 3a:5e:80:1c:a2:39:09:a2:60:50:bc:8c:45:a0:67: ba:96:6b:e7:a8:bb:61:33:1d:e8:95:fb:bf:d3:8d: cd:44:1d:7d:d2:ee:8c:6c:ee:b1:26:52:dd:c5:be: 8a:d5:b7:8f:0e:88:f6:f7:bb:19:01:39:c0:da:22: b2:56:3b:7f:4c:4f:d0:8d:21:3a:c3:21:5a:3a:17: 93:89:a2:ee:7f:79:4a:7b:63:42:e8:f1:89:a8:a6: 61:71:24:3c:9c:2f:99:e7:80:e4:e4:f3:1d:86:f6: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:49:42:5D:10:2C:40:52:FC:13:5D:AC:B4:2E:48:2E:8B:85:1D X509v3 Authority Key Identifier: keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.110.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:61:eb:5b:ef:87:a0:e9:61:ac:81:fa:28:fd:e2:0d:1f:33: 19:10:01:2c:ea:48:2f:bf:2d:af:0a:12:2a:33:83:a9:1c:3a: 70:30:9e:91:d2:30:41:77:85:91:ea:91:48:ea:84:70:cf:5a: 91:c5:15:12:3c:e2:5a:49:c3:71:3c:00:98:ef:77:1b:51:b9: 77:8c:48:f8:0f:73:04:3c:67:79:b1:6f:9a:d6:b9:81:3e:fb: a4:54:07:da:28:1f:75:be:7d:af:25:bb:4a:00:16:98:b0:5f: 2b:d3:27:ce:5d:ad:26:95:ad:c9:f6:7d:3d:7a:c7:1c:2f:88: 67:e1:ee:b0:3c:cb:54:34:4f:cc:90:2a:4e:49:64:97:71:00: 56:80:6d:c4:0d:e9:b0:00:eb:45:57:7b:c9:34:03:f4:ad:71: 18:4e:3e:f6:50:11:af:b5:01:e4:b8:dd:e1:3e:80:60:c0:a7: 47:4f:17:98:02:83:ac:3c:24:9b:c7:27:fc:e0:4a:10:5c:b3: 3b:ca:9c:fd:e9:e9:11:dc:37:cb:61:0f:c1:f7:c2:3c:51:db: 5b:6a:35:0a:ec:e4:e3:0f:f0:da:a3:bd:8d:02:a5:14:0f:3e: 58:bb:d5:e9:2d:4e:90:f4:61:24:fb:25:46:e5:db:f5:34:09: 58:ec:ab:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ljM03HZWIYwRcoks4qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjRmZTczNDE5YmM4NmQ1ZjJlNzJiNDE0YjZiNGQ0Mzc5 ZDViZjUwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzJkNDk0MjVkMTAyYzQwNTJmYzEzNWRhY2I0MmU0ODJlOGI4NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o7NkMsvjIwqVtCeGS/F8serBqDw 6Gujji5IgJJcHIx3rU9janhDza1SUsqNBYaYONVyCyYxdKhTPKZvCx6YNzGv+keP lBSKSWHHhDrDVUsVEZk4VBkkWpWo4bjVMol0t7ap8YD+P1jtydJI6GROgxXiF/cb 1naY5eRs+fXKPrYlZekWpMWsP06/c8UUe3eleBudkNk6XoAcojkJomBQvIxFoGe6 lmvnqLthMx3olfu/043NRB190u6MbO6xJlLdxb6K1bePDoj297sZATnA2iKyVjt/ TE/QjSE6wyFaOheTiaLuf3lKe2NC6PGJqKZhcSQ8nC+Z54Dk5PMdhvZLwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMtSUJdECxAUvwTXay0Lkgui4UdMB8GA1UdIwQY MBaAFENk/nNBm8htXy5ytBS2tNQ3nVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQt NjcwMzA4ZDFlYzlkLzEvNHkxSlFsMFFMRUJTX0JOZHJMUXVTQzZMaFIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wYjE4MTUtNTNkNy00NTZkLTlmYjQtNjcwMzA4ZDFlYzlk LzEvUTJULWMwR2J5RzFmTG5LMEZMYTAxRGVkV19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaxuMA0G CSqGSIb3DQEBCwUAA4IBAQAcYetb74eg6WGsgfoo/eINHzMZEAEs6kgvvy2vChIq M4OpHDpwMJ6R0jBBd4WR6pFI6oRwz1qRxRUSPOJaScNxPACY73cbUbl3jEj4D3ME PGd5sW+a1rmBPvukVAfaKB91vn2vJbtKABaYsF8r0yfOXa0mla3J9n09esccL4hn 4e6wPMtUNE/MkCpOSWSXcQBWgG3EDemwAOtFV3vJNAP0rXEYTj72UBGvtQHkuN3h PoBgwKdHTxeYAoOsPCSbxyf84EoQXLM7ypz96ekR3DfLYQ/B98I8UdtbajUK7OTj D/Dao72NAqUUDz5Yu9XpLU6Q9GEk+yVG5dv1NAlY7KuH -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:54 2026 by rpki-client