This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/4lysncKwxgSAj9n9yli9Am0CcOE.roa File: 4lysncKwxgSAj9n9yli9Am0CcOE.roa (raw, json) Hash identifier: jyfAwSL6x2o2QJ3Pd5vHV7+3sGhamJlWvutXDf8SBf4= Subject key identifier: E2:5C:AC:9D:C2:B0:C6:04:80:8F:D9:FD:CA:58:BD:02:6D:02:70:E1 Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023 Certificate serial: 019B7C122D2B33D953AD5E8E0F599845BF56 Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/4lysncKwxgSAj9n9yli9Am0CcOE.roa Signing time: Fri 02 Jan 2026 00:18:44 +0000 ROA not before: Fri 02 Jan 2026 00:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62040 IP address blocks: 185.49.240.0/24 maxlen: 24 185.49.241.0/24 maxlen: 24 185.49.242.0/24 maxlen: 24 185.49.243.0/24 maxlen: 24 193.176.80.0/24 maxlen: 24 193.176.83.0/24 maxlen: 24 2a04:bb80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2d:2b:33:d9:53:ad:5e:8e:0f:59:98:45:bf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023 Validity Not Before: Jan 2 00:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25cac9dc2b0c604808fd9fdca58bd026d0270e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:17:03:9a:52:bc:4d:bd:18:e7:8f:d4:83: 5f:33:2d:ac:7e:50:1f:db:9f:ba:e7:8b:80:c8:3a: f2:ce:0f:0e:44:7b:83:f1:09:fc:b9:cc:4a:8b:b2: 82:5d:2c:c3:d3:3a:4a:a2:fd:35:97:fe:95:7c:13: ce:7a:ff:44:40:7b:e2:ef:b3:c4:00:3f:ae:1a:d7: 88:28:8c:b9:17:4c:ed:1a:60:8a:d8:e4:5c:aa:b6: 36:ff:05:cf:89:81:77:69:f3:c0:4d:20:56:0a:6b: 76:db:ff:46:af:10:dc:eb:17:eb:d0:70:ad:9d:6f: 75:ec:2a:06:23:70:ad:44:1d:34:d7:dc:0b:89:21: 9c:2b:1e:cb:f7:eb:4e:2d:78:4f:29:24:14:9c:66: 6c:14:21:50:ca:6e:1e:22:8f:ff:27:fd:47:0e:0e: e1:11:95:e9:b2:0b:f4:83:20:b6:7c:1e:b6:09:f7: bb:ab:94:e8:30:a1:8f:22:08:67:68:f2:5e:7e:bb: f1:0c:bf:f5:5d:fe:67:7f:ec:b3:d6:fd:b6:77:5f: 71:3c:6c:71:26:20:6f:11:05:62:cd:8b:f5:11:f4: da:dc:68:b3:72:4d:23:b7:6e:b1:8d:0c:70:32:b4: 16:4c:0c:40:9f:48:0f:40:fb:e4:51:c7:35:64:43: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:AC:9D:C2:B0:C6:04:80:8F:D9:FD:CA:58:BD:02:6D:02:70:E1 X509v3 Authority Key Identifier: keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/4lysncKwxgSAj9n9yli9Am0CcOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.240.0/22 193.176.80.0/24 193.176.83.0/24 IPv6: 2a04:bb80::/29 Signature Algorithm: sha256WithRSAEncryption b7:32:65:f7:45:89:37:fb:c2:74:27:19:91:3b:a7:f8:51:78: 9f:0b:19:08:cb:3b:9d:8e:af:f4:c7:de:8c:77:14:11:58:79: 08:82:8f:66:33:21:a3:90:1b:e3:c3:ba:46:4f:97:12:8d:f5: f0:75:45:bd:1f:c1:74:0d:93:ea:4d:ea:ea:82:46:dd:8e:7c: 28:17:1b:b1:de:28:62:35:06:b7:24:2b:18:b7:03:82:61:2a: fd:9e:ac:e4:29:06:fc:74:4d:cb:2c:cd:8f:e7:1f:55:af:31: 08:ac:f5:f5:d4:20:0b:50:23:cb:5c:f4:7a:c0:f8:02:b1:4d: eb:ae:1c:19:17:23:59:19:bd:f7:d1:69:e4:cd:35:3f:39:6b: 23:2a:a4:06:cc:a3:98:2b:34:ae:7d:98:7b:78:69:47:36:dd: 4b:c5:a9:26:17:26:ae:87:80:0a:79:28:b7:a4:9d:11:f3:e4: 44:1f:4e:2e:a3:bd:47:e7:04:4e:db:3a:13:7d:0f:47:c4:ad: 21:c6:e4:e6:81:4a:3c:20:01:0e:63:60:5b:4c:ee:59:d2:4d: 38:13:d5:e5:f9:62:79:d1:eb:02:7a:65:65:bd:2f:60:24:b9: 9c:36:de:00:e5:ec:fe:8e:92:db:6f:d5:f2:cc:6e:61:2b:42: 94:2f:19:32 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8Ei0rM9lTrV6OD1mYRb9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy YzAwMjMwHhcNMjYwMTAyMDAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjVjYWM5ZGMyYjBjNjA0ODA4ZmQ5ZmRjYTU4YmQwMjZkMDI3MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6kXA5pSvE29GOeP1INfMy2sflAf 25+654uAyDryzg8ORHuD8Qn8ucxKi7KCXSzD0zpKov01l/6VfBPOev9EQHvi77PE AD+uGteIKIy5F0ztGmCK2ORcqrY2/wXPiYF3afPATSBWCmt22/9GrxDc6xfr0HCt nW917CoGI3CtRB0019wLiSGcKx7L9+tOLXhPKSQUnGZsFCFQym4eIo//J/1HDg7h EZXpsgv0gyC2fB62Cfe7q5ToMKGPIghnaPJefrvxDL/1Xf5nf+yz1v22d19xPGxx JiBvEQVizYv1EfTa3Gizck0jt26xjQxwMrQWTAxAn0gPQPvkUcc1ZENIhwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOJcrJ3CsMYEgI/Z/cpYvQJtAnDhMB8GA1UdIwQY MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et M2VlMWU2OTkxMjY5LzEvNGx5c25jS3d4Z1NBajluOXlsaTlBbTBDY09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5 LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuTHwAwQA wbBQAwQAwbBTMA0EAgACMAcDBQMqBLuAMA0GCSqGSIb3DQEBCwUAA4IBAQC3MmX3 RYk3+8J0JxmRO6f4UXifCxkIyzudjq/0x96MdxQRWHkIgo9mMyGjkBvjw7pGT5cS jfXwdUW9H8F0DZPqTerqgkbdjnwoFxux3ihiNQa3JCsYtwOCYSr9nqzkKQb8dE3L LM2P5x9VrzEIrPX11CALUCPLXPR6wPgCsU3rrhwZFyNZGb330WnkzTU/OWsjKqQG zKOYKzSufZh7eGlHNt1LxakmFyauh4AKeSi3pJ0R8+REH04uo71H5wRO2zoTfQ9H xK0hxuTmgUo8IAEOY2BbTO5Z0k04E9Xl+WJ50esCemVlvS9gJLmcNt4A5ez+jpLb b9XyzG5hK0KULxky -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:27 2026 by rpki-client