This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/R4SqufV61FjY_qt6XBJL1xKD3Yk.roa File: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (raw, json) Hash identifier: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo= Subject key identifier: 47:84:AA:B9:F5:7A:D4:58:D8:FE:AB:7A:5C:12:4B:D7:12:83:DD:89 Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019B7E386E168341EF7D930FF786B7747A92 Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/R4SqufV61FjY_qt6XBJL1xKD3Yk.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47987 IP address blocks: 185.141.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6e:16:83:41:ef:7d:93:0f:f7:86:b7:74:7a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4784aab9f57ad458d8feab7a5c124bd71283dd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:b2:29:e5:3c:91:79:85:b2:d9:81:5d:8a: bd:6c:1b:a9:f6:9a:94:4f:b2:d7:24:6a:42:45:1b: 61:2e:43:55:2c:5c:e0:ed:51:f0:19:80:e0:08:1a: 2d:9a:3f:e9:28:6e:56:d7:91:c0:ac:da:1b:cd:3d: 1c:c1:d6:7f:98:20:8b:3b:0a:a8:aa:88:58:47:80: 9a:d8:bc:a7:b0:35:da:69:4b:0e:4f:8e:cc:c2:0c: 29:b5:b9:f9:38:b6:a0:7d:7c:22:6d:37:4d:47:e6: 34:1c:8a:dc:98:ba:2d:37:95:48:8e:e5:a5:c1:ca: 4f:d8:2e:ee:ec:26:67:d6:79:cb:7e:39:2b:13:7d: 16:7c:49:18:ab:b3:fc:09:e3:31:e8:ff:9f:6f:6c: 47:19:f9:48:7c:4d:fd:8d:3b:af:e1:8e:87:65:f1: 2c:28:3f:71:d7:01:1b:6c:27:6e:57:32:4b:60:5f: ba:b5:cc:be:3c:b2:54:19:e3:8c:de:8a:55:21:43: 27:9f:b1:90:e5:ce:f2:19:01:b3:df:cb:54:fe:95: 59:38:d5:d4:2d:0c:ec:07:e9:0e:28:9e:1f:7d:85: cf:4c:c8:b6:62:59:90:02:bc:92:35:ea:81:5d:56: 32:10:47:f1:35:bd:09:2a:be:51:d4:c2:6f:37:b2: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:84:AA:B9:F5:7A:D4:58:D8:FE:AB:7A:5C:12:4B:D7:12:83:DD:89 X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/R4SqufV61FjY_qt6XBJL1xKD3Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.252.0/24 Signature Algorithm: sha256WithRSAEncryption 91:02:a5:8a:0e:23:68:87:de:09:24:3b:66:4f:07:41:cf:27: 45:87:0d:4e:25:72:03:b9:a7:bb:60:cb:e1:68:e1:c9:08:4d: ac:2e:51:bb:31:bf:3e:20:8c:20:96:86:2b:8c:76:ae:71:08: da:d3:09:a1:9f:09:3a:ee:f5:a1:4a:58:ff:ac:95:a3:ff:94: d2:39:c9:ef:6d:1a:3d:a2:39:d9:77:46:6c:11:db:91:c2:88: 54:07:36:d0:49:c7:91:d4:91:53:c8:c8:6b:1c:a6:7a:4d:de: 9a:ea:8b:f7:8f:77:18:9f:33:84:00:df:f1:1e:6f:1c:d7:fe: bd:aa:73:2b:70:99:74:ea:4a:11:18:77:52:98:e3:e8:62:1b: 4c:e7:5b:db:47:e6:6d:d0:90:3c:16:09:df:7d:de:79:81:93: d2:4d:27:7e:8b:41:b1:a2:14:49:c1:f8:72:92:99:65:08:ff: ac:d2:4f:fd:0e:30:dc:81:f5:59:3d:9b:8d:a4:f2:79:79:27: 77:75:18:8b:6e:f1:ba:7b:b7:68:42:7c:f7:10:c8:a5:47:df: 91:e0:28:56:3a:6d:62:8a:98:00:8a:5f:e5:f8:77:0a:d2:02: 9b:41:1a:ad:8a:45:23:18:01:48:17:8d:54:80:b2:aa:5b:18: 0c:59:e0:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OG4Wg0HvfZMP94a3dHqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzg0YWFiOWY1N2FkNDU4ZDhmZWFiN2E1YzEyNGJkNzEyODNkZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNSyKeU8kXmFstmBXYq9bBup9pqU T7LXJGpCRRthLkNVLFzg7VHwGYDgCBotmj/pKG5W15HArNobzT0cwdZ/mCCLOwqo qohYR4Ca2LynsDXaaUsOT47Mwgwptbn5OLagfXwibTdNR+Y0HIrcmLotN5VIjuWl wcpP2C7u7CZn1nnLfjkrE30WfEkYq7P8CeMx6P+fb2xHGflIfE39jTuv4Y6HZfEs KD9x1wEbbCduVzJLYF+6tcy+PLJUGeOM3opVIUMnn7GQ5c7yGQGz38tU/pVZONXU LQzsB+kOKJ4ffYXPTMi2YlmQArySNeqBXVYyEEfxNb0JKr5R1MJvN7JYzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEeEqrn1etRY2P6relwSS9cSg92JMB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvUjRTcXVmVjYxRmpZX3F0NlhCSkwxeEtEM1lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY38MA0G CSqGSIb3DQEBCwUAA4IBAQCRAqWKDiNoh94JJDtmTwdBzydFhw1OJXIDuae7YMvh aOHJCE2sLlG7Mb8+IIwgloYrjHaucQja0wmhnwk67vWhSlj/rJWj/5TSOcnvbRo9 ojnZd0ZsEduRwohUBzbQSceR1JFTyMhrHKZ6Td6a6ov3j3cYnzOEAN/xHm8c1/69 qnMrcJl06koRGHdSmOPoYhtM51vbR+Zt0JA8Fgnffd55gZPSTSd+i0GxohRJwfhy kpllCP+s0k/9DjDcgfVZPZuNpPJ5eSd3dRiLbvG6e7doQnz3EMilR9+R4ChWOm1i ipgAil/l+HcK0gKbQRqtikUjGAFIF41UgLKqWxgMWeBf -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:55 2026 by rpki-client