This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/4zHqkXwTdPpErUuwool8-zX-SB4.roa File: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (raw, json) Hash identifier: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4= Subject key identifier: E3:31:EA:91:7C:13:74:FA:44:AD:4B:B0:A2:89:7C:FB:35:FE:48:1E Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2 Certificate serial: 019B7D5D0413A95719D72BF7BB91D066FBA6 Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/4zHqkXwTdPpErUuwool8-zX-SB4.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43853 IP address blocks: 185.254.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:04:13:a9:57:19:d7:2b:f7:bb:91:d0:66:fb:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e331ea917c1374fa44ad4bb0a2897cfb35fe481e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f2:78:72:d0:50:5d:92:5c:2c:d5:cc:06:6f: d8:1e:39:d2:fc:fd:f7:9d:14:97:8b:49:32:16:b7: 05:bf:13:56:66:3c:0d:7a:26:1f:69:49:0f:4c:60: cc:a3:5a:7d:7b:0c:64:b9:64:54:b2:43:74:af:d1: 36:03:43:1a:a0:54:c7:1a:89:b0:ff:8e:0b:61:fa: fe:d2:ae:3e:c0:18:f9:f8:60:9e:30:fa:d0:48:1d: ce:1e:0d:9f:13:51:ef:93:62:a4:23:b7:14:ec:31: a8:df:67:f7:53:19:b1:0f:9e:14:db:75:20:81:f8: 45:33:aa:93:2b:00:4e:dd:f5:8c:cd:1d:08:fd:2a: c9:58:2d:bf:1a:af:44:0a:d3:2f:f6:fe:58:c8:3c: f8:e6:c3:78:b0:0b:27:a8:e0:20:f8:ac:2c:95:78: fd:b7:49:2d:bf:aa:2e:ec:ff:09:40:3c:4c:ae:76: d4:fe:37:cc:74:83:b6:fb:a4:46:aa:c6:88:33:e1: e5:a1:b3:1d:b4:26:2f:ff:4e:23:80:14:7d:ce:38: 93:0f:51:4d:52:09:f8:ac:1b:af:3f:1f:cb:97:fd: 59:0c:a3:f4:eb:c0:db:76:73:3c:58:71:9b:24:11: 92:71:14:dc:4c:d8:96:26:a2:53:b3:d5:09:50:8e: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:EA:91:7C:13:74:FA:44:AD:4B:B0:A2:89:7C:FB:35:FE:48:1E X509v3 Authority Key Identifier: keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/4zHqkXwTdPpErUuwool8-zX-SB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.80.0/22 Signature Algorithm: sha256WithRSAEncryption 66:86:9e:80:eb:39:b8:d1:0f:ea:19:c5:c3:de:e8:91:4d:2d: 25:89:6c:14:cc:40:8b:e7:c3:45:d2:be:25:b1:6f:2f:56:72: 08:6e:27:e0:d8:d2:d4:8c:2e:8c:f0:a1:e3:00:83:1e:e0:37: 50:0c:2a:4e:4d:64:28:ad:d9:bb:34:70:f7:e0:81:5f:76:fa: 18:f0:e6:6e:b6:c0:ab:e9:62:33:ec:82:d0:01:bb:0e:6b:b7: 94:73:ba:d0:cd:1e:23:7d:94:73:6b:ed:50:98:63:4d:0f:43: 84:11:19:b6:9b:44:8a:95:56:d7:d5:a9:83:cf:75:13:6b:0b: 67:db:22:ab:c7:0d:45:4a:61:da:a3:05:bd:2c:55:dc:81:c7: 60:c9:24:ad:7c:f0:2d:72:b0:2c:93:2d:d9:62:b4:a6:d9:d6: ed:69:fe:1c:f9:b6:16:cd:a2:da:f3:ea:46:f4:c9:0d:02:60: 4e:e4:25:8d:5e:d7:43:4e:cf:ae:b3:08:27:6d:d9:b1:ce:bc: 1f:d1:3f:2c:7a:99:d5:bd:95:35:c1:5c:6a:83:f8:24:d0:5a: 5d:34:b0:9f:72:f0:00:73:2d:e9:f4:8f:e7:50:e5:7a:f2:be: 87:ab:14:c7:8a:24:1c:24:f4:8b:a0:4c:89:cc:0f:fd:04:36: 71:38:0e:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQQTqVcZ1yv3u5HQZvumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5 MWRiYTIwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzMxZWE5MTdjMTM3NGZhNDRhZDRiYjBhMjg5N2NmYjM1ZmU0ODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PJ4ctBQXZJcLNXMBm/YHjnS/P33 nRSXi0kyFrcFvxNWZjwNeiYfaUkPTGDMo1p9ewxkuWRUskN0r9E2A0MaoFTHGomw /44LYfr+0q4+wBj5+GCeMPrQSB3OHg2fE1Hvk2KkI7cU7DGo32f3UxmxD54U23Ug gfhFM6qTKwBO3fWMzR0I/SrJWC2/Gq9ECtMv9v5YyDz45sN4sAsnqOAg+KwslXj9 t0ktv6ou7P8JQDxMrnbU/jfMdIO2+6RGqsaIM+HlobMdtCYv/04jgBR9zjiTD1FN Ugn4rBuvPx/Ll/1ZDKP068DbdnM8WHGbJBGScRTcTNiWJqJTs9UJUI5ATQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMx6pF8E3T6RK1LsKKJfPs1/kgeMB8GA1UdIwQY MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt M2VhODE5NGZiNDQ2LzEvNHpIcWtYd1RkUHBFclV1d29vbDgtelgtU0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2 LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf5QMA0G CSqGSIb3DQEBCwUAA4IBAQBmhp6A6zm40Q/qGcXD3uiRTS0liWwUzECL58NF0r4l sW8vVnIIbifg2NLUjC6M8KHjAIMe4DdQDCpOTWQordm7NHD34IFfdvoY8OZutsCr 6WIz7ILQAbsOa7eUc7rQzR4jfZRza+1QmGNND0OEERm2m0SKlVbX1amDz3UTawtn 2yKrxw1FSmHaowW9LFXcgcdgySStfPAtcrAsky3ZYrSm2dbtaf4c+bYWzaLa8+pG 9MkNAmBO5CWNXtdDTs+uswgnbdmxzrwf0T8sepnVvZU1wVxqg/gk0FpdNLCfcvAA cy3p9I/nUOV68r6HqxTHiiQcJPSLoEyJzA/9BDZxOA7d -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:31 2026 by rpki-client