This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa File: 4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa (raw, json) Hash identifier: v4oKtc8cLQM/OZEKI6njCV3tcg79uTMtDOJd0UU6hQA= Subject key identifier: E2:44:0E:A1:77:62:AF:81:4F:BD:9F:5B:08:BA:AB:B2:02:79:E8:8A Certificate issuer: /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c Certificate serial: 019B77590F26BABEF6D4547869B0E6AC351C Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206389 IP address blocks: 185.241.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0f:26:ba:be:f6:d4:54:78:69:b0:e6:ac:35:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2440ea17762af814fbd9f5b08baabb20279e88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:36:8f:88:ba:dd:52:91:85:31:21:37:57: fd:9f:dd:0c:1c:89:60:a7:44:51:cc:76:81:2f:84: ed:cb:c1:c2:cb:7d:0f:6d:bd:30:25:f6:e3:e0:10: 77:88:62:85:a8:5e:48:f4:92:c9:ae:fa:f2:39:8c: c9:f5:9c:41:e0:f0:a3:d4:7b:28:60:f6:cc:5e:9d: 49:69:06:70:90:48:b7:ca:f8:c7:69:44:ae:26:26: 7e:14:8b:3d:c1:e0:c1:cd:d9:b8:b3:d0:cc:04:bd: 64:92:05:53:e1:c9:dc:fd:12:cc:0c:68:d5:88:ec: 82:5a:61:2f:6e:f2:eb:c0:d9:22:b4:83:35:fb:28: f9:b1:ff:ec:52:76:fa:83:20:dc:5f:35:04:96:7e: 64:4a:e5:7a:e5:d5:e8:d3:53:69:f9:e9:14:7c:e1: ff:22:4e:8b:6e:b3:e1:d3:09:8f:dd:af:66:91:2c: 31:09:75:ad:f4:ec:d3:84:cc:a5:68:ea:c3:e8:ac: ed:98:df:88:11:ae:86:b6:9c:88:0c:a1:61:c9:05: da:f5:2e:f8:ed:7c:87:38:07:90:a1:0f:68:c2:f3: be:00:3e:13:4d:eb:95:51:78:de:50:b2:ed:bc:b6: 25:4d:56:4c:07:37:2e:d0:23:db:f9:cf:a2:8f:8b: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:44:0E:A1:77:62:AF:81:4F:BD:9F:5B:08:BA:AB:B2:02:79:E8:8A X509v3 Authority Key Identifier: keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/4kQOoXdir4FPvZ9bCLqrsgJ56Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.108.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:15:31:5e:52:b1:34:de:4b:a8:f0:a6:68:35:ee:68:eb:15: d6:58:8e:62:26:8a:69:a6:fa:54:04:b7:5e:21:ad:05:fe:6e: 13:e0:2d:e6:b9:12:b9:93:8f:12:05:f8:58:41:35:b4:62:b6: 54:e0:13:d3:65:00:97:d0:05:14:9c:f2:be:d4:03:a5:0e:22: 6b:cd:0e:93:e0:7c:a2:64:29:24:ec:6c:3d:a1:1d:51:1a:03: 4f:4f:f7:9e:55:40:6a:0d:f5:e9:94:e2:d9:7e:9c:e8:53:70: a6:c0:fe:d2:d7:db:2f:be:91:fb:95:87:24:8e:cc:e8:0d:d9: d8:f3:58:98:6f:ec:4b:91:12:f7:83:f3:9f:7d:fc:62:58:13: 25:5f:ee:14:61:ca:71:c4:6f:29:fd:1e:b9:ef:d9:f0:4a:73: 56:fc:96:25:24:66:1e:7e:f0:07:9c:c5:43:83:93:af:e8:41: 5a:e7:fb:6f:03:4b:1c:a3:e5:0f:39:b0:0b:8a:c6:db:7f:fb: 3a:89:db:bd:1f:dd:56:9a:be:b2:cc:e8:df:7f:93:15:96:e3: bd:9d:b1:a3:4d:0b:e6:a7:62:ef:47:57:79:09:02:88:57:51: dd:9f:47:9a:e2:e5:7b:cf:f4:92:96:ca:6a:d2:2f:5f:ef:c8: 86:44:55:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQ8mur721FR4abDmrDUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNzdiNWZlY2FiNzNlM2U0ZGQxODZhOWFkYTA2NWZhZThh OGRlMWMwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQ0MGVhMTc3NjJhZjgxNGZiZDlmNWIwOGJhYWJiMjAyNzllODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ42j4i63VKRhTEhN1f9n90MHIlg p0RRzHaBL4Tty8HCy30Pbb0wJfbj4BB3iGKFqF5I9JLJrvryOYzJ9ZxB4PCj1Hso YPbMXp1JaQZwkEi3yvjHaUSuJiZ+FIs9weDBzdm4s9DMBL1kkgVT4cnc/RLMDGjV iOyCWmEvbvLrwNkitIM1+yj5sf/sUnb6gyDcXzUEln5kSuV65dXo01Np+ekUfOH/ Ik6LbrPh0wmP3a9mkSwxCXWt9OzThMylaOrD6KztmN+IEa6GtpyIDKFhyQXa9S74 7XyHOAeQoQ9owvO+AD4TTeuVUXjeULLtvLYlTVZMBzcu0CPb+c+ij4tY0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJEDqF3Yq+BT72fWwi6q7ICeeiKMB8GA1UdIwQY MBaAFAJ3tf7Ktz4+TdGGqa2gZfroqN4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW5lMV9zcTNQajVOMFlhcHJhQmwtdWlvM2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82MWZhM2EtMmE4Zi00MzUwLWE2Zjct NTE3ODUwMWU4NzM1LzEvNGtRT29YZGlyNEZQdlo5YkNMcXJzZ0o1NklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82MWZhM2EtMmE4Zi00MzUwLWE2ZjctNTE3ODUwMWU4NzM1 LzEvQW5lMV9zcTNQajVOMFlhcHJhQmwtdWlvM2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufFsMA0G CSqGSIb3DQEBCwUAA4IBAQBKFTFeUrE03kuo8KZoNe5o6xXWWI5iJopppvpUBLde Ia0F/m4T4C3muRK5k48SBfhYQTW0YrZU4BPTZQCX0AUUnPK+1AOlDiJrzQ6T4Hyi ZCkk7Gw9oR1RGgNPT/eeVUBqDfXplOLZfpzoU3CmwP7S19svvpH7lYckjszoDdnY 81iYb+xLkRL3g/OfffxiWBMlX+4UYcpxxG8p/R6579nwSnNW/JYlJGYefvAHnMVD g5Ov6EFa5/tvA0sco+UPObALisbbf/s6idu9H91Wmr6yzOjff5MVluO9nbGjTQvm p2LvR1d5CQKIV1Hdn0ea4uV7z/SSlspq0i9f78iGRFVg -----END CERTIFICATE-----Generated at Fri Jan 2 01:51:00 2026 by rpki-client