This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa File: 4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa (raw, json) Hash identifier: foM+Gdb6JStZoN1QON4h/dJiKuqvrGQX7DM2q+rUSl0= Subject key identifier: E1:CA:2C:9C:BC:39:16:6F:B9:B9:ED:D8:8C:7E:4F:83:18:F8:49:99 Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Certificate serial: 019B7A5B1B09B0611139DCCECF6612F2C316 Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49158 IP address blocks: 37.60.64.0/18 maxlen: 18 37.60.64.0/19 maxlen: 19 37.60.96.0/19 maxlen: 19 2a00:5bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1b:09:b0:61:11:39:dc:ce:cf:66:12:f2:c3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ca2c9cbc39166fb9b9edd88c7e4f8318f84999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:7b:5e:be:46:6f:75:1e:8f:0a:6f:b0:7f: fe:4d:01:5a:21:11:09:2e:84:d0:76:f9:76:da:2c: b9:3b:61:4e:bd:ec:94:91:03:e6:a0:a5:04:65:1e: 5c:fa:8f:b5:cf:ce:c5:eb:41:b8:f6:48:88:8a:16: 6e:3a:94:12:a7:ee:b6:c1:0c:44:b3:0b:ba:a1:11: a1:e9:92:a0:d2:0f:70:c5:e5:f8:20:5c:3b:07:26: f0:b1:4e:d8:92:5d:e0:10:73:36:11:22:5f:9d:ef: 4c:d9:72:6b:23:a8:23:7a:53:39:cc:b9:d1:21:f3: c6:d7:e7:ae:e9:a8:78:88:3e:d1:5c:fa:b9:06:5b: 72:cb:98:6a:b4:f0:5e:8b:c3:0a:1f:49:2e:dc:db: cc:94:42:61:d1:20:71:d9:d5:ee:3a:dc:14:7a:7f: 63:08:1e:89:2a:82:ac:15:4c:8c:6a:49:3a:23:fe: da:0d:59:1e:34:c7:11:b5:c7:62:85:f6:e2:c1:20: 52:c7:6b:a3:31:f6:d1:54:7b:d6:b1:b5:ab:4b:c1: 68:00:87:b5:18:b8:6e:94:09:10:db:93:45:40:e6: 8d:e0:d8:48:b6:db:54:bb:25:1e:77:18:11:cf:99: 3a:aa:82:33:af:bd:d2:06:0d:16:37:78:9e:b8:51: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CA:2C:9C:BC:39:16:6F:B9:B9:ED:D8:8C:7E:4F:83:18:F8:49:99 X509v3 Authority Key Identifier: keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.64.0/18 IPv6: 2a00:5bc0::/32 Signature Algorithm: sha256WithRSAEncryption 63:96:40:18:62:24:cf:5a:2f:49:17:7e:90:fa:eb:ea:f2:8b: ed:ec:13:f2:a8:cd:04:5e:a8:37:b9:4b:e6:4c:f6:10:12:72: c9:35:0f:e8:67:89:87:82:77:cc:ba:8d:e5:7b:c7:44:3f:ae: f7:cb:38:fd:f2:15:04:ea:bf:02:53:09:44:ad:b0:6d:4c:11: 5d:4b:af:a1:a4:9e:71:85:25:a5:0e:d4:18:18:c1:79:ea:15: f3:44:8d:05:3c:f0:f4:77:08:6e:90:27:6b:15:9d:b4:f2:f2: 6a:7b:7c:a4:25:92:e3:f1:df:21:78:42:ed:79:1f:65:3f:2f: 53:05:4b:22:0e:1d:2a:34:60:d4:78:06:4b:f5:75:d5:dc:b0: 9d:ad:14:16:78:3c:fc:e6:71:59:84:19:d0:24:45:bc:f8:d4: 0c:5e:23:ed:4e:75:2a:3d:8b:be:69:db:46:75:2f:a2:2a:36: 83:cd:3a:3f:57:d2:3c:9f:74:d1:c6:f7:09:e4:23:c8:fc:c7: e7:a5:cc:dd:6e:59:b6:0b:11:98:4c:cf:36:a1:99:fa:d5:c6: 9b:ed:d1:3f:ca:3d:55:c1:38:9b:9d:51:c1:66:a9:f2:f0:c0: 88:6b:a9:06:5c:86:0d:63:dd:3e:60:eb:89:12:53:dc:0f:ce: f2:7d:84:96 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WxsJsGEROdzOz2YS8sMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi ZTAzZDUwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNhMmM5Y2JjMzkxNjZmYjliOWVkZDg4YzdlNGY4MzE4Zjg0OTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreF7Xr5Gb3UejwpvsH/+TQFaIREJ LoTQdvl22iy5O2FOveyUkQPmoKUEZR5c+o+1z87F60G49kiIihZuOpQSp+62wQxE swu6oRGh6ZKg0g9wxeX4IFw7BybwsU7Ykl3gEHM2ESJfne9M2XJrI6gjelM5zLnR IfPG1+eu6ah4iD7RXPq5Bltyy5hqtPBei8MKH0ku3NvMlEJh0SBx2dXuOtwUen9j CB6JKoKsFUyMakk6I/7aDVkeNMcRtcdihfbiwSBSx2ujMfbRVHvWsbWrS8FoAIe1 GLhulAkQ25NFQOaN4NhItttUuyUedxgRz5k6qoIzr73SBg0WN3ieuFEoXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOHKLJy8ORZvubnt2Ix+T4MY+EmZMB8GA1UdIwQY MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt ZmI5MDgxYTE2MTM5LzEvNGNvc25MdzVGbS01dWUzWWpINVBneGo0U1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5 LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGJTxAMA0E AgACMAcDBQAqAFvAMA0GCSqGSIb3DQEBCwUAA4IBAQBjlkAYYiTPWi9JF36Q+uvq 8ovt7BPyqM0EXqg3uUvmTPYQEnLJNQ/oZ4mHgnfMuo3le8dEP673yzj98hUE6r8C UwlErbBtTBFdS6+hpJ5xhSWlDtQYGMF56hXzRI0FPPD0dwhukCdrFZ208vJqe3yk JZLj8d8heELteR9lPy9TBUsiDh0qNGDUeAZL9XXV3LCdrRQWeDz85nFZhBnQJEW8 +NQMXiPtTnUqPYu+adtGdS+iKjaDzTo/V9I8n3TRxvcJ5CPI/Mfnpczdblm2CxGY TM82oZn61cab7dE/yj1VwTibnVHBZqny8MCIa6kGXIYNY90+YOuJElPcD87yfYSW -----END CERTIFICATE-----Generated at Wed Jan 7 10:44:14 2026 by rpki-client