This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4_d9xH_49s46xtWZxBiEg56nI7k.roa File: 4_d9xH_49s46xtWZxBiEg56nI7k.roa (raw, json) Hash identifier: wkyzxBTQM77PfSWKHPOSBIrwxjey4hWilM7OtsKAFsw= Subject key identifier: E3:F7:7D:C4:7F:F8:F6:CE:3A:C6:D5:99:C4:18:84:83:9E:A7:23:B9 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C806BCEED23B5F79CDCC47B5173CA18 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4_d9xH_49s46xtWZxBiEg56nI7k.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204957 IP address blocks: 185.39.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6b:ce:ed:23:b5:f7:9c:dc:c4:7b:51:73:ca:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3f77dc47ff8f6ce3ac6d599c41884839ea723b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:c4:2f:e0:4e:9a:40:eb:73:cc:b8:e9:ff: 5c:49:b3:13:82:bc:2a:c9:0b:5f:20:1c:fe:c8:63: 06:4a:ea:df:8c:b5:d5:26:c0:e0:23:02:c6:bc:91: 75:07:20:1e:7e:a4:d7:a6:fa:f2:77:da:4b:1a:ca: 35:62:7c:56:5c:df:1a:c7:2c:a4:ac:5e:e0:41:46: 8a:c5:4a:26:33:be:84:fe:46:c9:6a:34:3d:d2:4c: 8e:39:2c:f8:be:01:28:56:39:47:83:67:d4:46:05: b6:93:85:8c:14:ce:4b:a2:df:cf:5e:fb:68:17:40: 56:3a:9c:20:71:a2:7b:72:c1:1f:0d:f5:15:87:d9: 43:ff:fd:6a:5e:03:d5:8c:de:91:ec:df:c5:17:8d: 21:37:d8:8f:22:7e:bc:e1:62:3e:2f:7d:3a:23:47: a4:c9:cb:5d:67:ca:3b:ff:42:13:ed:06:44:89:81: 8d:2c:42:bd:33:d9:a1:ed:3e:aa:e6:b7:19:0a:df: 1b:0c:f4:35:16:a3:a5:20:e8:99:12:4e:43:58:64: 11:9d:d5:a2:3c:dc:f2:15:2d:4c:e5:f7:65:61:ca: d2:c4:6d:46:24:eb:5d:00:ce:89:85:11:d8:47:99: c4:f9:1d:46:44:f4:d8:86:40:6f:23:fe:d2:79:6e: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F7:7D:C4:7F:F8:F6:CE:3A:C6:D5:99:C4:18:84:83:9E:A7:23:B9 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4_d9xH_49s46xtWZxBiEg56nI7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.17.0/24 Signature Algorithm: sha256WithRSAEncryption 64:72:ee:f7:13:d5:1e:8c:32:02:2b:90:9a:53:bb:17:7e:56: c2:a0:26:94:f5:32:cd:0a:d3:55:4b:9d:29:77:07:19:61:ce: 4c:c6:ae:cb:07:bb:ce:9a:33:30:ba:2f:3e:8a:0f:3e:77:08: 5b:bd:7a:dc:fb:ea:42:86:ae:4c:38:91:a2:be:97:c4:30:67: 94:4a:d7:4f:86:93:27:6e:59:3d:91:01:50:17:df:78:bd:a1: 54:5e:e9:5b:bf:ea:7b:77:a8:9b:c5:25:c6:58:79:22:36:d0: a3:88:41:cb:83:13:5f:0c:22:d2:07:38:45:40:95:c1:28:f6: 6b:ee:72:1d:a4:a7:26:23:78:18:63:d1:e7:29:79:62:45:18: 25:8a:47:80:ff:4e:95:5b:5c:36:20:aa:da:6a:c7:2c:a6:ca: e5:4a:84:b3:e1:17:29:6d:08:d4:03:dc:8c:48:cf:53:72:cf: b8:27:9e:17:55:04:ca:fe:ed:cd:ce:d8:cf:0f:fb:2d:e6:3c: e0:a3:f6:e9:e2:78:5c:3c:c7:49:b0:28:92:f0:28:97:4c:a8: 1a:aa:0f:81:6b:10:57:01:b0:81:40:e3:5e:21:a1:4d:05:e3: 7d:79:34:cc:66:3f:42:7a:fe:4d:79:1b:1f:d0:de:7c:a7:1e: 31:df:02:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGvO7SO195zcxHtRc8oYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Y3N2RjNDdmZjhmNmNlM2FjNmQ1OTljNDE4ODQ4MzllYTcyM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9fEL+BOmkDrc8y46f9cSbMTgrwq yQtfIBz+yGMGSurfjLXVJsDgIwLGvJF1ByAefqTXpvryd9pLGso1YnxWXN8axyyk rF7gQUaKxUomM76E/kbJajQ90kyOOSz4vgEoVjlHg2fURgW2k4WMFM5Lot/PXvto F0BWOpwgcaJ7csEfDfUVh9lD//1qXgPVjN6R7N/FF40hN9iPIn684WI+L306I0ek yctdZ8o7/0IT7QZEiYGNLEK9M9mh7T6q5rcZCt8bDPQ1FqOlIOiZEk5DWGQRndWi PNzyFS1M5fdlYcrSxG1GJOtdAM6JhRHYR5nE+R1GRPTYhkBvI/7SeW5vuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOP3fcR/+PbOOsbVmcQYhIOepyO5MB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvNF9kOXhIXzQ5czQ2eHRXWnhCaUVnNTZuSTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScRMA0G CSqGSIb3DQEBCwUAA4IBAQBkcu73E9UejDICK5CaU7sXflbCoCaU9TLNCtNVS50p dwcZYc5Mxq7LB7vOmjMwui8+ig8+dwhbvXrc++pChq5MOJGivpfEMGeUStdPhpMn blk9kQFQF994vaFUXulbv+p7d6ibxSXGWHkiNtCjiEHLgxNfDCLSBzhFQJXBKPZr 7nIdpKcmI3gYY9HnKXliRRglikeA/06VW1w2IKraascspsrlSoSz4RcpbQjUA9yM SM9Tcs+4J54XVQTK/u3NztjPD/st5jzgo/bp4nhcPMdJsCiS8CiXTKgaqg+BaxBX AbCBQONeIaFNBeN9eTTMZj9Cev5NeRsf0N58px4x3wIR -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:39 2026 by rpki-client