This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/4OYbNL-hbvkp-ncEbWNG8c0JErI.roa File: 4OYbNL-hbvkp-ncEbWNG8c0JErI.roa (raw, json) Hash identifier: MttWm4YSSYh7OP8Mo8kU6GzVxPtqpuZkVpPXgfc42JQ= Subject key identifier: E0:E6:1B:34:BF:A1:6E:F9:29:FA:77:04:6D:63:46:F1:CD:09:12:B2 Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Certificate serial: 019B4B8CFD3A46A7BB282E082D274D9E2F61 Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/4OYbNL-hbvkp-ncEbWNG8c0JErI.roa Signing time: Tue 23 Dec 2025 14:11:29 +0000 ROA not before: Tue 23 Dec 2025 14:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49432 IP address blocks: 185.210.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:8c:fd:3a:46:a7:bb:28:2e:08:2d:27:4d:9e:2f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae Validity Not Before: Dec 23 14:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0e61b34bfa16ef929fa77046d6346f1cd0912b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:ff:f3:95:61:1a:16:ca:fa:6e:05:5c:2f: d6:0c:f0:4d:01:36:3b:c6:e0:a4:f8:e9:72:a1:53: 6c:3e:7c:1c:94:c7:d9:28:7a:67:0f:ac:43:4b:f4: d5:eb:13:1f:d7:59:7b:21:9d:29:2b:36:70:bd:87: 55:e1:7e:c7:d0:26:fe:80:42:be:c7:d5:c1:18:6b: 37:d9:9b:e6:51:4d:d5:c3:0a:98:a1:d5:a8:ed:94: 75:c4:be:3b:bb:2b:3d:b2:24:ea:a2:d1:71:c2:13: 9b:f3:ff:46:c3:94:df:4d:4f:42:d9:a1:55:51:73: 9b:3f:3c:c4:f3:45:b2:33:c7:7c:c3:30:58:85:b1: ac:60:30:23:8c:d7:da:37:93:0c:92:71:d6:15:b1: 71:82:25:7e:66:19:4e:07:19:c3:00:19:ce:55:37: 71:e5:bb:a0:ba:34:a6:c8:ae:69:8c:e3:b7:67:06: a0:8d:f4:63:66:dc:a6:19:ff:ee:04:0a:ec:31:16: a1:56:b6:e5:28:16:b2:94:a7:9f:97:44:fa:e7:92: a7:92:77:ae:9d:47:14:ed:06:4d:b0:ef:c7:11:2a: 38:bf:d1:62:cd:fc:1a:4a:81:69:55:5a:96:ae:8f: c2:d2:7d:5c:72:96:c4:32:5d:f3:1c:1b:0a:e8:7a: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E6:1B:34:BF:A1:6E:F9:29:FA:77:04:6D:63:46:F1:CD:09:12:B2 X509v3 Authority Key Identifier: keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/4OYbNL-hbvkp-ncEbWNG8c0JErI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.224.0/24 Signature Algorithm: sha256WithRSAEncryption 76:b2:0b:7f:96:fb:51:1c:59:c0:3d:e7:3e:2d:37:8a:c1:44: 03:7d:71:98:7e:16:14:7c:0e:d0:87:f7:c5:59:ed:e6:1a:a9: a2:0e:92:3c:12:14:f4:4c:25:16:dc:c4:4a:82:09:4c:7b:09: 9f:93:64:74:a8:62:6f:03:be:ba:c4:30:3b:b9:3f:16:7d:ce: 6e:e2:4e:90:6c:2b:63:3f:bd:5f:26:64:18:25:be:fe:a6:d2: 2b:9f:9e:72:c9:d5:33:90:d7:8c:86:3c:7d:4c:a2:f4:a7:05: c6:b0:77:13:bd:0d:b5:63:7d:9c:99:88:d6:9b:61:74:ba:54: 85:2e:6c:cd:87:b2:bf:5d:c5:3d:b4:24:74:c1:17:d1:03:5c: 48:e9:b2:9e:14:94:cf:72:3f:3f:3d:88:29:ff:6c:ab:cd:14: 41:5d:41:83:6c:e9:cc:28:ea:9b:db:bb:fa:f4:a6:b2:f6:17: 97:48:9a:84:53:4c:13:b1:f4:de:12:96:ea:89:3f:b0:25:b7: 8a:45:f3:de:02:71:3c:5f:05:bc:87:5c:4e:14:46:7a:0c:83: a8:5c:d2:7f:fc:70:ef:bf:36:05:f7:1e:75:4a:bf:af:27:47: 81:a5:de:8e:2f:d8:02:51:6f:33:92:cf:20:5c:86:50:80:ca: 2f:b0:f7:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtLjP06Rqe7KC4ILSdNni9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQxZWRjMGNjNjk3NzQyY2Y0NzM2NGJiMWQxMWI4ZmY4 MDhlYWUwHhcNMjUxMjIzMTQxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGU2MWIzNGJmYTE2ZWY5MjlmYTc3MDQ2ZDYzNDZmMWNkMDkxMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gP/85VhGhbK+m4FXC/WDPBNATY7 xuCk+OlyoVNsPnwclMfZKHpnD6xDS/TV6xMf11l7IZ0pKzZwvYdV4X7H0Cb+gEK+ x9XBGGs32ZvmUU3VwwqYodWo7ZR1xL47uys9siTqotFxwhOb8/9Gw5TfTU9C2aFV UXObPzzE80WyM8d8wzBYhbGsYDAjjNfaN5MMknHWFbFxgiV+ZhlOBxnDABnOVTdx 5bugujSmyK5pjOO3ZwagjfRjZtymGf/uBArsMRahVrblKBaylKefl0T655Knkneu nUcU7QZNsO/HESo4v9FizfwaSoFpVVqWro/C0n1ccpbEMl3zHBsK6HpH0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODmGzS/oW75Kfp3BG1jRvHNCRKyMB8GA1UdIwQY MBaAFA4tHtwMxpd0LPRzZLsdEbj/gI6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQt NWY4MTY3MDI0OTY4LzEvNE9ZYk5MLWhidmtwLW5jRWJXTkc4YzBKRXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mNTk4YjgtM2EyZi00MTU1LTk1ZmQtNWY4MTY3MDI0OTY4 LzEvRGkwZTNBekdsM1FzOUhOa3V4MFJ1UC1BanE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudLgMA0G CSqGSIb3DQEBCwUAA4IBAQB2sgt/lvtRHFnAPec+LTeKwUQDfXGYfhYUfA7Qh/fF We3mGqmiDpI8EhT0TCUW3MRKgglMewmfk2R0qGJvA766xDA7uT8Wfc5u4k6QbCtj P71fJmQYJb7+ptIrn55yydUzkNeMhjx9TKL0pwXGsHcTvQ21Y32cmYjWm2F0ulSF LmzNh7K/XcU9tCR0wRfRA1xI6bKeFJTPcj8/PYgp/2yrzRRBXUGDbOnMKOqb27v6 9Kay9heXSJqEU0wTsfTeEpbqiT+wJbeKRfPeAnE8XwW8h1xOFEZ6DIOoXNJ//HDv vzYF9x51Sr+vJ0eBpd6OL9gCUW8zks8gXIZQgMovsPfd -----END CERTIFICATE-----Generated at Sat Dec 27 08:59:38 2025 by rpki-client