This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4rpFqtm5-IfGhhdF_qaYyrL4Tko.roa File: 4rpFqtm5-IfGhhdF_qaYyrL4Tko.roa (raw, json) Hash identifier: /Uh/orIRXQehGnBFIRvx2T8egD1Qr3X8ePiMTA4p6/Y= Subject key identifier: E2:BA:45:AA:D9:B9:F8:87:C6:86:17:45:FE:A6:98:CA:B2:F8:4E:4A Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BCF7F3AE59BEBFBF9BF582A1D0792126D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4rpFqtm5-IfGhhdF_qaYyrL4Tko.roa Signing time: Sun 18 Jan 2026 05:06:20 +0000 ROA not before: Sun 18 Jan 2026 05:06:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 5.83.131.0/24 maxlen: 24 5.83.132.0/24 maxlen: 24 5.175.214.0/24 maxlen: 24 5.175.216.0/24 maxlen: 24 5.175.218.0/24 maxlen: 24 5.175.219.0/24 maxlen: 24 5.231.26.0/24 maxlen: 24 5.231.105.0/24 maxlen: 24 5.231.242.0/24 maxlen: 24 83.243.86.0/24 maxlen: 24 89.106.71.0/24 maxlen: 24 2a02:2fc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:7f:3a:e5:9b:eb:fb:f9:bf:58:2a:1d:07:92:12:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 18 05:06:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ba45aad9b9f887c6861745fea698cab2f84e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:23:3c:9c:5c:b0:ef:07:24:b6:a1:76:bd: d0:dc:31:46:de:ec:91:93:ae:0c:21:68:9e:49:b1: 60:f3:e4:b1:26:ee:c4:3b:12:9c:2b:ad:db:37:50: 12:a0:d3:47:54:50:ed:1e:4c:8d:c4:f1:82:72:ab: 9a:ae:a1:ea:f4:d2:0e:b5:1c:e5:1b:e1:b4:e8:6c: 09:43:c2:69:c9:42:9c:cd:ec:93:5d:ed:5f:e9:05: 26:cd:fb:0d:b6:5c:97:8f:2e:cb:ce:26:32:58:49: 66:78:c7:54:1c:c5:96:b0:ba:9a:21:29:9a:37:1d: 86:40:a2:37:14:27:6c:aa:b0:9c:61:d4:a7:34:5c: 32:0e:86:81:1a:9c:4c:e5:d2:4b:2e:99:72:6f:cc: 43:15:7b:84:fe:2d:6e:a1:be:31:64:e3:e3:22:c1: 43:74:51:4f:55:64:b1:e7:e8:96:c9:9e:6e:79:96: c3:d1:cc:20:51:45:99:b3:63:1b:ab:0c:0d:0e:12: 7c:de:fc:b4:ba:dc:29:cf:c8:75:2e:0b:2d:26:89: 14:2e:a8:d0:3d:97:a4:77:e2:25:bd:43:b7:fd:76: 9b:8c:24:c0:5e:87:59:f8:39:e7:9b:bc:e9:80:0c: 50:68:b1:25:58:9f:0b:63:fb:47:0f:00:a8:8f:b0: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:45:AA:D9:B9:F8:87:C6:86:17:45:FE:A6:98:CA:B2:F8:4E:4A X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4rpFqtm5-IfGhhdF_qaYyrL4Tko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.131.0-5.83.132.255 5.175.214.0/24 5.175.216.0/24 5.175.218.0/23 5.231.26.0/24 5.231.105.0/24 5.231.242.0/24 83.243.86.0/24 89.106.71.0/24 IPv6: 2a02:2fc0:11::/48 Signature Algorithm: sha256WithRSAEncryption 03:32:ba:ca:5d:3d:eb:af:0c:01:c5:f7:44:6b:27:f6:63:7f: 2a:7c:64:b0:63:be:1b:e8:5d:1b:d8:a9:b6:1a:39:fd:d9:28: fe:2f:c7:eb:93:54:8b:7d:e9:c1:57:f8:b8:b8:9f:9f:28:59: 94:05:71:9e:7a:e5:97:e7:ed:4f:33:1c:74:10:8e:a4:4f:11: d8:d0:c8:99:ff:8b:7a:ab:29:86:9c:5a:80:df:1f:1a:1b:1a: d2:85:f3:a4:56:5d:72:66:a2:3a:6d:29:08:4d:6c:a0:a0:95: 01:86:fb:d1:79:3d:17:c3:64:ac:34:f8:4f:17:87:04:81:8c: 05:51:e1:fc:fa:74:72:db:45:29:d1:ca:17:4d:0e:a7:db:20: c7:89:c9:3a:85:d7:ed:19:6e:3b:5c:b9:d0:a9:98:0e:8e:ba: 01:8a:2d:1a:52:ee:e1:92:b1:80:14:3d:de:36:57:4c:b3:16: be:e0:fa:53:a4:64:a5:62:2d:53:17:35:b2:2f:55:25:20:db: 5f:fd:16:91:10:05:23:0d:7b:ee:1e:ff:aa:9c:41:8b:70:c6: dd:a0:5e:77:31:90:82:a1:6b:0e:05:67:a2:da:c2:a1:f5:e3: a6:e7:ea:02:05:b6:27:00:4a:4a:b3:c4:1a:10:24:79:d4:a0: e5:9d:e1:2a -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZvPfzrlm+v7+b9YKh0HkhJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE4MDUwNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmJhNDVhYWQ5YjlmODg3YzY4NjE3NDVmZWE2OThjYWIyZjg0ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJAjPJxcsO8HJLahdr3Q3DFG3uyR k64MIWieSbFg8+SxJu7EOxKcK63bN1ASoNNHVFDtHkyNxPGCcquarqHq9NIOtRzl G+G06GwJQ8JpyUKczeyTXe1f6QUmzfsNtlyXjy7LziYyWElmeMdUHMWWsLqaISma Nx2GQKI3FCdsqrCcYdSnNFwyDoaBGpxM5dJLLplyb8xDFXuE/i1uob4xZOPjIsFD dFFPVWSx5+iWyZ5ueZbD0cwgUUWZs2MbqwwNDhJ83vy0utwpz8h1LgstJokULqjQ PZekd+IlvUO3/XabjCTAXodZ+Dnnm7zpgAxQaLElWJ8LY/tHDwCoj7DhBQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFOK6RarZufiHxoYXRf6mmMqy+E5KMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNHJwRnF0bTUtSWZHaGhkRl9xYVl5ckw0VGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBEBAIAATA+MAwDBAAFU4MD BAAFU4QDBAAFr9YDBAAFr9gDBAEFr9oDBAAF5xoDBAAF52kDBAAF5/IDBABT81YD BABZakcwDwQCAAIwCQMHACoCL8AAETANBgkqhkiG9w0BAQsFAAOCAQEAAzK6yl09 668MAcX3RGsn9mN/KnxksGO+G+hdG9iptho5/dko/i/H65NUi33pwVf4uLifnyhZ lAVxnnrll+ftTzMcdBCOpE8R2NDImf+LeqsphpxagN8fGhsa0oXzpFZdcmaiOm0p CE1soKCVAYb70Xk9F8NkrDT4TxeHBIGMBVHh/Pp0cttFKdHKF00Op9sgx4nJOoXX 7RluO1y50KmYDo66AYotGlLu4ZKxgBQ93jZXTLMWvuD6U6RkpWItUxc1si9VJSDb X/0WkRAFIw177h7/qpxBi3DG3aBedzGQgqFrDgVnotrCofXjpufqAgW2JwBKSrPE GhAkedSg5Z3hKg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:37 2026 by rpki-client