This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/n4qx7a-ie2JFje6OoZfj8maOvdI.roa File: n4qx7a-ie2JFje6OoZfj8maOvdI.roa (raw, json) Hash identifier: FgnxzCRrJ4+Un0342yKuup2+ewTlSmEx3t71cMxmz5I= Subject key identifier: 9F:8A:B1:ED:AF:A2:7B:62:45:8D:EE:8E:A1:97:E3:F2:66:8E:BD:D2 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853441BF1E1F578ECA27BA3A2284DC Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/n4qx7a-ie2JFje6OoZfj8maOvdI.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33659 IP address blocks: 45.150.168.0/22 maxlen: 22 45.151.196.0/22 maxlen: 22 185.147.49.0/24 maxlen: 24 185.212.11.0/24 maxlen: 24 193.31.104.0/22 maxlen: 22 194.50.206.0/23 maxlen: 23 195.138.109.0/24 maxlen: 24 195.138.110.0/24 maxlen: 24 195.138.113.0/24 maxlen: 24 195.138.115.0/24 maxlen: 24 195.138.124.0/22 maxlen: 22 195.211.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:34:41:bf:1e:1f:57:8e:ca:27:ba:3a:22:84:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f8ab1edafa27b62458dee8ea197e3f2668ebdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:0f:e3:cc:85:08:af:f9:91:5e:68:01:4b: 51:cc:5c:b6:7d:fb:89:cf:fe:a4:73:1d:fb:8d:e9: 9a:19:cd:e7:aa:e2:07:4b:02:1a:aa:ed:af:3d:73: b5:08:3c:96:35:60:94:7c:e6:52:8e:fd:ca:4e:a9: 6c:e0:24:96:74:25:b8:df:54:ab:a9:56:fe:21:6a: 72:1c:6d:44:a6:6a:ba:72:1a:9a:0d:dc:e7:d8:0d: ad:f9:20:9c:b8:80:46:73:3c:68:5c:5c:d0:a3:3b: 0c:f0:b2:e1:65:8a:be:eb:dd:44:84:0a:e6:6f:a0: e4:96:1a:fb:3e:55:dc:e6:f1:70:21:c7:b8:a0:d4: 91:86:57:a0:27:8d:54:60:2d:48:60:28:1c:6e:f6: c5:85:7c:e6:89:a5:9a:1e:e9:4b:5b:ff:a1:af:83: b1:31:50:23:02:1c:1c:5a:fd:ae:89:f4:0e:28:20: fc:e8:23:54:5a:0f:f2:4d:9c:7f:96:64:9c:75:3d: 56:04:43:09:91:ae:22:68:ee:52:97:41:5e:27:6e: 33:6f:43:ce:ee:2a:4b:7a:a1:bf:bf:50:6a:16:4a: 6d:66:7d:6c:e3:ed:ad:d0:fa:42:37:1b:54:99:7b: 6d:e6:c5:26:67:c8:4f:4b:16:0c:a1:1b:f7:13:1c: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:B1:ED:AF:A2:7B:62:45:8D:EE:8E:A1:97:E3:F2:66:8E:BD:D2 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/n4qx7a-ie2JFje6OoZfj8maOvdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.168.0/22 45.151.196.0/22 185.147.49.0/24 185.212.11.0/24 193.31.104.0/22 194.50.206.0/23 195.138.109.0-195.138.110.255 195.138.113.0/24 195.138.115.0/24 195.138.124.0/22 195.211.48.0/24 Signature Algorithm: sha256WithRSAEncryption 65:a5:0b:62:cf:e8:ec:89:12:bb:41:9a:74:72:ab:37:81:89: 67:da:f4:19:d6:d7:1e:bc:a2:16:c4:72:ad:49:77:e1:a2:8e: dd:f1:57:d5:26:71:1d:1f:69:e8:12:d6:d2:91:e3:40:46:23: d0:b8:d1:2d:a0:53:2d:51:58:21:f9:6a:e0:dd:1a:d1:69:d9: 05:b1:64:15:0c:1e:53:72:1d:cb:b1:7b:f5:7b:62:d4:f3:dc: 00:57:28:26:b7:d2:22:d3:38:f4:ba:3b:ce:f3:51:2b:a2:7c: 67:97:2d:a1:e2:82:c2:d1:c6:2a:c5:a7:a1:24:d6:02:31:18: d9:f9:a8:50:d1:d4:38:90:58:cf:69:2c:49:69:ae:2b:ec:ee: b9:25:67:25:65:f5:fa:44:ca:8e:c4:5e:4d:4b:c8:c2:96:2f: fe:87:72:34:80:51:78:58:55:1d:5b:d1:28:63:7b:b2:91:45: 2e:7f:38:cd:03:5e:6f:43:ff:56:de:e6:76:fa:eb:2d:ea:4f: 89:4b:6e:5d:80:bd:8a:c8:03:ae:b7:b6:9e:65:fe:8e:f4:d2: ec:6b:0d:93:b4:d0:17:7e:d4:5f:3e:fd:46:0d:18:e3:a8:cb: 4d:2a:e3:1f:3e:14:7a:10:58:83:2c:91:fd:a4:93:ea:e6:89: 36:cd:2d:05 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt/hTRBvx4fV47KJ7o6IoTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjhhYjFlZGFmYTI3YjYyNDU4ZGVlOGVhMTk3ZTNmMjY2OGViZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqQP48yFCK/5kV5oAUtRzFy2ffuJ z/6kcx37jemaGc3nquIHSwIaqu2vPXO1CDyWNWCUfOZSjv3KTqls4CSWdCW431Sr qVb+IWpyHG1Epmq6chqaDdzn2A2t+SCcuIBGczxoXFzQozsM8LLhZYq+691EhArm b6Dklhr7PlXc5vFwIce4oNSRhlegJ41UYC1IYCgcbvbFhXzmiaWaHulLW/+hr4Ox MVAjAhwcWv2uifQOKCD86CNUWg/yTZx/lmScdT1WBEMJka4iaO5Sl0FeJ24zb0PO 7ipLeqG/v1BqFkptZn1s4+2t0PpCNxtUmXtt5sUmZ8hPSxYMoRv3ExwHJwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFJ+Kse2vontiRY3ujqGX4/Jmjr3SMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvbjRxeDdhLWllMkpGamU2T29aZmo4bWFPdmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCLZaoAwQC LZfEAwQAuZMxAwQAudQLAwQCwR9oAwQBwjLOMAwDBADDim0DBADDim4DBADDinED BADDinMDBALDinwDBADD0zAwDQYJKoZIhvcNAQELBQADggEBAGWlC2LP6OyJErtB mnRyqzeBiWfa9BnW1x68ohbEcq1Jd+Gijt3xV9UmcR0faegS1tKR40BGI9C40S2g Uy1RWCH5auDdGtFp2QWxZBUMHlNyHcuxe/V7YtTz3ABXKCa30iLTOPS6O87zUSui fGeXLaHigsLRxirFp6Ek1gIxGNn5qFDR1DiQWM9pLElprivs7rklZyVl9fpEyo7E Xk1LyMKWL/6HcjSAUXhYVR1b0Shje7KRRS5/OM0DXm9D/1be5nb66y3qT4lLbl2A vYrIA663tp5l/o700uxrDZO00Bd+1F8+/UYNGOOoy00q4x8+FHoQWIMskf2kk+rm iTbNLQU= -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:48 2026 by rpki-client