This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4aREn_htEzwNxW4Z_ze_U1SiWgg.roa File: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (raw, json) Hash identifier: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk= Subject key identifier: E1:A4:44:9F:F8:6D:13:3C:0D:C5:6E:19:FF:37:BF:53:54:A2:5A:08 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379DD0706D72AA82AAC70E5D25C143 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4aREn_htEzwNxW4Z_ze_U1SiWgg.roa Signing time: Fri 02 Jan 2026 10:18:52 +0000 ROA not before: Fri 02 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57217 IP address blocks: 46.174.200.0/22 maxlen: 22 91.237.91.0/24 maxlen: 24 176.107.64.0/21 maxlen: 21 176.116.224.0/22 maxlen: 22 176.121.32.0/21 maxlen: 21 176.121.40.0/21 maxlen: 21 176.121.104.0/22 maxlen: 22 193.36.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9d:d0:70:6d:72:aa:82:aa:c7:0e:5d:25:c1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1a4449ff86d133c0dc56e19ff37bf5354a25a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:76:b6:b7:4f:6c:eb:f9:42:1e:78:24:1f: 1a:13:a4:04:09:a2:d8:91:ae:de:36:f8:1c:d5:c9: 6b:c4:80:00:11:cb:72:ee:76:c4:ff:be:c9:f4:81: 69:ad:c1:75:ae:50:4d:d2:7b:ad:f3:52:8c:94:a9: 71:14:88:ae:c2:68:81:96:4a:02:90:9b:3f:dc:b9: 2b:c0:14:b3:66:00:e3:12:14:b2:88:55:40:de:46: 46:65:f8:8b:49:e1:26:27:ca:22:25:71:2b:4c:a1: a0:80:9d:35:e8:43:be:38:eb:f8:55:50:7b:89:d6: dc:bf:45:11:53:85:87:0d:1e:ad:40:89:40:cc:51: ce:6a:22:ba:c5:14:06:93:84:a8:06:49:48:42:29: 10:db:02:98:14:9d:dd:78:20:3e:05:7e:97:c0:0c: 48:67:5f:17:ae:14:54:99:a0:a6:c7:61:12:55:7b: 35:2b:1e:cc:69:35:16:7b:f7:90:b2:a5:5e:c7:4c: 3c:5c:cc:ae:c4:ed:9c:f6:5a:68:59:5d:86:1c:3c: 72:ef:b3:bf:73:ee:4d:16:20:77:8e:c3:55:b3:c2: 4a:d7:b8:ea:d5:41:de:6a:75:6b:2b:41:a5:1b:70: ac:41:58:2f:c5:06:2f:df:7d:6a:91:be:02:42:9a: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A4:44:9F:F8:6D:13:3C:0D:C5:6E:19:FF:37:BF:53:54:A2:5A:08 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/4aREn_htEzwNxW4Z_ze_U1SiWgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.200.0/22 91.237.91.0/24 176.107.64.0/21 176.116.224.0/22 176.121.32.0/20 176.121.104.0/22 193.36.216.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:f0:49:54:6c:e2:1d:fc:54:c6:ef:24:c3:60:f8:63:3e:c0: af:94:f7:62:c5:d5:6b:87:3e:7d:0f:cc:18:42:1c:d9:6c:1c: 74:dc:e9:09:8c:fe:55:97:f0:d0:b5:dc:6f:39:e0:77:17:6c: 49:9e:0a:52:c5:75:c2:68:4e:de:ef:77:20:c7:18:6f:f8:6f: 48:f0:b1:d9:03:8c:13:e0:a7:a2:45:65:3a:f8:cb:48:e0:27: 55:bf:e3:de:5e:33:3d:8a:b1:f0:7e:55:d3:56:16:ca:80:f5: f4:9c:03:80:ad:f1:c1:00:9a:32:67:39:72:d8:e9:14:d1:cb: 34:cf:7c:9f:81:f3:22:50:1d:7e:64:00:4e:7d:b7:dd:66:63: 4f:90:71:4e:94:13:c2:c5:40:5c:c1:75:bc:55:ec:8c:c1:a3: a1:54:81:49:83:dc:b3:ad:94:81:b6:03:a9:64:62:de:f4:93: 73:f3:89:40:71:07:d9:29:94:a8:ed:d9:1e:08:49:e0:50:df: d8:c7:a4:26:c4:2e:9a:9b:93:c0:18:db:a8:56:d5:8c:13:0a: ae:a7:ee:48:51:08:de:ee:f7:c2:cc:7a:0e:19:45:8b:8f:a5: 57:06:32:3d:c5:e7:62:1b:d4:7d:c2:5f:8e:34:db:e2:47:77: 9a:6a:f6:6f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+N53QcG1yqoKqxw5dJcFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWE0NDQ5ZmY4NmQxMzNjMGRjNTZlMTlmZjM3YmY1MzU0YTI1YTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs952trdPbOv5Qh54JB8aE6QECaLY ka7eNvgc1clrxIAAEcty7nbE/77J9IFprcF1rlBN0nut81KMlKlxFIiuwmiBlkoC kJs/3LkrwBSzZgDjEhSyiFVA3kZGZfiLSeEmJ8oiJXErTKGggJ016EO+OOv4VVB7 idbcv0URU4WHDR6tQIlAzFHOaiK6xRQGk4SoBklIQikQ2wKYFJ3deCA+BX6XwAxI Z18XrhRUmaCmx2ESVXs1Kx7MaTUWe/eQsqVex0w8XMyuxO2c9lpoWV2GHDxy77O/ c+5NFiB3jsNVs8JK17jq1UHeanVrK0GlG3CsQVgvxQYv331qkb4CQpqFMQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFOGkRJ/4bRM8DcVuGf83v1NUoloIMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvNGFSRW5faHRFendOeFc0Wl96ZV9VMVNpV2dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLq7IAwQA W+1bAwQDsGtAAwQCsHTgAwQEsHkgAwQCsHloAwQCwSTYMA0GCSqGSIb3DQEBCwUA A4IBAQBN8ElUbOId/FTG7yTDYPhjPsCvlPdixdVrhz59D8wYQhzZbBx03OkJjP5V l/DQtdxvOeB3F2xJngpSxXXCaE7e73cgxxhv+G9I8LHZA4wT4KeiRWU6+MtI4CdV v+PeXjM9irHwflXTVhbKgPX0nAOArfHBAJoyZzly2OkU0cs0z3yfgfMiUB1+ZABO fbfdZmNPkHFOlBPCxUBcwXW8VeyMwaOhVIFJg9yzrZSBtgOpZGLe9JNz84lAcQfZ KZSo7dkeCEngUN/Yx6QmxC6am5PAGNuoVtWMEwqup+5IUQje7vfCzHoOGUWLj6VX BjI9xediG9R9wl+ONNviR3eaavZv -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:18 2026 by rpki-client