This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4Qql-DJL0E34m8-rBmnpl3kebis.roa File: 4Qql-DJL0E34m8-rBmnpl3kebis.roa (raw, json) Hash identifier: rEd2JoaIcGfSd6nBL//tO8gVVBPnMgYFnRaqp5RQdl0= Subject key identifier: E1:0A:A5:F8:32:4B:D0:4D:F8:9B:CF:AB:06:69:E9:97:79:1E:6E:2B Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910600A211E89C6313E3847ED9EDF20 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4Qql-DJL0E34m8-rBmnpl3kebis.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206375 IP address blocks: 78.135.91.0/24 maxlen: 24 78.135.94.0/24 maxlen: 24 78.135.95.0/24 maxlen: 24 188.132.132.0/24 maxlen: 24 188.132.133.0/24 maxlen: 24 188.132.136.0/24 maxlen: 24 188.132.137.0/24 maxlen: 24 188.132.138.0/24 maxlen: 24 188.132.139.0/24 maxlen: 24 188.132.140.0/24 maxlen: 24 188.132.143.0/24 maxlen: 24 188.132.144.0/24 maxlen: 24 188.132.145.0/24 maxlen: 24 188.132.162.0/24 maxlen: 24 188.132.247.0/24 maxlen: 24 188.132.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:0a:21:1e:89:c6:31:3e:38:47:ed:9e:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10aa5f8324bd04df89bcfab0669e997791e6e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:26:3c:25:33:d8:bf:be:09:18:83:93:66: 0f:b9:49:6f:94:9e:57:d1:8e:36:b1:92:76:2a:e3: df:15:32:5c:6c:43:a8:31:f3:ef:87:15:b3:37:bd: ef:92:a3:9a:0b:35:23:a1:1e:53:d2:d7:f7:b3:7f: e8:98:4f:e8:71:77:b5:96:5b:fb:65:cd:9b:6b:a2: bb:11:eb:f5:30:83:b9:ac:f2:59:10:3a:2e:83:a4: 7a:b9:32:92:00:2d:29:e7:52:9a:97:96:01:87:42: 78:f9:b0:fb:ba:2f:f9:50:e6:e0:e9:4f:8b:5a:0a: db:7b:c9:f1:23:57:1c:88:04:a9:f2:c5:a8:11:54: 37:1c:41:bc:d3:d9:71:69:ed:84:e2:39:cb:77:75: 15:b4:30:aa:d9:92:a9:d4:27:80:29:3d:76:16:34: 17:75:11:12:99:b6:26:bd:0e:4f:e3:ce:c3:c0:4f: 19:2a:2e:6f:59:bb:bf:4c:c5:c9:d8:de:fd:84:c5: 45:1a:fd:d9:a9:96:58:5d:dc:d5:76:ce:4b:31:ce: 77:04:4a:6b:75:a7:23:25:f9:40:82:48:de:8c:a8: d1:4b:8e:21:f5:44:36:31:58:09:46:cb:99:71:ea: 2c:de:0b:da:9c:4f:e1:65:46:f8:d9:2f:ea:de:13: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:A5:F8:32:4B:D0:4D:F8:9B:CF:AB:06:69:E9:97:79:1E:6E:2B X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4Qql-DJL0E34m8-rBmnpl3kebis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.91.0/24 78.135.94.0/23 188.132.132.0/23 188.132.136.0-188.132.140.255 188.132.143.0-188.132.145.255 188.132.162.0/24 188.132.247.0-188.132.248.255 Signature Algorithm: sha256WithRSAEncryption 0c:c6:73:9e:00:de:46:f6:b6:70:a4:d8:25:54:53:77:b4:d2: c2:fe:32:e8:2a:54:7b:0e:cd:d0:f0:5d:1d:3d:6c:f0:8f:7e: bb:4e:45:cd:0c:6d:be:a0:56:6b:79:6a:1e:3a:b1:64:d2:44: 0a:fd:1c:c7:cd:77:82:9e:7a:05:a2:af:5c:dc:ce:75:68:73: fe:42:90:98:5c:77:fd:d2:09:01:65:92:b1:d8:31:c2:71:51: 02:02:23:db:83:f7:9e:d8:52:a9:e5:31:a7:a9:81:bb:21:c2: c4:28:96:57:ed:03:2d:d0:da:e8:06:68:8a:cb:bf:48:2f:cc: e6:2e:b2:7f:f2:c7:f4:2e:67:3e:ec:d4:99:38:46:f8:ec:42: 42:c9:9a:7b:e9:b4:58:fe:1f:bf:8b:9f:a1:72:ae:f3:db:a9: c5:e1:7b:b2:4c:77:9e:3a:bf:59:fe:f2:6e:07:20:2d:df:b5: fe:18:02:b3:1b:86:94:d0:ba:4d:28:fb:6f:13:0a:7e:5e:27: d3:4d:ce:be:0e:50:59:23:aa:2b:00:bb:51:a6:69:32:6d:e0: ac:50:ec:89:58:5c:c5:77:16:e2:69:69:15:2a:18:71:b9:61: 66:e3:14:8a:b6:1c:8d:b9:fb:46:2a:b8:f4:23:63:60:06:60: 9e:8b:b4:a3 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt5EGAKIR6JxjE+OEftnt8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBhYTVmODMyNGJkMDRkZjg5YmNmYWIwNjY5ZTk5Nzc5MWU2ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XAmPCUz2L++CRiDk2YPuUlvlJ5X 0Y42sZJ2KuPfFTJcbEOoMfPvhxWzN73vkqOaCzUjoR5T0tf3s3/omE/ocXe1llv7 Zc2ba6K7Eev1MIO5rPJZEDoug6R6uTKSAC0p51Kal5YBh0J4+bD7ui/5UObg6U+L Wgrbe8nxI1cciASp8sWoEVQ3HEG809lxae2E4jnLd3UVtDCq2ZKp1CeAKT12FjQX dRESmbYmvQ5P487DwE8ZKi5vWbu/TMXJ2N79hMVFGv3ZqZZYXdzVds5LMc53BEpr dacjJflAgkjejKjRS44h9UQ2MVgJRsuZceos3gvanE/hZUb42S/q3hMyOQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFOEKpfgyS9BN+JvPqwZp6Zd5Hm4rMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvNFFxbC1ESkwwRTM0bTgtckJtbnBsM2tlYmlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQATodbAwQB TodeAwQBvISEMAwDBAO8hIgDBAC8hIwwDAMEALyEjwMEAbyEkAMEALyEojAMAwQA vIT3AwQAvIT4MA0GCSqGSIb3DQEBCwUAA4IBAQAMxnOeAN5G9rZwpNglVFN3tNLC /jLoKlR7Ds3Q8F0dPWzwj367TkXNDG2+oFZreWoeOrFk0kQK/RzHzXeCnnoFoq9c 3M51aHP+QpCYXHf90gkBZZKx2DHCcVECAiPbg/ee2FKp5TGnqYG7IcLEKJZX7QMt 0NroBmiKy79IL8zmLrJ/8sf0Lmc+7NSZOEb47EJCyZp76bRY/h+/i5+hcq7z26nF 4XuyTHeeOr9Z/vJuByAt37X+GAKzG4aU0LpNKPtvEwp+XifTTc6+DlBZI6orALtR pmkybeCsUOyJWFzFdxbiaWkVKhhxuWFm4xSKthyNuftGKrj0I2NgBmCei7Sj -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:08 2026 by rpki-client