This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/4kfrmNiSQkP5Y1YO5cJaxabwT5s.roa File: 4kfrmNiSQkP5Y1YO5cJaxabwT5s.roa (raw, json) Hash identifier: 0R9RuMWpmSefBMCkvQ5qbdzNty0TenVfrZiPu80C4u8= Subject key identifier: E2:47:EB:98:D8:92:42:43:F9:63:56:0E:E5:C2:5A:C5:A6:F0:4F:9B Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019B7AC953C59837822652901EA1E0CB365C Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/4kfrmNiSQkP5Y1YO5cJaxabwT5s.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 45.140.206.0/23 maxlen: 23 45.145.128.0/23 maxlen: 23 45.145.130.0/23 maxlen: 23 45.148.232.0/23 maxlen: 23 45.148.234.0/23 maxlen: 23 45.155.166.0/23 maxlen: 23 83.142.52.0/23 maxlen: 23 83.142.54.0/23 maxlen: 23 193.187.92.0/23 maxlen: 23 193.187.94.0/23 maxlen: 23 193.202.10.0/23 maxlen: 23 193.202.12.0/23 maxlen: 23 193.202.14.0/23 maxlen: 23 193.202.80.0/23 maxlen: 23 193.202.84.0/23 maxlen: 23 193.202.86.0/23 maxlen: 23 193.203.8.0/23 maxlen: 23 193.203.10.0/23 maxlen: 23 212.119.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:53:c5:98:37:82:26:52:90:1e:a1:e0:cb:36:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e247eb98d8924243f963560ee5c25ac5a6f04f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:b3:0d:9c:a4:99:30:90:a7:fa:5c:4a:85: 50:75:f6:15:4d:3f:31:e7:1e:45:c6:fd:98:47:07: f0:c1:45:56:95:d9:6b:a0:5f:96:39:09:57:2f:5f: 8c:9d:89:91:cd:e7:4c:85:80:93:0e:3c:54:e5:36: bd:08:7a:4a:a0:f8:73:4f:89:00:c3:cf:d0:7e:ad: 0f:a2:24:fc:22:b4:40:5f:6c:97:63:12:da:be:55: 2e:e6:de:83:d2:fb:ba:c4:65:2e:ed:66:89:52:c0: 51:7e:bb:de:98:8b:15:41:58:47:06:69:a7:b3:f3: 56:65:58:7a:5b:f7:04:9c:f2:0e:87:e0:36:9e:df: 9b:28:5c:9d:dd:16:ed:c3:7b:b4:fb:1f:53:11:41: 80:a9:33:f8:ca:fd:ce:2a:d5:63:20:91:e6:25:76: 17:a7:b8:c3:38:a4:33:35:5d:48:2f:27:96:07:52: 98:b6:69:be:e2:09:2a:ad:c1:90:61:6f:6d:06:8d: 58:a6:d5:8e:ba:fd:9b:cc:fc:5d:ab:61:51:52:c7: 55:84:3d:12:b4:0e:f8:0d:60:19:e1:27:cc:a5:86: f9:ac:61:52:2b:9b:4f:82:bf:84:2a:07:c3:e9:ba: ae:ff:81:de:54:3b:bb:20:9f:ab:a6:08:01:12:f4: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:47:EB:98:D8:92:42:43:F9:63:56:0E:E5:C2:5A:C5:A6:F0:4F:9B X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/4kfrmNiSQkP5Y1YO5cJaxabwT5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.206.0/23 45.145.128.0/22 45.148.232.0/22 45.155.166.0/23 83.142.52.0/22 193.187.92.0/22 193.202.10.0-193.202.15.255 193.202.80.0/23 193.202.84.0/22 193.203.8.0/22 212.119.46.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:d0:dc:01:74:03:0a:a4:3a:87:1f:c0:56:a5:4a:89:e9:d7: d9:e9:66:8c:43:a1:a3:d7:9c:a8:43:45:f2:91:8b:9c:a4:86: 48:ec:fa:c1:29:ab:8a:1e:99:ba:85:d2:cb:9c:31:b8:8d:d8: b0:d3:9d:e2:b6:e1:55:ac:be:04:80:ca:5e:21:a9:35:63:d8: cd:21:52:28:81:52:e0:26:e0:68:ae:21:5d:aa:02:f8:32:5d: fa:35:f5:7b:7b:b7:49:3f:b7:da:90:2b:cb:8c:cb:96:c0:d3: db:50:7c:71:06:11:5e:a7:e2:4c:b2:9d:68:7c:e5:44:a6:92: 4f:48:07:e6:45:0b:51:9f:3c:a8:3e:d2:fc:b1:b5:a6:4f:23: e6:ea:31:d1:5b:9b:3d:38:4e:4a:c9:bf:b7:3e:86:10:7b:36: 56:87:1d:1f:46:3e:5d:2d:63:a4:1a:ce:02:9e:b7:2e:85:9d: d3:a2:e2:09:c4:67:72:76:e0:5b:f6:34:49:ae:90:2a:c5:a4: 5b:45:d2:3d:e6:a0:87:24:be:79:33:1a:31:65:72:cc:41:6f: a9:ac:49:fe:2f:de:dd:49:9a:6d:77:3a:93:f9:63:35:91:35: 2b:99:94:07:30:d4:c2:9e:93:ed:d8:ed:c5:b0:d4:8f:70:98: 2c:53:11:29 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt6yVPFmDeCJlKQHqHgyzZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQ3ZWI5OGQ4OTI0MjQzZjk2MzU2MGVlNWMyNWFjNWE2ZjA0ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHmzDZykmTCQp/pcSoVQdfYVTT8x 5x5Fxv2YRwfwwUVWldlroF+WOQlXL1+MnYmRzedMhYCTDjxU5Ta9CHpKoPhzT4kA w8/Qfq0PoiT8IrRAX2yXYxLavlUu5t6D0vu6xGUu7WaJUsBRfrvemIsVQVhHBmmn s/NWZVh6W/cEnPIOh+A2nt+bKFyd3Rbtw3u0+x9TEUGAqTP4yv3OKtVjIJHmJXYX p7jDOKQzNV1ILyeWB1KYtmm+4gkqrcGQYW9tBo1YptWOuv2bzPxdq2FRUsdVhD0S tA74DWAZ4SfMpYb5rGFSK5tPgr+EKgfD6bqu/4HeVDu7IJ+rpggBEvTRNwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFOJH65jYkkJD+WNWDuXCWsWm8E+bMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xLzRrZnJtTmlTUWtQNVkxWU81Y0pheGFid1Q1cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEoDBAEtjM4D BAItkYADBAItlOgDBAEtm6YDBAJTjjQDBALBu1wwDAMEAcHKCgMEBMHKAAMEAcHK UAMEAsHKVAMEAsHLCAMEAdR3LjANBgkqhkiG9w0BAQsFAAOCAQEAb9DcAXQDCqQ6 hx/AVqVKienX2elmjEOho9ecqENF8pGLnKSGSOz6wSmrih6ZuoXSy5wxuI3YsNOd 4rbhVay+BIDKXiGpNWPYzSFSKIFS4CbgaK4hXaoC+DJd+jX1e3u3ST+32pAry4zL lsDT21B8cQYRXqfiTLKdaHzlRKaST0gH5kULUZ88qD7S/LG1pk8j5uox0VubPThO Ssm/tz6GEHs2VocdH0Y+XS1jpBrOAp63LoWd06LiCcRncnbgW/Y0Sa6QKsWkW0XS PeaghyS+eTMaMWVyzEFvqaxJ/i/e3UmabXc6k/ljNZE1K5mUBzDUwp6T7djtxbDU j3CYLFMRKQ== -----END CERTIFICATE-----Generated at Tue Jan 20 00:06:24 2026 by rpki-client