This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5jRHAAz_hj8a7OP44v7mWLCpLIg.roa File: 5jRHAAz_hj8a7OP44v7mWLCpLIg.roa (raw, json) Hash identifier: M9wN8baVpSc5b65dc6iAke2qV/7ywF4aCA4G87mYdOU= Subject key identifier: E6:34:47:00:0C:FF:86:3F:1A:EC:E3:F8:E2:FE:E6:58:B0:A9:2C:88 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F81273526AA2CF4149043B48390ED04 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5jRHAAz_hj8a7OP44v7mWLCpLIg.roa Signing time: Fri 02 Jan 2026 16:18:49 +0000 ROA not before: Fri 02 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6461 IP address blocks: 31.99.0.0/18 maxlen: 18 79.141.32.0/20 maxlen: 20 82.98.192.0/21 maxlen: 21 82.98.232.0/21 maxlen: 21 82.98.240.0/20 maxlen: 20 94.31.0.0/18 maxlen: 18 193.28.62.0/23 maxlen: 23 193.28.104.0/23 maxlen: 23 193.160.88.0/22 maxlen: 22 213.152.224.0/19 maxlen: 19 213.161.64.0/19 maxlen: 19 2a00:16f8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:27:35:26:aa:2c:f4:14:90:43:b4:83:90:ed:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e63447000cff863f1aece3f8e2fee658b0a92c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:45:98:1a:2e:1b:3d:33:41:4c:7e:fb:84: 09:88:e3:8c:f7:c8:ac:45:98:cd:4e:68:d3:1b:1b: f3:c7:57:f0:a1:89:f6:f6:35:09:ff:75:4b:9d:71: 5d:d1:bb:4f:4c:3b:6d:2b:23:c4:f0:44:bc:0e:23: ab:99:a3:fe:19:b5:42:33:22:c9:f5:91:b6:57:74: 90:3d:15:2d:b1:1d:40:31:4d:6a:12:6c:c7:af:10: 8d:7d:6e:88:f9:b6:20:4f:78:28:9c:16:11:1d:48: 36:1f:45:c0:78:ec:4c:f4:da:de:46:ae:07:f1:60: 73:f1:9c:dc:5d:91:b8:01:ff:6a:cd:33:11:e5:d5: 98:66:6e:ec:c3:6d:d4:d7:43:69:01:de:81:71:e2: 62:42:6b:9b:c5:75:91:b6:8b:ba:0a:ec:15:79:a2: 59:66:4f:8f:0b:c9:1e:4c:08:25:b0:8c:db:0e:46: b1:d8:ee:f7:9b:c8:60:cf:f5:4b:02:3c:f7:cb:33: bb:74:a4:02:5f:23:88:6b:03:39:37:44:43:18:07: 8b:4d:52:43:3f:52:cd:fd:47:13:95:66:ed:cb:cb: cc:5a:a3:7b:cf:bf:ac:f6:55:16:04:11:ad:18:ae: 99:7f:16:f8:53:92:e5:ed:eb:58:33:d7:53:cb:bf: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:47:00:0C:FF:86:3F:1A:EC:E3:F8:E2:FE:E6:58:B0:A9:2C:88 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/5jRHAAz_hj8a7OP44v7mWLCpLIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.99.0.0/18 79.141.32.0/20 82.98.192.0/21 82.98.232.0-82.98.255.255 94.31.0.0/18 193.28.62.0/23 193.28.104.0/23 193.160.88.0/22 213.152.224.0/19 213.161.64.0/19 IPv6: 2a00:16f8::/29 Signature Algorithm: sha256WithRSAEncryption bb:ce:79:3c:18:81:9e:d2:da:7e:3e:1f:58:69:d8:61:64:8c: bf:13:8c:5b:65:c3:24:a0:1c:00:dd:a9:fb:04:ad:33:96:17: 2d:c0:ff:9d:4f:09:d2:98:bc:ac:08:2d:78:17:8c:0e:85:36: 11:46:d7:51:b9:df:17:06:18:ab:a5:5e:25:a0:0e:d8:2f:16: a0:75:14:3e:cd:c9:b0:63:95:11:b8:be:43:e4:46:02:ee:d3: fc:44:99:da:e9:82:a6:1a:42:f5:57:11:63:38:b9:29:f4:39: b8:b8:02:20:17:dc:8f:63:46:38:af:a1:8a:57:d9:33:54:9a: 55:88:7a:be:6a:c9:a5:63:a7:b9:14:fa:c3:64:e3:b1:23:bf: ef:1b:68:9b:77:79:d0:16:6d:0d:a1:73:20:f4:9c:39:61:56: 1f:50:c8:3d:fc:ac:1d:cc:b5:f5:f3:a6:66:1e:b3:c0:3d:bd: b9:19:57:70:c2:78:45:de:16:a5:d1:67:36:3d:9d:b6:26:aa: ee:ee:67:82:bf:7d:be:bf:f1:39:5d:55:6c:75:60:ce:eb:a6: 1a:51:2d:97:2b:37:eb:48:9f:22:38:2d:6c:26:c6:7a:73:3b: b3:dd:b3:a4:45:9d:97:a5:07:46:4f:47:63:83:d1:13:bc:fa: a6:f1:9d:59 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt/gSc1Jqos9BSQQ7SDkO0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjM0NDcwMDBjZmY4NjNmMWFlY2UzZjhlMmZlZTY1OGIwYTkyYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3hFmBouGz0zQUx++4QJiOOM98is RZjNTmjTGxvzx1fwoYn29jUJ/3VLnXFd0btPTDttKyPE8ES8DiOrmaP+GbVCMyLJ 9ZG2V3SQPRUtsR1AMU1qEmzHrxCNfW6I+bYgT3gonBYRHUg2H0XAeOxM9NreRq4H 8WBz8ZzcXZG4Af9qzTMR5dWYZm7sw23U10NpAd6BceJiQmubxXWRtou6CuwVeaJZ Zk+PC8keTAglsIzbDkax2O73m8hgz/VLAjz3yzO7dKQCXyOIawM5N0RDGAeLTVJD P1LN/UcTlWbty8vMWqN7z7+s9lUWBBGtGK6Zfxb4U5Ll7etYM9dTy7/DXwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFOY0RwAM/4Y/Guzj+OL+5liwqSyIMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvNWpSSEFBel9oajhhN09QNDR2N21XTENwTElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBJBAIAATBDAwQGH2MAAwQE T40gAwQDUmLAMAsDBANSYugDAwBSYgMEBl4fAAMEAcEcPgMEAcEcaAMEAsGgWAME BdWY4AMEBdWhQDANBAIAAjAHAwUDKgAW+DANBgkqhkiG9w0BAQsFAAOCAQEAu855 PBiBntLafj4fWGnYYWSMvxOMW2XDJKAcAN2p+wStM5YXLcD/nU8J0pi8rAgteBeM DoU2EUbXUbnfFwYYq6VeJaAO2C8WoHUUPs3JsGOVEbi+Q+RGAu7T/ESZ2umCphpC 9VcRYzi5KfQ5uLgCIBfcj2NGOK+hilfZM1SaVYh6vmrJpWOnuRT6w2TjsSO/7xto m3d50BZtDaFzIPScOWFWH1DIPfysHcy19fOmZh6zwD29uRlXcMJ4Rd4WpdFnNj2d tiaq7u5ngr99vr/xOV1VbHVgzuumGlEtlys360ifIjgtbCbGenM7s92zpEWdl6UH Rk9HY4PRE7z6pvGdWQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:53 2026 by rpki-client