This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/4HH9zRXt6jgp28sGXm07XuPDRMc.roa File: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (raw, json) Hash identifier: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk= Subject key identifier: E0:71:FD:CD:15:ED:EA:38:29:DB:CB:06:5E:6D:3B:5E:E3:C3:44:C7 Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf Certificate serial: 019BC59B2C83FF9C5E763A0E407992A2AEFA Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/4HH9zRXt6jgp28sGXm07XuPDRMc.roa Signing time: Fri 16 Jan 2026 07:00:39 +0000 ROA not before: Fri 16 Jan 2026 07:00:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64441 IP address blocks: 86.106.124.0/22 maxlen: 22 86.106.128.0/24 maxlen: 24 89.32.206.0/24 maxlen: 24 89.33.9.0/24 maxlen: 24 89.39.66.0/24 maxlen: 24 89.44.136.0/24 maxlen: 24 93.113.134.0/23 maxlen: 23 93.113.172.0/23 maxlen: 23 93.113.248.0/23 maxlen: 23 93.115.54.0/23 maxlen: 23 93.115.208.0/23 maxlen: 23 94.176.162.0/24 maxlen: 24 188.208.134.0/24 maxlen: 24 188.241.16.0/24 maxlen: 24 188.241.18.0/24 maxlen: 24 188.241.38.0/24 maxlen: 24 188.241.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:9b:2c:83:ff:9c:5e:76:3a:0e:40:79:92:a2:ae:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf Validity Not Before: Jan 16 07:00:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e071fdcd15edea3829dbcb065e6d3b5ee3c344c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:ec:45:dc:f9:8c:23:89:6b:78:64:8f:ad: e4:d6:42:33:9d:d8:a7:25:5f:a6:8f:86:85:a6:c9: ec:b2:37:9f:87:d5:c9:3f:c7:05:bc:8e:e5:b4:1d: d0:4e:8d:a9:1e:45:43:e6:0d:a1:47:f5:2d:4b:b0: 6c:8b:da:0c:19:e0:92:36:33:29:f3:46:bb:b4:67: 5d:03:9a:d7:a6:01:f3:96:bc:d2:53:4e:c7:54:78: 6b:a6:49:6b:d0:e4:91:9e:f7:71:5b:ce:a6:68:34: 27:98:48:07:b7:e0:ea:20:bb:fa:1e:ba:8d:1f:1f: 4a:0e:8b:44:02:50:9e:ba:de:a3:6b:af:88:5b:4d: 82:8d:16:8d:18:d0:c1:be:0c:c8:bd:5e:9b:3f:8f: dc:18:da:a3:79:c2:2d:49:11:07:e7:51:94:bd:e4: 50:e3:e8:85:c8:8c:8d:e5:8a:05:e3:7d:5e:e8:be: 1d:8c:ba:82:3f:a4:a5:6a:8a:7d:5f:a1:e6:8a:3e: a9:47:58:5e:4c:4a:25:10:b6:f7:1e:f2:c4:ff:63: 0b:22:39:8c:fd:00:59:16:e8:7a:05:72:0c:cd:5a: af:f1:4b:70:8b:63:37:4b:c4:ea:55:81:58:81:31: c1:4b:eb:7a:1c:51:9a:21:e5:ba:2a:f8:d5:d6:95: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:71:FD:CD:15:ED:EA:38:29:DB:CB:06:5E:6D:3B:5E:E3:C3:44:C7 X509v3 Authority Key Identifier: keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/4HH9zRXt6jgp28sGXm07XuPDRMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.124.0-86.106.128.255 89.32.206.0/24 89.33.9.0/24 89.39.66.0/24 89.44.136.0/24 93.113.134.0/23 93.113.172.0/23 93.113.248.0/23 93.115.54.0/23 93.115.208.0/23 94.176.162.0/24 188.208.134.0/24 188.241.16.0/24 188.241.18.0/24 188.241.38.0/24 188.241.85.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:0e:40:fe:85:be:ec:38:b8:6f:6b:a9:51:b1:e7:bc:43:e9: 76:1b:1b:cf:8f:86:55:bc:77:86:67:11:16:f8:6c:c9:ac:cf: 9c:5e:0c:11:06:fa:ce:4a:5b:ff:41:fe:4b:50:9a:7d:61:b3: 65:41:41:33:d3:23:b5:ef:21:8f:87:74:80:74:fe:a2:59:e3: c4:c6:0f:6b:32:9e:c1:db:97:f2:c0:14:05:a7:3d:3b:1f:23: 35:80:d5:25:1b:73:22:63:53:ff:87:47:15:dc:a3:0d:05:23: 36:8c:b1:f0:b0:d5:15:6a:a3:91:99:4b:3c:be:1f:61:25:98: 4d:d7:68:18:7e:30:1f:0a:fb:c9:11:41:87:ca:39:b1:b2:b7: fb:ac:bb:c6:93:22:1d:fa:16:b6:49:4e:0d:7b:f5:a2:8b:2d: a7:59:6b:d5:11:ab:99:a2:56:81:81:db:30:96:7d:d3:05:f8: 4c:0f:61:ff:80:54:da:bb:48:7c:1f:ff:4f:68:51:7e:85:92: 41:19:10:b1:f3:52:bc:ea:6a:62:51:1a:7f:43:fd:18:5f:22: 85:0f:33:57:1e:94:1c:9f:df:56:b5:17:80:7a:14:22:ed:e6: 66:99:23:b2:15:f8:10:35:c9:00:a5:6a:1a:5a:c2:55:48:a9: 1c:af:2d:47 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZvFmyyD/5xedjoOQHmSoq76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4 OWZhYWYwHhcNMjYwMTE2MDcwMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDcxZmRjZDE1ZWRlYTM4MjlkYmNiMDY1ZTZkM2I1ZWUzYzM0NGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm/sRdz5jCOJa3hkj63k1kIzndin JV+mj4aFpsnssjefh9XJP8cFvI7ltB3QTo2pHkVD5g2hR/UtS7Bsi9oMGeCSNjMp 80a7tGddA5rXpgHzlrzSU07HVHhrpklr0OSRnvdxW86maDQnmEgHt+DqILv6HrqN Hx9KDotEAlCeut6ja6+IW02CjRaNGNDBvgzIvV6bP4/cGNqjecItSREH51GUveRQ 4+iFyIyN5YoF431e6L4djLqCP6Slaop9X6Hmij6pR1heTEolELb3HvLE/2MLIjmM /QBZFuh6BXIMzVqv8Utwi2M3S8TqVYFYgTHBS+t6HFGaIeW6KvjV1pUw1QIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFOBx/c0V7eo4KdvLBl5tO17jw0THMB8GA1UdIwQY MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt MWIxOTIzNzFmNDQyLzEvNEhIOXpSWHQ2amdwMjhzR1htMDdYdVBEUk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaDAMAwQCVmp8 AwQAVmqAAwQAWSDOAwQAWSEJAwQAWSdCAwQAWSyIAwQBXXGGAwQBXXGsAwQBXXH4 AwQBXXM2AwQBXXPQAwQAXrCiAwQAvNCGAwQAvPEQAwQAvPESAwQAvPEmAwQAvPFV MA0GCSqGSIb3DQEBCwUAA4IBAQAaDkD+hb7sOLhva6lRsee8Q+l2GxvPj4ZVvHeG ZxEW+GzJrM+cXgwRBvrOSlv/Qf5LUJp9YbNlQUEz0yO17yGPh3SAdP6iWePExg9r Mp7B25fywBQFpz07HyM1gNUlG3MiY1P/h0cV3KMNBSM2jLHwsNUVaqORmUs8vh9h JZhN12gYfjAfCvvJEUGHyjmxsrf7rLvGkyId+ha2SU4Ne/Wiiy2nWWvVEauZolaB gdswln3TBfhMD2H/gFTau0h8H/9PaFF+hZJBGRCx81K86mpiURp/Q/0YXyKFDzNX HpQcn99WtReAehQi7eZmmSOyFfgQNckApWoaWsJVSKkcry1H -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:56 2026 by rpki-client