This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa File: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (raw, json) Hash identifier: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw= Subject key identifier: 33:8A:BD:0C:6E:FF:EE:D1:2D:6F:1C:6C:58:12:97:42:DC:46:B7:B9 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80CFA2A1A05EA1A3EA1CEFB89CA4B Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa Signing time: Thu 01 Jan 2026 18:18:09 +0000 ROA not before: Thu 01 Jan 2026 18:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 45.80.228.0/22 maxlen: 24 178.159.92.0/24 maxlen: 24 178.159.94.0/24 maxlen: 24 185.221.196.0/24 maxlen: 24 185.221.199.0/24 maxlen: 24 185.246.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0c:fa:2a:1a:05:ea:1a:3e:a1:ce:fb:89:ca:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=338abd0c6effeed12d6f1c6c58129742dc46b7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:ad:29:be:9c:e9:1f:1e:d1:18:b3:1b:c0: 24:eb:c2:ae:c2:d2:fa:88:d1:e4:ca:2b:d5:c1:9f: 56:dc:9c:84:ba:bb:00:2d:16:5c:dc:9c:7f:ce:23: 60:03:ab:08:93:e8:41:24:f0:f4:67:ef:e0:a0:3f: 29:41:cd:d7:6c:a5:9b:76:ed:fa:cd:7f:9b:24:23: 95:05:24:33:3a:53:89:a4:e8:62:86:89:fd:7d:ae: 26:7e:5c:85:5f:13:6f:86:0c:85:24:a3:ee:eb:2f: 7b:ff:f4:15:ee:38:c8:60:da:4e:9f:53:43:2a:d9: e1:60:c5:5f:f2:ee:53:b4:25:e4:17:13:a8:3d:87: c1:dc:42:fb:f1:40:d9:d3:a7:9d:03:5c:1c:50:7a: 26:ce:b4:3a:de:3b:64:f9:fb:e9:2e:93:67:1b:05: 86:a3:22:dd:ed:78:ae:0d:f7:f2:1e:1e:89:f4:af: 61:58:6b:b6:f5:5b:00:a6:ad:b5:23:13:22:98:15: b3:6a:b7:1f:40:9c:f7:ec:55:79:02:5f:93:f0:8a: 18:aa:25:3b:b1:38:63:34:21:88:97:d2:6c:08:01: 6f:2b:89:4a:8d:48:f7:06:02:90:cb:b3:fd:e7:ad: ed:59:1d:20:d2:44:2f:28:e3:59:03:2d:80:e1:21: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:BD:0C:6E:FF:EE:D1:2D:6F:1C:6C:58:12:97:42:DC:46:B7:B9 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.228.0/22 178.159.92.0/24 178.159.94.0/24 185.221.196.0/24 185.221.199.0/24 185.246.217.0/24 Signature Algorithm: sha256WithRSAEncryption 78:0c:fd:fa:af:be:9e:ac:a7:04:9b:70:8d:8e:2c:6b:86:c6: ab:0f:37:38:8c:2d:f1:e5:3a:1d:4d:11:79:bf:21:f4:21:76: 01:f5:dd:70:bb:34:9a:3d:47:69:9c:dd:55:9d:59:77:d9:67: a3:06:c4:30:94:23:df:2c:86:76:f5:b8:f7:4a:bc:a4:16:b7: a0:8a:e1:f2:f5:58:cd:bc:8f:da:85:15:a4:49:19:6c:5c:d8: e9:b2:22:7e:9e:da:59:75:d2:35:b7:a2:4f:f0:65:0b:21:7e: 4a:5b:42:b1:9e:51:a1:a3:a6:ca:60:e0:c3:71:31:12:6f:e0: 05:8d:de:3c:d8:49:c8:94:5e:f7:0d:81:d8:8d:bb:e3:95:4f: 76:3f:e4:08:76:c8:43:f5:3e:51:8d:11:99:3f:31:34:f1:9b: a2:4a:9d:14:ec:20:84:0f:0e:47:87:8e:5f:3e:88:08:c8:a0: ba:05:a3:14:4d:00:da:61:81:63:bb:bd:3a:90:04:2a:75:db: d8:7c:d0:38:39:bf:ea:a3:f6:e4:0e:88:4f:b0:c9:f8:9a:0a: 46:37:18:ea:1e:0c:80:60:c8:b6:25:65:18:0f:ac:bb:ab:e0: 8d:82:c3:bb:9b:9f:77:f7:17:b3:f8:f5:24:6b:ae:98:ac:7e: 3c:9b:c7:ff -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yAz6KhoF6ho+oc77icpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzhhYmQwYzZlZmZlZWQxMmQ2ZjFjNmM1ODEyOTc0MmRjNDZiN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte+tKb6c6R8e0RizG8Ak68KuwtL6 iNHkyivVwZ9W3JyEursALRZc3Jx/ziNgA6sIk+hBJPD0Z+/goD8pQc3XbKWbdu36 zX+bJCOVBSQzOlOJpOhihon9fa4mflyFXxNvhgyFJKPu6y97//QV7jjIYNpOn1ND KtnhYMVf8u5TtCXkFxOoPYfB3EL78UDZ06edA1wcUHomzrQ63jtk+fvpLpNnGwWG oyLd7XiuDffyHh6J9K9hWGu29VsApq21IxMimBWzarcfQJz37FV5Al+T8IoYqiU7 sThjNCGIl9JsCAFvK4lKjUj3BgKQy7P9563tWR0g0kQvKONZAy2A4SETWwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDOKvQxu/+7RLW8cbFgSl0LcRre5MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvTTRxOURHN183dEV0Ynh4c1dCS1hRdHhHdDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLVDkAwQA sp9cAwQAsp9eAwQAud3EAwQAud3HAwQAufbZMA0GCSqGSIb3DQEBCwUAA4IBAQB4 DP36r76erKcEm3CNjixrhsarDzc4jC3x5TodTRF5vyH0IXYB9d1wuzSaPUdpnN1V nVl32WejBsQwlCPfLIZ29bj3SrykFregiuHy9VjNvI/ahRWkSRlsXNjpsiJ+ntpZ ddI1t6JP8GULIX5KW0KxnlGho6bKYODDcTESb+AFjd482EnIlF73DYHYjbvjlU92 P+QIdshD9T5RjRGZPzE08ZuiSp0U7CCEDw5Hh45fPogIyKC6BaMUTQDaYYFju706 kAQqddvYfNA4Ob/qo/bkDohPsMn4mgpGNxjqHgyAYMi2JWUYD6y7q+CNgsO7m593 9xez+PUka66YrH48m8f/ -----END CERTIFICATE-----Generated at Tue Jan 20 06:05:26 2026 by rpki-client