This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4PZre_xvEGIN1LptsCxmZyhdSHU.roa File: 4PZre_xvEGIN1LptsCxmZyhdSHU.roa (raw, json) Hash identifier: vc7qiT6azcwog5q1LOZ8iCow4+1+VtZPm8xOyFwNbFI= Subject key identifier: E0:F6:6B:7B:FC:6F:10:62:0D:D4:BA:6D:B0:2C:66:67:28:5D:48:75 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79115839A72A56BB715F3CF2D7353242 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4PZre_xvEGIN1LptsCxmZyhdSHU.roa Signing time: Thu 01 Jan 2026 10:18:58 +0000 ROA not before: Thu 01 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216314 IP address blocks: 45.43.144.0/24 maxlen: 24 45.43.157.0/24 maxlen: 24 216.173.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:58:39:a7:2a:56:bb:71:5f:3c:f2:d7:35:32:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f66b7bfc6f10620dd4ba6db02c6667285d4875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:cb:97:7e:1e:11:df:34:3a:87:75:02:42: 4c:f4:30:34:c4:7f:5c:9a:60:82:7c:80:9c:c3:fd: 84:6e:a9:7a:8e:16:08:c7:17:a8:28:b6:af:2e:68: ac:ea:62:b0:bc:5e:83:de:a0:a3:e1:1a:e5:1b:70: ed:15:fb:93:36:93:24:f8:d2:d0:8c:18:20:db:58: a3:c2:90:4f:9f:dc:85:79:5b:c6:de:34:a4:55:a5: 2f:99:39:dc:33:fb:f3:97:28:63:6d:c9:39:25:21: 67:d3:d9:a3:b1:fe:57:e8:42:01:a2:a9:9d:42:6e: d3:d9:6a:e6:f4:f8:ae:a0:90:ab:3e:5a:79:0c:1a: b7:26:5b:c4:16:b3:9e:e4:3e:25:9a:eb:1e:e1:07: 1f:fd:be:be:9e:f3:9b:fd:11:4e:7b:5f:1b:d6:f0: 96:4e:21:4c:98:c8:c2:f7:a7:e3:55:a7:68:8d:3b: c4:9c:be:5d:36:95:18:16:5c:36:14:02:51:c1:69: 8e:5a:8c:e2:8f:0c:01:a3:0c:13:32:87:28:b5:c7: 2a:5d:b1:7f:da:fb:5d:5a:13:d8:0d:70:91:46:3d: da:a4:00:f7:68:0e:79:41:e0:98:af:b0:c0:0b:99: bd:f5:3a:2c:43:4e:c0:76:e7:85:88:ef:d8:44:ed: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:6B:7B:FC:6F:10:62:0D:D4:BA:6D:B0:2C:66:67:28:5D:48:75 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4PZre_xvEGIN1LptsCxmZyhdSHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.144.0/24 45.43.157.0/24 216.173.100.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:cc:57:e6:94:34:5a:da:5d:07:78:c4:52:70:a4:5a:68:91: 4e:1d:f0:4c:6c:45:1f:1e:a4:f3:15:9c:5c:d7:ca:7c:7f:28: d6:1d:09:c2:e8:c0:e5:af:a1:d1:27:70:e1:36:67:18:e0:0a: fd:39:20:e3:92:1a:7e:84:8c:49:86:55:2d:19:fe:e1:5b:2e: 85:a5:49:18:fd:44:f9:9c:aa:78:61:30:9c:33:3a:0b:fd:c5: 93:fd:d9:ac:2d:88:00:49:a2:e5:fa:8c:95:64:74:fc:1e:3f: 90:4f:e7:86:f3:c5:71:5b:0c:66:2c:c4:fa:6a:49:ea:2c:5e: 50:38:54:78:87:a1:69:06:6c:8b:0a:32:3d:35:1e:a5:06:ed: 3c:89:b5:f5:44:83:49:bd:3c:c7:69:9b:e2:66:ef:86:06:a7: 65:c9:64:11:0a:45:01:fc:87:cc:0a:70:59:08:80:b4:aa:1a: 6a:4d:61:74:68:70:a0:e3:00:32:92:94:09:ba:c7:73:01:2c: df:2c:ca:41:a3:a5:e8:d7:99:84:6b:a8:39:ba:54:fa:df:ed: 0e:75:2c:41:db:a6:dc:97:9f:53:ce:4d:4f:5c:39:48:0d:49: d2:5a:55:a1:1d:6a:f4:bb:66:38:6c:19:f9:fd:35:43:f1:23: d5:15:7a:b7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EVg5pypWu3FfPPLXNTJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGY2NmI3YmZjNmYxMDYyMGRkNGJhNmRiMDJjNjY2NzI4NWQ0ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8PLl34eEd80Ood1AkJM9DA0xH9c mmCCfICcw/2Ebql6jhYIxxeoKLavLmis6mKwvF6D3qCj4RrlG3DtFfuTNpMk+NLQ jBgg21ijwpBPn9yFeVvG3jSkVaUvmTncM/vzlyhjbck5JSFn09mjsf5X6EIBoqmd Qm7T2Wrm9PiuoJCrPlp5DBq3JlvEFrOe5D4lmuse4Qcf/b6+nvOb/RFOe18b1vCW TiFMmMjC96fjVadojTvEnL5dNpUYFlw2FAJRwWmOWozijwwBowwTMocotccqXbF/ 2vtdWhPYDXCRRj3apAD3aA55QeCYr7DAC5m99TosQ07AdueFiO/YRO2uzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOD2a3v8bxBiDdS6bbAsZmcoXUh1MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvNFBacmVfeHZFR0lOMUxwdHNDeG1aeWhkU0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALSuQAwQA LSudAwQA2K1kMA0GCSqGSIb3DQEBCwUAA4IBAQAdzFfmlDRa2l0HeMRScKRaaJFO HfBMbEUfHqTzFZxc18p8fyjWHQnC6MDlr6HRJ3DhNmcY4Ar9OSDjkhp+hIxJhlUt Gf7hWy6FpUkY/UT5nKp4YTCcMzoL/cWT/dmsLYgASaLl+oyVZHT8Hj+QT+eG88Vx WwxmLMT6aknqLF5QOFR4h6FpBmyLCjI9NR6lBu08ibX1RINJvTzHaZviZu+GBqdl yWQRCkUB/IfMCnBZCIC0qhpqTWF0aHCg4wAykpQJusdzASzfLMpBo6Xo15mEa6g5 ulT63+0OdSxB26bcl59Tzk1PXDlIDUnSWlWhHWr0u2Y4bBn5/TVD8SPVFXq3 -----END CERTIFICATE-----Generated at Fri Jan 2 02:40:54 2026 by rpki-client