This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4ZOTDy3N0I9GllRqAZX6Wg7ihAc.roa File: 4ZOTDy3N0I9GllRqAZX6Wg7ihAc.roa (raw, json) Hash identifier: 9bHqPM2dasvL5zhoJi704IPtnMJZrbgiqZWeUo/Rf38= Subject key identifier: E1:93:93:0F:2D:CD:D0:8F:46:96:54:6A:01:95:FA:5A:0E:E2:84:07 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79115B90514087AA345162AC7A233F99 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4ZOTDy3N0I9GllRqAZX6Wg7ihAc.roa Signing time: Thu 01 Jan 2026 10:18:59 +0000 ROA not before: Thu 01 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 45.43.172.0/22 maxlen: 22 64.137.29.0/24 maxlen: 24 64.137.39.0/24 maxlen: 24 64.137.44.0/24 maxlen: 24 64.137.45.0/24 maxlen: 24 64.137.46.0/24 maxlen: 24 64.137.72.0/24 maxlen: 24 64.137.85.0/24 maxlen: 24 64.137.114.0/24 maxlen: 24 64.137.116.0/24 maxlen: 24 64.137.125.0/24 maxlen: 24 84.246.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:5b:90:51:40:87:aa:34:51:62:ac:7a:23:3f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e193930f2dcdd08f4696546a0195fa5a0ee28407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:0d:28:1d:53:18:ff:16:d2:9e:1f:0c:af: 33:17:3f:01:e3:09:89:8c:05:df:8e:ba:32:b0:a3: c3:9f:fa:65:19:7c:2a:2c:13:ec:fc:7b:82:bd:58: 61:a0:4d:5c:3a:6d:7b:ee:13:28:ee:91:41:84:1f: 7d:2b:47:c7:8f:0b:a8:32:f6:ac:4e:99:99:bd:c7: 1e:84:f2:96:70:6a:48:de:d9:ce:cc:50:c1:1b:23: a4:6e:ca:f1:95:5c:24:ad:1e:50:b9:62:6e:70:2b: 8b:d0:bc:bf:26:15:28:37:a1:ec:b1:2d:c8:fc:21: 49:dc:20:31:05:c1:18:7f:02:d4:1d:29:3f:87:7b: bb:71:00:fe:5d:56:15:88:4e:4a:9d:de:30:72:0f: 63:4e:91:c8:6c:d0:e6:9e:3c:e9:07:49:a0:19:14: 1d:d5:de:ef:3c:a8:3d:42:ce:75:eb:a4:88:90:0d: da:e5:43:67:7e:65:fa:40:7d:ce:c8:3b:03:40:c6: d6:4a:29:5b:84:79:0d:84:2f:f9:40:bb:f5:6d:a0: 87:eb:78:09:ac:fd:db:12:3a:b9:02:bd:8b:54:4f: e3:76:8f:f1:95:d3:61:61:84:1b:cc:07:5a:f8:74: 6c:de:e3:3d:51:a9:81:61:f9:55:15:c6:e0:7f:2b: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:93:93:0F:2D:CD:D0:8F:46:96:54:6A:01:95:FA:5A:0E:E2:84:07 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4ZOTDy3N0I9GllRqAZX6Wg7ihAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.172.0/22 64.137.29.0/24 64.137.39.0/24 64.137.44.0-64.137.46.255 64.137.72.0/24 64.137.85.0/24 64.137.114.0/24 64.137.116.0/24 64.137.125.0/24 84.246.108.0/24 Signature Algorithm: sha256WithRSAEncryption 83:97:6d:73:97:99:d0:74:ae:fe:24:c2:f2:29:d5:99:d6:e5: 0a:22:5f:fa:84:dd:e1:5f:18:46:d8:41:13:30:6c:b0:3f:89: 71:bf:73:d9:ca:6b:16:51:68:6a:82:9c:e5:c0:6c:ed:06:4e: a3:5c:b6:54:0c:a0:c1:38:d4:fd:ce:fe:0f:bb:54:b9:e7:b9: 85:2a:ff:3c:f4:80:37:d2:78:d7:75:9b:51:48:f3:76:d8:90: 26:a8:6f:2c:3c:b7:13:58:3d:07:d5:8e:29:1b:6b:79:ff:85: 86:dc:16:89:bc:78:6d:b1:ce:16:9c:fc:90:1c:eb:6a:9f:61: 7c:6f:c9:29:41:ab:d2:88:2a:0a:f6:5f:ab:d9:31:0e:92:25: 67:ec:6f:bd:f2:f9:be:b8:4e:43:66:3e:1f:f4:9d:b8:e8:59: ea:9c:8a:f9:c3:07:e1:de:13:16:a2:39:b4:db:f9:a2:9c:4a: 7a:44:b1:72:f1:bc:a4:7c:22:4e:13:99:7f:83:b1:8d:03:c6: 16:c0:eb:70:a0:2b:7d:ef:3d:9a:1a:2f:a1:62:88:32:39:cf: 7f:e9:fb:98:20:84:e0:24:ae:c2:87:a5:ea:c3:f6:c5:90:14: 22:86:d7:37:8f:3d:c4:55:7f:02:9b:ff:e8:50:c7:84:87:93: 6d:50:c3:21 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt5EVuQUUCHqjRRYqx6Iz+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTkzOTMwZjJkY2RkMDhmNDY5NjU0NmEwMTk1ZmE1YTBlZTI4NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJMNKB1TGP8W0p4fDK8zFz8B4wmJ jAXfjroysKPDn/plGXwqLBPs/HuCvVhhoE1cOm177hMo7pFBhB99K0fHjwuoMvas TpmZvccehPKWcGpI3tnOzFDBGyOkbsrxlVwkrR5QuWJucCuL0Ly/JhUoN6HssS3I /CFJ3CAxBcEYfwLUHSk/h3u7cQD+XVYViE5Knd4wcg9jTpHIbNDmnjzpB0mgGRQd 1d7vPKg9Qs5166SIkA3a5UNnfmX6QH3OyDsDQMbWSilbhHkNhC/5QLv1baCH63gJ rP3bEjq5Ar2LVE/jdo/xldNhYYQbzAda+HRs3uM9UamBYflVFcbgfytu7QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFOGTkw8tzdCPRpZUagGV+loO4oQHMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvNFpPVER5M04wSTlHbGxScUFaWDZXZzdpaEFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQCLSusAwQA QIkdAwQAQIknMAwDBAJAiSwDBABAiS4DBABAiUgDBABAiVUDBABAiXIDBABAiXQD BABAiX0DBABU9mwwDQYJKoZIhvcNAQELBQADggEBAIOXbXOXmdB0rv4kwvIp1ZnW 5QoiX/qE3eFfGEbYQRMwbLA/iXG/c9nKaxZRaGqCnOXAbO0GTqNctlQMoME41P3O /g+7VLnnuYUq/zz0gDfSeNd1m1FI83bYkCaobyw8txNYPQfVjikba3n/hYbcFom8 eG2xzhac/JAc62qfYXxvySlBq9KIKgr2X6vZMQ6SJWfsb73y+b64TkNmPh/0nbjo WeqcivnDB+HeExaiObTb+aKcSnpEsXLxvKR8Ik4TmX+DsY0DxhbA63CgK33vPZoa L6FiiDI5z3/p+5gghOAkrsKHperD9sWQFCKG1zePPcRVfwKb/+hQx4SHk21QwyE= -----END CERTIFICATE-----Generated at Fri Jan 2 02:41:18 2026 by rpki-client