This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/4KbAohA8ssFR1i33E3s1iD_d4NM.roa File: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (raw, json) Hash identifier: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g= Subject key identifier: E0:A6:C0:A2:10:3C:B2:C1:51:D6:2D:F7:13:7B:35:88:3F:DD:E0:D3 Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Certificate serial: 019B7EA72A564DA30A790F944BAA07B1D383 Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/4KbAohA8ssFR1i33E3s1iD_d4NM.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 46.22.208.0/20 maxlen: 24 80.79.112.0/20 maxlen: 24 185.246.184.0/22 maxlen: 24 2a01:97a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2a:56:4d:a3:0a:79:0f:94:4b:aa:07:b1:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a6c0a2103cb2c151d62df7137b35883fdde0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:af:0e:bf:c4:31:32:24:d0:ac:c0:f3:8d: 4b:d4:d3:8d:9c:0d:96:66:b1:03:c1:06:43:02:6b: 33:51:40:de:be:6b:0e:95:28:99:36:d1:93:8a:3b: 00:7e:b8:91:aa:79:75:f5:06:c6:5e:bc:b9:8f:5b: d0:a7:15:a9:6c:89:c2:e0:80:51:41:bb:17:d0:94: a1:a0:fa:46:d3:31:92:67:75:95:dd:44:4c:21:e1: 08:9c:bc:0c:51:cb:e4:e4:97:c1:47:a1:a6:d1:3b: 07:46:b4:00:70:9e:6c:f1:99:64:5d:81:d6:71:16: a9:50:b4:44:80:5f:02:69:fb:63:20:6d:69:93:e5: 8f:96:96:e1:29:2b:9a:4b:74:1c:78:ba:fb:a1:a7: ad:28:a7:ed:77:aa:41:56:f7:ed:0a:5e:e4:95:86: 25:cb:e6:77:36:58:80:0a:cb:0d:36:da:7e:1b:0f: 5d:2c:ed:85:a3:69:72:92:16:47:33:b5:c8:86:17: 57:55:44:02:08:b8:ee:08:e5:d3:b2:c7:7b:92:cb: 06:78:e4:34:2b:d3:47:cd:74:c0:16:a7:0a:f8:57: bb:fe:36:1c:79:bc:34:04:6f:71:d5:59:51:5b:93: 8d:5d:d1:9e:7e:12:dc:ab:bb:bc:7d:40:ba:fa:38: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:C0:A2:10:3C:B2:C1:51:D6:2D:F7:13:7B:35:88:3F:DD:E0:D3 X509v3 Authority Key Identifier: keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/4KbAohA8ssFR1i33E3s1iD_d4NM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.208.0/20 80.79.112.0/20 185.246.184.0/22 IPv6: 2a01:97a0::/32 Signature Algorithm: sha256WithRSAEncryption 76:67:6e:3b:34:d3:40:e5:54:02:e1:54:7c:69:47:da:02:ec: cb:44:73:2c:f7:8c:61:b4:8a:14:aa:84:18:4f:59:3c:09:88: c2:6a:44:b1:53:40:38:70:5d:ee:39:a0:72:27:59:2d:90:7b: de:4b:26:76:93:36:aa:1f:d5:af:5f:5a:8f:2e:2d:ff:ed:68: 1a:d1:f6:2d:3b:42:91:59:b7:5f:ac:e2:b0:1e:fe:1f:49:f6: 08:b3:98:b1:a3:f0:6c:82:cb:ee:56:43:56:4a:dc:a2:7a:49: 56:64:ad:01:d4:cd:47:8f:5d:fb:62:0a:34:48:6a:7b:3f:04: 40:1a:07:12:1c:47:a3:b4:e6:13:ba:5d:74:a0:ab:71:ea:dc: 49:e2:c0:fb:35:ee:8f:1f:97:93:87:05:8e:7a:6d:d4:ef:27: 4c:74:4b:bf:95:4b:93:50:cf:a9:18:d7:7f:52:8e:85:2e:4e: 64:e6:09:da:0b:c6:8d:2c:96:0f:5c:ee:d5:e1:49:ff:5c:a0: 87:a5:50:0a:df:5c:ce:a7:1c:2c:a2:14:4a:85:e7:75:1f:31: e0:6b:45:1e:f2:80:b7:24:ab:38:01:a5:a9:52:ab:90:3f:3f: 66:d1:3a:92:d5:f2:22:eb:28:22:3e:95:39:f7:2c:76:51:5a: 23:02:8e:de -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pypWTaMKeQ+US6oHsdODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz NDVhODEwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGE2YzBhMjEwM2NiMmMxNTFkNjJkZjcxMzdiMzU4ODNmZGRlMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ivDr/EMTIk0KzA841L1NONnA2W ZrEDwQZDAmszUUDevmsOlSiZNtGTijsAfriRqnl19QbGXry5j1vQpxWpbInC4IBR QbsX0JShoPpG0zGSZ3WV3URMIeEInLwMUcvk5JfBR6Gm0TsHRrQAcJ5s8ZlkXYHW cRapULREgF8CaftjIG1pk+WPlpbhKSuaS3QceLr7oaetKKftd6pBVvftCl7klYYl y+Z3NliACssNNtp+Gw9dLO2Fo2lykhZHM7XIhhdXVUQCCLjuCOXTssd7kssGeOQ0 K9NHzXTAFqcK+Fe7/jYcebw0BG9x1VlRW5ONXdGefhLcq7u8fUC6+ji4hwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOCmwKIQPLLBUdYt9xN7NYg/3eDTMB8GA1UdIwQY MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt YWU2MGJlYTA2YTljLzEvNEtiQW9oQThzc0ZSMWkzM0UzczFpRF9kNE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQELhbQAwQE UE9wAwQCufa4MA0EAgACMAcDBQAqAZegMA0GCSqGSIb3DQEBCwUAA4IBAQB2Z247 NNNA5VQC4VR8aUfaAuzLRHMs94xhtIoUqoQYT1k8CYjCakSxU0A4cF3uOaByJ1kt kHveSyZ2kzaqH9WvX1qPLi3/7Wga0fYtO0KRWbdfrOKwHv4fSfYIs5ixo/Bsgsvu VkNWStyieklWZK0B1M1Hj137Ygo0SGp7PwRAGgcSHEejtOYTul10oKtx6txJ4sD7 Ne6PH5eThwWOem3U7ydMdEu/lUuTUM+pGNd/Uo6FLk5k5gnaC8aNLJYPXO7V4Un/ XKCHpVAK31zOpxwsohRKhed1HzHga0Ue8oC3JKs4AaWpUquQPz9m0TqS1fIi6ygi PpU59yx2UVojAo7e -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:36 2026 by rpki-client