This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa File: 4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa (raw, json) Hash identifier: R6o6h7FPQ78N3YyiGkBHhpV10pWrv1sif+o6N3TYJMg= Subject key identifier: E1:0B:50:E0:93:B8:6C:27:72:B9:2F:5F:52:67:BD:0B:72:F1:75:17 Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Certificate serial: 019B797EE009BB95F091BD48289859E9E04A Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43858 IP address blocks: 91.198.199.0/24 maxlen: 24 91.244.246.0/24 maxlen: 24 146.255.168.0/21 maxlen: 21 185.11.160.0/22 maxlen: 22 185.80.176.0/22 maxlen: 22 2a03:39c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e0:09:bb:95:f0:91:bd:48:28:98:59:e9:e0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10b50e093b86c2772b92f5f5267bd0b72f17517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:fe:55:fe:ba:51:59:4e:b1:eb:dd:fd:32: 9d:a4:5b:36:57:59:a2:8a:03:5a:86:78:e4:7c:ff: 43:a6:d0:66:88:2b:60:46:ef:39:25:db:d0:09:db: 23:de:7b:7e:2d:86:a4:3d:d2:ad:73:12:2b:1f:06: 31:74:29:4d:b0:83:7c:df:68:3c:fc:4c:7b:77:34: 5d:2d:a3:10:2e:04:93:3b:f3:a6:62:0b:39:5c:27: 43:50:d9:4b:c7:40:85:71:0f:51:ae:ad:ad:44:eb: a6:82:4a:78:09:37:1d:d7:b5:76:14:09:ef:49:20: 0d:e4:13:4d:55:78:5e:28:fe:09:9c:ae:41:69:39: 3d:6e:1f:ab:2e:b9:43:a9:75:2e:52:50:36:eb:52: c8:f0:b7:32:b8:90:74:da:75:cb:d6:f9:6b:4f:8e: 8b:fc:ce:19:87:99:da:0a:8f:4b:fc:11:f5:bb:32: 9b:0a:d5:7f:08:d7:20:40:e1:ce:74:97:03:64:ac: 84:9e:3a:c8:bf:f8:7c:d3:56:b7:f1:66:5d:68:20: 63:7e:1b:cc:90:7d:ff:b3:ab:31:7b:80:b0:ea:47: 2b:b6:e3:84:0a:71:e3:3e:b0:7e:29:78:7f:bd:57: 9a:2e:92:95:80:bf:33:be:7e:c1:ed:1f:d2:4b:da: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:50:E0:93:B8:6C:27:72:B9:2F:5F:52:67:BD:0B:72:F1:75:17 X509v3 Authority Key Identifier: keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/4QtQ4JO4bCdyuS9fUme9C3LxdRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.199.0/24 91.244.246.0/24 146.255.168.0/21 185.11.160.0/22 185.80.176.0/22 IPv6: 2a03:39c0::/29 Signature Algorithm: sha256WithRSAEncryption 5c:8f:6a:6e:fb:b3:7f:95:5e:85:42:ca:26:cf:48:34:c7:c8: 62:77:fe:ec:3e:33:41:e7:47:ce:e7:8b:c7:f2:4e:f7:da:4f: 06:9e:83:f2:64:97:ee:96:36:41:9e:f9:a4:dc:15:f8:a6:98: f2:e9:b7:6c:02:0a:4f:10:46:95:ca:a6:7c:27:0d:5e:bf:b4: 77:6d:4a:e8:bf:f2:28:f6:eb:da:d3:fa:8e:3a:ee:86:47:d1: 07:5f:dc:b7:3e:49:52:3a:91:3c:5c:75:e8:63:14:07:7f:63: de:f8:60:90:16:6e:1d:6c:dd:bc:57:d3:37:03:2f:a4:22:3a: f7:0a:f3:96:50:f8:e7:7b:06:84:c8:0e:d4:6e:d0:0b:1b:13: ab:ca:2e:7b:4d:19:eb:1b:41:54:91:dd:3c:96:38:fd:be:42: 5a:44:ca:cb:c2:d8:ac:36:14:ed:fe:4d:38:87:d6:3e:cb:53: a0:bc:42:76:da:75:d3:53:cb:ee:74:8d:20:4d:9d:9d:0b:6c: 45:28:9a:ad:52:77:27:ac:0c:b6:b5:53:d2:14:a6:77:3f:c9: 57:d4:18:c4:9f:aa:9d:0a:f5:d7:e2:a1:46:26:70:61:ca:fd: 99:58:72:9c:d5:fd:42:6e:94:49:ba:dd:53:a8:6c:ae:4d:c6: c5:ff:6a:f7 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5fuAJu5Xwkb1IKJhZ6eBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj MTVhNzQwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTBiNTBlMDkzYjg2YzI3NzJiOTJmNWY1MjY3YmQwYjcyZjE3NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3af+Vf66UVlOsevd/TKdpFs2V1mi igNahnjkfP9DptBmiCtgRu85JdvQCdsj3nt+LYakPdKtcxIrHwYxdClNsIN832g8 /Ex7dzRdLaMQLgSTO/OmYgs5XCdDUNlLx0CFcQ9Rrq2tROumgkp4CTcd17V2FAnv SSAN5BNNVXheKP4JnK5BaTk9bh+rLrlDqXUuUlA261LI8LcyuJB02nXL1vlrT46L /M4Zh5naCo9L/BH1uzKbCtV/CNcgQOHOdJcDZKyEnjrIv/h801a38WZdaCBjfhvM kH3/s6sxe4Cw6kcrtuOECnHjPrB+KXh/vVeaLpKVgL8zvn7B7R/SS9rqVwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFOELUOCTuGwncrkvX1JnvQty8XUXMB8GA1UdIwQY MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt YjI1MTM3N2FkZDg2LzEvNFF0UTRKTzRiQ2R5dVM5ZlVtZTlDM0x4ZFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2 LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW8bHAwQA W/T2AwQDkv+oAwQCuQugAwQCuVCwMA0EAgACMAcDBQMqAznAMA0GCSqGSIb3DQEB CwUAA4IBAQBcj2pu+7N/lV6FQsomz0g0x8hid/7sPjNB50fO54vH8k732k8GnoPy ZJfuljZBnvmk3BX4ppjy6bdsAgpPEEaVyqZ8Jw1ev7R3bUrov/Io9uva0/qOOu6G R9EHX9y3PklSOpE8XHXoYxQHf2Pe+GCQFm4dbN28V9M3Ay+kIjr3CvOWUPjnewaE yA7UbtALGxOryi57TRnrG0FUkd08ljj9vkJaRMrLwtisNhTt/k04h9Y+y1OgvEJ2 2nXTU8vudI0gTZ2dC2xFKJqtUncnrAy2tVPSFKZ3P8lX1BjEn6qdCvXX4qFGJnBh yv2ZWHKc1f1CbpRJut1TqGyuTcbF/2r3 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:19 2026 by rpki-client