This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/4CZjW2K05gjTWVSm5HCC1YhuGFM.roa File: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (raw, json) Hash identifier: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI= Subject key identifier: E0:26:63:5B:62:B4:E6:08:D3:59:54:A6:E4:70:82:D5:88:6E:18:53 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B3649B1B5D6822805257A9674D0D1A1 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/4CZjW2K05gjTWVSm5HCC1YhuGFM.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56488 IP address blocks: 45.90.20.0/22 maxlen: 24 45.131.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:49:b1:b5:d6:82:28:05:25:7a:96:74:d0:d1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e026635b62b4e608d35954a6e47082d5886e1853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:8a:76:dd:5d:03:49:50:a5:7d:22:6a:14: c0:5d:14:b7:eb:9d:06:30:10:64:72:03:d3:cd:a5: 6c:44:4d:d0:6a:b8:52:f0:e3:79:ea:bf:9e:40:08: e7:1d:36:c3:97:17:e8:9c:cb:a6:35:45:b1:c5:63: 0a:a6:f6:58:e9:0f:f9:e3:72:21:c0:b1:8a:7d:03: d9:72:0b:b6:82:7f:85:4a:ec:09:90:ba:27:63:22: 48:68:91:b8:6b:71:78:be:fb:14:c6:36:02:84:2f: 80:52:f7:72:00:c1:23:1b:10:93:54:1e:6e:b8:73: 6c:64:01:80:f3:61:a4:f1:37:99:ef:f1:0f:68:14: 4d:d3:3b:25:c7:fc:3b:e1:5c:a7:3d:b4:59:15:89: d7:3e:1e:1a:89:f6:c3:7c:19:6d:b0:47:81:0f:14: 43:a6:ef:2e:c1:80:8b:3b:b9:e8:09:87:cd:a6:74: 07:af:a4:8f:e2:75:ae:c6:a9:2d:2d:94:a5:69:7f: fb:b3:bb:e8:8a:51:cb:eb:cc:f2:13:37:15:18:ee: 14:06:f0:f9:e4:0c:55:f2:92:42:4e:5c:f2:ed:5c: 3d:f3:c3:59:a1:ea:04:57:84:d4:90:a3:62:5f:8a: da:02:f2:b3:b7:6e:c5:8b:a8:4c:d1:e4:43:c2:2f: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:26:63:5B:62:B4:E6:08:D3:59:54:A6:E4:70:82:D5:88:6E:18:53 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/4CZjW2K05gjTWVSm5HCC1YhuGFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.20.0/22 45.131.76.0/23 Signature Algorithm: sha256WithRSAEncryption 34:e7:c0:45:67:10:48:94:5b:89:ec:b4:2a:be:db:a7:bb:63: 92:4a:d8:d0:4b:0d:16:a9:e0:a2:78:ad:54:01:60:ae:6b:13: 83:db:21:ee:f3:6d:16:96:59:f1:83:98:97:4a:34:75:72:4e: ab:a7:65:fa:05:d0:f8:24:ce:c7:1c:47:4b:02:48:7d:31:bc: 1f:31:48:d8:eb:f9:99:e6:1f:18:2e:c5:41:20:83:97:e7:7d: 94:7c:d8:aa:5a:25:69:07:83:a1:5a:2a:42:8c:61:a9:d9:33: ea:75:d7:0f:07:e9:75:4e:87:a4:bc:57:d3:0b:b6:06:10:65: 3c:47:67:ea:ee:fa:0d:54:d8:3e:26:ad:44:88:52:23:80:98: 6d:72:52:b4:07:b4:1c:52:7a:3f:8d:d8:f8:40:60:6f:c4:de: ba:99:c2:f5:f0:6f:67:9d:65:1f:30:5a:12:0c:3e:e6:a4:cc: 3c:84:e7:de:95:65:e5:d8:36:f4:8e:7e:53:c0:f8:fa:05:dd: b4:9b:ce:de:0f:c5:b0:ab:86:b8:79:74:3d:cc:a5:65:e6:21: bb:c4:21:62:ad:3e:24:c4:a2:10:19:e6:31:8d:7e:39:44:1d: b2:65:98:53:f3:aa:10:74:e9:9f:a9:64:2d:85:66:f4:cf:21: e9:e0:c7:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NkmxtdaCKAUlepZ00NGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDI2NjM1YjYyYjRlNjA4ZDM1OTU0YTZlNDcwODJkNTg4NmUxODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvuKdt1dA0lQpX0iahTAXRS3650G MBBkcgPTzaVsRE3QarhS8ON56r+eQAjnHTbDlxfonMumNUWxxWMKpvZY6Q/543Ih wLGKfQPZcgu2gn+FSuwJkLonYyJIaJG4a3F4vvsUxjYChC+AUvdyAMEjGxCTVB5u uHNsZAGA82Gk8TeZ7/EPaBRN0zslx/w74VynPbRZFYnXPh4aifbDfBltsEeBDxRD pu8uwYCLO7noCYfNpnQHr6SP4nWuxqktLZSlaX/7s7voilHL68zyEzcVGO4UBvD5 5AxV8pJCTlzy7Vw988NZoeoEV4TUkKNiX4raAvKzt27Fi6hM0eRDwi9CjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOAmY1titOYI01lUpuRwgtWIbhhTMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvNENaalcySzA1Z2pUV1ZTbTVIQ0MxWWh1R0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVoUAwQB LYNMMA0GCSqGSIb3DQEBCwUAA4IBAQA058BFZxBIlFuJ7LQqvtunu2OSStjQSw0W qeCieK1UAWCuaxOD2yHu820Wllnxg5iXSjR1ck6rp2X6BdD4JM7HHEdLAkh9Mbwf MUjY6/mZ5h8YLsVBIIOX532UfNiqWiVpB4OhWipCjGGp2TPqddcPB+l1ToekvFfT C7YGEGU8R2fq7voNVNg+Jq1EiFIjgJhtclK0B7QcUno/jdj4QGBvxN66mcL18G9n nWUfMFoSDD7mpMw8hOfelWXl2Db0jn5TwPj6Bd20m87eD8Wwq4a4eXQ9zKVl5iG7 xCFirT4kxKIQGeYxjX45RB2yZZhT86oQdOmfqWQthWb0zyHp4McJ -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:49 2026 by rpki-client