This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/4I-5kXF5SJnT3uPE6yqDq8hFQPQ.roa File: 4I-5kXF5SJnT3uPE6yqDq8hFQPQ.roa (raw, json) Hash identifier: Apf1NMvBZw1/RkmQU/aIL1IFGgwflXG8qC9+RC4VTAg= Subject key identifier: E0:8F:B9:91:71:79:48:99:D3:DE:E3:C4:EB:2A:83:AB:C8:45:40:F4 Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5 Certificate serial: 019B7D5C4AFB6CD0A9EF960BEE7B80CC3B1B Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/4I-5kXF5SJnT3uPE6yqDq8hFQPQ.roa Signing time: Fri 02 Jan 2026 06:19:18 +0000 ROA not before: Fri 02 Jan 2026 06:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39287 IP address blocks: 45.142.140.0/22 maxlen: 22 45.158.116.0/22 maxlen: 22 80.78.16.0/20 maxlen: 20 95.215.16.0/22 maxlen: 22 185.193.124.0/22 maxlen: 22 185.193.125.0/24 maxlen: 24 185.193.126.0/23 maxlen: 23 195.14.20.0/24 maxlen: 24 2001:67c:2354::/48 maxlen: 48 2001:67c:2358::/48 maxlen: 48 2a02:6f8::/32 maxlen: 32 2a0a:3840::/29 maxlen: 29 2a0e:d9c0::/29 maxlen: 29 2a0f:5e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4a:fb:6c:d0:a9:ef:96:0b:ee:7b:80:cc:3b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5 Validity Not Before: Jan 2 06:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e08fb99171794899d3dee3c4eb2a83abc84540f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:d5:e6:a0:41:a5:3b:3e:b3:cb:a1:fe:11: b3:52:c6:44:0c:93:f4:3d:e2:38:59:c0:1b:9c:00: 7d:49:e9:ee:1b:4e:98:cd:72:a1:e8:ec:c8:54:01: f2:d5:4d:5f:c0:e4:84:bc:6d:66:b5:e2:fb:be:6c: 4b:45:d3:ae:98:10:8e:f1:02:7b:d9:92:99:9a:ae: 74:55:bd:7f:24:d4:d5:da:82:68:eb:f1:34:26:c2: 4e:c7:6e:ae:29:d0:87:da:96:6e:c2:05:d1:13:aa: d7:0d:e0:2b:50:0f:72:32:a0:7b:cc:fb:07:da:f9: 8f:bc:30:b0:a5:39:6b:d3:94:e6:f5:77:ea:34:76: 03:97:a9:cf:56:06:a7:69:93:ca:4e:b1:a8:17:57: a4:63:74:d2:c2:51:d2:46:16:8f:5c:d2:b0:8a:8e: 91:00:8a:50:ad:0f:c7:08:28:ff:07:db:fa:a2:ca: 4a:96:76:e3:42:4b:22:be:68:7e:a7:9b:68:d3:30: c4:78:a5:7b:47:09:e0:b2:84:2c:ed:47:f4:ad:2e: 55:4d:6c:22:47:9d:ce:a7:10:f7:b3:75:b2:d6:1c: 33:10:48:8e:f0:9e:b5:f1:58:64:f4:e2:a6:d0:f4: 78:77:68:21:30:f6:55:3b:ac:1f:2a:5c:65:d0:4e: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8F:B9:91:71:79:48:99:D3:DE:E3:C4:EB:2A:83:AB:C8:45:40:F4 X509v3 Authority Key Identifier: keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/4I-5kXF5SJnT3uPE6yqDq8hFQPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.140.0/22 45.158.116.0/22 80.78.16.0/20 95.215.16.0/22 185.193.124.0/22 195.14.20.0/24 IPv6: 2001:67c:2354::/48 2001:67c:2358::/48 2a02:6f8::/32 2a0a:3840::/29 2a0e:d9c0::/29 2a0f:5e80::/29 Signature Algorithm: sha256WithRSAEncryption 55:3f:53:af:6c:ff:75:2d:4f:e0:18:d7:a1:31:54:14:cc:aa: 92:2e:83:a3:2a:b9:f0:dc:f6:af:66:09:e9:03:48:2e:71:b7: 3f:e8:15:b1:79:3d:c0:3d:16:ee:78:bc:60:5f:d6:e9:72:1d: bf:3f:60:39:c7:c1:83:7b:9c:09:57:e4:f3:b2:0e:66:24:a3: 3c:f8:22:4e:02:83:a8:b9:27:b6:cb:d7:a9:69:d4:4f:c7:d2: b1:f0:e8:a4:01:be:73:a5:f3:31:fc:4f:5a:af:b1:65:6b:89: 01:53:e5:91:33:e9:40:7a:3f:06:32:c0:dc:b2:a7:a0:c9:40: 4c:0f:35:d6:4c:00:e3:21:b1:50:0d:15:4c:da:72:9e:1d:39: 06:a0:fd:ec:27:d7:e1:db:ec:ae:3b:95:32:4e:1f:6f:22:38: 54:44:13:26:d3:97:32:d7:e1:ae:af:fc:4d:e8:5e:88:e5:67: eb:c5:17:6a:77:eb:ab:f6:2c:62:12:60:b3:6a:2c:d9:52:0c: c3:c2:fd:7a:67:24:b9:85:bc:6c:ad:48:84:93:fb:78:f4:53: cb:22:43:d8:1a:65:13:a5:78:31:84:f8:a4:f9:66:dc:c2:93: 98:59:d3:26:f6:08:ac:3a:db:56:14:5c:ed:ee:31:6d:76:c6: b1:c2:7d:96 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt9XEr7bNCp75YL7nuAzDsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw MmRkYjUwHhcNMjYwMTAyMDYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDhmYjk5MTcxNzk0ODk5ZDNkZWUzYzRlYjJhODNhYmM4NDU0MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJTV5qBBpTs+s8uh/hGzUsZEDJP0 PeI4WcAbnAB9SenuG06YzXKh6OzIVAHy1U1fwOSEvG1mteL7vmxLRdOumBCO8QJ7 2ZKZmq50Vb1/JNTV2oJo6/E0JsJOx26uKdCH2pZuwgXRE6rXDeArUA9yMqB7zPsH 2vmPvDCwpTlr05Tm9XfqNHYDl6nPVganaZPKTrGoF1ekY3TSwlHSRhaPXNKwio6R AIpQrQ/HCCj/B9v6ospKlnbjQksivmh+p5to0zDEeKV7RwngsoQs7Uf0rS5VTWwi R53OpxD3s3Wy1hwzEEiO8J618Vhk9OKm0PR4d2ghMPZVO6wfKlxl0E6wbQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFOCPuZFxeUiZ097jxOsqg6vIRUD0MB8GA1UdIwQY MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt ZjhhMzc4MGMzNDhlLzEvNEktNWtYRjVTSm5UM3VQRTZ5cURxOGhGUVBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjAqBAIAATAkAwQCLY6MAwQC LZ50AwQEUE4QAwQCX9cQAwQCucF8AwQAww4UMDQEAgACMC4DBwAgAQZ8I1QDBwAg AQZ8I1gDBQAqAgb4AwUDKgo4QAMFAyoO2cADBQMqD16AMA0GCSqGSIb3DQEBCwUA A4IBAQBVP1OvbP91LU/gGNehMVQUzKqSLoOjKrnw3PavZgnpA0gucbc/6BWxeT3A PRbueLxgX9bpch2/P2A5x8GDe5wJV+Tzsg5mJKM8+CJOAoOouSe2y9epadRPx9Kx 8OikAb5zpfMx/E9ar7Fla4kBU+WRM+lAej8GMsDcsqegyUBMDzXWTADjIbFQDRVM 2nKeHTkGoP3sJ9fh2+yuO5UyTh9vIjhURBMm05cy1+Gur/xN6F6I5WfrxRdqd+ur 9ixiEmCzaizZUgzDwv16ZyS5hbxsrUiEk/t49FPLIkPYGmUTpXgxhPik+WbcwpOY WdMm9gisOttWFFzt7jFtdsaxwn2W -----END CERTIFICATE-----Generated at Sun Feb 8 04:51:14 2026 by rpki-client