This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/4JsWrqz-Jz67OAHjK_U7oEEgSkY.roa File: 4JsWrqz-Jz67OAHjK_U7oEEgSkY.roa (raw, json) Hash identifier: 3K5vRYnD3iE7cp5rdSZE+i0c32UlHaGrNKY3bOD1VyE= Subject key identifier: E0:9B:16:AE:AC:FE:27:3E:BB:38:01:E3:2B:F5:3B:A0:41:20:4A:46 Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Certificate serial: 019B78A302853409E6AA0CD72289C7B7A916 Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/4JsWrqz-Jz67OAHjK_U7oEEgSkY.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48101 IP address blocks: 37.25.44.0/24 maxlen: 24 37.25.45.0/24 maxlen: 24 37.25.46.0/23 maxlen: 23 91.151.240.0/20 maxlen: 22 91.228.232.0/23 maxlen: 24 91.228.234.0/24 maxlen: 24 95.166.0.0/18 maxlen: 21 98.96.160.0/20 maxlen: 23 134.19.192.0/22 maxlen: 22 134.19.196.0/22 maxlen: 23 134.65.128.0/21 maxlen: 21 134.65.136.0/22 maxlen: 22 134.65.140.0/22 maxlen: 22 134.65.144.0/22 maxlen: 22 134.65.148.0/22 maxlen: 22 134.65.152.0/21 maxlen: 21 176.20.128.0/18 maxlen: 21 185.16.160.0/22 maxlen: 24 185.122.192.0/22 maxlen: 22 199.15.232.0/22 maxlen: 22 199.15.236.0/24 maxlen: 24 199.15.237.0/24 maxlen: 24 199.15.238.0/24 maxlen: 24 199.15.239.0/24 maxlen: 24 2a04:200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:85:34:09:e6:aa:0c:d7:22:89:c7:b7:a9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e09b16aeacfe273ebb3801e32bf53ba041204a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:bc:8a:dd:b0:ea:9c:53:9c:9b:c2:17:3c: df:79:81:62:88:3f:7f:8b:f5:9a:38:39:39:7d:20: aa:4c:f1:25:b4:59:e1:63:5f:6e:14:fa:7d:a1:59: 4c:98:79:cc:96:2e:1e:fd:38:f9:42:9b:9a:35:6d: f0:54:e7:94:5a:de:9b:43:9e:05:51:ce:f2:05:3b: 6f:5e:cb:14:50:bd:7e:a2:92:39:51:2f:f3:8b:58: 31:28:54:eb:d7:c8:5b:e3:f0:62:c0:f0:34:5d:c4: 23:16:7a:b8:a4:4b:b1:67:74:06:d3:9f:71:ec:2f: 03:72:4a:a0:51:8b:0d:e7:6d:e2:57:e5:88:dd:b7: 9a:60:9c:bf:bd:2c:ca:69:57:bd:f4:4f:c0:95:0f: 32:5c:f4:58:13:9f:5c:12:a9:a2:c4:8c:72:f8:c5: 2c:cd:36:17:f2:dc:30:04:cf:a1:96:87:5d:5c:84: 7d:86:a5:fa:5f:18:69:c2:2c:bb:b3:38:7d:f7:d9: 9e:0b:2a:b3:1b:ea:e3:f6:db:65:94:2c:62:d7:8a: 5a:a8:90:3e:a0:06:71:50:b9:37:66:e1:47:1b:42: 4b:4b:29:f4:18:b9:7e:ba:b5:85:31:1f:73:d6:2d: ab:3a:80:fa:ec:33:a7:8d:ca:bd:c2:53:c2:bb:db: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9B:16:AE:AC:FE:27:3E:BB:38:01:E3:2B:F5:3B:A0:41:20:4A:46 X509v3 Authority Key Identifier: keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/4JsWrqz-Jz67OAHjK_U7oEEgSkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.44.0/22 91.151.240.0/20 91.228.232.0-91.228.234.255 95.166.0.0/18 98.96.160.0/20 134.19.192.0/21 134.65.128.0/19 176.20.128.0/18 185.16.160.0/22 185.122.192.0/22 199.15.232.0/21 IPv6: 2a04:200::/29 Signature Algorithm: sha256WithRSAEncryption c5:3e:6b:7a:3e:e8:01:ea:81:ba:f6:18:6e:73:20:82:28:71: e8:ee:e0:72:44:1a:fc:63:a6:3b:ae:72:7a:a9:30:2a:af:0d: 21:42:7d:57:7e:d7:5a:12:49:fe:31:c2:3b:fc:0a:65:f7:75: be:58:77:ad:3f:d4:7b:21:be:63:b4:19:30:2c:a1:c9:f4:b5: f4:4a:d2:be:11:22:64:65:42:c2:df:11:b7:b4:57:60:be:ac: 8c:4f:3c:8b:6b:eb:77:f0:a5:c3:1d:d4:68:18:6e:cb:55:c6: e0:33:03:82:93:63:96:ad:9b:96:b8:4f:50:e8:3a:20:c7:38: 15:aa:fc:84:f5:43:db:27:85:8d:d5:5f:fa:1e:b2:c7:6d:1c: 9f:03:3f:fe:b3:80:96:bc:f6:0d:a4:34:24:55:3b:0f:74:83: 5c:1e:b5:39:76:28:5a:02:da:26:3e:30:dc:1e:84:30:89:02: 2f:76:a0:36:d2:aa:d8:60:e0:fa:a0:63:75:d1:97:ca:2f:c0: 3c:0b:2e:25:ba:54:e2:2e:16:61:d3:d2:f2:22:b7:7a:9e:da: 62:d9:46:da:46:b2:41:2c:ad:be:f5:9c:c3:d9:f8:0f:53:2e: df:0d:0f:95:c4:14:6d:b4:27:d4:4a:67:6f:a1:55:0e:e5:3f: 43:3a:6a:d7 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt4owKFNAnmqgzXIonHt6kWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy YTNjZTgwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDliMTZhZWFjZmUyNzNlYmIzODAxZTMyYmY1M2JhMDQxMjA0YTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0+8it2w6pxTnJvCFzzfeYFiiD9/ i/WaODk5fSCqTPEltFnhY19uFPp9oVlMmHnMli4e/Tj5QpuaNW3wVOeUWt6bQ54F Uc7yBTtvXssUUL1+opI5US/zi1gxKFTr18hb4/BiwPA0XcQjFnq4pEuxZ3QG059x 7C8DckqgUYsN523iV+WI3beaYJy/vSzKaVe99E/AlQ8yXPRYE59cEqmixIxy+MUs zTYX8twwBM+hloddXIR9hqX6Xxhpwiy7szh999meCyqzG+rj9ttllCxi14paqJA+ oAZxULk3ZuFHG0JLSyn0GLl+urWFMR9z1i2rOoD67DOnjcq9wlPCu9vReQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFOCbFq6s/ic+uzgB4yv1O6BBIEpGMB8GA1UdIwQY MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt YzliNDcwZGMyNDBiLzEvNEpzV3Jxei1KejY3T0FIaktfVTdvRUVnU2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQCJRksAwQE W5fwMAwDBANb5OgDBABb5OoDBAZfpgADBARiYKADBAOGE8ADBAWGQYADBAawFIAD BAK5EKADBAK5esADBAPHD+gwDQQCAAIwBwMFAyoEAgAwDQYJKoZIhvcNAQELBQAD ggEBAMU+a3o+6AHqgbr2GG5zIIIoceju4HJEGvxjpjuucnqpMCqvDSFCfVd+11oS Sf4xwjv8CmX3db5Yd60/1HshvmO0GTAsocn0tfRK0r4RImRlQsLfEbe0V2C+rIxP PItr63fwpcMd1GgYbstVxuAzA4KTY5atm5a4T1DoOiDHOBWq/IT1Q9snhY3VX/oe ssdtHJ8DP/6zgJa89g2kNCRVOw90g1wetTl2KFoC2iY+MNwehDCJAi92oDbSqthg 4PqgY3XRl8ovwDwLLiW6VOIuFmHT0vIit3qe2mLZRtpGskEsrb71nMPZ+A9TLt8N D5XEFG20J9RKZ2+hVQ7lP0M6atc= -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:29 2026 by rpki-client