This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/4-ElW7SzvQVexJZ0nCYVSR1GA2M.roa File: 4-ElW7SzvQVexJZ0nCYVSR1GA2M.roa (raw, json) Hash identifier: KOsKfu6flOdE/SBx4Eu8MfS9wR/KNyf0gsESr/I2qzY= Subject key identifier: E3:E1:25:5B:B4:B3:BD:05:5E:C4:96:74:9C:26:15:49:1D:46:03:63 Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a Certificate serial: 019B7C7FFA1FB9945132FE30731871283DC5 Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/4-ElW7SzvQVexJZ0nCYVSR1GA2M.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58172 IP address blocks: 85.116.176.0/24 maxlen: 24 85.116.177.0/24 maxlen: 24 85.116.178.0/24 maxlen: 24 85.116.179.0/24 maxlen: 24 85.116.180.0/24 maxlen: 24 85.116.181.0/24 maxlen: 24 85.116.183.0/24 maxlen: 24 85.116.184.0/24 maxlen: 24 85.116.185.0/24 maxlen: 24 85.116.186.0/23 maxlen: 23 85.116.188.0/23 maxlen: 23 85.116.190.0/24 maxlen: 24 85.116.191.0/24 maxlen: 24 91.132.148.0/24 maxlen: 24 91.132.149.0/24 maxlen: 24 91.132.150.0/24 maxlen: 24 91.132.151.0/24 maxlen: 24 91.239.101.0/24 maxlen: 24 128.127.96.0/24 maxlen: 24 128.127.97.0/24 maxlen: 24 128.127.98.0/24 maxlen: 24 128.127.99.0/24 maxlen: 24 128.127.100.0/24 maxlen: 24 128.127.101.0/24 maxlen: 24 128.127.102.0/24 maxlen: 24 128.127.103.0/24 maxlen: 24 178.20.176.0/24 maxlen: 24 178.20.177.0/24 maxlen: 24 178.20.178.0/24 maxlen: 24 178.20.179.0/24 maxlen: 24 178.20.180.0/24 maxlen: 24 178.20.181.0/24 maxlen: 24 178.20.182.0/24 maxlen: 24 178.20.183.0/24 maxlen: 24 2a04:3b00::/36 maxlen: 36 2a04:3b00:100::/48 maxlen: 48 2a04:3b00:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fa:1f:b9:94:51:32:fe:30:73:18:71:28:3d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3e1255bb4b3bd055ec496749c2615491d460363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:ac:42:3c:d2:22:ad:fd:02:89:1d:ab:cb: ff:66:94:63:a4:5f:cb:66:d3:8b:b4:3f:35:24:e2: 00:f4:fa:01:40:47:5e:e5:b8:15:5e:f9:fb:1e:20: e6:cb:0d:a3:05:e1:78:be:cd:d6:9d:a2:5c:e7:c9: 45:0f:ef:e4:b1:ec:fc:23:e2:aa:63:0c:b8:73:19: 7d:27:31:8a:72:85:b8:a1:c5:34:4d:bb:7b:f9:31: ed:1a:cc:52:ce:fb:8d:2c:a0:9a:e6:50:69:55:51: 15:9e:c2:fb:54:24:cf:df:4c:8e:b8:a8:7a:b2:19: 8a:39:7e:86:d2:75:68:d7:cd:1e:0f:89:fe:05:94: 29:d6:9f:30:9b:56:18:ef:c3:11:d1:c6:8e:0a:b7: bd:e1:d8:0e:51:10:93:2f:45:5c:68:6c:e6:5e:66: d5:d1:b9:0b:d1:05:b6:70:70:ef:b2:a2:c8:ce:de: 19:9e:3b:07:fd:57:04:ee:00:17:bb:af:54:fc:55: c6:e0:9d:a3:75:4d:c2:8a:50:6a:2f:ea:a7:ca:9d: a4:4f:33:40:d8:7a:b2:c7:fb:ff:1b:f1:4c:4b:8f: 4c:a7:8c:ae:8d:ad:bb:81:82:bf:b2:e4:1a:fe:d1: f5:04:79:80:ad:bf:d2:4b:6b:c4:a7:49:00:70:04: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E1:25:5B:B4:B3:BD:05:5E:C4:96:74:9C:26:15:49:1D:46:03:63 X509v3 Authority Key Identifier: keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/4-ElW7SzvQVexJZ0nCYVSR1GA2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.176.0-85.116.181.255 85.116.183.0-85.116.191.255 91.132.148.0/22 91.239.101.0/24 128.127.96.0/21 178.20.176.0/21 IPv6: 2a04:3b00::/36 2a04:3b00:8000::/37 Signature Algorithm: sha256WithRSAEncryption c1:59:ea:3c:73:85:1b:32:bd:52:9b:2a:7f:c8:76:1a:ff:70: 3a:d6:c1:f7:c5:c6:62:1c:fb:82:58:ba:19:3b:a8:95:70:99: 48:c1:d2:6a:c9:3d:ec:63:e0:86:6c:12:62:a0:07:12:c0:30: 3d:dc:c5:54:bd:e5:53:a9:e7:e1:21:47:19:33:cc:ae:12:b9: 10:dc:60:76:e4:7f:3b:2c:69:ed:59:82:98:af:d2:39:50:a1: ff:12:e0:1b:63:da:32:f0:2f:05:7d:f6:f2:d3:d1:c4:40:41: de:c1:f0:a0:91:cd:aa:6b:6c:7b:be:37:ce:d0:05:b7:4d:60: 4b:d1:c2:cd:1b:13:76:3b:cb:d4:f6:01:5b:31:67:86:24:86: be:dc:8f:37:e3:d1:16:a4:73:62:c3:24:f0:b3:e2:d6:36:02: 91:13:6f:58:73:03:f1:00:45:f5:6a:a3:08:c0:30:66:ff:4a: 83:57:71:14:33:1b:9d:ee:ae:44:a3:b9:0b:b7:6d:c5:02:c8: 89:b3:bc:dd:89:8f:2b:44:59:d9:32:62:85:a6:47:4c:9b:d2: a7:3d:1c:91:14:fb:57:27:7b:32:51:73:be:99:c1:d2:b9:da: 90:97:e4:50:0e:56:a4:1e:6d:16:b1:70:29:cf:e0:9f:07:2e: bd:63:aa:67 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt8f/ofuZRRMv4wcxhxKD3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzExMzQxM2QwZGY1YjhmYTA2OTAxMWVlYjEwOWYwNjdi NTU3OWEwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2UxMjU1YmI0YjNiZDA1NWVjNDk2NzQ5YzI2MTU0OTFkNDYwMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpysQjzSIq39Aokdq8v/ZpRjpF/L ZtOLtD81JOIA9PoBQEde5bgVXvn7HiDmyw2jBeF4vs3WnaJc58lFD+/ksez8I+Kq Ywy4cxl9JzGKcoW4ocU0Tbt7+THtGsxSzvuNLKCa5lBpVVEVnsL7VCTP30yOuKh6 shmKOX6G0nVo180eD4n+BZQp1p8wm1YY78MR0caOCre94dgOURCTL0VcaGzmXmbV 0bkL0QW2cHDvsqLIzt4ZnjsH/VcE7gAXu69U/FXG4J2jdU3CilBqL+qnyp2kTzNA 2Hqyx/v/G/FMS49Mp4yuja27gYK/suQa/tH1BHmArb/SS2vEp0kAcAQX+wIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFOPhJVu0s70FXsSWdJwmFUkdRgNjMB8GA1UdIwQY MBaAFPDBE0E9DfW4+gaQEe6xCfBntVeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUt NTAyNjFiMTE5MTZiLzEvNC1FbFc3U3p2UVZleEpaMG5DWVZTUjFHQTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUtNTAyNjFiMTE5MTZi LzEvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA6BAIAATA0MAwDBARVdLAD BAFVdLQwDAMEAFV0twMEBlV0gAMEAluElAMEAFvvZQMEA4B/YAMEA7IUsDAWBAIA AjAQAwYEKgQ7AAADBgMqBDsAgDANBgkqhkiG9w0BAQsFAAOCAQEAwVnqPHOFGzK9 Upsqf8h2Gv9wOtbB98XGYhz7gli6GTuolXCZSMHSask97GPghmwSYqAHEsAwPdzF VL3lU6nn4SFHGTPMrhK5ENxgduR/Oyxp7VmCmK/SOVCh/xLgG2PaMvAvBX328tPR xEBB3sHwoJHNqmtse743ztAFt01gS9HCzRsTdjvL1PYBWzFnhiSGvtyPN+PRFqRz YsMk8LPi1jYCkRNvWHMD8QBF9WqjCMAwZv9Kg1dxFDMbne6uRKO5C7dtxQLIibO8 3YmPK0RZ2TJihaZHTJvSpz0ckRT7Vyd7MlFzvpnB0rnakJfkUA5WpB5tFrFwKc/g nwcuvWOqZw== -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:14 2026 by rpki-client