This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa File: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (raw, json) Hash identifier: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk= Subject key identifier: E1:3C:4A:C0:A4:43:40:A1:74:C8:5F:CB:0A:0B:43:7D:C0:F7:59:B0 Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Certificate serial: 019B7C8078A56EED3754F0F9310D0457FC11 Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20539 IP address blocks: 31.135.128.0/19 maxlen: 19 31.135.128.0/21 maxlen: 21 31.135.136.0/21 maxlen: 21 31.135.136.0/22 maxlen: 22 31.135.144.0/22 maxlen: 22 31.135.148.0/22 maxlen: 22 31.135.152.0/23 maxlen: 23 31.135.154.0/23 maxlen: 23 91.201.224.0/22 maxlen: 22 91.201.224.0/24 maxlen: 24 91.201.225.0/24 maxlen: 24 91.201.226.0/24 maxlen: 24 91.201.227.0/24 maxlen: 24 193.178.228.0/23 maxlen: 23 193.178.228.0/24 maxlen: 24 193.178.229.0/24 maxlen: 24 194.146.228.0/22 maxlen: 22 194.146.228.0/24 maxlen: 24 194.146.229.0/24 maxlen: 24 194.146.230.0/24 maxlen: 24 194.146.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:78:a5:6e:ed:37:54:f0:f9:31:0d:04:57:fc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e13c4ac0a44340a174c85fcb0a0b437dc0f759b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:e7:40:ca:f2:87:ee:3f:ea:09:dc:cc:4e: f0:a1:96:e4:97:43:47:42:38:02:d3:b3:9a:1f:94: c4:0a:df:f1:ce:40:4b:fb:69:d9:be:33:7e:ff:5c: 23:fe:fb:4a:c0:52:a0:c0:09:9c:cf:b9:e9:df:c1: 2f:cd:89:14:a5:47:c6:81:e0:24:05:51:48:a9:a3: cb:9b:8f:37:ee:5d:93:cd:29:aa:d5:fe:3f:0f:f6: ee:63:72:da:2b:19:ad:51:f9:36:9f:b5:84:aa:ac: 29:00:10:bf:c9:44:96:1a:9a:70:bf:cb:a6:e7:41: 2d:c2:46:90:e2:a7:51:f0:84:4c:da:1b:f8:90:02: ef:45:1e:5d:8c:30:20:8f:66:5d:a0:1a:42:c4:b9: 99:61:2e:da:ee:60:1c:8e:84:e4:77:5b:d0:a6:61: 4e:df:5d:8a:33:57:bf:80:e9:4e:d9:17:6f:23:2b: ab:9c:f1:5c:a9:f0:3e:af:5b:80:0d:23:15:9a:e6: 10:05:0a:01:61:75:34:8f:64:26:cb:44:49:95:18: 90:9d:4d:43:d4:fe:02:25:d4:95:a1:ea:b2:6d:5f: d5:aa:be:18:e1:c8:9d:2f:fa:5f:56:c1:8d:0f:3c: 2f:cc:0b:74:b9:aa:1b:3f:21:2c:85:e1:21:ac:a1: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:4A:C0:A4:43:40:A1:74:C8:5F:CB:0A:0B:43:7D:C0:F7:59:B0 X509v3 Authority Key Identifier: keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.128.0/19 91.201.224.0/22 193.178.228.0/23 194.146.228.0/22 Signature Algorithm: sha256WithRSAEncryption 02:a0:80:57:83:fc:7b:9e:86:91:d5:73:a7:63:05:61:8a:e1: e9:0a:00:72:c2:59:92:d6:8f:28:31:1c:55:1a:76:7f:ad:30: 85:55:16:57:e4:c6:e0:6a:40:77:a7:39:ea:ac:d6:c8:e2:ce: 0e:f1:ac:2b:0a:14:73:aa:48:5e:f8:6d:31:99:2b:65:ee:de: ea:68:2e:7f:b3:eb:99:41:37:ba:a6:ee:72:fd:f3:09:19:91: 7d:18:39:b2:74:4e:df:2f:e2:6d:f5:cd:ba:61:d4:88:f7:3e: f9:d6:dc:1b:ab:83:fa:6d:fe:12:49:5a:b8:eb:47:7d:e2:10: ce:fd:90:94:b4:ff:91:b6:e3:a7:0c:ea:a9:99:9b:a9:00:13: 4a:65:c8:ab:1d:1c:f6:59:12:97:a9:52:9d:c0:1f:9a:64:7f: 85:94:ba:31:11:de:e6:10:1d:88:0e:b2:9b:ba:a4:9a:ed:a8: 06:8f:82:ce:d8:80:5f:1a:32:7e:da:06:7b:32:7c:56:34:cf: 88:e3:ae:23:e1:0b:94:cb:2f:dc:db:7a:a1:46:aa:2a:86:d0: 11:ec:65:f9:75:62:df:7e:10:d3:c6:20:21:19:19:c7:e0:84: 9f:d8:4a:38:ca:4c:87:71:77:83:7b:9e:b6:8a:b0:63:c4:08: e4:e2:1a:e5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gHilbu03VPD5MQ0EV/wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjIwODY2ZGE0OGUwYzdjZmZiZThjNzNhMzUxYzJhNDdi MWE0ZGIwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTNjNGFjMGE0NDM0MGExNzRjODVmY2IwYTBiNDM3ZGMwZjc1OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwHnQMryh+4/6gnczE7woZbkl0NH QjgC07OaH5TECt/xzkBL+2nZvjN+/1wj/vtKwFKgwAmcz7np38EvzYkUpUfGgeAk BVFIqaPLm4837l2TzSmq1f4/D/buY3LaKxmtUfk2n7WEqqwpABC/yUSWGppwv8um 50EtwkaQ4qdR8IRM2hv4kALvRR5djDAgj2ZdoBpCxLmZYS7a7mAcjoTkd1vQpmFO 312KM1e/gOlO2RdvIyurnPFcqfA+r1uADSMVmuYQBQoBYXU0j2Qmy0RJlRiQnU1D 1P4CJdSVoeqybV/Vqr4Y4cidL/pfVsGNDzwvzAt0uaobPyEsheEhrKEUxwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOE8SsCkQ0ChdMhfywoLQ33A91mwMB8GA1UdIwQY MBaAFNEiCGbaSODHz/voxzo1HCpHsaTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUt OTVlY2Q2NzE4ODg3LzEvNFR4S3dLUkRRS0YweUZfTENndERmY0QzV2JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUtOTVlY2Q2NzE4ODg3 LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFH4eAAwQC W8ngAwQBwbLkAwQCwpLkMA0GCSqGSIb3DQEBCwUAA4IBAQACoIBXg/x7noaR1XOn YwVhiuHpCgBywlmS1o8oMRxVGnZ/rTCFVRZX5MbgakB3pznqrNbI4s4O8awrChRz qkhe+G0xmStl7t7qaC5/s+uZQTe6pu5y/fMJGZF9GDmydE7fL+Jt9c26YdSI9z75 1twbq4P6bf4SSVq460d94hDO/ZCUtP+RtuOnDOqpmZupABNKZcirHRz2WRKXqVKd wB+aZH+FlLoxEd7mEB2IDrKbuqSa7agGj4LO2IBfGjJ+2gZ7MnxWNM+I464j4QuU yy/c23qhRqoqhtAR7GX5dWLffhDTxiAhGRnH4ISf2Eo4ykyHcXeDe562irBjxAjk 4hrl -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:29 2026 by rpki-client