This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/j4IDMxfw4tFDbCzf5W1UMkWSwCk.roa File: j4IDMxfw4tFDbCzf5W1UMkWSwCk.roa (raw, json) Hash identifier: fF96kDSrz/rTgpdAecOyTEy2kFnD9264U1mG3cAauyo= Subject key identifier: 8F:82:03:33:17:F0:E2:D1:43:6C:2C:DF:E5:6D:54:32:45:92:C0:29 Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f Certificate serial: 019B7D5B1AAAFA9CE22720A814A12CA34A6B Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/j4IDMxfw4tFDbCzf5W1UMkWSwCk.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20565 IP address blocks: 45.81.208.0/22 maxlen: 22 45.153.204.0/22 maxlen: 22 84.246.104.0/24 maxlen: 24 85.222.200.0/21 maxlen: 24 185.16.220.0/22 maxlen: 24 185.113.48.0/22 maxlen: 22 185.241.0.0/22 maxlen: 22 2a06:6800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1a:aa:fa:9c:e2:27:20:a8:14:a1:2c:a3:4a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f82033317f0e2d1436c2cdfe56d54324592c029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:b8:29:8a:2f:70:bf:19:0b:b4:ac:1c:3a: 88:26:d9:e3:cc:9e:65:89:68:21:2c:d7:26:c5:8a: b6:d8:10:63:cb:7e:a5:93:b2:98:a6:f8:8b:f6:12: b2:a2:1d:bd:25:d8:60:39:82:72:15:26:4d:9a:7c: 47:2a:d4:9b:56:29:53:9d:3c:ef:cc:22:3e:d6:ee: 6e:10:2a:b2:b9:52:c6:b2:70:e4:ec:6c:d2:cb:39: f6:ad:f5:6a:f3:02:8c:1b:08:0e:bd:1b:45:e7:b3: f9:4e:ce:6f:f4:5d:67:fd:ce:dc:54:bf:16:0a:6b: 84:a2:ba:92:ea:4e:5e:2d:33:b6:dc:a0:cf:8c:57: a5:6e:11:a3:d8:d8:a2:79:81:9a:49:c6:83:e0:d2: e3:6e:1f:2d:20:04:11:1d:60:a2:51:c7:6f:6c:77: 57:54:36:0a:8d:76:66:0e:35:dd:23:30:71:37:d2: 0c:80:2f:26:41:ac:c9:b6:21:c2:ff:46:4d:a8:30: ad:6d:48:eb:1b:7f:6c:f6:77:b9:ce:14:20:94:15: 1a:a4:33:f2:66:fe:58:68:8e:59:2f:21:aa:29:2f: 83:4a:8e:3d:dd:42:3f:fa:fb:34:e3:12:77:82:69: 67:e0:bd:67:1b:29:e3:20:a4:2f:cb:1a:24:1b:97: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:82:03:33:17:F0:E2:D1:43:6C:2C:DF:E5:6D:54:32:45:92:C0:29 X509v3 Authority Key Identifier: keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/j4IDMxfw4tFDbCzf5W1UMkWSwCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.208.0/22 45.153.204.0/22 84.246.104.0/24 85.222.200.0/21 185.16.220.0/22 185.113.48.0/22 185.241.0.0/22 IPv6: 2a06:6800::/29 Signature Algorithm: sha256WithRSAEncryption 78:46:fa:15:0c:97:34:5f:dd:50:7c:5f:31:05:31:9d:93:cd: 7c:8c:29:6f:2e:04:4d:64:ca:b4:0e:b7:7e:24:5f:e4:7a:02: d4:b1:9e:05:ab:11:c7:40:d5:2c:1f:06:4a:fb:10:74:3f:16: a9:15:5c:2c:a0:0a:9d:59:d1:e0:92:aa:c1:b4:1f:32:d6:f7: 11:aa:82:45:de:4a:c8:6c:ae:eb:b8:66:32:73:ec:aa:c3:16: 01:be:83:d7:d3:97:4b:cc:95:88:99:e3:53:f4:0e:ed:66:e3: 99:c7:1b:77:bc:c8:ad:b5:1a:d3:3e:09:a9:c9:0b:da:7d:d7: 5f:c1:46:fa:90:dc:5a:5b:34:ae:f2:97:74:fc:60:ac:b2:f5: c1:a6:07:65:72:7c:b0:b9:50:5f:3c:b5:77:b2:00:89:ea:b6: 1f:6c:a9:bd:5d:20:b5:ac:5d:62:b5:ce:ed:5c:e6:c7:38:65: d2:db:64:59:8b:45:33:1f:94:b1:be:8f:00:3f:62:b2:7f:26: 2b:f5:c9:a0:bb:56:01:3b:72:47:a7:63:c1:cb:f1:a3:fa:3f: 48:df:13:c7:25:2a:2c:00:be:9f:13:0e:b0:2e:33:8c:11:d3: b8:c4:c5:65:0c:78:bd:78:09:32:c5:01:6e:f7:3a:e3:13:17: 0f:8e:17:69 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt9Wxqq+pziJyCoFKEso0prMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWNmMTBjMzFmMmVkYmI1NTdkNTU0MDk3M2M4ODA3OWIz MzIwMGYwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjgyMDMzMzE3ZjBlMmQxNDM2YzJjZGZlNTZkNTQzMjQ1OTJjMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywG4KYovcL8ZC7SsHDqIJtnjzJ5l iWghLNcmxYq22BBjy36lk7KYpviL9hKyoh29JdhgOYJyFSZNmnxHKtSbVilTnTzv zCI+1u5uECqyuVLGsnDk7GzSyzn2rfVq8wKMGwgOvRtF57P5Ts5v9F1n/c7cVL8W CmuEorqS6k5eLTO23KDPjFelbhGj2NiieYGaScaD4NLjbh8tIAQRHWCiUcdvbHdX VDYKjXZmDjXdIzBxN9IMgC8mQazJtiHC/0ZNqDCtbUjrG39s9ne5zhQglBUapDPy Zv5YaI5ZLyGqKS+DSo493UI/+vs04xJ3gmln4L1nGynjIKQvyxokG5f9WwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFI+CAzMX8OLRQ2ws3+VtVDJFksApMB8GA1UdIwQY MBaAFKec8Qwx8u27VX1VQJc8iAebMyAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEt MWE5YjE1NTUxMzZhLzEvajRJRE14Znc0dEZEYkN6ZjVXMVVNa1dTd0NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEtMWE5YjE1NTUxMzZh LzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLVHQAwQC LZnMAwQAVPZoAwQDVd7IAwQCuRDcAwQCuXEwAwQCufEAMA0EAgACMAcDBQMqBmgA MA0GCSqGSIb3DQEBCwUAA4IBAQB4RvoVDJc0X91QfF8xBTGdk818jClvLgRNZMq0 Drd+JF/kegLUsZ4FqxHHQNUsHwZK+xB0PxapFVwsoAqdWdHgkqrBtB8y1vcRqoJF 3krIbK7ruGYyc+yqwxYBvoPX05dLzJWImeNT9A7tZuOZxxt3vMittRrTPgmpyQva fddfwUb6kNxaWzSu8pd0/GCssvXBpgdlcnywuVBfPLV3sgCJ6rYfbKm9XSC1rF1i tc7tXObHOGXS22RZi0UzH5Sxvo8AP2KyfyYr9cmgu1YBO3JHp2PBy/Gj+j9I3xPH JSosAL6fEw6wLjOMEdO4xMVlDHi9eAkyxQFu9zrjExcPjhdp -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:28 2026 by rpki-client