This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4KZdCgXNqa0UgTOU_OG7qD5Om4k.roa File: 4KZdCgXNqa0UgTOU_OG7qD5Om4k.roa (raw, json) Hash identifier: oQ+7oYnNpsaVfwiQSTBh2Zybft83uPcXiqU7p15pgrc= Subject key identifier: E0:A6:5D:0A:05:CD:A9:AD:14:81:33:94:FC:E1:BB:A8:3E:4E:9B:89 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB0880982DE221BCD7107C334D9A7 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4KZdCgXNqa0UgTOU_OG7qD5Om4k.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2.56.123.0/24 maxlen: 24 5.180.22.0/24 maxlen: 24 5.180.31.0/24 maxlen: 24 45.9.18.0/24 maxlen: 24 45.9.19.0/24 maxlen: 24 45.15.145.0/24 maxlen: 24 45.15.146.0/24 maxlen: 24 45.15.154.0/24 maxlen: 24 45.15.155.0/24 maxlen: 24 45.15.164.0/24 maxlen: 24 45.15.179.0/24 maxlen: 24 45.15.186.0/24 maxlen: 24 45.82.248.0/24 maxlen: 24 45.83.23.0/24 maxlen: 24 45.83.24.0/24 maxlen: 24 45.83.25.0/24 maxlen: 24 45.83.128.0/24 maxlen: 24 45.83.149.0/24 maxlen: 24 45.86.60.0/22 maxlen: 24 45.86.64.0/24 maxlen: 24 45.86.65.0/24 maxlen: 24 45.86.67.0/24 maxlen: 24 45.86.68.0/24 maxlen: 24 45.86.69.0/24 maxlen: 24 45.86.75.0/24 maxlen: 24 45.88.176.0/24 maxlen: 24 45.88.177.0/24 maxlen: 24 45.92.140.0/22 maxlen: 24 45.92.160.0/24 maxlen: 24 45.92.161.0/24 maxlen: 24 45.92.163.0/24 maxlen: 24 45.92.164.0/22 maxlen: 24 45.92.192.0/24 maxlen: 24 45.92.193.0/24 maxlen: 24 45.92.194.0/24 maxlen: 24 45.128.51.0/24 maxlen: 24 45.128.57.0/24 maxlen: 24 45.128.58.0/24 maxlen: 24 92.118.236.0/22 maxlen: 24 95.214.249.0/24 maxlen: 24 95.214.250.0/24 maxlen: 24 171.22.115.0/24 maxlen: 24 171.22.130.0/24 maxlen: 24 171.22.132.0/24 maxlen: 24 185.166.153.0/24 maxlen: 24 213.59.119.0/24 maxlen: 24 213.59.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b0:88:09:82:de:22:1b:cd:71:07:c3:34:d9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a65d0a05cda9ad14813394fce1bba83e4e9b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:96:08:fb:a0:fc:90:a6:ff:f1:bb:47:57:b6: 9a:f0:88:2d:fd:45:7f:ca:5f:16:f5:73:70:13:ab: f9:34:cd:17:4d:a3:94:b9:7a:b8:05:84:60:76:63: e5:16:2d:ad:ab:e8:ed:26:e6:cc:5e:fe:8c:2b:97: a7:6a:50:96:d0:8d:be:a4:2e:85:e4:3d:9f:9d:29: 0e:6a:43:06:74:b4:f8:9e:d0:41:fd:90:15:3f:13: df:56:7c:4a:e5:98:26:93:78:32:9f:0b:13:83:6a: 4d:c4:47:fa:f7:35:1f:51:cb:00:c7:e2:2c:d7:b6: 23:5e:c0:a5:d5:b5:5f:db:2a:c8:be:5c:4f:20:1c: ec:21:30:00:e9:d2:2a:4e:c4:4f:32:c1:92:ac:fd: b6:fe:e0:64:1d:5a:44:e7:cd:57:d4:96:25:ae:c7: 51:4b:e1:8d:a6:3b:fd:9d:31:f6:5d:61:7f:c8:77: 26:07:e5:3a:3c:1d:d6:69:71:04:b1:2c:49:08:8b: c7:e6:ac:fe:77:f4:70:78:1c:58:e3:56:fa:da:90: 03:cd:05:b2:81:dd:59:02:0d:cc:1d:7f:33:bc:b2: 3d:2a:a7:d0:2b:3a:50:c2:a1:13:70:a6:d6:0a:1f: ef:ee:2a:5b:e2:16:3a:d8:e6:2e:62:f2:de:45:31: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:5D:0A:05:CD:A9:AD:14:81:33:94:FC:E1:BB:A8:3E:4E:9B:89 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4KZdCgXNqa0UgTOU_OG7qD5Om4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.123.0/24 5.180.22.0/24 5.180.31.0/24 45.9.18.0/23 45.15.145.0-45.15.146.255 45.15.154.0/23 45.15.164.0/24 45.15.179.0/24 45.15.186.0/24 45.82.248.0/24 45.83.23.0-45.83.25.255 45.83.128.0/24 45.83.149.0/24 45.86.60.0-45.86.65.255 45.86.67.0-45.86.69.255 45.86.75.0/24 45.88.176.0/23 45.92.140.0/22 45.92.160.0/23 45.92.163.0-45.92.167.255 45.92.192.0-45.92.194.255 45.128.51.0/24 45.128.57.0-45.128.58.255 92.118.236.0/22 95.214.249.0-95.214.250.255 171.22.115.0/24 171.22.130.0/24 171.22.132.0/24 185.166.153.0/24 213.59.119.0-213.59.120.255 Signature Algorithm: sha256WithRSAEncryption 90:b0:bf:51:9c:e1:6a:66:d1:f0:bf:55:51:fd:12:50:55:9d: 3c:07:23:c0:75:5b:5a:6c:74:51:f8:80:42:02:af:56:09:3d: 4d:d2:a5:0c:a7:14:a2:b0:a4:17:04:0c:da:b4:c0:42:ed:93: 55:23:de:16:6a:29:26:1e:12:40:41:b5:79:4f:9f:1f:a1:c4: ea:58:5a:fb:93:81:a4:e2:16:c6:e6:ea:19:da:e3:48:66:a3: fb:0b:74:b5:11:89:ec:bf:47:78:39:81:5a:8b:d4:0f:66:a3: f4:90:73:e8:84:56:96:91:ca:d4:56:65:a6:ae:da:4b:4a:a0: 27:94:a5:f9:6c:cd:67:a6:19:7d:3c:5d:f9:a9:71:32:28:c3: 54:ef:96:72:c5:22:26:06:77:87:9d:fe:9c:86:2b:6a:75:e6: 04:2a:29:91:61:82:1c:e6:7f:82:92:c3:f1:8d:f4:91:46:fd: d2:41:65:e0:84:05:30:40:eb:2f:ce:9d:4b:f4:88:a1:61:bf: 18:4d:c5:2a:f9:8c:10:11:c4:b1:68:46:c6:fe:97:99:03:14: 66:08:a2:ce:d2:a1:01:f7:a0:d8:70:1b:2e:54:16:c9:c2:d9: bd:d3:96:8b:35:5f:be:9b:79:8b:55:ef:23:99:b6:19:cf:df: fd:00:2a:db -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZt26rCICYLeIhvNcQfDNNmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGE2NWQwYTA1Y2RhOWFkMTQ4MTMzOTRmY2UxYmJhODNlNGU5Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JYI+6D8kKb/8btHV7aa8Igt/UV/ yl8W9XNwE6v5NM0XTaOUuXq4BYRgdmPlFi2tq+jtJubMXv6MK5enalCW0I2+pC6F 5D2fnSkOakMGdLT4ntBB/ZAVPxPfVnxK5Zgmk3gynwsTg2pNxEf69zUfUcsAx+Is 17YjXsCl1bVf2yrIvlxPIBzsITAA6dIqTsRPMsGSrP22/uBkHVpE581X1JYlrsdR S+GNpjv9nTH2XWF/yHcmB+U6PB3WaXEEsSxJCIvH5qz+d/RweBxY41b62pADzQWy gd1ZAg3MHX8zvLI9KqfQKzpQwqETcKbWCh/v7ipb4hY62OYuYvLeRTGBkQIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFOCmXQoFzamtFIEzlPzhu6g+TpuJMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvNEtaZENnWE5xYTBVZ1RPVV9PRzdxRDVPbTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCCAQMEAgABMIH8 AwQAAjh7AwQABbQWAwQABbQfAwQBLQkSMAwDBAAtD5EDBAAtD5IDBAEtD5oDBAAt D6QDBAAtD7MDBAAtD7oDBAAtUvgwDAMEAC1TFwMEAS1TGAMEAC1TgAMEAC1TlTAM AwQCLVY8AwQBLVZAMAwDBAAtVkMDBAEtVkQDBAAtVksDBAEtWLADBAItXIwDBAEt XKAwDAMEAC1cowMEAy1coDAMAwQGLVzAAwQALVzCAwQALYAzMAwDBAAtgDkDBAAt gDoDBAJcduwwDAMEAF/W+QMEAF/W+gMEAKsWcwMEAKsWggMEAKsWhAMEALmmmTAM AwQA1Tt3AwQA1Tt4MA0GCSqGSIb3DQEBCwUAA4IBAQCQsL9RnOFqZtHwv1VR/RJQ VZ08ByPAdVtabHRR+IBCAq9WCT1N0qUMpxSisKQXBAzatMBC7ZNVI94WaikmHhJA QbV5T58focTqWFr7k4Gk4hbG5uoZ2uNIZqP7C3S1EYnsv0d4OYFai9QPZqP0kHPo hFaWkcrUVmWmrtpLSqAnlKX5bM1nphl9PF35qXEyKMNU75ZyxSImBneHnf6chitq deYEKimRYYIc5n+CksPxjfSRRv3SQWXghAUwQOsvzp1L9IihYb8YTcUq+YwQEcSx aEbG/peZAxRmCKLO0qEB96DYcBsuVBbJwtm905aLNV++m3mLVe8jmbYZz9/9ACrb -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:56 2026 by rpki-client