This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/i4jnJxOhMj9aFxsLu4sVdF6TxRA.roa File: i4jnJxOhMj9aFxsLu4sVdF6TxRA.roa (raw, json) Hash identifier: nQ/fnt4cP5mq1nWw0qHHGz76kkdKJHmBSgMGl187cpc= Subject key identifier: 8B:88:E7:27:13:A1:32:3F:5A:17:1B:0B:BB:8B:15:74:5E:93:C5:10 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019C0B4B00BF9D3A1777357B6BEDDF543A1A Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/i4jnJxOhMj9aFxsLu4sVdF6TxRA.roa Signing time: Thu 29 Jan 2026 19:46:30 +0000 ROA not before: Thu 29 Jan 2026 19:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 5.253.39.0/24 maxlen: 24 45.8.185.0/24 maxlen: 24 85.208.113.0/24 maxlen: 24 85.209.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0b:4b:00:bf:9d:3a:17:77:35:7b:6b:ed:df:54:3a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 29 19:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b88e72713a1323f5a171b0bbb8b15745e93c510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:f6:aa:d6:47:a6:c5:23:15:63:07:51:51: dd:26:68:c8:36:7a:4d:55:61:1a:f5:ed:ea:04:c5: a8:17:dc:48:9c:90:d8:57:3d:90:17:dc:a6:5a:5d: be:0d:25:c8:64:ae:89:d3:4b:61:14:9a:77:d2:78: b1:53:16:4f:c5:9b:71:bb:a5:e0:7e:c7:f9:70:5b: 81:7d:26:cc:ae:6c:11:51:04:e6:72:27:57:6a:dd: 31:43:93:38:d0:54:0b:6e:20:0f:fb:16:ce:a0:55: 92:43:95:48:59:d0:73:3b:9f:f5:82:b4:08:fa:fc: f0:e8:94:a4:49:72:c8:d9:a0:01:d3:ed:dc:09:e7: 89:ee:aa:a5:ed:78:0c:1b:81:9f:83:4c:89:d4:f5: 3e:5f:ce:56:fc:2b:f6:ed:c0:19:41:20:d7:fa:71: 6f:44:ad:75:5c:de:be:99:97:bb:e7:c5:40:07:fd: 1f:4a:4e:dc:6f:a6:5b:bd:0f:ee:8a:e2:cb:ca:ed: a2:20:a9:58:b7:e0:89:e5:a0:16:4e:f2:58:74:12: c8:0f:29:54:1f:c4:5e:b2:5f:dd:75:be:2f:b4:2f: 10:59:6e:e1:91:fa:7e:85:59:e7:df:73:58:3a:19: 2e:c9:d7:c6:8d:d1:3a:e8:61:0a:19:78:ae:f5:d5: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:88:E7:27:13:A1:32:3F:5A:17:1B:0B:BB:8B:15:74:5E:93:C5:10 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/i4jnJxOhMj9aFxsLu4sVdF6TxRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.39.0/24 45.8.185.0/24 85.208.113.0/24 85.209.162.0/24 Signature Algorithm: sha256WithRSAEncryption be:ef:cc:1b:00:5c:53:1e:50:71:69:05:e9:67:89:44:31:52: 37:3a:78:b8:7b:59:e0:e8:db:cb:6d:e2:1c:23:f9:96:76:bc: 1d:68:0b:df:70:db:e2:76:03:e5:7d:37:20:02:f7:b2:86:ac: 75:4a:cc:1c:bb:22:2a:48:40:e8:d7:1c:63:cf:31:62:1b:36: 0d:04:83:18:fa:d8:a0:22:24:66:a8:bf:fb:f3:d5:28:70:c5: 0a:9d:f1:46:dd:46:7e:09:4c:99:3d:40:af:29:f9:98:08:45: 80:ff:e3:e9:0a:f8:8a:88:44:6c:a8:07:6d:99:c0:1f:47:26: 14:05:c1:7c:44:99:cd:5a:5e:bf:a8:45:5d:09:ff:ee:4a:2b: e8:d9:ca:c2:a2:1a:fd:2f:b0:cf:21:c9:28:34:be:0b:a8:3f: d0:1f:a8:aa:1f:21:1c:58:73:f3:0f:f8:9d:0d:44:d7:f2:1d: 4b:fe:2c:c8:72:16:83:7b:b3:35:7b:65:ce:2a:f2:e3:f7:ba: cd:1a:6f:be:42:2f:de:bc:a1:82:7b:8c:d8:cc:cc:8b:16:11: 67:be:d1:3c:77:21:51:7c:6e:ca:c4:7e:fa:5b:d4:68:93:b4: 4b:f6:b5:40:d6:9b:c1:6c:ce:6a:a4:ec:21:2d:a2:96:f3:82: 79:b3:1b:a0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwLSwC/nToXdzV7a+3fVDoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTI5MTk0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjg4ZTcyNzEzYTEzMjNmNWExNzFiMGJiYjhiMTU3NDVlOTNjNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHv2qtZHpsUjFWMHUVHdJmjINnpN VWEa9e3qBMWoF9xInJDYVz2QF9ymWl2+DSXIZK6J00thFJp30nixUxZPxZtxu6Xg fsf5cFuBfSbMrmwRUQTmcidXat0xQ5M40FQLbiAP+xbOoFWSQ5VIWdBzO5/1grQI +vzw6JSkSXLI2aAB0+3cCeeJ7qql7XgMG4Gfg0yJ1PU+X85W/Cv27cAZQSDX+nFv RK11XN6+mZe758VAB/0fSk7cb6ZbvQ/uiuLLyu2iIKlYt+CJ5aAWTvJYdBLIDylU H8Resl/ddb4vtC8QWW7hkfp+hVnn33NYOhkuydfGjdE66GEKGXiu9dW24QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIuI5ycToTI/WhcbC7uLFXRek8UQMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvaTRqbkp4T2hNajlhRnhzTHU0c1ZkRjZUeFJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABf0nAwQA LQi5AwQAVdBxAwQAVdGiMA0GCSqGSIb3DQEBCwUAA4IBAQC+78wbAFxTHlBxaQXp Z4lEMVI3Oni4e1ng6NvLbeIcI/mWdrwdaAvfcNvidgPlfTcgAveyhqx1SswcuyIq SEDo1xxjzzFiGzYNBIMY+tigIiRmqL/789UocMUKnfFG3UZ+CUyZPUCvKfmYCEWA /+PpCviKiERsqAdtmcAfRyYUBcF8RJnNWl6/qEVdCf/uSivo2crCohr9L7DPIcko NL4LqD/QH6iqHyEcWHPzD/idDUTX8h1L/izIchaDe7M1e2XOKvLj97rNGm++Qi/e vKGCe4zYzMyLFhFnvtE8dyFRfG7KxH76W9Rok7RL9rVA1pvBbM5qpOwhLaKW84J5 sxug -----END CERTIFICATE-----Generated at Fri Jan 30 12:18:31 2026 by rpki-client