This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/8ZRlNNc35z7_o90cin0lnPRuC2o.roa File: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (raw, json) Hash identifier: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws= Subject key identifier: F1:94:65:34:D7:37:E7:3E:FF:A3:DD:1C:8A:7D:25:9C:F4:6E:0B:6A Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Certificate serial: 019B7BA5279BBF78EEBC72B26DCDD00BD08F Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/8ZRlNNc35z7_o90cin0lnPRuC2o.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57752 IP address blocks: 45.10.45.0/24 maxlen: 24 45.10.46.0/23 maxlen: 23 45.88.68.0/22 maxlen: 24 45.89.152.0/22 maxlen: 22 45.91.144.0/22 maxlen: 22 45.91.146.0/24 maxlen: 24 45.130.236.0/22 maxlen: 22 45.130.236.0/24 maxlen: 24 45.130.237.0/24 maxlen: 24 45.130.238.0/24 maxlen: 24 45.130.239.0/24 maxlen: 24 83.136.148.0/23 maxlen: 23 83.136.150.0/23 maxlen: 23 91.206.10.0/24 maxlen: 24 109.205.64.0/21 maxlen: 21 176.118.172.0/22 maxlen: 22 185.17.56.0/22 maxlen: 22 185.17.56.0/24 maxlen: 24 185.17.57.0/24 maxlen: 24 185.54.36.0/22 maxlen: 22 185.167.220.0/22 maxlen: 22 185.234.48.0/22 maxlen: 22 185.234.49.0/24 maxlen: 24 195.12.37.0/24 maxlen: 24 2a03:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:27:9b:bf:78:ee:bc:72:b2:6d:cd:d0:0b:d0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1946534d737e73effa3dd1c8a7d259cf46e0b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:62:26:85:0f:5e:02:09:c0:5b:c3:4b:09: 37:3b:7b:e3:5c:94:9e:1e:32:66:64:61:f9:93:c9: bf:10:ed:a8:74:52:66:99:3b:5a:3e:71:ff:3e:b2: b4:a2:e8:92:c9:86:fe:13:67:e8:6e:56:8d:7d:6b: c2:19:6a:fd:3d:b8:0c:d6:53:b1:de:84:29:83:fd: bf:c1:cd:ca:4b:4b:f1:ee:9e:53:07:7c:f0:b1:1d: 14:53:1a:8e:fe:5c:fb:81:80:78:bc:02:e5:fe:77: 44:4a:44:b9:b0:d8:33:34:60:ce:b6:e1:70:3f:5f: 6f:2e:31:27:86:66:bd:bd:73:1e:1c:61:1e:cb:25: 71:29:ee:9a:0f:98:d7:bc:e1:a4:d7:b2:4f:0c:d3: bf:43:52:c0:d2:d6:43:03:e8:f9:77:93:4a:75:05: 0f:64:60:e6:06:0c:93:38:30:83:8c:1c:50:3f:00: 4f:6c:31:fe:a0:d4:7f:99:87:fe:0c:46:d2:54:2b: d7:36:cc:b0:52:3a:50:93:af:47:bc:5e:5b:0a:ae: 42:1b:58:f0:87:5d:19:20:5d:d2:5d:b5:2c:6c:db: 51:27:d2:83:1b:e6:10:bc:d2:f1:a2:c0:5e:4e:69: a1:ea:9c:1d:45:5c:43:a6:07:a8:db:89:b9:7a:16: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:94:65:34:D7:37:E7:3E:FF:A3:DD:1C:8A:7D:25:9C:F4:6E:0B:6A X509v3 Authority Key Identifier: keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/8ZRlNNc35z7_o90cin0lnPRuC2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.45.0-45.10.47.255 45.88.68.0/22 45.89.152.0/22 45.91.144.0/22 45.130.236.0/22 83.136.148.0/22 91.206.10.0/24 109.205.64.0/21 176.118.172.0/22 185.17.56.0/22 185.54.36.0/22 185.167.220.0/22 185.234.48.0/22 195.12.37.0/24 IPv6: 2a03:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 1b:ee:52:a2:a8:84:35:5c:75:d3:fe:36:06:8c:ce:f1:5d:e2: 6b:e9:0c:b0:d5:16:4f:ee:f7:8c:bd:fe:f1:98:d0:c9:d4:71: 12:85:11:9f:f7:8d:b7:75:ef:0f:e5:cb:6a:e4:63:3f:5a:20: 17:56:a7:af:31:ce:40:53:d5:67:13:62:65:40:e6:e8:50:a7: 4b:85:4b:e6:2c:55:5f:d2:bd:18:59:b8:30:d8:c9:56:1f:d8: 5f:f1:9b:7d:da:88:ce:3c:61:d2:7f:0f:ed:bb:8c:92:25:ad: 8c:e2:e3:29:3a:3b:d0:81:34:f8:07:3d:3b:48:fd:9d:7e:cd: 2b:20:eb:77:62:fb:c4:0b:4c:1c:8b:9b:b1:4a:b7:61:50:a2: fb:d3:65:eb:a6:23:09:64:df:fb:b4:d5:5e:28:9b:c8:c3:cb: ee:b3:8c:af:0d:a8:c4:4b:7e:92:d1:8c:ba:dc:17:3d:24:e1: 80:96:db:d2:34:28:b1:b6:56:d8:90:6e:7e:0a:8a:db:0b:c4: b1:1c:8c:f2:cc:60:6d:37:a0:14:12:3e:98:5e:62:e8:15:31: dd:66:c7:72:54:92:b5:73:31:46:41:4f:77:b1:e9:64:78:27: 7f:91:72:89:c0:10:93:e7:e9:20:df:68:8d:8f:a3:d0:0b:42: 36:f5:8d:b4 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt7pSebv3juvHKybc3QC9CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz M2JkZmYwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTk0NjUzNGQ3MzdlNzNlZmZhM2RkMWM4YTdkMjU5Y2Y0NmUwYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O9iJoUPXgIJwFvDSwk3O3vjXJSe HjJmZGH5k8m/EO2odFJmmTtaPnH/PrK0ouiSyYb+E2foblaNfWvCGWr9PbgM1lOx 3oQpg/2/wc3KS0vx7p5TB3zwsR0UUxqO/lz7gYB4vALl/ndESkS5sNgzNGDOtuFw P19vLjEnhma9vXMeHGEeyyVxKe6aD5jXvOGk17JPDNO/Q1LA0tZDA+j5d5NKdQUP ZGDmBgyTODCDjBxQPwBPbDH+oNR/mYf+DEbSVCvXNsywUjpQk69HvF5bCq5CG1jw h10ZIF3SXbUsbNtRJ9KDG+YQvNLxosBeTmmh6pwdRVxDpgeo24m5eha6YwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFPGUZTTXN+c+/6PdHIp9JZz0bgtqMB8GA1UdIwQY MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt OGI4ZjNmOGQ3MzAzLzEvOFpSbE5OYzM1ejdfbzkwY2luMGxuUFJ1QzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXDAMAwQALQot AwQELQogAwQCLVhEAwQCLVmYAwQCLVuQAwQCLYLsAwQCU4iUAwQAW84KAwQDbc1A AwQCsHasAwQCuRE4AwQCuTYkAwQCuafcAwQCueowAwQAwwwlMA0EAgACMAcDBQAq A9wAMA0GCSqGSIb3DQEBCwUAA4IBAQAb7lKiqIQ1XHXT/jYGjM7xXeJr6Qyw1RZP 7veMvf7xmNDJ1HEShRGf9423de8P5ctq5GM/WiAXVqevMc5AU9VnE2JlQOboUKdL hUvmLFVf0r0YWbgw2MlWH9hf8Zt92ojOPGHSfw/tu4ySJa2M4uMpOjvQgTT4Bz07 SP2dfs0rIOt3YvvEC0wci5uxSrdhUKL702XrpiMJZN/7tNVeKJvIw8vus4yvDajE S36S0Yy63Bc9JOGAltvSNCixtlbYkG5+CorbC8SxHIzyzGBtN6AUEj6YXmLoFTHd ZsdyVJK1czFGQU93selkeCd/kXKJwBCT5+kg32iNj6PQC0I29Y20 -----END CERTIFICATE-----Generated at Tue Jan 27 05:33:04 2026 by rpki-client