This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa File: ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa (raw, json) Hash identifier: Lay79psaoloZk98TsyG6C83RJH7tMee/A2Y6ldt4Zmk= Subject key identifier: 8D:AE:07:CA:20:48:E0:A6:2F:9C:4B:13:A3:34:14:F0:CA:76:95:50 Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d Certificate serial: 019B7CED622874A76FFA974FD57CB8DD96B2 Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212655 IP address blocks: 45.92.44.0/22 maxlen: 24 83.217.160.0/20 maxlen: 20 87.192.96.0/19 maxlen: 24 185.8.92.0/24 maxlen: 24 185.8.94.0/23 maxlen: 24 185.8.94.0/24 maxlen: 24 185.26.240.0/22 maxlen: 22 185.43.128.0/22 maxlen: 22 185.154.144.0/22 maxlen: 22 193.28.90.0/24 maxlen: 24 2a0e:1d40::/29 maxlen: 41 2a0e:1d47:8080::/41 maxlen: 41 2a0e:1d47:da80::/41 maxlen: 41 2a10:6940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:62:28:74:a7:6f:fa:97:4f:d5:7c:b8:dd:96:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dae07ca2048e0a62f9c4b13a33414f0ca769550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:89:1c:90:be:ba:c1:2e:9c:c8:86:3e:6e: 82:53:4e:cc:fd:e0:d2:a2:8d:5a:29:a4:90:87:23: 56:13:b6:97:f7:eb:a1:7a:13:aa:49:eb:9a:ac:92: da:3c:70:d7:ac:2a:35:4e:2a:c6:56:45:77:e8:73: 54:81:26:7a:90:68:7a:9d:0a:34:6e:f2:05:58:f4: ce:08:d8:cd:07:ab:a8:68:d5:9f:b9:0f:a4:af:83: 61:c2:ce:9e:b6:84:6f:e3:bc:af:31:b4:fe:ea:80: 29:4e:4a:eb:9b:f0:0a:92:b2:2f:6f:ff:ec:38:bc: bd:a5:35:94:db:4f:37:b7:26:8b:58:5b:6b:87:73: 00:46:bb:11:f5:3b:25:49:43:7d:c0:42:04:70:33: dc:df:bf:e2:c3:ca:dc:d3:34:49:a3:43:32:5e:54: 6d:fc:18:e7:55:96:8e:17:70:38:37:d2:41:21:75: 2c:44:db:3c:b6:e4:bc:4c:ad:e6:8a:62:cc:3d:f6: 22:f1:4e:f1:6b:e3:f4:98:a2:c9:c0:83:94:11:d2: 36:8f:ed:e1:5e:65:67:3a:fc:19:db:08:8b:69:c5: 2c:ba:d0:41:ed:c5:4c:54:8f:8e:e2:aa:bd:68:1f: 12:9d:6c:ca:48:ed:24:1c:e4:a4:31:32:2f:c1:30: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:07:CA:20:48:E0:A6:2F:9C:4B:13:A3:34:14:F0:CA:76:95:50 X509v3 Authority Key Identifier: keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.44.0/22 83.217.160.0/20 87.192.96.0/19 185.8.92.0/24 185.8.94.0/23 185.26.240.0/22 185.43.128.0/22 185.154.144.0/22 193.28.90.0/24 IPv6: 2a0e:1d40::/29 2a10:6940::/29 Signature Algorithm: sha256WithRSAEncryption 79:5d:cb:3d:3f:7c:ca:3b:ed:fc:25:83:a6:08:bd:63:bb:9f: 53:21:9a:b4:10:4b:d9:0a:33:73:ff:a6:4b:1b:a7:f0:98:64: e4:34:67:d7:e7:0a:03:ad:d1:58:62:22:1d:09:ca:97:95:e4: de:8d:40:41:7d:65:1f:0b:4f:8f:29:2f:77:c2:94:99:ee:8e: 3f:32:8c:48:79:58:38:a4:dc:37:59:3e:bc:e5:20:91:af:85: ac:55:61:bc:41:f9:70:56:45:17:ff:2a:fa:68:a8:2e:a2:6c: 15:13:8c:c6:e8:18:d0:c9:46:74:82:63:97:0c:68:bd:79:9f: 0d:89:58:f3:05:6e:73:dd:2f:56:a1:59:f8:24:bd:62:54:f9: 9e:77:1f:56:18:d3:ea:eb:01:c5:17:a7:49:a1:74:7f:54:7b: 6c:13:1e:d3:0f:5c:2f:ba:43:de:ea:86:18:34:30:c6:ca:a4: 60:04:4d:2b:84:4f:d7:f6:3b:b5:c8:d0:59:33:d6:6f:dc:7c: 77:75:13:1c:d9:6e:e5:b7:bc:65:8c:47:e5:27:36:6b:e6:f7: 6d:f0:e5:cd:81:5d:dc:eb:bc:13:dc:e8:5f:0f:a0:94:41:ec: ef:3a:00:3a:b4:b5:8b:d8:49:b0:6e:05:eb:e4:f0:13:85:73: 85:4c:9b:8d -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt87WIodKdv+pdP1Xy43ZayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OTljZmZhNmU0OGZhMmM0ZjhkMDk4MDMzOTZiNDU3YTYz MGEzM2QwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGFlMDdjYTIwNDhlMGE2MmY5YzRiMTNhMzM0MTRmMGNhNzY5NTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp2JHJC+usEunMiGPm6CU07M/eDS oo1aKaSQhyNWE7aX9+uhehOqSeuarJLaPHDXrCo1TirGVkV36HNUgSZ6kGh6nQo0 bvIFWPTOCNjNB6uoaNWfuQ+kr4Nhws6etoRv47yvMbT+6oApTkrrm/AKkrIvb//s OLy9pTWU2083tyaLWFtrh3MARrsR9TslSUN9wEIEcDPc37/iw8rc0zRJo0MyXlRt /BjnVZaOF3A4N9JBIXUsRNs8tuS8TK3mimLMPfYi8U7xa+P0mKLJwIOUEdI2j+3h XmVnOvwZ2wiLacUsutBB7cVMVI+O4qq9aB8SnWzKSO0kHOSkMTIvwTA0FwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFI2uB8ogSOCmL5xLE6M0FPDKdpVQMB8GA1UdIwQY MBaAFKmZz/puSPosT40JgDOWtFemMKM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUt YjNhNTA5MTBjMmE4LzEvamE0SHlpQkk0S1l2bkVzVG96UVU4TXAybFZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUtYjNhNTA5MTBjMmE4 LzEvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQCLVwsAwQE U9mgAwQFV8BgAwQAuQhcAwQBuQheAwQCuRrwAwQCuSuAAwQCuZqQAwQAwRxaMBQE AgACMA4DBQMqDh1AAwUDKhBpQDANBgkqhkiG9w0BAQsFAAOCAQEAeV3LPT98yjvt /CWDpgi9Y7ufUyGatBBL2Qozc/+mSxun8Jhk5DRn1+cKA63RWGIiHQnKl5Xk3o1A QX1lHwtPjykvd8KUme6OPzKMSHlYOKTcN1k+vOUgka+FrFVhvEH5cFZFF/8q+mio LqJsFROMxugY0MlGdIJjlwxovXmfDYlY8wVuc90vVqFZ+CS9YlT5nncfVhjT6usB xRenSaF0f1R7bBMe0w9cL7pD3uqGGDQwxsqkYARNK4RP1/Y7tcjQWTPWb9x8d3UT HNlu5be8ZYxH5Sc2a+b3bfDlzYFd3Ou8E9zoXw+glEHs7zoAOrS1i9hJsG4F6+Tw E4VzhUybjQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:44 2026 by rpki-client