This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/v4cq6Hnva2aD7nUaDvqW4eZ7jBg.roa File: v4cq6Hnva2aD7nUaDvqW4eZ7jBg.roa (raw, json) Hash identifier: NboZnNkBkhmU0ZjWN+JKF9jhgAaCEPLSrq5UOM/05Vs= Subject key identifier: BF:87:2A:E8:79:EF:6B:66:83:EE:75:1A:0E:FA:96:E1:E6:7B:8C:18 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A27C07124B212CFC3708C14030C78A Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/v4cq6Hnva2aD7nUaDvqW4eZ7jBg.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64200 IP address blocks: 45.67.147.0/24 maxlen: 24 63.246.136.0/24 maxlen: 24 63.246.139.0/24 maxlen: 24 63.246.142.0/24 maxlen: 24 63.246.145.0/24 maxlen: 24 63.246.146.0/23 maxlen: 23 63.246.149.0/24 maxlen: 24 185.171.124.0/24 maxlen: 24 185.171.125.0/24 maxlen: 24 185.171.127.0/24 maxlen: 24 185.198.88.0/24 maxlen: 24 185.205.206.0/24 maxlen: 24 192.145.68.0/24 maxlen: 24 212.60.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7c:07:12:4b:21:2c:fc:37:08:c1:40:30:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf872ae879ef6b6683ee751a0efa96e1e67b8c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:ab:72:ce:8d:26:95:aa:3b:67:30:fa:99: 68:3b:b0:9b:61:8d:32:e8:ec:01:a1:32:20:8c:c1: c4:c6:66:17:88:ca:6d:30:e2:ae:71:33:77:18:c2: e6:5c:96:d2:52:5a:f6:3b:b0:d4:73:95:08:dc:ce: 2a:9d:6b:93:04:8f:2d:4f:68:ef:54:f7:2f:c5:e9: 1b:9a:02:de:d4:88:cb:8c:86:62:22:04:3e:0e:d7: 3f:ec:0d:b7:0c:75:73:8f:d3:21:2c:92:4f:71:3e: 75:63:d7:f8:25:94:af:35:5e:ca:99:62:de:24:47: 5c:e3:bc:30:63:8d:e4:15:89:29:97:68:6d:fb:bb: 08:11:c6:34:3e:47:33:7e:44:e7:dc:d4:80:48:1d: e9:8b:be:6e:25:8b:f0:ef:10:ce:18:83:4f:bf:48: 0a:70:27:95:e3:70:9c:ce:9b:92:80:75:7b:49:2b: 86:5c:65:54:3f:98:7b:48:5a:97:dd:db:9e:6a:7e: af:9a:b3:41:c2:64:80:fb:1c:f3:a1:99:a1:81:26: f1:d4:dd:a1:f3:7c:a0:32:db:6a:29:34:24:0e:f3: cb:9c:16:20:5c:3d:b2:ac:7f:02:bc:33:c6:50:9a: 4e:82:00:b9:91:e6:2d:ac:bb:0b:31:9b:9a:97:22: 09:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:2A:E8:79:EF:6B:66:83:EE:75:1A:0E:FA:96:E1:E6:7B:8C:18 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/v4cq6Hnva2aD7nUaDvqW4eZ7jBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.147.0/24 63.246.136.0/24 63.246.139.0/24 63.246.142.0/24 63.246.145.0-63.246.147.255 63.246.149.0/24 185.171.124.0/23 185.171.127.0/24 185.198.88.0/24 185.205.206.0/24 192.145.68.0/24 212.60.18.0/23 Signature Algorithm: sha256WithRSAEncryption 23:68:37:43:db:85:8a:44:6d:13:49:67:83:b5:92:64:5a:96: 75:b1:ac:2b:6c:c3:64:79:05:0d:db:4f:31:2a:b8:26:6a:67: d1:18:d0:c0:f5:98:24:41:b5:45:84:c0:c9:db:5a:03:6a:5e: 6f:3f:ca:fb:fb:03:fe:c5:b8:dd:da:12:0b:4e:df:43:96:12: a8:66:de:92:74:22:57:39:11:49:f0:e5:99:21:36:5c:4a:34: a1:81:4f:42:0c:58:11:d2:26:99:53:a4:72:25:2d:02:e4:41: c0:42:26:a4:2e:84:67:50:ce:09:9d:6e:44:24:2b:cd:52:07: 74:57:ab:9a:34:1d:2d:c2:c4:3c:ca:4a:47:b7:e3:d2:b9:4a: 10:c2:2c:25:72:4d:02:ba:a6:9b:23:e8:01:de:37:71:bc:12: 6c:36:49:c6:11:49:9d:b6:99:bd:57:3a:72:0c:b0:ce:71:ae: af:55:d4:4f:26:74:ee:2c:e3:9b:d2:4a:b9:60:83:43:5f:51: a1:cc:62:04:54:97:6f:17:f1:f4:2f:4e:6d:e3:28:1f:5b:ec: 24:27:5e:03:32:df:7f:2d:46:44:74:86:77:64:24:a2:84:f2: ed:2b:09:f5:f3:26:0c:9d:ac:3a:c6:e2:f9:8a:48:6b:16:7e: f3:eb:fe:18 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt4onwHEkshLPw3CMFAMMeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjg3MmFlODc5ZWY2YjY2ODNlZTc1MWEwZWZhOTZlMWU2N2I4YzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt+rcs6NJpWqO2cw+ploO7CbYY0y 6OwBoTIgjMHExmYXiMptMOKucTN3GMLmXJbSUlr2O7DUc5UI3M4qnWuTBI8tT2jv VPcvxekbmgLe1IjLjIZiIgQ+Dtc/7A23DHVzj9MhLJJPcT51Y9f4JZSvNV7KmWLe JEdc47wwY43kFYkpl2ht+7sIEcY0PkczfkTn3NSASB3pi75uJYvw7xDOGINPv0gK cCeV43CczpuSgHV7SSuGXGVUP5h7SFqX3duean6vmrNBwmSA+xzzoZmhgSbx1N2h 83ygMttqKTQkDvPLnBYgXD2yrH8CvDPGUJpOggC5keYtrLsLMZualyIJ9QIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFL+HKuh572tmg+51Gg76luHme4wYMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvdjRjcTZIbnZhMmFEN25VYUR2cVc0ZVo3akJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQALUOTAwQA P/aIAwQAP/aLAwQAP/aOMAwDBAA/9pEDBAI/9pADBAA/9pUDBAG5q3wDBAC5q38D BAC5xlgDBAC5zc4DBADAkUQDBAHUPBIwDQYJKoZIhvcNAQELBQADggEBACNoN0Pb hYpEbRNJZ4O1kmRalnWxrCtsw2R5BQ3bTzEquCZqZ9EY0MD1mCRBtUWEwMnbWgNq Xm8/yvv7A/7FuN3aEgtO30OWEqhm3pJ0Ilc5EUnw5ZkhNlxKNKGBT0IMWBHSJplT pHIlLQLkQcBCJqQuhGdQzgmdbkQkK81SB3RXq5o0HS3CxDzKSke349K5ShDCLCVy TQK6ppsj6AHeN3G8Emw2ScYRSZ22mb1XOnIMsM5xrq9V1E8mdO4s45vSSrlgg0Nf UaHMYgRUl28X8fQvTm3jKB9b7CQnXgMy338tRkR0hndkJKKE8u0rCfXzJgydrDrG 4vmKSGsWfvPr/hg= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:16 2026 by rpki-client