This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4nQYvBGgmplCtyUqN4ISHk3Zqro.roa File: 4nQYvBGgmplCtyUqN4ISHk3Zqro.roa (raw, json) Hash identifier: br9qVMd0a/Aoa21EaWphlDAKGJsjrBLz777nrYduYog= Subject key identifier: E2:74:18:BC:11:A0:9A:99:42:B7:25:2A:37:82:12:1E:4D:D9:AA:BA Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3B00B7CDDCDFBAD60CE75CB69E41 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4nQYvBGgmplCtyUqN4ISHk3Zqro.roa Signing time: Thu 01 Jan 2026 12:17:54 +0000 ROA not before: Thu 01 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209537 IP address blocks: 45.67.18.0/24 maxlen: 32 185.207.176.0/24 maxlen: 32 2a06:82c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3b:00:b7:cd:dc:df:ba:d6:0c:e7:5c:b6:9e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e27418bc11a09a9942b7252a3782121e4dd9aaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:a2:56:16:c1:ad:2b:d8:73:a3:ec:fe:cc: 33:6f:14:90:4a:9d:f7:12:c9:52:6c:2f:21:6c:41: 51:35:d9:37:0f:9d:48:de:46:30:3a:94:15:d8:43: 12:71:d8:97:6d:e0:68:4d:27:69:84:6e:e8:b5:44: bc:f2:66:16:21:e0:51:a2:5b:26:40:cb:b2:38:af: 70:fc:71:25:bc:06:31:bb:79:a9:50:ec:92:34:54: 41:a9:f6:8b:5e:2e:80:3c:77:38:1c:43:fb:4c:e5: 9f:5b:a5:4b:34:1b:30:b5:59:65:04:44:82:53:a4: c9:c5:53:d4:f6:a8:be:54:a9:33:b2:b2:4d:26:02: 15:68:9c:f2:09:a4:66:75:7e:1d:05:39:28:82:70: 17:bc:ba:70:09:a9:41:68:a5:23:70:b9:22:e0:9f: 82:87:3c:92:59:a5:3d:10:70:f2:f8:99:56:49:2a: e2:78:e8:2e:07:2e:07:f4:c2:4b:70:80:b1:73:e6: 37:5c:e1:eb:7c:2d:d6:63:18:e0:1d:df:a4:97:df: 9b:2e:1d:19:94:58:3e:15:03:ca:9e:da:98:1c:48: 2c:9e:9d:e6:1d:de:cc:c5:39:b3:4c:26:80:7a:54: 8f:08:39:bc:ad:44:52:17:7f:d9:6c:3d:e8:c6:33: 6f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:18:BC:11:A0:9A:99:42:B7:25:2A:37:82:12:1E:4D:D9:AA:BA X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4nQYvBGgmplCtyUqN4ISHk3Zqro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.18.0/24 185.207.176.0/24 IPv6: 2a06:82c5::/48 Signature Algorithm: sha256WithRSAEncryption a5:cc:92:52:49:5d:b2:bf:7c:58:69:01:48:63:a5:2b:96:60: 68:59:a2:ad:f7:f6:c1:cd:56:b8:8f:80:b1:21:e6:60:3c:bc: 61:22:4d:cb:de:70:68:fa:2b:ae:53:0a:3d:f4:7c:8e:da:22: a8:55:85:e1:0b:86:8b:be:c4:4c:08:ae:66:a3:f6:df:11:29: 27:45:fb:73:80:59:57:25:f3:81:16:1f:b8:b1:b8:46:cb:20: 92:08:3f:79:24:8b:c3:96:c7:9f:35:00:bc:3f:18:8f:ce:39: 9c:43:b2:8a:ca:54:31:a6:9f:04:1a:77:08:f4:fb:3a:5f:f9: 53:50:6e:3c:db:8f:a1:29:1a:7e:0c:4f:62:35:98:52:cd:28: 19:93:81:55:d4:58:fc:8d:fd:d4:de:76:c2:e4:8a:ed:eb:1c: 83:87:2d:7b:ef:84:dc:60:76:f1:29:38:6b:bd:a9:f5:35:a0: 44:04:5c:dd:71:3c:e0:4f:80:16:ae:91:78:1e:c2:c9:de:21: f1:29:d1:e3:67:98:ba:21:2b:78:39:52:c2:96:75:55:e2:7f: 49:31:05:11:bc:37:e6:0e:fb:6d:6a:88:ee:20:0b:e6:03:0b: 7f:31:cb:6a:16:20:22:8d:67:cd:f4:7d:06:41:25:c4:8f:cb: b2:37:d1:df -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fjsAt83c37rWDOdctp5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjc0MThiYzExYTA5YTk5NDJiNzI1MmEzNzgyMTIxZTRkZDlhYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBeiVhbBrSvYc6Ps/swzbxSQSp33 EslSbC8hbEFRNdk3D51I3kYwOpQV2EMScdiXbeBoTSdphG7otUS88mYWIeBRolsm QMuyOK9w/HElvAYxu3mpUOySNFRBqfaLXi6APHc4HEP7TOWfW6VLNBswtVllBESC U6TJxVPU9qi+VKkzsrJNJgIVaJzyCaRmdX4dBTkognAXvLpwCalBaKUjcLki4J+C hzySWaU9EHDy+JlWSSrieOguBy4H9MJLcICxc+Y3XOHrfC3WYxjgHd+kl9+bLh0Z lFg+FQPKntqYHEgsnp3mHd7MxTmzTCaAelSPCDm8rURSF3/ZbD3oxjNvrwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOJ0GLwRoJqZQrclKjeCEh5N2aq6MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvNG5RWXZCR2dtcGxDdHlVcU40SVNIazNacXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALUMSAwQA uc+wMA8EAgACMAkDBwAqBoLFAAAwDQYJKoZIhvcNAQELBQADggEBAKXMklJJXbK/ fFhpAUhjpSuWYGhZoq339sHNVriPgLEh5mA8vGEiTcvecGj6K65TCj30fI7aIqhV heELhou+xEwIrmaj9t8RKSdF+3OAWVcl84EWH7ixuEbLIJIIP3kki8OWx581ALw/ GI/OOZxDsorKVDGmnwQadwj0+zpf+VNQbjzbj6EpGn4MT2I1mFLNKBmTgVXUWPyN /dTedsLkiu3rHIOHLXvvhNxgdvEpOGu9qfU1oEQEXN1xPOBPgBaukXgewsneIfEp 0eNnmLohK3g5UsKWdVXif0kxBRG8N+YO+21qiO4gC+YDC38xy2oWICKNZ830fQZB JcSPy7I30d8= -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:47 2026 by rpki-client