This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/4bWETyrA4CdryhK6-uJfwCn5JA0.roa File: 4bWETyrA4CdryhK6-uJfwCn5JA0.roa (raw, json) Hash identifier: iIF3K/40pMYxfSHgY9tEa5lmOQsb+JoU1NG9FV62m80= Subject key identifier: E1:B5:84:4F:2A:C0:E0:27:6B:CA:12:BA:FA:E2:5F:C0:29:F9:24:0D Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Certificate serial: 019BE5A8E78FBCC1B72F6F73FE7617908D2F Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/4bWETyrA4CdryhK6-uJfwCn5JA0.roa Signing time: Thu 22 Jan 2026 12:23:30 +0000 ROA not before: Thu 22 Jan 2026 12:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61272 IP address blocks: 85.206.160.0/22 maxlen: 32 85.206.164.0/22 maxlen: 32 85.206.166.58/32 maxlen: 32 85.206.168.0/22 maxlen: 32 85.206.172.0/22 maxlen: 32 85.206.240.0/22 maxlen: 32 88.119.160.0/21 maxlen: 32 88.119.168.0/24 maxlen: 32 88.119.169.0/24 maxlen: 32 88.119.170.0/24 maxlen: 32 88.119.171.0/24 maxlen: 32 88.119.173.0/24 maxlen: 32 88.119.174.0/24 maxlen: 32 88.119.175.0/24 maxlen: 32 91.216.163.0/24 maxlen: 32 185.25.48.0/22 maxlen: 32 185.64.104.0/22 maxlen: 32 213.252.228.0/24 maxlen: 32 213.252.229.0/24 maxlen: 32 213.252.230.0/24 maxlen: 32 213.252.231.0/24 maxlen: 32 213.252.232.0/24 maxlen: 32 213.252.233.0/24 maxlen: 32 213.252.238.0/24 maxlen: 32 213.252.239.0/24 maxlen: 32 2a04:2180::/32 maxlen: 64 2a04:2181:c010::/48 maxlen: 64 2a04:2181:c011::/48 maxlen: 64 2a04:2181:c012::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:a8:e7:8f:bc:c1:b7:2f:6f:73:fe:76:17:90:8d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Validity Not Before: Jan 22 12:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b5844f2ac0e0276bca12bafae25fc029f9240d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:4a:2a:8a:b1:51:d1:a3:24:aa:f2:9a:f3: 3e:1b:d8:2a:22:82:1c:a4:a8:34:8e:59:7c:9c:a8: 17:48:86:f2:d1:f1:86:ee:77:9e:b9:6c:8f:6c:e2: ce:27:bb:11:60:a3:d3:a5:42:e0:39:7c:ce:2c:1b: 90:54:64:a2:2f:56:90:a5:ba:3f:bf:ac:07:9e:3a: 6c:f9:a2:0f:8b:f0:53:3a:08:1f:17:d8:71:f4:48: 92:e9:31:60:a5:82:f9:a2:20:05:ec:ec:47:1d:3b: 88:c9:b8:eb:54:2c:88:6d:ae:f0:f8:06:36:ab:db: ea:b5:c5:fc:0e:64:5b:87:9a:19:22:e7:b9:c0:04: f7:c7:85:8a:10:c4:8b:60:7c:80:bb:f6:d5:51:ea: ad:ff:67:b4:3b:02:54:d1:53:d6:72:16:f9:44:30: 6f:88:10:43:f0:84:3a:29:35:22:86:1e:30:99:b8: 4a:6a:e2:b1:78:d5:b9:85:43:fe:51:c7:a6:9f:b8: 3d:e1:5a:c8:3c:13:49:0d:55:ec:53:2e:5a:b2:3e: c5:44:79:0e:2d:81:5d:0d:cf:b2:0c:84:7a:fa:a4: 53:21:ba:aa:78:5e:0d:5d:ac:46:bb:fe:1c:61:61: 52:9c:31:ed:82:b0:b6:f1:e6:9f:6a:06:14:12:fc: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B5:84:4F:2A:C0:E0:27:6B:CA:12:BA:FA:E2:5F:C0:29:F9:24:0D X509v3 Authority Key Identifier: keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/4bWETyrA4CdryhK6-uJfwCn5JA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.206.160.0/20 85.206.240.0/22 88.119.160.0-88.119.171.255 88.119.173.0-88.119.175.255 91.216.163.0/24 185.25.48.0/22 185.64.104.0/22 213.252.228.0-213.252.233.255 213.252.238.0/23 IPv6: 2a04:2180::/32 2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1f:03:4c:ce:c7:f2:59:4a:26:c8:68:0a:75:65:eb:c9:cf:2c: f1:08:c4:a1:de:53:76:90:02:c5:86:3f:d4:95:c6:f4:c7:43: 8d:94:4a:8d:44:db:62:ad:a4:f1:4e:2d:59:61:55:8d:38:03: ed:88:33:dc:64:ff:27:2e:1f:d6:b9:4b:29:4f:3f:a1:99:55: 6d:29:3a:fa:b8:96:4a:f9:2d:4d:df:14:5d:21:fe:65:9a:73: e2:dd:e9:a7:1a:ba:49:e7:58:3c:9d:8b:f3:70:90:e4:18:d3: 7b:2d:ea:43:36:05:3c:40:00:7b:04:8f:e8:fd:6b:34:4b:66: e4:d1:09:15:34:36:40:a5:42:8a:a0:d0:be:95:f1:57:91:34: c9:20:80:e2:61:03:a0:bc:77:df:cc:ca:dc:12:2b:e6:1f:f5: a8:03:ba:31:88:b3:49:45:36:07:0c:c4:31:87:58:ec:b5:e1: 76:f0:17:3b:06:21:00:5b:8b:ee:32:8d:1d:e5:ef:13:3b:c0: b1:ab:ad:9f:55:b5:f7:53:da:35:db:ed:e7:58:d6:46:63:0f: d6:ae:fe:09:9f:f9:ed:92:c9:1a:22:94:ce:08:af:bd:f2:4f: eb:7d:a4:5d:0b:57:ce:01:d7:b5:12:99:e3:74:73:64:c0:72: bd:f4:6a:05 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZvlqOePvMG3L29z/nYXkI0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5 MDgyOTkwHhcNMjYwMTIyMTIyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWI1ODQ0ZjJhYzBlMDI3NmJjYTEyYmFmYWUyNWZjMDI5ZjkyNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3ZKKoqxUdGjJKrymvM+G9gqIoIc pKg0jll8nKgXSIby0fGG7neeuWyPbOLOJ7sRYKPTpULgOXzOLBuQVGSiL1aQpbo/ v6wHnjps+aIPi/BTOggfF9hx9EiS6TFgpYL5oiAF7OxHHTuIybjrVCyIba7w+AY2 q9vqtcX8DmRbh5oZIue5wAT3x4WKEMSLYHyAu/bVUeqt/2e0OwJU0VPWchb5RDBv iBBD8IQ6KTUihh4wmbhKauKxeNW5hUP+Ucemn7g94VrIPBNJDVXsUy5asj7FRHkO LYFdDc+yDIR6+qRTIbqqeF4NXaxGu/4cYWFSnDHtgrC28eafagYUEvxXpQIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFOG1hE8qwOAna8oSuvriX8Ap+SQNMB8GA1UdIwQY MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt Njk5ODM1YzkyYmZlLzEvNGJXRVR5ckE0Q2RyeWhLNi11SmZ3Q241SkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwVAQCAAEwTgMEBFXOoAME AlXO8DAMAwQFWHegAwQCWHeoMAwDBABYd60DBARYd6ADBABb2KMDBAK5GTADBAK5 QGgwDAMEAtX85AMEAdX86AMEAdX87jAhBAIAAjAbAwUAKgQhgDASAwcEKgQhgcAQ AwcAKgQhgcASMA0GCSqGSIb3DQEBCwUAA4IBAQAfA0zOx/JZSibIaAp1ZevJzyzx CMSh3lN2kALFhj/Ulcb0x0ONlEqNRNtiraTxTi1ZYVWNOAPtiDPcZP8nLh/WuUsp Tz+hmVVtKTr6uJZK+S1N3xRdIf5lmnPi3emnGrpJ51g8nYvzcJDkGNN7LepDNgU8 QAB7BI/o/Ws0S2bk0QkVNDZApUKKoNC+lfFXkTTJIIDiYQOgvHffzMrcEivmH/Wo A7oxiLNJRTYHDMQxh1jsteF28Bc7BiEAW4vuMo0d5e8TO8Cxq62fVbX3U9o12+3n WNZGYw/Wrv4Jn/ntkskaIpTOCK+98k/rfaRdC1fOAde1EpnjdHNkwHK99GoF -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:44 2026 by rpki-client