This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/4AQpWQisjxEO_3sSCwM5-rsbP2U.roa File: 4AQpWQisjxEO_3sSCwM5-rsbP2U.roa (raw, json) Hash identifier: pFbTw52/6hBtIeFj35KTMuXcfX4BCXpM3suldN/qkJc= Subject key identifier: E0:04:29:59:08:AC:8F:11:0E:FF:7B:12:0B:03:39:FA:BB:1B:3F:65 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7758FE57AA2A79F0F92BE0BD6567F805 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/4AQpWQisjxEO_3sSCwM5-rsbP2U.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 84.55.1.0/24 maxlen: 24 84.55.3.0/24 maxlen: 24 84.55.9.0/24 maxlen: 24 84.55.18.0/24 maxlen: 24 88.223.16.0/24 maxlen: 24 88.223.17.0/24 maxlen: 24 88.223.18.0/24 maxlen: 24 88.223.19.0/24 maxlen: 24 88.223.20.0/24 maxlen: 24 88.223.21.0/24 maxlen: 24 88.223.22.0/24 maxlen: 24 88.223.23.0/24 maxlen: 24 88.223.170.0/24 maxlen: 24 88.223.171.0/24 maxlen: 24 88.223.174.0/24 maxlen: 24 88.223.175.0/24 maxlen: 24 95.173.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fe:57:aa:2a:79:f0:f9:2b:e0:bd:65:67:f8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e004295908ac8f110eff7b120b0339fabb1b3f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:6f:99:94:49:28:08:f9:5c:05:3c:69:8d: 12:fa:b0:da:30:68:2b:9f:ac:dc:2a:94:88:16:12: bc:fb:5c:44:17:fa:1a:7c:08:c2:3c:bc:44:b8:9e: 70:d2:77:ab:c8:8b:1e:42:2d:4b:b6:d2:a3:1a:ad: d2:f4:8f:ca:51:26:f1:aa:fe:e0:7d:84:02:54:67: 07:b5:7c:3b:5f:0f:b5:01:32:cb:53:ea:df:e9:b6: a3:f8:18:f7:c5:e6:6c:15:b6:21:ec:02:ed:14:0f: 7e:b5:cf:3a:03:07:87:60:52:63:f0:bf:a6:dc:1e: 53:eb:ae:08:2b:cc:d8:9b:3a:de:cc:6a:9c:33:93: 96:ae:75:f9:26:e0:4f:18:ee:8e:17:7a:88:1d:52: f6:67:60:68:8e:99:20:1d:a8:0d:d5:21:e7:8c:39: db:65:da:7f:9a:90:af:c4:16:db:19:d2:cd:21:30: f5:7a:da:0b:ef:b5:27:e8:32:3a:e3:cb:34:eb:ff: 2a:30:2a:1c:9f:34:90:e3:fd:33:ea:16:4e:4d:08: 43:11:70:58:25:8a:62:71:6a:a3:df:84:1e:00:b1: c3:0f:b4:ba:e6:80:4d:b6:e6:79:5c:75:80:64:c0: ac:43:9b:24:bf:6f:07:63:fb:e5:19:d6:a3:e7:32: ee:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:04:29:59:08:AC:8F:11:0E:FF:7B:12:0B:03:39:FA:BB:1B:3F:65 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/4AQpWQisjxEO_3sSCwM5-rsbP2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.1.0/24 84.55.3.0/24 84.55.9.0/24 84.55.18.0/24 88.223.16.0/21 88.223.170.0/23 88.223.174.0/23 95.173.63.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c4:e5:8c:d7:f5:00:d8:bd:6d:25:8d:d1:0f:ca:3d:5a:c2: 5a:3b:60:4e:54:b5:58:0b:05:a0:15:37:0a:a5:ec:22:f5:ee: a9:e1:48:f6:b5:7e:cb:12:42:00:b7:8e:04:2c:d4:d6:00:b2: ef:e6:5c:25:15:55:e2:93:be:d0:40:17:a7:4a:6d:6e:06:87: f3:7a:24:b3:6b:e0:18:60:de:ab:88:a7:43:57:82:b1:b1:5b: 83:cf:11:5a:56:96:31:19:49:95:5e:45:ac:b2:c5:33:7d:20: c0:c2:8b:3f:3b:78:04:c9:43:f4:58:92:49:53:e3:10:5d:60: e0:b5:99:1d:da:38:76:b0:e7:7f:c9:d0:26:6f:72:48:d3:57: 3d:4e:a1:3f:89:5b:bc:8c:4b:ba:62:c3:b8:0f:f9:e6:7f:a2: f7:61:b8:53:ab:38:dc:1f:7e:65:96:53:91:e7:7e:31:a5:7f: c8:53:bc:63:85:35:a8:b5:70:b8:9f:e8:1a:2a:b2:4d:54:a3: 5f:72:60:2b:b7:14:89:0a:98:d6:a2:ce:af:38:2d:04:78:f5: 1f:8f:db:b6:9b:6c:8f:fb:b0:d6:ac:8a:01:50:e3:4a:64:a1: e0:dc:7e:88:ab:fb:2a:d6:d9:f0:4a:a8:38:23:b6:aa:46:93: a5:b9:d8:e4 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3WP5Xqip58Pkr4L1lZ/gFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDA0Mjk1OTA4YWM4ZjExMGVmZjdiMTIwYjAzMzlmYWJiMWIzZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLJvmZRJKAj5XAU8aY0S+rDaMGgr n6zcKpSIFhK8+1xEF/oafAjCPLxEuJ5w0neryIseQi1LttKjGq3S9I/KUSbxqv7g fYQCVGcHtXw7Xw+1ATLLU+rf6baj+Bj3xeZsFbYh7ALtFA9+tc86AweHYFJj8L+m 3B5T664IK8zYmzrezGqcM5OWrnX5JuBPGO6OF3qIHVL2Z2BojpkgHagN1SHnjDnb Zdp/mpCvxBbbGdLNITD1etoL77Un6DI648s06/8qMCocnzSQ4/0z6hZOTQhDEXBY JYpicWqj34QeALHDD7S65oBNtuZ5XHWAZMCsQ5skv28HY/vlGdaj5zLu6wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOAEKVkIrI8RDv97EgsDOfq7Gz9lMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvNEFRcFdRaXNqeEVPXzNzU0N3TTUtcnNiUDJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVDcBAwQA VDcDAwQAVDcJAwQAVDcSAwQDWN8QAwQBWN+qAwQBWN+uAwQAX60/MA0GCSqGSIb3 DQEBCwUAA4IBAQABxOWM1/UA2L1tJY3RD8o9WsJaO2BOVLVYCwWgFTcKpewi9e6p 4Uj2tX7LEkIAt44ELNTWALLv5lwlFVXik77QQBenSm1uBofzeiSza+AYYN6riKdD V4KxsVuDzxFaVpYxGUmVXkWsssUzfSDAwos/O3gEyUP0WJJJU+MQXWDgtZkd2jh2 sOd/ydAmb3JI01c9TqE/iVu8jEu6YsO4D/nmf6L3YbhTqzjcH35lllOR534xpX/I U7xjhTWotXC4n+gaKrJNVKNfcmArtxSJCpjWos6vOC0EePUfj9u2m2yP+7DWrIoB UONKZKHg3H6Iq/sq1tnwSqg4I7aqRpOludjk -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:05 2026 by rpki-client