This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa File: 4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa (raw, json) Hash identifier: v92PqB+zER9mvZgRziC74aTu4c1aP8hKbPOOfRE55tQ= Subject key identifier: E0:2F:50:0E:50:67:9D:74:87:A4:91:0C:F4:03:65:58:06:92:C8:4B Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3 Certificate serial: 019B797F2AD250E3F87844C9B0B0B6DA82FB Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8193 IP address blocks: 195.158.0.0/19 maxlen: 24 195.158.1.0/24 maxlen: 24 195.158.12.0/24 maxlen: 24 195.158.22.0/24 maxlen: 24 195.158.23.0/24 maxlen: 24 213.230.64.0/18 maxlen: 24 213.230.72.0/23 maxlen: 23 213.230.74.0/23 maxlen: 23 213.230.76.0/23 maxlen: 23 213.230.78.0/23 maxlen: 23 213.230.80.0/23 maxlen: 23 213.230.82.0/23 maxlen: 23 213.230.86.0/23 maxlen: 23 213.230.86.0/24 maxlen: 24 213.230.87.0/24 maxlen: 24 213.230.88.0/23 maxlen: 23 213.230.92.0/23 maxlen: 23 213.230.92.0/24 maxlen: 24 213.230.93.0/24 maxlen: 24 213.230.100.0/23 maxlen: 23 213.230.102.0/23 maxlen: 23 213.230.109.0/24 maxlen: 24 213.230.112.0/23 maxlen: 23 213.230.114.0/23 maxlen: 23 213.230.116.0/23 maxlen: 23 213.230.118.0/23 maxlen: 23 213.230.125.0/24 maxlen: 24 2a05:45c0::/32 maxlen: 32 2a05:45c1::/32 maxlen: 32 2a05:45c1::/48 maxlen: 48 2a05:45c2::/36 maxlen: 36 2a05:45c2:1000::/36 maxlen: 36 2a05:45c2:2000::/36 maxlen: 36 2a05:45c2:3000::/36 maxlen: 36 2a05:45c2:4000::/36 maxlen: 36 2a05:45c2:5000::/36 maxlen: 36 2a05:45c2:6000::/36 maxlen: 36 2a05:45c2:7000::/36 maxlen: 36 2a05:45c2:8000::/36 maxlen: 36 2a05:45c5::/32 maxlen: 32 2a05:45c5:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2a:d2:50:e3:f8:78:44:c9:b0:b0:b6:da:82:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3 Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e02f500e50679d7487a4910cf40365580692c84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:4a:ac:04:33:14:ba:4a:6f:23:d2:7c:a0: 2f:58:63:47:02:cf:bd:ee:f2:cc:8b:17:ab:20:c1: ef:ca:85:ed:74:dd:97:55:7e:a0:9b:12:d1:37:37: 3d:60:d9:32:98:ae:13:87:b1:84:e1:3b:bd:f4:48: 20:c2:38:3f:b4:2e:04:c9:ca:55:d8:2a:fa:11:d4: 98:af:7d:c2:23:12:fb:c4:b1:2a:4d:a7:93:a9:99: f6:94:97:90:75:a7:f2:f2:aa:4a:3e:2d:88:98:03: 95:c1:df:d2:38:a5:45:dd:f1:f4:c9:6c:7e:65:24: 3b:a1:41:b2:b7:9e:25:5d:04:09:a4:26:a8:c9:3c: 10:df:49:52:53:c8:e5:31:b0:66:0f:e0:1f:74:30: bd:d8:81:e9:de:32:97:d6:0c:1d:97:5b:fa:0e:55: 40:bb:43:5d:d4:79:1d:f6:35:2f:f4:c2:da:9e:61: f0:89:88:0a:ed:cb:7f:e1:36:99:69:61:5f:3c:66: 8e:5c:85:7c:77:4c:be:aa:c5:e1:3f:67:ed:8b:fc: 84:c8:6e:25:2b:6f:1e:5e:c8:50:21:e0:bb:61:a0: 9e:e0:81:32:5c:4d:19:12:67:1a:0e:23:c2:14:01: 01:0a:ee:bb:d6:16:25:61:5e:fd:59:c0:b4:18:4a: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2F:50:0E:50:67:9D:74:87:A4:91:0C:F4:03:65:58:06:92:C8:4B X509v3 Authority Key Identifier: keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/4C9QDlBnnXSHpJEM9ANlWAaSyEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.158.0.0/19 213.230.64.0/18 IPv6: 2a05:45c0::-2a05:45c2:8fff:ffff:ffff:ffff:ffff:ffff 2a05:45c5::/32 Signature Algorithm: sha256WithRSAEncryption 75:a9:13:ff:e5:35:db:86:b4:f4:2e:c7:a8:18:3a:bd:68:bb: 75:54:bd:aa:55:0f:4a:b4:09:f4:64:47:c8:27:99:32:73:0c: a5:78:57:96:c3:f7:c4:42:71:48:4c:4d:d6:3d:2b:a5:67:52: d1:6f:f9:ea:32:f9:66:01:e2:3b:21:24:e4:67:fc:13:a7:ac: b4:16:15:43:c7:de:c6:8d:2d:de:bc:19:d8:b5:7e:50:da:7d: bb:06:49:3b:1e:d8:47:4b:56:41:58:dd:74:51:ef:23:c6:eb: d7:90:d7:59:7a:8c:0e:fd:31:b7:4d:90:9c:ac:1f:b9:6b:2d: b3:6d:7b:c5:0e:a7:b4:11:cd:6c:25:63:8e:ed:83:e7:7f:73: 45:3e:d6:53:dd:60:65:c4:eb:67:c4:8f:86:b7:7d:19:7a:bc: 09:55:f4:04:7b:44:db:2c:30:6b:ea:42:1e:ea:b5:08:7e:cb: ec:ba:d7:b9:27:48:c7:6d:86:11:e1:67:18:16:c5:3c:d3:35: 0b:4e:01:bd:88:19:25:fb:97:a4:0a:c2:76:75:42:f3:68:7f: 6d:91:d5:96:23:8c:77:5c:dc:9c:e6:cc:8f:83:3d:80:e1:65: d0:cf:b9:67:a8:e5:c3:1a:a5:c2:00:5e:bb:77:4c:11:fe:cc: 97:66:2f:e7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5fyrSUOP4eETJsLC22oL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Yzk2ZDM4NmQ3Y2Y1OWE5OTBkMzk5NGYwZGY4NDkzZGZj YTQ5YjMwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDJmNTAwZTUwNjc5ZDc0ODdhNDkxMGNmNDAzNjU1ODA2OTJjODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TxKrAQzFLpKbyPSfKAvWGNHAs+9 7vLMixerIMHvyoXtdN2XVX6gmxLRNzc9YNkymK4Th7GE4Tu99Eggwjg/tC4EycpV 2Cr6EdSYr33CIxL7xLEqTaeTqZn2lJeQdafy8qpKPi2ImAOVwd/SOKVF3fH0yWx+ ZSQ7oUGyt54lXQQJpCaoyTwQ30lSU8jlMbBmD+AfdDC92IHp3jKX1gwdl1v6DlVA u0Nd1Hkd9jUv9MLanmHwiYgK7ct/4TaZaWFfPGaOXIV8d0y+qsXhP2fti/yEyG4l K28eXshQIeC7YaCe4IEyXE0ZEmcaDiPCFAEBCu671hYlYV79WcC0GErK9QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFOAvUA5QZ510h6SRDPQDZVgGkshLMB8GA1UdIwQY MBaAFCTJbThtfPWamQ05lPDfhJPfykmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAt N2NkOWMzYmFiYTI1LzEvNEM5UURsQm5uWFNIcEpFTTlBTmxXQWFTeUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83YmVkNjMtNDA2ZS00MDVjLWE3ZjAtN2NkOWMzYmFiYTI1 LzEvSk1sdE9HMTg5WnFaRFRtVThOLUVrOV9LU2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDASBAIAATAMAwQFw54AAwQG 1eZAMB4EAgACMBgwDwMFBioFRcADBgQqBUXCgAMFACoFRcUwDQYJKoZIhvcNAQEL BQADggEBAHWpE//lNduGtPQux6gYOr1ou3VUvapVD0q0CfRkR8gnmTJzDKV4V5bD 98RCcUhMTdY9K6VnUtFv+eoy+WYB4jshJORn/BOnrLQWFUPH3saNLd68Gdi1flDa fbsGSTse2EdLVkFY3XRR7yPG69eQ11l6jA79MbdNkJysH7lrLbNte8UOp7QRzWwl Y47tg+d/c0U+1lPdYGXE62fEj4a3fRl6vAlV9AR7RNssMGvqQh7qtQh+y+y617kn SMdthhHhZxgWxTzTNQtOAb2IGSX7l6QKwnZ1QvNof22R1ZYjjHdc3JzmzI+DPYDh ZdDPuWeo5cMapcIAXrt3TBH+zJdmL+c= -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:55 2026 by rpki-client