This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/0549ZLBzM4beeKAOhluORbZXoyA.roa File: 0549ZLBzM4beeKAOhluORbZXoyA.roa (raw, json) Hash identifier: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4= Subject key identifier: D3:9E:3D:64:B0:73:33:86:DE:78:A0:0E:86:5B:8E:45:B6:57:A3:20 Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Certificate serial: 019B7E390F536A68B0F22D0CF6E311C99C38 Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/0549ZLBzM4beeKAOhluORbZXoyA.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 90.152.0.0/18 maxlen: 18 90.152.64.0/18 maxlen: 18 90.152.64.0/19 maxlen: 19 90.152.96.0/19 maxlen: 19 95.175.192.0/20 maxlen: 20 95.175.208.0/20 maxlen: 20 212.36.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0f:53:6a:68:b0:f2:2d:0c:f6:e3:11:c9:9c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d39e3d64b0733386de78a00e865b8e45b657a320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:47:fe:52:78:62:09:55:1a:e5:24:fd:f2: f2:3d:45:6b:6b:4b:31:43:68:e7:d7:32:8f:b1:3c: a6:c4:55:fc:56:58:6a:c4:8a:f2:6b:92:19:7d:68: 1e:70:78:3b:04:e8:35:bb:d4:f9:08:d6:9f:60:97: ef:7f:24:47:29:09:57:7f:ed:9b:9e:6a:bc:f3:b3: d1:4c:94:d1:04:7f:25:5f:13:e5:71:ae:cc:7e:a7: 02:fb:5e:f4:92:52:da:26:b0:99:94:36:95:82:bc: 3a:a8:98:6d:19:a3:f2:fa:dc:1f:02:28:6c:64:71: fe:47:74:fd:89:3b:d6:60:b1:c6:9f:8a:38:0f:01: 6a:5a:76:9c:e0:dd:f0:b4:38:91:af:95:05:c5:01: 7c:13:eb:1b:4f:9a:96:21:76:86:7f:2a:f9:33:cf: ea:2f:07:90:89:eb:77:dc:8e:2b:df:a0:24:fb:07: d6:cb:01:c1:53:7d:74:55:af:24:2b:19:46:b9:39: 6a:bb:6b:f7:15:78:8c:13:06:f8:ac:3d:1d:1f:08: bb:b1:d0:3b:68:53:d4:36:16:4f:32:8c:95:1a:f0: 53:70:18:20:b8:ed:ed:ba:96:2e:37:a7:a0:c7:83: b0:84:ec:50:97:b7:17:26:e1:b2:61:9e:3b:e4:52: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9E:3D:64:B0:73:33:86:DE:78:A0:0E:86:5B:8E:45:B6:57:A3:20 X509v3 Authority Key Identifier: keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/0549ZLBzM4beeKAOhluORbZXoyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.152.0.0/17 95.175.192.0/19 212.36.32.0/19 Signature Algorithm: sha256WithRSAEncryption 12:7b:c4:a5:94:c5:28:25:35:9c:c8:af:40:6c:da:83:00:96: 54:46:61:05:29:70:92:0e:3a:f2:83:d0:e3:62:37:b6:4d:5e: b1:70:05:0b:08:b1:aa:b1:40:9f:f6:37:b3:60:91:f5:11:24: e6:52:3a:66:d8:b2:eb:bb:4e:47:46:af:44:aa:1b:7d:ac:8e: 73:af:a0:c1:64:c6:c7:2e:de:e0:24:50:15:b4:07:7b:81:9f: 65:64:69:6e:05:96:7c:eb:cf:5b:aa:32:ae:da:cf:84:42:cc: 1e:3b:19:cd:3f:65:5d:29:77:fb:9f:ff:58:7b:07:5c:b3:6d: 22:fd:27:d3:55:35:2d:a4:c9:05:b0:90:42:74:3a:b3:70:dd: 7c:91:59:79:ac:94:e5:31:34:e0:8b:3f:df:b1:46:7c:e3:cb: d9:d5:da:72:6a:6b:5a:93:85:c1:a0:62:5f:85:be:89:cb:c6: 7b:60:de:9a:98:f7:28:47:6d:8c:0d:4c:2c:68:7b:0d:57:28: 93:e2:e3:da:8d:c0:9d:f4:77:cd:15:fe:d1:96:fe:bd:c9:19: da:ac:1d:a2:d8:62:f7:20:b4:7f:31:16:d2:cd:15:c3:f4:fb: 77:21:08:bf:e2:5f:27:1c:fc:b2:3d:32:d9:75:7f:d4:59:a7: 95:79:43:fb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OQ9Tamiw8i0M9uMRyZw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk NmMxZjAwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzllM2Q2NGIwNzMzMzg2ZGU3OGEwMGU4NjViOGU0NWI2NTdhMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptxH/lJ4YglVGuUk/fLyPUVra0sx Q2jn1zKPsTymxFX8VlhqxIrya5IZfWgecHg7BOg1u9T5CNafYJfvfyRHKQlXf+2b nmq887PRTJTRBH8lXxPlca7MfqcC+170klLaJrCZlDaVgrw6qJhtGaPy+twfAihs ZHH+R3T9iTvWYLHGn4o4DwFqWnac4N3wtDiRr5UFxQF8E+sbT5qWIXaGfyr5M8/q LweQiet33I4r36Ak+wfWywHBU310Va8kKxlGuTlqu2v3FXiMEwb4rD0dHwi7sdA7 aFPUNhZPMoyVGvBTcBgguO3tupYuN6egx4OwhOxQl7cXJuGyYZ475FLTdQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNOePWSwczOG3nigDoZbjkW2V6MgMB8GA1UdIwQY MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt MWU2NTc3Y2ExNzJkLzEvMDU0OVpMQnpNNGJlZUtBT2hsdU9SYlpYb3lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHWpgAAwQF X6/AAwQF1CQgMA0GCSqGSIb3DQEBCwUAA4IBAQASe8SllMUoJTWcyK9AbNqDAJZU RmEFKXCSDjryg9DjYje2TV6xcAULCLGqsUCf9jezYJH1ESTmUjpm2LLru05HRq9E qht9rI5zr6DBZMbHLt7gJFAVtAd7gZ9lZGluBZZ8689bqjKu2s+EQsweOxnNP2Vd KXf7n/9Yewdcs20i/SfTVTUtpMkFsJBCdDqzcN18kVl5rJTlMTTgiz/fsUZ848vZ 1dpyamtak4XBoGJfhb6Jy8Z7YN6amPcoR22MDUwsaHsNVyiT4uPajcCd9HfNFf7R lv69yRnarB2i2GL3ILR/MRbSzRXD9Pt3IQi/4l8nHPyyPTLZdX/UWaeVeUP7 -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:01 2026 by rpki-client