This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa File: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (raw, json) Hash identifier: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE= Subject key identifier: E0:DF:E7:D5:C0:83:4F:BC:23:FE:20:78:5E:B3:13:01:0F:4F:8A:F3 Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4 Certificate serial: 019B7F156814A54FB16B14E866B88D9D09E4 Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205081 IP address blocks: 5.133.190.0/24 maxlen: 24 46.33.12.0/24 maxlen: 24 153.92.27.0/24 maxlen: 24 155.133.192.0/23 maxlen: 23 185.136.216.0/22 maxlen: 22 185.136.216.0/24 maxlen: 24 185.136.217.0/24 maxlen: 24 185.136.218.0/24 maxlen: 24 185.136.219.0/24 maxlen: 24 2a0c:5500::/48 maxlen: 48 2a0c:5500:1::/48 maxlen: 48 2a0c:5500:2::/48 maxlen: 48 2a0c:5500:3::/48 maxlen: 48 2a0c:5500:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:68:14:a5:4f:b1:6b:14:e8:66:b8:8d:9d:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0dfe7d5c0834fbc23fe20785eb313010f4f8af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:0b:0b:ff:6f:bc:73:1f:13:1e:0f:78:98: a8:1f:e5:b9:27:72:a0:3d:ac:07:94:66:7d:bd:a5: 47:3c:f8:47:9c:5c:86:89:87:c5:79:44:bd:7e:f8: 54:c8:27:6e:ac:b3:fa:cd:5c:92:67:27:b7:13:d4: 57:19:7c:d5:63:be:ec:7f:b7:d6:e2:87:df:f5:a0: ad:6a:e5:e0:56:c9:79:1d:21:90:b5:e2:e3:f7:40: dd:72:cd:b5:f0:73:e5:5e:16:20:5c:ed:78:0f:fa: bc:8c:a2:75:af:bc:03:c7:89:87:31:a7:38:cc:0e: 51:39:43:67:c2:56:c6:ff:fa:4d:cc:9f:c5:46:c7: bb:92:31:4c:c2:33:cf:3c:4b:de:78:22:ae:61:1a: 7c:04:13:ee:d6:98:37:46:c8:38:c4:dd:78:54:8c: 93:5c:85:9b:a2:40:73:4d:4f:d7:24:28:0c:e4:fc: 57:fe:03:85:58:84:3b:d3:e5:67:0b:e2:b4:2d:9c: 66:96:2a:e7:a7:bb:e0:e7:d5:3a:2b:31:d5:2d:14: 3e:75:db:8e:29:a7:83:5a:91:a5:1a:ca:66:54:b2: e6:27:20:2c:b7:5b:c2:d3:07:a3:84:8a:37:4e:45: 11:da:a1:f2:a0:51:db:cc:d6:57:36:7b:fd:97:05: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:E7:D5:C0:83:4F:BC:23:FE:20:78:5E:B3:13:01:0F:4F:8A:F3 X509v3 Authority Key Identifier: keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.190.0/24 46.33.12.0/24 153.92.27.0/24 155.133.192.0/23 185.136.216.0/22 IPv6: 2a0c:5500::-2a0c:5500:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0c:d2:99:eb:a0:6f:78:52:18:50:0b:86:02:cf:97:5b:14:83: 63:e8:0b:0d:7f:af:33:7d:c6:af:7f:6a:c4:5c:73:8e:8d:03: 09:8e:67:bc:b9:8c:db:cd:2b:5e:e8:af:0a:dc:7f:17:d7:a1: 4c:28:ae:c1:2e:71:bc:44:68:96:5d:b1:c0:d8:3c:4f:51:f4: c3:88:11:4b:3e:d9:91:4d:02:73:87:04:e4:65:24:0f:f1:15: de:a8:9a:1c:07:f4:87:2d:a4:af:f2:8d:8e:1b:59:0b:54:be: d6:ea:b1:fd:81:6d:a8:41:c3:5c:3a:31:22:86:c0:b2:9e:a6: 5d:e6:6f:92:e0:53:e4:aa:b0:0f:08:7a:89:0b:09:3d:ba:a9: 55:48:f7:1f:5d:73:17:4d:e0:4c:81:44:65:5b:01:81:a9:8f: c8:9b:09:95:c6:64:54:c6:bd:50:4a:5d:99:73:f2:1d:04:99: e2:28:52:c9:29:9f:a9:f3:0c:47:69:dd:41:9c:3c:7e:bc:ca: ac:c5:e7:33:6a:c8:4c:91:56:1e:7c:d9:0d:01:92:4b:c9:83: 8e:67:a3:13:60:70:c7:39:46:48:f5:74:c3:df:3b:46:8b:fd: cd:f0:40:c9:57:ea:b2:fa:ef:0c:03:96:63:01:51:85:77:ae: b3:a1:34:c5 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt/FWgUpU+xaxToZriNnQnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE0MDcwMjEwNjI3YmZjYTQ2NTRiNDJkZTc5N2FjZDZk MmM0ZjQwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGRmZTdkNWMwODM0ZmJjMjNmZTIwNzg1ZWIzMTMwMTBmNGY4YWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykILC/9vvHMfEx4PeJioH+W5J3Kg PawHlGZ9vaVHPPhHnFyGiYfFeUS9fvhUyCdurLP6zVySZye3E9RXGXzVY77sf7fW 4off9aCtauXgVsl5HSGQteLj90Ddcs218HPlXhYgXO14D/q8jKJ1r7wDx4mHMac4 zA5ROUNnwlbG//pNzJ/FRse7kjFMwjPPPEveeCKuYRp8BBPu1pg3Rsg4xN14VIyT XIWbokBzTU/XJCgM5PxX/gOFWIQ70+VnC+K0LZxmlirnp7vg59U6KzHVLRQ+dduO KaeDWpGlGspmVLLmJyAst1vC0wejhIo3TkUR2qHyoFHbzNZXNnv9lwXjBwIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFODf59XAg0+8I/4geF6zEwEPT4rzMB8GA1UdIwQY MBaAFMXhQHAhBie/ykZUtC3nl6zW0sT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt M2M0ODM5YzhlODUxLzEvNE5fbjFjQ0RUN3dqX2lCNFhyTVRBUTlQaXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx LzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAkBAIAATAeAwQABYW+AwQA LiEMAwQAmVwbAwQBm4XAAwQCuYjYMBcEAgACMBEwDwMEACoMVQMHACoMVQAABDAN BgkqhkiG9w0BAQsFAAOCAQEADNKZ66BveFIYUAuGAs+XWxSDY+gLDX+vM33Gr39q xFxzjo0DCY5nvLmM280rXuivCtx/F9ehTCiuwS5xvERoll2xwNg8T1H0w4gRSz7Z kU0Cc4cE5GUkD/EV3qiaHAf0hy2kr/KNjhtZC1S+1uqx/YFtqEHDXDoxIobAsp6m XeZvkuBT5KqwDwh6iQsJPbqpVUj3H11zF03gTIFEZVsBgamPyJsJlcZkVMa9UEpd mXPyHQSZ4ihSySmfqfMMR2ndQZw8frzKrMXnM2rITJFWHnzZDQGSS8mDjmejE2Bw xzlGSPV0w987Rov9zfBAyVfqsvrvDAOWYwFRhXeus6E0xQ== -----END CERTIFICATE-----Generated at Mon Jan 12 03:23:16 2026 by rpki-client