This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa File: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (raw, json) Hash identifier: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I= Subject key identifier: E1:5A:AA:6F:99:38:8F:DA:F8:14:3F:90:E1:38:07:2F:31:81:A1:3E Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f Certificate serial: 019B7F8440626AD043D2E35A606984414923 Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51300 IP address blocks: 46.28.24.0/21 maxlen: 21 46.28.24.0/24 maxlen: 24 46.28.25.0/24 maxlen: 24 46.28.26.0/24 maxlen: 24 46.28.27.0/24 maxlen: 24 46.28.28.0/24 maxlen: 24 46.28.29.0/24 maxlen: 24 46.28.30.0/24 maxlen: 24 46.28.31.0/24 maxlen: 24 185.202.120.0/22 maxlen: 22 185.202.120.0/24 maxlen: 24 185.202.121.0/24 maxlen: 24 185.202.122.0/24 maxlen: 24 185.202.123.0/24 maxlen: 24 193.135.146.0/23 maxlen: 23 193.135.146.0/24 maxlen: 24 193.135.147.0/24 maxlen: 24 207.244.214.0/23 maxlen: 23 207.244.214.0/24 maxlen: 24 207.244.215.0/24 maxlen: 24 2a0a:1e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:40:62:6a:d0:43:d2:e3:5a:60:69:84:41:49:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e15aaa6f99388fdaf8143f90e138072f3181a13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:61:a9:4d:a7:46:a7:a5:d1:6a:47:3d:0c:c0: 67:a5:3c:b2:63:38:68:6e:41:78:97:60:5d:eb:4b: 13:80:0e:44:ec:74:65:cc:a0:66:34:61:89:ba:21: 81:a6:0f:fc:ec:92:eb:f8:d5:88:6f:31:64:6e:7c: a6:b8:18:0c:46:42:ad:1c:d0:4e:0e:7d:41:99:60: 39:8e:08:57:c3:83:fe:4a:89:d2:e3:86:52:11:f2: 3c:40:3a:9b:50:7a:3a:11:a2:3d:f1:48:57:00:59: 9d:d5:85:dd:98:68:75:5a:91:27:f7:7d:84:63:8d: 2f:8d:08:c4:0b:0a:fb:29:a9:ed:cf:f9:4c:a1:96: 40:0d:e8:86:66:75:01:40:52:62:ee:eb:29:33:11: d5:d5:ae:4e:d3:a7:ae:c6:75:3b:0f:91:79:87:81: 2e:23:d9:64:59:a0:c0:78:86:ac:53:68:19:b0:c6: 04:c5:7f:27:a1:82:30:b6:5d:42:38:40:df:c4:3e: 85:82:b2:43:7e:ea:20:c8:6d:30:67:73:35:d2:ac: c3:8c:f8:c0:d8:f5:b3:df:c2:2f:28:cb:ce:9c:7e: 4a:8a:4b:9a:f0:da:d4:9d:92:f9:95:74:7a:28:75: ea:c7:d0:91:c6:b3:d8:10:a6:1f:84:6c:0d:73:d6: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5A:AA:6F:99:38:8F:DA:F8:14:3F:90:E1:38:07:2F:31:81:A1:3E X509v3 Authority Key Identifier: keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.24.0/21 185.202.120.0/22 193.135.146.0/23 207.244.214.0/23 IPv6: 2a0a:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 68:c8:b4:11:0c:c1:a7:19:ad:36:70:b5:e7:c5:c4:fd:81:4a: 5c:1f:5a:65:37:a3:92:26:29:4a:ac:6a:52:81:92:f6:b4:55: c2:8c:d6:fd:ba:0a:11:7d:b2:9f:bc:9c:50:a5:00:23:7f:98: 57:a8:05:a9:7c:63:cf:a7:6e:6b:33:70:b4:5f:65:80:58:16: a1:95:69:bc:9f:0d:40:28:68:03:cf:43:51:d1:45:bf:f8:59: db:17:a7:59:1d:db:52:12:80:0a:d8:3b:4b:41:05:43:ab:a0: d0:a6:89:fe:d0:ea:7b:cd:04:e8:4f:a5:3b:ce:53:ec:2b:24: 2f:d1:e1:03:09:f8:fe:5e:fb:55:3e:23:37:61:d8:13:fd:03: ea:c7:3b:f7:95:bd:69:1a:bf:26:7f:82:aa:0e:3c:4b:80:4c: 4b:8f:86:ab:d5:66:6e:55:6c:b3:8e:ca:e1:75:57:cf:cc:c9: 6b:9d:58:6b:be:2e:e3:9c:b7:4e:81:17:32:f3:f0:ee:4d:3c: 60:e6:ca:cb:ae:4c:ab:8f:a1:46:86:7c:b6:b2:3a:ac:31:e6: 79:ca:0d:3e:51:48:45:fc:03:58:35:3f:01:aa:b3:0c:f8:ff: 80:29:2d:df:c3:44:1a:a2:42:2b:70:a1:38:63:57:12:ac:6d: 6b:6a:71:e8 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/hEBiatBD0uNaYGmEQUkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTRhYjlhOGY0YTIwZTgyOWRkNDU3NWE4OGM4MTI1YzFj OGE2N2YwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTVhYWE2Zjk5Mzg4ZmRhZjgxNDNmOTBlMTM4MDcyZjMxODFhMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GGpTadGp6XRakc9DMBnpTyyYzho bkF4l2Bd60sTgA5E7HRlzKBmNGGJuiGBpg/87JLr+NWIbzFkbnymuBgMRkKtHNBO Dn1BmWA5jghXw4P+SonS44ZSEfI8QDqbUHo6EaI98UhXAFmd1YXdmGh1WpEn932E Y40vjQjECwr7Kantz/lMoZZADeiGZnUBQFJi7uspMxHV1a5O06euxnU7D5F5h4Eu I9lkWaDAeIasU2gZsMYExX8noYIwtl1COEDfxD6FgrJDfuogyG0wZ3M10qzDjPjA 2PWz38IvKMvOnH5Kikua8NrUnZL5lXR6KHXqx9CRxrPYEKYfhGwNc9auFQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOFaqm+ZOI/a+BQ/kOE4By8xgaE+MB8GA1UdIwQY MBaAFAGUq5qPSiDoKd1FdaiMgSXByKZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEt Y2IzODYzNThkMTUxLzEvNFZxcWI1azRqOXI0RkQtUTRUZ0hMekdCb1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEtY2IzODYzNThkMTUx LzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhwYAwQC ucp4AwQBwYeSAwQBz/TWMA0EAgACMAcDBQAqCh5AMA0GCSqGSIb3DQEBCwUAA4IB AQBoyLQRDMGnGa02cLXnxcT9gUpcH1plN6OSJilKrGpSgZL2tFXCjNb9ugoRfbKf vJxQpQAjf5hXqAWpfGPPp25rM3C0X2WAWBahlWm8nw1AKGgDz0NR0UW/+FnbF6dZ HdtSEoAK2DtLQQVDq6DQpon+0Op7zQToT6U7zlPsKyQv0eEDCfj+XvtVPiM3YdgT /QPqxzv3lb1pGr8mf4KqDjxLgExLj4ar1WZuVWyzjsrhdVfPzMlrnVhrvi7jnLdO gRcy8/DuTTxg5srLrkyrj6FGhny2sjqsMeZ5yg0+UUhF/ANYNT8BqrMM+P+AKS3f w0QaokIrcKE4Y1cSrG1ranHo -----END CERTIFICATE-----Generated at Fri Jan 9 23:40:50 2026 by rpki-client