This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa File: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (raw, json) Hash identifier: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY= Subject key identifier: 4F:80:49:9C:30:5F:13:A0:32:05:20:16:02:33:D9:D4:6C:CB:94:C3 Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907 Certificate serial: 019B7F836C24A1923F789BC9786FD8D39B13 Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 45.90.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:6c:24:a1:92:3f:78:9b:c9:78:6f:d8:d3:9b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f80499c305f13a0320520160233d9d46ccb94c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:76:d7:78:6e:d0:ef:74:47:97:8c:ae:20: 00:8d:39:30:f5:a4:3c:17:17:d1:b6:fc:3c:7f:81: 72:2d:c3:2f:3b:a0:14:65:cc:f2:3a:a7:fe:28:8f: 1a:dd:b4:0a:eb:09:97:97:ed:e4:f5:ae:05:1c:1e: 84:56:2b:45:12:8b:46:22:4a:db:e0:ed:35:96:1c: 46:13:76:08:fa:05:57:ed:a7:ec:6e:82:6a:8d:3e: 29:11:7a:1d:67:fd:96:e3:15:c7:cb:c8:ee:1f:83: ce:13:e5:0a:71:b6:d4:33:48:c3:e6:09:e6:b0:a5: e0:a3:0d:62:b6:d1:a7:4b:82:fc:4d:6b:7e:cb:49: cf:03:c5:17:b7:32:d1:d7:17:ee:70:1a:6e:d3:b0: 31:ab:57:8c:fb:8e:1c:03:ba:60:a7:f0:45:07:96: 54:30:60:6a:da:aa:08:0a:b2:a0:17:92:ed:1f:02: 70:be:a7:94:9f:9b:48:bf:2c:a2:fb:68:5e:66:16: 78:14:20:f2:01:94:82:4c:d7:96:57:8d:b0:c6:c1: 8b:76:fe:6a:c9:94:17:87:01:3f:da:58:9e:3c:63: e3:ac:e1:d0:52:5e:29:50:09:fb:f2:ed:e7:4c:03: e6:f0:07:27:9c:e4:40:90:3f:0c:68:9b:3f:7a:62: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:80:49:9C:30:5F:13:A0:32:05:20:16:02:33:D9:D4:6C:CB:94:C3 X509v3 Authority Key Identifier: keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:ee:84:c8:f0:6d:fc:fd:e1:23:5c:b6:00:8f:87:9f:31:f9: c6:d3:40:f2:90:26:ba:00:3c:03:3c:00:55:a8:5d:5c:90:84: cf:5b:9b:0e:df:ae:7f:97:3d:4e:fd:42:34:7a:80:f5:71:62: a0:3e:8f:3b:f6:e9:17:4f:32:9f:17:de:31:dd:5a:85:74:de: 2e:de:00:1c:d7:6f:2b:2b:6a:ec:6d:b1:a9:4f:ce:7f:de:83: 0d:80:76:ba:c3:38:b7:9e:bf:4e:80:68:49:62:d1:cf:16:72: 0c:b4:73:df:40:17:02:ef:03:60:51:47:0b:e5:ca:15:3d:67: d2:6e:8f:c6:ea:31:48:96:03:9f:e6:15:f2:1c:5e:9e:eb:2f: 69:9d:35:d9:0e:a8:88:a6:eb:fe:ad:18:55:97:e3:1a:57:c4: db:b2:db:13:4e:5f:6c:e7:9b:ab:73:c7:24:43:12:ee:27:d3: 84:c0:55:a8:f4:4c:97:a1:e2:b5:78:a5:27:ff:60:2d:f8:b8: ac:63:88:31:98:f2:5e:4b:c1:7f:64:ad:13:54:84:88:81:64: 03:a1:b3:0e:fc:40:af:8a:7f:e1:5e:b8:71:77:fe:b9:09:66: 09:14:08:06:2f:46:82:81:6a:c9:34:7d:77:9f:db:06:73:05: da:03:1c:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2wkoZI/eJvJeG/Y05sTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTQzZjllNWFlM2Y2ZWFmYjUwNjhhZTg4ZjE4YzI5ZTQ0 MzU5MDcwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjgwNDk5YzMwNWYxM2EwMzIwNTIwMTYwMjMzZDlkNDZjY2I5NGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYl213hu0O90R5eMriAAjTkw9aQ8 FxfRtvw8f4FyLcMvO6AUZczyOqf+KI8a3bQK6wmXl+3k9a4FHB6EVitFEotGIkrb 4O01lhxGE3YI+gVX7afsboJqjT4pEXodZ/2W4xXHy8juH4POE+UKcbbUM0jD5gnm sKXgow1ittGnS4L8TWt+y0nPA8UXtzLR1xfucBpu07Axq1eM+44cA7pgp/BFB5ZU MGBq2qoICrKgF5LtHwJwvqeUn5tIvyyi+2heZhZ4FCDyAZSCTNeWV42wxsGLdv5q yZQXhwE/2liePGPjrOHQUl4pUAn78u3nTAPm8AcnnORAkD8MaJs/emKRQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+ASZwwXxOgMgUgFgIz2dRsy5TDMB8GA1UdIwQY MBaAFHTkP55a4/bq+1BorojxjCnkQ1kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kYTMzYWUtMTZjYy00YzlhLWJmOWMt NzE3OTk4YWEzY2ZmLzEvVDRCSm5EQmZFNkF5QlNBV0FqUFoxR3pMbE1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kYTMzYWUtMTZjYy00YzlhLWJmOWMtNzE3OTk4YWEzY2Zm LzEvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVqIMA0G CSqGSIb3DQEBCwUAA4IBAQA67oTI8G38/eEjXLYAj4efMfnG00DykCa6ADwDPABV qF1ckITPW5sO365/lz1O/UI0eoD1cWKgPo879ukXTzKfF94x3VqFdN4u3gAc128r K2rsbbGpT85/3oMNgHa6wzi3nr9OgGhJYtHPFnIMtHPfQBcC7wNgUUcL5coVPWfS bo/G6jFIlgOf5hXyHF6e6y9pnTXZDqiIpuv+rRhVl+MaV8TbstsTTl9s55urc8ck QxLuJ9OEwFWo9EyXoeK1eKUn/2At+LisY4gxmPJeS8F/ZK0TVISIgWQDobMO/ECv in/hXrhxd/65CWYJFAgGL0aCgWrJNH13n9sGcwXaAxwW -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:11 2026 by rpki-client