This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/QRtiZIJ3lC4wddKs5UQgizYT0KY.roa File: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (raw, json) Hash identifier: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU= Subject key identifier: 41:1B:62:64:82:77:94:2E:30:75:D2:AC:E5:44:20:8B:36:13:D0:A6 Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a Certificate serial: 019B7AC9245ABF765A99150002ECDD676BD5 Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/QRtiZIJ3lC4wddKs5UQgizYT0KY.roa Signing time: Thu 01 Jan 2026 18:19:20 +0000 ROA not before: Thu 01 Jan 2026 18:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39706 IP address blocks: 82.113.96.0/19 maxlen: 19 82.113.96.0/20 maxlen: 20 82.113.112.0/20 maxlen: 20 82.113.121.0/25 maxlen: 25 82.113.121.128/25 maxlen: 25 82.113.124.0/22 maxlen: 22 89.204.128.0/19 maxlen: 19 89.204.128.0/21 maxlen: 21 89.204.130.0/24 maxlen: 24 89.204.135.0/24 maxlen: 24 89.204.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:24:5a:bf:76:5a:99:15:00:02:ec:dd:67:6b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=411b62648277942e3075d2ace544208b3613d0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:4a:e2:3e:0a:9f:e3:fd:4a:1a:e7:05:a2: b8:30:bf:a3:de:82:e1:f9:c5:6e:6f:9d:93:c5:db: 92:4b:23:1b:43:ae:d4:70:48:17:ee:3c:4c:fc:36: 66:b8:14:f0:c8:e3:e7:57:aa:4f:89:ba:43:48:76: e7:0e:80:19:f3:60:04:f2:fb:5c:d9:74:b4:85:43: 17:1b:c8:e8:ea:dd:00:36:54:d5:1e:ca:14:cb:e4: b2:e4:94:73:d7:fd:2b:62:93:a5:d9:ef:8f:ff:62: d9:32:ff:ce:d6:26:0e:af:c2:17:2a:eb:38:bb:b6: 16:93:0c:f2:34:cf:b3:fc:8c:85:e4:1f:24:98:1e: 3b:8d:b2:0c:ec:e5:f7:db:54:96:1e:d6:d2:9b:91: 83:ef:c0:72:d4:f3:e8:29:b3:b2:96:20:03:8d:5e: 26:61:83:7a:e6:80:c3:50:50:ca:3c:00:46:a0:45: ad:bc:c9:2b:de:05:b9:0e:bb:d4:df:76:43:08:42: 63:f0:e3:32:8a:4e:f1:7a:6c:a5:d3:e3:93:3a:48: 86:76:f1:0b:0a:86:7f:cc:0b:41:3f:0c:e0:96:39: c0:6b:07:95:e3:d2:31:9c:aa:5e:a8:08:03:6a:44: ac:9f:3b:ef:7f:73:94:56:7f:cb:81:3e:ac:85:83: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1B:62:64:82:77:94:2E:30:75:D2:AC:E5:44:20:8B:36:13:D0:A6 X509v3 Authority Key Identifier: keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/QRtiZIJ3lC4wddKs5UQgizYT0KY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.113.96.0/19 89.204.128.0/19 Signature Algorithm: sha256WithRSAEncryption 3d:01:40:d3:f1:1c:02:b0:9c:f0:ee:91:9b:6c:c6:25:c6:4b: d8:43:fb:f6:44:0c:c0:a9:54:b7:6b:d4:86:73:7d:c5:ae:da: f4:78:c4:b2:f1:d3:44:57:61:d5:2c:0e:5e:e5:b3:21:71:56: 90:4a:1b:9b:b1:bd:ef:f5:a2:d4:73:57:8f:77:43:92:9c:d7: a0:ff:57:d4:dd:6f:5d:72:78:8d:28:16:33:a1:d8:40:ca:21: 43:f3:68:ae:42:ed:a4:2f:28:a6:b1:29:18:39:7a:d2:66:c2: 20:c1:e5:d0:36:e3:80:e0:5b:55:b2:f4:eb:37:9f:a8:88:f3: 01:a7:6d:8d:03:85:e7:47:f6:07:42:4f:16:13:93:1f:ea:36: cf:f3:db:13:46:0b:aa:e6:b6:ee:23:b9:09:12:10:28:84:47: 1e:ee:e9:44:33:b8:c4:7a:f0:94:ce:99:41:05:68:2b:24:e0: 31:1d:4f:be:3f:1f:e8:5c:c2:c0:da:44:66:40:35:0f:4e:72: 3d:2e:a7:34:5b:18:d5:75:56:c1:d0:cf:b7:95:a6:c0:bf:ca: ac:55:73:b2:06:54:6f:f3:65:84:6d:fb:ac:d5:c5:e0:92:9f: bd:18:27:9a:c6:14:49:73:dd:c1:0e:ba:2e:63:22:db:cc:dc: 0b:ca:e2:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6ySRav3ZamRUAAuzdZ2vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi MmMyNWEwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTFiNjI2NDgyNzc5NDJlMzA3NWQyYWNlNTQ0MjA4YjM2MTNkMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFlK4j4Kn+P9ShrnBaK4ML+j3oLh +cVub52TxduSSyMbQ67UcEgX7jxM/DZmuBTwyOPnV6pPibpDSHbnDoAZ82AE8vtc 2XS0hUMXG8jo6t0ANlTVHsoUy+Sy5JRz1/0rYpOl2e+P/2LZMv/O1iYOr8IXKus4 u7YWkwzyNM+z/IyF5B8kmB47jbIM7OX321SWHtbSm5GD78By1PPoKbOyliADjV4m YYN65oDDUFDKPABGoEWtvMkr3gW5DrvU33ZDCEJj8OMyik7xemyl0+OTOkiGdvEL CoZ/zAtBPwzgljnAaweV49IxnKpeqAgDakSsnzvvf3OUVn/LgT6shYMJmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEEbYmSCd5QuMHXSrOVEIIs2E9CmMB8GA1UdIwQY MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt ZWMwM2ViZDE5MDAwLzEvUVJ0aVpJSjNsQzR3ZGRLczVVUWdpellUMEtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFUnFgAwQF WcyAMA0GCSqGSIb3DQEBCwUAA4IBAQA9AUDT8RwCsJzw7pGbbMYlxkvYQ/v2RAzA qVS3a9SGc33Frtr0eMSy8dNEV2HVLA5e5bMhcVaQShubsb3v9aLUc1ePd0OSnNeg /1fU3W9dcniNKBYzodhAyiFD82iuQu2kLyimsSkYOXrSZsIgweXQNuOA4FtVsvTr N5+oiPMBp22NA4XnR/YHQk8WE5Mf6jbP89sTRguq5rbuI7kJEhAohEce7ulEM7jE evCUzplBBWgrJOAxHU++Px/oXMLA2kRmQDUPTnI9Lqc0WxjVdVbB0M+3labAv8qs VXOyBlRv82WEbfus1cXgkp+9GCeaxhRJc93BDrouYyLbzNwLyuLr -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:37 2026 by rpki-client