This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/4Ad95JRvdeXEOh1-p8DSYxoEeas.roa File: 4Ad95JRvdeXEOh1-p8DSYxoEeas.roa (raw, json) Hash identifier: Lh5iJPxcP6pYOkGhzgCKScjKfILFOR4uaZhpWxHfUC8= Subject key identifier: E0:07:7D:E4:94:6F:75:E5:C4:3A:1D:7E:A7:C0:D2:63:1A:04:79:AB Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019B7EA492996132F99CED610EC41257CB57 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/4Ad95JRvdeXEOh1-p8DSYxoEeas.roa Signing time: Fri 02 Jan 2026 12:17:53 +0000 ROA not before: Fri 02 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1653 IP address blocks: 37.156.192.0/20 maxlen: 26 77.238.32.0/19 maxlen: 19 86.104.48.0/20 maxlen: 20 86.104.152.0/21 maxlen: 21 86.104.200.0/21 maxlen: 21 86.105.112.0/21 maxlen: 21 86.106.160.0/21 maxlen: 21 89.32.32.0/21 maxlen: 21 89.32.72.0/21 maxlen: 21 89.33.136.0/21 maxlen: 23 89.34.184.0/21 maxlen: 21 89.34.240.0/21 maxlen: 21 89.37.176.0/21 maxlen: 21 89.41.160.0/21 maxlen: 21 89.43.232.0/21 maxlen: 21 89.44.0.0/21 maxlen: 24 89.44.248.0/21 maxlen: 22 89.45.232.0/21 maxlen: 21 89.45.236.0/22 maxlen: 22 89.46.16.0/21 maxlen: 21 89.46.16.0/24 maxlen: 24 89.46.17.0/24 maxlen: 24 89.46.18.0/24 maxlen: 24 89.46.20.0/22 maxlen: 22 89.47.184.0/21 maxlen: 21 91.250.192.0/19 maxlen: 19 93.115.160.0/21 maxlen: 21 94.176.224.0/21 maxlen: 25 188.211.240.0/21 maxlen: 21 188.240.144.0/20 maxlen: 24 188.241.160.0/20 maxlen: 20 193.10.0.0/16 maxlen: 24 193.11.0.0/16 maxlen: 24 194.47.0.0/16 maxlen: 16 212.25.128.0/19 maxlen: 19 2001:6b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:92:99:61:32:f9:9c:ed:61:0e:c4:12:57:cb:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jan 2 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0077de4946f75e5c43a1d7ea7c0d2631a0479ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:dc:ed:76:a8:93:6a:cc:8f:6f:0d:13:d6: 81:49:b9:33:11:38:e4:3d:8b:d4:9b:6c:79:b4:86: 8c:66:72:f8:9a:0a:4e:fb:71:fe:c6:22:4e:11:0f: d6:16:e1:40:a0:77:94:4b:1a:1e:ce:e4:59:46:fc: 54:66:49:f6:56:92:af:1a:70:e8:c6:7b:39:c3:4b: a4:ee:91:ad:83:e1:61:69:de:e1:47:ce:9e:4f:04: 63:da:76:11:33:7d:d9:a3:06:b6:bc:0d:84:be:b3: bd:e4:d4:68:d7:5c:89:20:d4:a2:6d:3f:b9:fc:a1: 47:0b:11:37:a2:f3:6f:7d:95:94:19:02:cd:f9:cd: ed:db:0b:59:06:1f:28:47:43:6f:09:a9:c5:52:c3: 1e:01:68:cb:dc:0b:58:62:8b:d3:46:bc:d2:2a:1d: 1d:9e:dd:d3:64:b7:6f:e5:23:3d:81:e1:cf:3b:5c: e5:4f:ce:65:3c:a3:61:18:30:99:9b:62:88:44:5d: af:f3:ea:43:6c:ee:9e:4e:21:4a:96:05:61:3e:c0: 97:07:48:d1:2c:16:98:e4:a9:74:2d:2e:99:4e:71: 6e:1b:fe:32:ee:d4:49:62:15:ba:3b:57:6e:24:cd: 02:25:9f:75:f9:68:1e:7a:42:d6:d2:88:02:87:2b: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:07:7D:E4:94:6F:75:E5:C4:3A:1D:7E:A7:C0:D2:63:1A:04:79:AB X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/4Ad95JRvdeXEOh1-p8DSYxoEeas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.192.0/20 77.238.32.0/19 86.104.48.0/20 86.104.152.0/21 86.104.200.0/21 86.105.112.0/21 86.106.160.0/21 89.32.32.0/21 89.32.72.0/21 89.33.136.0/21 89.34.184.0/21 89.34.240.0/21 89.37.176.0/21 89.41.160.0/21 89.43.232.0/21 89.44.0.0/21 89.44.248.0/21 89.45.232.0/21 89.46.16.0/21 89.47.184.0/21 91.250.192.0/19 93.115.160.0/21 94.176.224.0/21 188.211.240.0/21 188.240.144.0/20 188.241.160.0/20 193.10.0.0/15 194.47.0.0/16 212.25.128.0/19 IPv6: 2001:6b0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:df:78:09:49:d7:4e:df:15:53:8e:a8:68:cc:7d:83:ac:63: 1f:a5:6e:8e:8f:e2:f2:48:7b:ed:a1:31:b6:c2:ff:c3:08:05: ff:81:6a:c2:3e:e0:81:97:c2:67:30:e0:0c:5f:3d:54:58:c2: 40:db:53:3e:f9:d0:d5:3e:14:a8:41:40:2d:bd:82:70:48:a0: 2c:89:53:8d:28:2d:21:28:61:6a:55:01:01:f0:ea:33:62:5e: 3f:a8:d4:b2:3a:bd:1d:7a:03:84:4a:d9:dd:dc:b6:79:56:49: b3:5b:49:10:f5:a1:64:3f:15:11:aa:62:e2:61:14:f2:d5:47: 09:52:22:85:47:d3:a1:0c:f8:66:22:3d:36:af:0d:28:ed:ad: 23:c8:83:14:48:28:ae:f9:1e:3c:80:21:0a:a3:d8:5d:91:74: 6d:f7:9a:f7:9c:b5:76:d5:4f:50:20:b5:af:b0:21:ea:14:c9: 96:3e:30:79:fa:1c:55:8e:1e:ae:0e:ea:f7:18:58:85:b3:d2: 28:2c:60:82:2d:f5:b0:a3:1d:e4:ac:fc:74:6d:d1:28:e6:47: db:6d:26:0b:9f:06:71:c8:5b:16:71:9b:6f:d2:8d:c9:ed:71: c9:f3:1f:f0:de:29:0c:88:a0:ed:af:c6:ba:fa:8d:19:69:e9: 2a:ea:ca:8a -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt+pJKZYTL5nO1hDsQSV8tXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMTAyMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDA3N2RlNDk0NmY3NWU1YzQzYTFkN2VhN2MwZDI2MzFhMDQ3OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D/c7Xaok2rMj28NE9aBSbkzETjk PYvUm2x5tIaMZnL4mgpO+3H+xiJOEQ/WFuFAoHeUSxoezuRZRvxUZkn2VpKvGnDo xns5w0uk7pGtg+Fhad7hR86eTwRj2nYRM33Zowa2vA2EvrO95NRo11yJINSibT+5 /KFHCxE3ovNvfZWUGQLN+c3t2wtZBh8oR0NvCanFUsMeAWjL3AtYYovTRrzSKh0d nt3TZLdv5SM9geHPO1zlT85lPKNhGDCZm2KIRF2v8+pDbO6eTiFKlgVhPsCXB0jR LBaY5Kl0LS6ZTnFuG/4y7tRJYhW6O1duJM0CJZ91+WgeekLW0ogChyurTQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFOAHfeSUb3XlxDodfqfA0mMaBHmrMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNEFkOTVKUnZkZVhFT2gxLXA4RFNZeG9FZWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTCBswQCAAEwgawDBAQl nMADBAVN7iADBARWaDADBANWaJgDBANWaMgDBANWaXADBANWaqADBANZICADBANZ IEgDBANZIYgDBANZIrgDBANZIvADBANZJbADBANZKaADBANZK+gDBANZLAADBANZ LPgDBANZLegDBANZLhADBANZL7gDBAVb+sADBANdc6ADBANesOADBAO80/ADBAS8 8JADBAS88aADAwHBCgMDAMIvAwQF1BmAMA0EAgACMAcDBQAgAQawMA0GCSqGSIb3 DQEBCwUAA4IBAQAf33gJSddO3xVTjqhozH2DrGMfpW6Oj+LySHvtoTG2wv/DCAX/ gWrCPuCBl8JnMOAMXz1UWMJA21M++dDVPhSoQUAtvYJwSKAsiVONKC0hKGFqVQEB 8OozYl4/qNSyOr0degOEStnd3LZ5VkmzW0kQ9aFkPxURqmLiYRTy1UcJUiKFR9Oh DPhmIj02rw0o7a0jyIMUSCiu+R48gCEKo9hdkXRt95r3nLV21U9QILWvsCHqFMmW PjB5+hxVjh6uDur3GFiFs9IoLGCCLfWwox3krPx0bdEo5kfbbSYLnwZxyFsWcZtv 0o3J7XHJ8x/w3ikMiKDtr8a6+o0Zaekq6sqK -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:16 2026 by rpki-client