This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/4XxIYwz7j2kyG3R_CD4kJYaxank.roa File: 4XxIYwz7j2kyG3R_CD4kJYaxank.roa (raw, json) Hash identifier: TLEhf+pn1t5mBsVNjIOJ9/5QAhqcShOiU6dpNlwJI8s= Subject key identifier: E1:7C:48:63:0C:FB:8F:69:32:1B:74:7F:08:3E:24:25:86:B1:6A:79 Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Certificate serial: 019B7F153A062700FD5F6E1D23DE510CCDEC Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/4XxIYwz7j2kyG3R_CD4kJYaxank.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51132 IP address blocks: 62.108.192.0/20 maxlen: 24 62.108.208.0/21 maxlen: 24 83.68.224.0/19 maxlen: 24 91.145.0.0/19 maxlen: 24 91.145.0.0/20 maxlen: 20 91.145.16.0/20 maxlen: 20 185.95.160.0/22 maxlen: 24 2a02:eb8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3a:06:27:00:fd:5f:6e:1d:23:de:51:0c:cd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e17c48630cfb8f69321b747f083e242586b16a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:b8:a9:e0:0c:83:6f:3a:3d:c1:40:8d:76: c5:0f:d7:42:fb:69:17:f9:f7:31:b1:ed:59:5b:cb: 3a:25:cd:b0:2b:ca:e1:34:c8:48:a9:d7:43:ea:49: 37:ff:56:49:f5:fe:2b:d2:58:67:14:6f:29:a3:e5: d5:fe:9d:38:3b:54:4a:8e:21:3a:79:50:b1:f1:69: a3:a8:e2:e1:7a:e0:75:eb:02:eb:95:a3:13:d8:b3: ee:fb:35:90:74:6a:6c:bc:0d:03:66:6f:b8:b2:4a: 34:bc:58:d8:b2:f5:dd:e3:2e:87:74:b6:7c:e7:ac: d1:66:3b:6f:21:95:52:c5:44:ed:d2:67:e7:77:73: a1:d9:cf:cf:6c:fe:e9:2d:96:26:0e:c8:45:38:89: a9:57:7c:b2:23:6e:2b:77:47:58:71:0f:fd:30:86: a8:ce:63:a1:20:21:ce:2f:e2:b7:83:37:41:dd:e1: 22:93:83:53:56:b7:6e:e2:4f:f4:f2:f0:97:0d:fb: 1b:88:f4:0f:38:5c:be:28:d4:d4:10:50:95:4b:e7: de:02:39:47:b4:d7:cd:54:a8:7a:16:36:e8:d3:5e: 73:01:4e:83:63:9f:f0:6e:63:32:75:81:11:cb:97: e4:7c:1b:06:89:c7:0a:c5:f9:0a:25:76:bd:8d:76: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7C:48:63:0C:FB:8F:69:32:1B:74:7F:08:3E:24:25:86:B1:6A:79 X509v3 Authority Key Identifier: keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/4XxIYwz7j2kyG3R_CD4kJYaxank.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.192.0-62.108.215.255 83.68.224.0/19 91.145.0.0/19 185.95.160.0/22 IPv6: 2a02:eb8::/29 Signature Algorithm: sha256WithRSAEncryption 67:de:a6:e2:47:cc:40:72:4e:77:0c:9b:1c:c6:54:52:16:6f: 49:d8:c4:25:92:fa:d8:88:f9:59:36:0f:b9:e4:0c:fe:d9:24: 6c:60:c6:05:e9:fd:74:4d:aa:4e:56:bd:42:64:13:58:d9:a1: e3:e0:c8:84:34:10:5c:ac:f0:bc:80:8e:68:cd:05:78:a5:80: bd:19:1a:c4:6b:48:f4:7f:b4:0a:fa:69:15:fb:9e:e9:53:19: dc:5d:4a:4e:a1:8a:c1:49:a9:11:a6:80:14:09:e3:a0:52:32: d0:f8:3c:2e:50:76:23:b0:19:f7:3f:12:92:92:60:aa:f5:18: e0:bf:08:63:2f:0c:f8:cf:0d:c0:d1:af:b5:6e:ba:e2:a5:95: e6:52:e6:34:02:46:eb:5a:77:53:50:7c:96:99:00:a6:c7:d0: 38:50:80:97:a9:b6:5d:c8:4f:e2:38:06:a7:bb:b1:49:e4:f8: b4:45:a2:3b:7d:89:2e:78:b7:a1:5f:49:68:38:7c:74:37:f4: fc:2a:7c:64:9e:80:81:4b:cc:49:07:b5:8e:c2:c7:ab:f9:54: a9:8f:01:f3:d6:84:77:56:11:97:55:c0:af:ae:d2:89:02:ee: 25:84:7e:2b:d4:7e:3d:1b:ea:43:c8:e8:b2:ce:b3:ac:19:17: 23:d8:47:41 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/FToGJwD9X24dI95RDM3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0 M2YxYjYwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTdjNDg2MzBjZmI4ZjY5MzIxYjc0N2YwODNlMjQyNTg2YjE2YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9K4qeAMg286PcFAjXbFD9dC+2kX +fcxse1ZW8s6Jc2wK8rhNMhIqddD6kk3/1ZJ9f4r0lhnFG8po+XV/p04O1RKjiE6 eVCx8WmjqOLheuB16wLrlaMT2LPu+zWQdGpsvA0DZm+4sko0vFjYsvXd4y6HdLZ8 56zRZjtvIZVSxUTt0mfnd3Oh2c/PbP7pLZYmDshFOImpV3yyI24rd0dYcQ/9MIao zmOhICHOL+K3gzdB3eEik4NTVrdu4k/08vCXDfsbiPQPOFy+KNTUEFCVS+feAjlH tNfNVKh6Fjbo015zAU6DY5/wbmMydYERy5fkfBsGiccKxfkKJXa9jXaC+QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFOF8SGMM+49pMht0fwg+JCWGsWp5MB8GA1UdIwQY MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt Nzg0ZGI5YjFkYTJiLzEvNFh4SVl3ejdqMmt5RzNSX0NENGtKWWF4YW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAY+bMAD BAM+bNADBAVTROADBAVbkQADBAK5X6AwDQQCAAIwBwMFAyoCDrgwDQYJKoZIhvcN AQELBQADggEBAGfepuJHzEByTncMmxzGVFIWb0nYxCWS+tiI+Vk2D7nkDP7ZJGxg xgXp/XRNqk5WvUJkE1jZoePgyIQ0EFys8LyAjmjNBXilgL0ZGsRrSPR/tAr6aRX7 nulTGdxdSk6hisFJqRGmgBQJ46BSMtD4PC5QdiOwGfc/EpKSYKr1GOC/CGMvDPjP DcDRr7VuuuKlleZS5jQCRutad1NQfJaZAKbH0DhQgJeptl3IT+I4Bqe7sUnk+LRF ojt9iS54t6FfSWg4fHQ39PwqfGSegIFLzEkHtY7Cx6v5VKmPAfPWhHdWEZdVwK+u 0okC7iWEfivUfj0b6kPI6LLOs6wZFyPYR0E= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:29 2026 by rpki-client