This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/4zySZiWhTUg_rSb8KoK0O9QlCnc.roa File: 4zySZiWhTUg_rSb8KoK0O9QlCnc.roa (raw, json) Hash identifier: gFl6wOPf/Gu9CFX49zoLAcByVCFuRBnN0N7UMDgQVbw= Subject key identifier: E3:3C:92:66:25:A1:4D:48:3F:AD:26:FC:2A:82:B4:3B:D4:25:0A:77 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B6110182BCF5BEA946856B39263F0 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/4zySZiWhTUg_rSb8KoK0O9QlCnc.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204108 IP address blocks: 31.133.32.0/22 maxlen: 22 185.229.232.0/22 maxlen: 24 185.253.40.0/23 maxlen: 24 185.253.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:61:10:18:2b:cf:5b:ea:94:68:56:b3:92:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e33c926625a14d483fad26fc2a82b43bd4250a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:1e:81:8d:16:42:bf:2b:a6:ed:92:66:6a: 55:19:aa:2f:27:a0:d0:ae:c9:2b:92:2a:d8:65:26: 4a:4b:e2:39:b0:f2:36:31:d6:db:c3:98:30:e9:da: a4:75:79:bf:a1:b3:72:8a:4a:10:59:5d:78:16:99: 41:18:37:65:60:3a:3a:03:6a:c0:36:95:90:64:ba: f4:32:b4:d5:69:a0:6f:6e:b4:8c:2b:15:2c:6c:3f: 4f:d4:3a:af:a6:de:11:a3:f3:68:7e:58:a0:73:bc: 82:ab:2f:a7:04:be:bc:cf:58:bc:37:51:0f:a5:6c: 1b:9d:2b:eb:5b:1c:dc:b8:2f:d0:ba:52:73:f6:f3: c3:9e:87:e1:90:d2:06:e5:e0:f8:09:41:f0:5c:c9: 9a:2a:f3:4f:d2:c7:d6:82:d8:0d:2e:dd:2d:c6:ce: b5:8e:33:03:01:78:f0:e1:3d:b7:fe:5e:1c:8d:69: b4:62:41:8a:0c:d4:d8:f9:b6:c8:8b:45:bc:25:d5: 07:c1:d8:64:1d:ce:a9:3f:a0:18:30:62:35:9c:84: 02:97:73:1e:7a:c9:5a:bd:c9:d3:86:31:ac:76:2a: e5:f0:84:60:cb:b9:43:82:c8:cd:f5:a1:cb:5f:d2: 16:93:6b:22:ed:b0:33:65:64:1a:70:08:55:cc:33: 36:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:92:66:25:A1:4D:48:3F:AD:26:FC:2A:82:B4:3B:D4:25:0A:77 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/4zySZiWhTUg_rSb8KoK0O9QlCnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.32.0/22 185.229.232.0/22 185.253.40.0/22 Signature Algorithm: sha256WithRSAEncryption c2:08:2a:27:6b:36:9f:ce:e2:59:0c:20:a3:84:92:c9:36:4c: 36:af:c0:be:a0:16:39:8e:b6:b9:d3:5f:2e:3c:5c:1b:76:09: ac:c8:57:c3:96:b7:dd:f6:c9:1b:00:ff:de:2b:76:e8:58:ad: 73:03:0a:c4:c0:03:76:c6:78:1a:2a:9a:06:cc:98:f2:65:07: 90:35:92:ef:96:8e:6a:3b:62:31:df:55:68:11:7c:bc:0d:83: 81:05:2a:a7:72:67:7c:94:d6:ac:fb:ea:5e:fb:19:c0:4a:5c: 81:8c:99:06:c3:d9:09:eb:6a:c5:41:9f:40:68:94:05:7c:69: e4:b9:3d:4a:18:db:1b:9a:7a:4c:39:c7:f8:1d:58:59:1f:b0: 58:c5:3c:b5:b5:8b:dd:74:f5:9d:a7:6f:06:bb:7c:c8:21:3e: 10:db:fa:47:ec:6f:08:8f:46:d6:a0:e3:37:56:c6:b7:cd:7e: 72:f2:d1:e8:1f:d7:f3:48:96:6c:2b:1d:87:77:de:ac:da:24: 0e:13:12:ba:37:bc:bc:67:86:47:40:73:1c:a0:50:a7:a0:11: fb:ad:27:5b:fa:a4:db:da:36:a9:ce:26:5f:3f:ec:c0:cc:13: 36:e8:dc:47:f4:b5:b3:bf:ff:d7:18:0c:6c:fb:58:8e:a8:c1: 8e:9d:e4:ed -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W2EQGCvPW+qUaFazkmPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzNjOTI2NjI1YTE0ZDQ4M2ZhZDI2ZmMyYTgyYjQzYmQ0MjUwYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhwegY0WQr8rpu2SZmpVGaovJ6DQ rskrkirYZSZKS+I5sPI2Mdbbw5gw6dqkdXm/obNyikoQWV14FplBGDdlYDo6A2rA NpWQZLr0MrTVaaBvbrSMKxUsbD9P1Dqvpt4Ro/Nofligc7yCqy+nBL68z1i8N1EP pWwbnSvrWxzcuC/QulJz9vPDnofhkNIG5eD4CUHwXMmaKvNP0sfWgtgNLt0txs61 jjMDAXjw4T23/l4cjWm0YkGKDNTY+bbIi0W8JdUHwdhkHc6pP6AYMGI1nIQCl3Me eslavcnThjGsdirl8IRgy7lDgsjN9aHLX9IWk2si7bAzZWQacAhVzDM2MwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOM8kmYloU1IP60m/CqCtDvUJQp3MB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvNHp5U1ppV2hUVWdfclNiOEtvSzBPOVFsQ25jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4UgAwQC ueXoAwQCuf0oMA0GCSqGSIb3DQEBCwUAA4IBAQDCCConazafzuJZDCCjhJLJNkw2 r8C+oBY5jra5018uPFwbdgmsyFfDlrfd9skbAP/eK3boWK1zAwrEwAN2xngaKpoG zJjyZQeQNZLvlo5qO2Ix31VoEXy8DYOBBSqncmd8lNas++pe+xnASlyBjJkGw9kJ 62rFQZ9AaJQFfGnkuT1KGNsbmnpMOcf4HVhZH7BYxTy1tYvddPWdp28Gu3zIIT4Q 2/pH7G8Ij0bWoOM3Vsa3zX5y8tHoH9fzSJZsKx2Hd96s2iQOExK6N7y8Z4ZHQHMc oFCnoBH7rSdb+qTb2japziZfP+zAzBM26NxH9LWzv//XGAxs+1iOqMGOneTt -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:16 2026 by rpki-client