This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/4bQ3DVIcXcKUiFmG5oHF6-JBJfw.roa File: 4bQ3DVIcXcKUiFmG5oHF6-JBJfw.roa (raw, json) Hash identifier: OLz4ZIfxwyF5VVW3+IHUfqxoYFlnc0ssX7TuBteE4qA= Subject key identifier: E1:B4:37:0D:52:1C:5D:C2:94:88:59:86:E6:81:C5:EB:E2:41:25:FC Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a Certificate serial: 019B7EA709557ED7E6C6D974AA338E901CE6 Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/4bQ3DVIcXcKUiFmG5oHF6-JBJfw.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.49.21.0/24 maxlen: 24 194.59.152.0/23 maxlen: 23 194.59.152.0/24 maxlen: 24 194.59.153.0/24 maxlen: 24 194.59.154.0/24 maxlen: 24 2001:67c:2950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:09:55:7e:d7:e6:c6:d9:74:aa:33:8e:90:1c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b4370d521c5dc294885986e681c5ebe24125fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:7d:4f:c9:6a:ad:23:da:c4:83:ef:dc:09: 75:3f:ac:cb:87:e5:c6:83:d4:33:14:97:c3:7e:06: 0e:6f:0c:bf:76:17:a7:52:31:a5:4e:0c:13:ff:38: 00:11:4f:0d:78:4e:33:36:1e:dc:e5:c5:c2:ce:0d: be:df:67:67:a0:78:57:e5:c4:36:85:42:94:33:bd: 69:cc:98:f6:d3:f6:60:c0:7a:44:6a:85:3c:d0:23: 2c:ce:2f:63:68:04:bc:93:7f:46:83:4b:58:d7:24: 9b:79:4d:4f:01:1e:53:43:f8:7d:25:9c:e6:7d:2a: 33:8c:9d:ef:7c:6b:aa:19:e8:2a:44:4e:11:63:41: d4:4d:a1:2e:a0:80:59:9d:67:1d:8c:ce:98:43:e5: d0:be:90:0f:ed:bf:1c:35:53:5c:2c:9e:ed:56:65: a6:3a:1b:8c:7a:79:0c:53:b7:e3:14:e7:e9:d5:2b: b7:be:33:18:91:63:f0:5e:21:f9:b1:24:82:8b:f4: 20:47:1d:1c:87:83:d4:2d:47:0a:42:e8:0b:62:ca: e9:65:be:1d:60:9b:60:13:89:c9:7a:4c:35:56:17: f5:eb:3d:4f:fb:c4:8d:51:40:b3:77:e4:d7:cc:3f: d0:8c:23:ee:10:10:bc:ee:84:b6:8d:87:6d:3f:b9: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B4:37:0D:52:1C:5D:C2:94:88:59:86:E6:81:C5:EB:E2:41:25:FC X509v3 Authority Key Identifier: keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/4bQ3DVIcXcKUiFmG5oHF6-JBJfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.21.0/24 194.59.152.0-194.59.154.255 IPv6: 2001:67c:2950::/48 Signature Algorithm: sha256WithRSAEncryption 30:8b:d7:a0:72:81:d7:b6:f1:51:db:72:6f:1d:e9:9b:f7:00: 0b:ea:86:cd:fd:37:e5:cc:e1:44:fa:ae:74:e0:f6:3d:30:a1: 63:5a:70:a4:7e:bc:f2:4e:2a:77:7e:e7:e9:a8:c9:28:6a:f6: 36:e4:05:79:5f:77:ef:64:3e:b1:99:e2:cd:87:5c:39:e6:e1: 0a:97:11:13:a3:1b:7a:0e:01:88:ae:71:6a:d1:0d:ba:5e:2a: af:7f:e2:6e:a8:1e:25:ab:36:8f:0f:44:64:ff:ab:b6:11:76: c7:3c:74:26:79:f2:d3:41:a1:13:17:11:4f:7f:c6:a3:35:0d: 28:b2:a7:a3:61:bc:85:ff:95:e2:a9:2f:f6:d5:f0:f8:e5:60: f3:d8:ff:ad:82:bc:6e:df:dc:99:ef:f2:05:fa:7a:4f:ab:2e: 40:6e:80:83:4c:77:e9:4d:43:70:22:84:36:67:05:f6:86:43: 24:42:64:4f:92:1b:22:ea:2a:1a:2b:f8:37:12:3b:19:f1:4f: 0e:8b:f0:1b:a6:8c:60:1b:5d:bc:1c:dc:a0:8c:6c:70:5d:56: 61:bc:f6:75:70:b7:d5:48:96:a7:82:e3:9a:d6:6c:48:52:91: ff:2e:4c:aa:38:aa:89:ad:ec:fb:ea:c7:6a:a6:0a:94:9b:35: ed:5f:82:45 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt+pwlVftfmxtl0qjOOkBzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjBkNjcwNjQ5YTRhNGE5Y2IyZTY2NzcyMTcwNzQxYWRm N2M1MWEwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWI0MzcwZDUyMWM1ZGMyOTQ4ODU5ODZlNjgxYzVlYmUyNDEyNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwh9T8lqrSPaxIPv3Al1P6zLh+XG g9QzFJfDfgYObwy/dhenUjGlTgwT/zgAEU8NeE4zNh7c5cXCzg2+32dnoHhX5cQ2 hUKUM71pzJj20/ZgwHpEaoU80CMszi9jaAS8k39Gg0tY1ySbeU1PAR5TQ/h9JZzm fSozjJ3vfGuqGegqRE4RY0HUTaEuoIBZnWcdjM6YQ+XQvpAP7b8cNVNcLJ7tVmWm OhuMenkMU7fjFOfp1Su3vjMYkWPwXiH5sSSCi/QgRx0ch4PULUcKQugLYsrpZb4d YJtgE4nJekw1Vhf16z1P+8SNUUCzd+TXzD/QjCPuEBC87oS2jYdtP7kXNwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFOG0Nw1SHF3ClIhZhuaBxeviQSX8MB8GA1UdIwQY MBaAFFkg1nBkmkpKnLLmZ3IXB0Gt98UaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2Et YWM3NjRjOTUyMzU3LzEvNGJRM0RWSWNYY0tVaUZtRzVvSEY2LUpCSmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2EtYWM3NjRjOTUyMzU3 LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQAwjEVMAwD BAPCO5gDBADCO5owDwQCAAIwCQMHACABBnwpUDANBgkqhkiG9w0BAQsFAAOCAQEA MIvXoHKB17bxUdtybx3pm/cAC+qGzf035czhRPqudOD2PTChY1pwpH688k4qd37n 6ajJKGr2NuQFeV9372Q+sZnizYdcOebhCpcRE6Mbeg4BiK5xatENul4qr3/ibqge Jas2jw9EZP+rthF2xzx0Jnny00GhExcRT3/GozUNKLKno2G8hf+V4qkv9tXw+OVg 89j/rYK8bt/cme/yBfp6T6suQG6Ag0x36U1DcCKENmcF9oZDJEJkT5IbIuoqGiv4 NxI7GfFPDovwG6aMYBtdvBzcoIxscF1WYbz2dXC31UiWp4LjmtZsSFKR/y5Mqjiq ia3s++rHaqYKlJs17V+CRQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:38 2026 by rpki-client