This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/4c4Z5B7lZ2p0HXSBYJnyPpAaAbg.roa File: 4c4Z5B7lZ2p0HXSBYJnyPpAaAbg.roa (raw, json) Hash identifier: irdZmDg7kfWDw/MMxoEOgDa/mSx5BbRXlIXm1JYPjqo= Subject key identifier: E1:CE:19:E4:1E:E5:67:6A:74:1D:74:81:60:99:F2:3E:90:1A:01:B8 Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba Certificate serial: 019B7EA56AB3C8F91862EBDC9DFE29009A9D Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/4c4Z5B7lZ2p0HXSBYJnyPpAaAbg.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208074 IP address blocks: 45.154.63.0/24 maxlen: 24 2a0f:b100:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6a:b3:c8:f9:18:62:eb:dc:9d:fe:29:00:9a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ce19e41ee5676a741d74816099f23e901a01b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:51:ab:b0:b2:97:d3:41:ad:e8:47:26:eb: 14:bd:a7:fe:7d:6a:40:97:de:80:eb:e8:01:c7:38: cc:67:ec:eb:a3:f1:22:f9:7a:6f:8c:0d:ac:c1:b3: 0e:c7:2a:96:07:ed:90:01:c0:ce:6d:45:ff:f7:5d: 23:9c:3f:d6:0f:81:7a:f7:83:e8:95:5e:62:a3:0d: 72:43:6d:25:5b:11:d8:2b:22:b6:f6:de:fb:77:40: 71:96:39:d8:8f:61:1b:cd:0f:b9:1c:21:54:aa:a2: 7e:af:8d:b2:8a:eb:6d:f9:aa:89:31:90:66:f4:c6: e6:78:53:0d:55:28:fc:9b:f7:c7:f1:a8:b9:a2:fa: f6:b4:1b:2a:01:7b:ae:13:d0:8d:5e:84:15:63:5e: 67:31:b7:90:2e:46:15:f4:fc:83:33:e4:9f:99:e9: 0b:f3:ec:42:ba:4b:a0:e8:17:9c:26:37:19:10:67: a2:ec:e4:10:bf:d8:d3:99:82:79:fa:7f:d9:db:c3: 90:e4:1a:e0:c5:ef:43:9f:5b:f1:8f:75:53:77:e2: 73:e1:eb:56:bf:04:be:2f:bd:d5:16:87:68:a2:95: 20:96:7b:17:b2:78:f8:76:1b:fb:e0:09:48:5f:d6: 31:51:13:d4:fc:88:0e:71:9a:0d:d9:84:73:f2:6e: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:19:E4:1E:E5:67:6A:74:1D:74:81:60:99:F2:3E:90:1A:01:B8 X509v3 Authority Key Identifier: keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/4c4Z5B7lZ2p0HXSBYJnyPpAaAbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.63.0/24 IPv6: 2a0f:b100:300::/40 Signature Algorithm: sha256WithRSAEncryption 73:fb:90:34:dd:9b:1c:57:8e:76:96:4a:35:7d:9d:6b:84:77: f2:0f:12:72:d9:17:e7:7b:58:e5:ca:3a:bc:c5:00:b5:d6:e4: 4e:81:8a:9b:84:cb:87:10:36:66:7f:22:36:f6:e3:2b:7f:22: 66:80:8b:e9:a2:7d:21:e7:7e:f0:ff:39:40:24:97:e0:54:c9: 96:13:c3:74:e8:97:31:c7:58:a5:5f:55:e0:36:62:fe:23:d6: a2:79:53:83:87:9d:7a:29:9a:6f:0b:ae:a8:ed:49:1c:8e:0c: 37:a2:8e:ff:9f:d3:6a:52:23:14:c6:6b:56:ad:78:71:86:8e: 94:50:02:b4:56:48:bf:ee:c9:8a:79:1e:ac:c9:1f:b6:1e:2d: 1b:9a:b5:1a:68:c2:c1:18:dc:ba:2e:1a:8b:4d:c4:5f:95:f6: 8f:a5:38:85:41:ed:f9:56:f6:00:9c:9b:67:4e:74:b6:c9:9b: 1c:da:44:e4:5c:9e:02:fe:18:38:22:6c:69:bf:04:f1:e3:65: 70:70:ba:01:5b:e1:e0:2f:16:3a:30:bf:3d:3e:ed:11:b5:59: 9b:28:4e:ce:4a:92:87:d0:74:5d:75:b7:94:84:c7:50:0e:8c: bc:17:8e:3c:a9:ee:ca:a0:02:47:63:3e:6d:96:33:12:4f:0d: 1e:15:e5:c4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pWqzyPkYYuvcnf4pAJqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTYyZDA4Njk0ODBkYzExYjc0YTU1MmNkMTY3YjZmNjMz OWM4YmEwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNlMTllNDFlZTU2NzZhNzQxZDc0ODE2MDk5ZjIzZTkwMWEwMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGtRq7Cyl9NBrehHJusUvaf+fWpA l96A6+gBxzjMZ+zro/Ei+XpvjA2swbMOxyqWB+2QAcDObUX/910jnD/WD4F694Po lV5iow1yQ20lWxHYKyK29t77d0BxljnYj2EbzQ+5HCFUqqJ+r42yiutt+aqJMZBm 9MbmeFMNVSj8m/fH8ai5ovr2tBsqAXuuE9CNXoQVY15nMbeQLkYV9PyDM+SfmekL 8+xCukug6BecJjcZEGei7OQQv9jTmYJ5+n/Z28OQ5Brgxe9Dn1vxj3VTd+Jz4etW vwS+L73VFodoopUglnsXsnj4dhv74AlIX9YxURPU/IgOcZoN2YRz8m7i9QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOHOGeQe5WdqdB10gWCZ8j6QGgG4MB8GA1UdIwQY MBaAFKZWLQhpSA3BG3SlUs0We29jOci6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEt NDVhOGZlZDNhMmE1LzEvNGM0WjVCN2xaMnAwSFhTQllKbnlQcEFhQWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEtNDVhOGZlZDNhMmE1 LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALZo/MA4E AgACMAgDBgAqD7EAAzANBgkqhkiG9w0BAQsFAAOCAQEAc/uQNN2bHFeOdpZKNX2d a4R38g8SctkX53tY5co6vMUAtdbkToGKm4TLhxA2Zn8iNvbjK38iZoCL6aJ9Ied+ 8P85QCSX4FTJlhPDdOiXMcdYpV9V4DZi/iPWonlTg4edeimabwuuqO1JHI4MN6KO /5/TalIjFMZrVq14cYaOlFACtFZIv+7JinkerMkfth4tG5q1GmjCwRjcui4ai03E X5X2j6U4hUHt+Vb2AJybZ050tsmbHNpE5FyeAv4YOCJsab8E8eNlcHC6AVvh4C8W OjC/PT7tEbVZmyhOzkqSh9B0XXW3lITHUA6MvBeOPKnuyqACR2M+bZYzEk8NHhXl xA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:16 2026 by rpki-client