This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4Rc8awWER1dWSivAWyBxQYvhNBc.roa File: 4Rc8awWER1dWSivAWyBxQYvhNBc.roa (raw, json) Hash identifier: 4cpiA/ovKfEb/H/Zx4o59n8dO49gnXcdaVDGvWSeHi8= Subject key identifier: E1:17:3C:6B:05:84:47:57:56:4A:2B:C0:5B:20:71:41:8B:E1:34:17 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B7FF23EFFEF9A713B7F9826F996AAFF6C Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4Rc8awWER1dWSivAWyBxQYvhNBc.roa Signing time: Fri 02 Jan 2026 18:22:20 +0000 ROA not before: Fri 02 Jan 2026 18:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201106 IP address blocks: 37.72.132.0/24 maxlen: 32 45.142.156.0/24 maxlen: 32 45.142.157.0/24 maxlen: 32 45.142.158.0/23 maxlen: 32 45.145.72.0/23 maxlen: 32 45.145.74.0/23 maxlen: 32 45.150.164.0/22 maxlen: 32 45.150.226.0/23 maxlen: 32 45.151.132.0/22 maxlen: 32 45.154.212.0/22 maxlen: 32 62.204.54.0/24 maxlen: 24 94.154.114.0/24 maxlen: 32 146.19.114.0/24 maxlen: 32 146.19.223.0/24 maxlen: 32 178.22.30.0/24 maxlen: 32 188.93.139.0/24 maxlen: 32 193.218.200.0/23 maxlen: 32 193.221.94.0/23 maxlen: 32 194.124.218.0/23 maxlen: 32 194.124.224.0/23 maxlen: 32 194.147.98.0/23 maxlen: 32 194.147.100.0/23 maxlen: 32 212.18.111.0/24 maxlen: 32 217.114.47.0/24 maxlen: 32 2a0e:da40:4000::/34 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3e:ff:ef:9a:71:3b:7f:98:26:f9:96:aa:ff:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 2 18:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1173c6b05844757564a2bc05b2071418be13417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:ae:fb:63:17:10:a2:20:a4:12:a7:1d:d7: bf:b7:b9:02:e4:5c:f7:0b:69:e7:f6:34:ca:5a:30: e8:ae:93:52:89:e8:cb:b4:70:e8:de:58:b7:22:8e: dc:82:b1:be:94:87:48:c2:69:b8:62:25:57:e8:77: ba:e7:9c:e6:b9:fa:50:e9:fc:14:6d:78:1e:74:dd: 29:9f:18:c3:26:72:f4:1f:8a:5b:fb:a8:e3:2e:00: 69:62:c8:60:51:0a:4b:de:02:76:0e:d1:59:61:fa: b7:36:7b:92:81:ff:b7:2f:38:cb:da:78:89:08:53: 36:9d:1c:d6:e3:ce:a0:79:71:0c:41:e5:8d:9d:d9: c1:72:be:3c:36:35:73:ea:2b:3e:53:c0:f0:7e:5c: 37:b6:e8:d3:8f:6a:44:0f:d6:09:93:ab:3c:26:3e: 27:0f:fa:15:94:06:11:0c:56:30:8e:58:57:b6:f3: 9e:d5:3e:79:3b:e2:f7:c7:77:72:36:6d:8e:52:6c: f1:12:97:c2:f0:71:e8:3e:6f:db:81:55:01:c3:68: 3c:4d:22:29:06:ef:d9:d3:d3:aa:20:2d:3d:1f:0f: 14:2a:4a:48:a3:13:9e:04:74:4d:33:87:c5:f1:17: db:46:de:a2:9d:10:04:69:ba:e5:83:a7:67:0c:ed: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:17:3C:6B:05:84:47:57:56:4A:2B:C0:5B:20:71:41:8B:E1:34:17 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4Rc8awWER1dWSivAWyBxQYvhNBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.132.0/24 45.142.156.0/22 45.145.72.0/22 45.150.164.0/22 45.150.226.0/23 45.151.132.0/22 45.154.212.0/22 62.204.54.0/24 94.154.114.0/24 146.19.114.0/24 146.19.223.0/24 178.22.30.0/24 188.93.139.0/24 193.218.200.0/23 193.221.94.0/23 194.124.218.0/23 194.124.224.0/23 194.147.98.0-194.147.101.255 212.18.111.0/24 217.114.47.0/24 IPv6: 2a0e:da40:4000::/34 Signature Algorithm: sha256WithRSAEncryption 0a:a5:49:2f:3c:fb:31:a3:29:50:73:e2:3f:95:b8:ae:df:89: a1:09:67:ed:07:b0:2a:5d:85:1a:e4:3a:37:d5:92:b7:6f:bb: c6:5e:47:17:66:28:69:0a:40:20:12:98:94:ba:1a:bf:1e:5f: f8:68:b7:1d:4b:8b:63:a2:87:e8:bf:fb:13:53:74:27:48:02: f7:b0:55:6c:59:ac:f5:07:8c:e9:47:e9:a3:2a:76:4a:51:e8: 1e:cc:20:cf:e2:04:d4:36:a6:c9:6a:46:aa:8e:86:c8:f9:3e: 64:7c:a2:77:7a:05:6e:0c:75:e8:6a:77:68:c4:c4:06:df:1f: 96:0e:8c:71:8f:9d:a0:15:35:f2:86:6f:50:5e:3c:cf:38:4d: d1:f1:61:be:5b:6f:b0:6e:d5:9b:f0:87:93:3b:9a:42:e3:66: f7:6d:f5:e9:3b:4d:8a:5d:de:b4:ed:88:b7:1e:43:36:38:d6: ba:81:6e:40:88:fb:e1:ea:e1:8f:19:b1:13:b1:85:55:79:c6: b2:9a:fe:46:ca:50:70:a1:f3:e1:51:74:dd:15:eb:95:82:88: 67:9e:7d:07:21:22:76:9b:0d:d3:6b:e1:44:f9:7a:11:ea:bf: 40:d4:78:67:38:6c:17:0f:c7:6a:34:4c:c4:19:67:74:2b:dd: 67:f3:b9:8c -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt/8j7/75pxO3+YJvmWqv9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTAyMTgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTE3M2M2YjA1ODQ0NzU3NTY0YTJiYzA1YjIwNzE0MThiZTEzNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEKu+2MXEKIgpBKnHde/t7kC5Fz3 C2nn9jTKWjDorpNSiejLtHDo3li3Io7cgrG+lIdIwmm4YiVX6He655zmufpQ6fwU bXgedN0pnxjDJnL0H4pb+6jjLgBpYshgUQpL3gJ2DtFZYfq3NnuSgf+3LzjL2niJ CFM2nRzW486geXEMQeWNndnBcr48NjVz6is+U8Dwflw3tujTj2pED9YJk6s8Jj4n D/oVlAYRDFYwjlhXtvOe1T55O+L3x3dyNm2OUmzxEpfC8HHoPm/bgVUBw2g8TSIp Bu/Z09OqIC09Hw8UKkpIoxOeBHRNM4fF8RfbRt6inRAEabrlg6dnDO3aVwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFOEXPGsFhEdXVkorwFsgcUGL4TQXMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvNFJjOGF3V0VSMWRXU2l2QVd5QnhRWXZoTkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBhwQCAAEwgYADBAAl SIQDBAItjpwDBAItkUgDBAItlqQDBAEtluIDBAItl4QDBAItmtQDBAA+zDYDBABe mnIDBACSE3IDBACSE98DBACyFh4DBAC8XYsDBAHB2sgDBAHB3V4DBAHCfNoDBAHC fOAwDAMEAcKTYgMEAcKTZAMEANQSbwMEANlyLzAOBAIAAjAIAwYGKg7aQEAwDQYJ KoZIhvcNAQELBQADggEBAAqlSS88+zGjKVBz4j+VuK7fiaEJZ+0HsCpdhRrkOjfV krdvu8ZeRxdmKGkKQCASmJS6Gr8eX/hotx1Li2Oih+i/+xNTdCdIAvewVWxZrPUH jOlH6aMqdkpR6B7MIM/iBNQ2pslqRqqOhsj5PmR8ond6BW4Mdehqd2jExAbfH5YO jHGPnaAVNfKGb1BePM84TdHxYb5bb7Bu1Zvwh5M7mkLjZvdt9ek7TYpd3rTtiLce QzY41rqBbkCI++Hq4Y8ZsROxhVV5xrKa/kbKUHCh8+FRdN0V65WCiGeefQchInab DdNr4UT5ehHqv0DUeGc4bBcPx2o0TMQZZ3Qr3WfzuYw= -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:51 2026 by rpki-client