This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/x4lZLHx409i9ASlNHPyjDZiZaGI.roa File: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (raw, json) Hash identifier: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE= Subject key identifier: C7:89:59:2C:7C:78:D3:D8:BD:01:29:4D:1C:FC:A3:0D:98:99:68:62 Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Certificate serial: 019B78A3372BB4A1BC634F778F38DB2A463B Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/x4lZLHx409i9ASlNHPyjDZiZaGI.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200435 IP address blocks: 185.63.172.0/22 maxlen: 24 185.63.172.0/24 maxlen: 24 185.63.173.0/24 maxlen: 24 185.63.174.0/24 maxlen: 24 185.63.175.0/24 maxlen: 24 2a04:f600::/29 maxlen: 48 2a04:f600:4454::/48 maxlen: 48 2a04:f600:4455::/48 maxlen: 48 2a04:f600:4456::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:37:2b:b4:a1:bc:63:4f:77:8f:38:db:2a:46:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c789592c7c78d3d8bd01294d1cfca30d98996862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:17:cd:b4:97:ba:63:b3:3c:b4:a7:07:da: da:d5:14:8d:b7:62:a7:5a:c6:e2:45:f9:e2:22:a2: 32:fe:08:14:21:ec:7c:28:50:66:0c:f4:45:a6:fd: cf:0e:f8:e0:c4:92:b4:10:ec:d6:5c:8a:e7:16:a4: 95:2c:3e:14:b0:ad:22:92:bf:14:b5:94:4c:53:2a: ab:21:81:ce:ee:7c:85:06:0e:87:04:ad:48:1f:2b: 2c:0f:f1:1c:a9:8a:3a:ad:d3:45:3e:f4:24:79:85: 8f:05:bb:71:c5:ba:f5:fa:0e:1c:ea:08:15:c2:9b: 82:70:dd:4d:46:d6:58:e7:28:eb:b7:99:f5:62:43: fe:53:79:57:a2:cb:30:8b:17:4e:6e:fd:11:7f:10: 20:01:b7:83:61:27:14:84:73:af:7e:94:1a:47:30: 1b:fe:26:97:a8:b8:7c:17:a7:78:1e:89:ae:b4:10: 12:38:6e:82:65:5d:64:e9:31:97:e2:db:b2:91:4c: cd:70:c1:e3:56:21:10:f5:be:64:19:23:18:ae:6f: 42:a3:67:7e:a8:82:e1:63:69:6c:95:e1:5d:09:60: 48:33:17:1d:21:ad:c6:39:a0:0f:32:60:a8:6e:b2: bc:78:99:47:45:02:e2:5e:2b:6a:6e:cd:c5:5b:8c: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:59:2C:7C:78:D3:D8:BD:01:29:4D:1C:FC:A3:0D:98:99:68:62 X509v3 Authority Key Identifier: keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/x4lZLHx409i9ASlNHPyjDZiZaGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.172.0/22 IPv6: 2a04:f600::/29 Signature Algorithm: sha256WithRSAEncryption ab:ba:6b:d3:55:6d:54:d3:22:4a:e8:7f:2e:a3:3b:17:da:03: 2e:78:28:9f:56:21:56:4a:a7:43:ef:ac:34:71:0f:dd:11:67: b1:2a:f6:57:5d:cf:d7:21:f3:bb:df:68:2d:f6:76:e2:48:a7: a2:0e:f4:09:89:e9:ea:44:bb:aa:48:e8:f4:8a:e5:4a:d8:86: 43:38:c1:6f:05:94:54:e8:61:65:61:26:51:29:18:4a:43:0e: ce:c8:fc:02:d2:36:6c:9d:e8:98:bb:06:50:10:ef:d4:b5:53: 91:b3:35:cd:79:39:a8:df:33:c0:7b:c9:06:91:10:3e:b9:4f: 3e:10:01:88:61:81:15:47:23:86:d0:2c:ff:f2:0c:4d:15:2e: af:87:cd:68:7b:93:56:01:8c:f5:f0:85:32:b8:c7:2b:f4:53: 02:bd:bc:60:24:42:57:89:c0:86:74:66:20:5c:e0:b6:e1:f6: 54:96:b1:9b:5b:fe:3b:20:6a:47:9a:b7:b7:fc:c3:e1:7d:af: 84:23:3c:0c:29:fb:96:1a:f0:c2:06:c8:fc:d4:43:c8:1b:10: 35:6c:71:cc:5e:75:8a:4c:90:fb:e2:1f:22:02:89:50:53:ad: c2:ad:bb:d9:fa:56:0b:3e:dc:7a:5f:11:b3:82:5c:a5:e1:13: e0:27:06:04 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ozcrtKG8Y093jzjbKkY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0 ZGY4MDYwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzg5NTkyYzdjNzhkM2Q4YmQwMTI5NGQxY2ZjYTMwZDk4OTk2ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMIXzbSXumOzPLSnB9ra1RSNt2Kn WsbiRfniIqIy/ggUIex8KFBmDPRFpv3PDvjgxJK0EOzWXIrnFqSVLD4UsK0ikr8U tZRMUyqrIYHO7nyFBg6HBK1IHyssD/EcqYo6rdNFPvQkeYWPBbtxxbr1+g4c6ggV wpuCcN1NRtZY5yjrt5n1YkP+U3lXosswixdObv0RfxAgAbeDYScUhHOvfpQaRzAb /iaXqLh8F6d4HomutBASOG6CZV1k6TGX4tuykUzNcMHjViEQ9b5kGSMYrm9Co2d+ qILhY2lsleFdCWBIMxcdIa3GOaAPMmCobrK8eJlHRQLiXitqbs3FW4xLmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMeJWSx8eNPYvQEpTRz8ow2YmWhiMB8GA1UdIwQY MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt OTVkOTVhY2U4MjgxLzEveDRsWkxIeDQwOWk5QVNsTkhQeWpEWmlaYUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuT+sMA0E AgACMAcDBQMqBPYAMA0GCSqGSIb3DQEBCwUAA4IBAQCrumvTVW1U0yJK6H8uozsX 2gMueCifViFWSqdD76w0cQ/dEWexKvZXXc/XIfO732gt9nbiSKeiDvQJienqRLuq SOj0iuVK2IZDOMFvBZRU6GFlYSZRKRhKQw7OyPwC0jZsneiYuwZQEO/UtVORszXN eTmo3zPAe8kGkRA+uU8+EAGIYYEVRyOG0Cz/8gxNFS6vh81oe5NWAYz18IUyuMcr 9FMCvbxgJEJXicCGdGYgXOC24fZUlrGbW/47IGpHmre3/MPhfa+EIzwMKfuWGvDC Bsj81EPIGxA1bHHMXnWKTJD74h8iAolQU63CrbvZ+lYLPtx6XxGzglyl4RPgJwYE -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:45 2026 by rpki-client