This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/4CJ3InuHwPxMIYug15LfFjf4TFE.roa File: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (raw, json) Hash identifier: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g= Subject key identifier: E0:22:77:22:7B:87:C0:FC:4C:21:8B:A0:D7:92:DF:16:37:F8:4C:51 Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Certificate serial: 019B797E0938A050C851C5F14400145D8B73 Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/4CJ3InuHwPxMIYug15LfFjf4TFE.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4637 IP address blocks: 146.101.0.0/16 maxlen: 24 146.101.64.0/24 maxlen: 24 146.101.65.0/24 maxlen: 24 154.8.0.0/19 maxlen: 24 154.8.32.0/20 maxlen: 24 154.32.0.0/16 maxlen: 24 193.82.96.0/19 maxlen: 24 193.82.96.0/24 maxlen: 24 193.82.108.0/24 maxlen: 24 193.82.128.0/19 maxlen: 24 193.82.159.0/24 maxlen: 24 193.82.192.0/19 maxlen: 24 193.117.32.0/19 maxlen: 24 195.152.0.0/15 maxlen: 24 195.153.19.0/24 maxlen: 24 195.153.74.0/24 maxlen: 24 195.153.108.0/22 maxlen: 22 195.153.124.0/24 maxlen: 24 195.153.216.0/24 maxlen: 24 195.153.217.0/24 maxlen: 24 217.151.32.0/20 maxlen: 24 2a02:1620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:09:38:a0:50:c8:51:c5:f1:44:00:14:5d:8b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e02277227b87c0fc4c218ba0d792df1637f84c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:89:97:74:23:92:fc:89:95:d9:ce:4c:3f:18: 30:09:36:e5:c8:39:c7:77:5d:e5:1b:fd:e9:97:2f: 08:81:e8:37:13:e5:b0:99:f4:c5:ed:f6:77:76:48: c4:9c:9f:0e:74:36:9d:26:c2:a1:b1:d4:83:bd:70: 1a:01:e9:f6:62:d9:24:1d:4f:c2:a9:ff:f1:18:6f: bc:73:0e:ad:8c:3a:19:03:1d:a7:b3:bd:03:bb:40: d9:2c:8e:2d:05:cc:fa:1c:5d:7d:a1:c4:ad:72:3e: 98:41:17:de:65:cd:78:51:5e:cd:56:28:eb:14:f0: e5:21:b3:de:68:e5:93:09:f7:e1:c8:66:c1:ce:ac: b7:e0:8b:9c:9b:50:9e:72:63:e7:b1:f4:49:dd:67: 61:c8:dd:df:b0:47:13:d9:61:b8:d0:27:22:6c:5a: d4:4d:66:77:bd:6d:28:34:e4:92:58:f7:c2:71:a1: 6c:f4:29:d8:db:d5:af:7e:c4:c6:c2:5d:7a:1c:18: 8c:9f:09:4d:34:c9:8e:d4:ed:e1:4d:8d:0a:86:69: fb:64:da:f0:57:a9:98:a6:20:dc:10:80:fb:b7:e3: 8d:c4:51:45:6d:ac:47:84:5f:a7:e0:68:a1:1e:6c: 92:90:8f:68:c5:d8:cb:9c:23:45:48:cb:37:36:49: 89:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:22:77:22:7B:87:C0:FC:4C:21:8B:A0:D7:92:DF:16:37:F8:4C:51 X509v3 Authority Key Identifier: keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/4CJ3InuHwPxMIYug15LfFjf4TFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.101.0.0/16 154.8.0.0-154.8.47.255 154.32.0.0/16 193.82.96.0-193.82.159.255 193.82.192.0/19 193.117.32.0/19 195.152.0.0/15 217.151.32.0/20 IPv6: 2a02:1620::/32 Signature Algorithm: sha256WithRSAEncryption 90:27:9f:a5:41:e2:10:3f:5a:b2:e0:af:4b:c4:12:18:c5:c3: 59:6a:c8:38:a5:59:a1:dd:fd:26:88:78:a3:80:34:f0:56:a2: b6:2c:74:2e:56:2d:b0:8b:6b:06:c6:95:90:b5:b2:2a:0b:63: bc:06:8d:df:71:1c:f0:12:f6:bd:54:4d:06:83:15:07:6f:d7: af:ce:94:5b:8e:b3:bc:3f:7d:e6:34:62:40:e5:1b:3c:d1:b4: 70:cb:e0:01:9b:c4:90:49:68:99:3b:ff:b9:7e:c1:36:56:7e: 86:59:21:9f:58:5f:a1:cb:b5:81:59:e9:15:d4:90:3a:d6:13: e2:8f:9e:bf:01:10:e2:13:80:b6:1f:77:06:13:2f:ce:c9:46: 3f:03:aa:3c:61:98:de:43:64:40:6c:4a:62:16:5b:0f:42:42: c7:41:98:4a:1b:b7:35:6a:10:81:a0:a7:35:fe:16:83:c9:e7: ee:28:41:92:01:61:03:ed:56:cc:8a:f7:25:37:63:27:55:79: 23:34:f8:4f:d0:63:40:d9:82:b8:18:3a:0f:04:18:0c:6d:a9: 44:08:04:18:73:9d:95:25:b5:f8:6d:c6:e5:96:5a:2d:1e:2e: f8:08:dc:d7:ab:51:c1:73:92:41:5b:dc:70:0f:ce:0b:27:3d: f3:f7:78:8e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt5fgk4oFDIUcXxRAAUXYtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1 ZGQ2ZTgwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDIyNzcyMjdiODdjMGZjNGMyMThiYTBkNzkyZGYxNjM3Zjg0YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4mXdCOS/ImV2c5MPxgwCTblyDnH d13lG/3ply8Igeg3E+WwmfTF7fZ3dkjEnJ8OdDadJsKhsdSDvXAaAen2YtkkHU/C qf/xGG+8cw6tjDoZAx2ns70Du0DZLI4tBcz6HF19ocStcj6YQRfeZc14UV7NVijr FPDlIbPeaOWTCffhyGbBzqy34Iucm1CecmPnsfRJ3WdhyN3fsEcT2WG40CcibFrU TWZ3vW0oNOSSWPfCcaFs9CnY29WvfsTGwl16HBiMnwlNNMmO1O3hTY0Khmn7ZNrw V6mYpiDcEID7t+ONxFFFbaxHhF+n4GihHmySkI9oxdjLnCNFSMs3NkmJZQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFOAidyJ7h8D8TCGLoNeS3xY3+ExRMB8GA1UdIwQY MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt MjkyNmQyODFiNTE0LzEvNENKM0ludUh3UHhNSVl1ZzE1TGZGamY0VEZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0 LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwMAkmUwCwMD A5oIAwQEmgggAwMAmiAwDAMEBcFSYAMEBcFSgAMEBcFSwAMEBcF1IAMDAcOYAwQE 2ZcgMA0EAgACMAcDBQAqAhYgMA0GCSqGSIb3DQEBCwUAA4IBAQCQJ5+lQeIQP1qy 4K9LxBIYxcNZasg4pVmh3f0miHijgDTwVqK2LHQuVi2wi2sGxpWQtbIqC2O8Bo3f cRzwEva9VE0GgxUHb9evzpRbjrO8P33mNGJA5Rs80bRwy+ABm8SQSWiZO/+5fsE2 Vn6GWSGfWF+hy7WBWekV1JA61hPij56/ARDiE4C2H3cGEy/OyUY/A6o8YZjeQ2RA bEpiFlsPQkLHQZhKG7c1ahCBoKc1/haDyefuKEGSAWED7VbMivclN2MnVXkjNPhP 0GNA2YK4GDoPBBgMbalECAQYc52VJbX4bcblllotHi74CNzXq1HBc5JBW9xwD84L Jz3z93iO -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:58 2026 by rpki-client