This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/Z4XnKcMRawaQSe5mqHxSQObPnf0.roa File: Z4XnKcMRawaQSe5mqHxSQObPnf0.roa (raw, json) Hash identifier: 4Mf7OgITGWZNLNJ26SsOplCcXWIE2LHFBqgYKYBiyDE= Subject key identifier: 67:85:E7:29:C3:11:6B:06:90:49:EE:66:A8:7C:52:40:E6:CF:9D:FD Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Certificate serial: 019B7D5B94DC04780857B72B40E4988D8474 Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/Z4XnKcMRawaQSe5mqHxSQObPnf0.roa Signing time: Fri 02 Jan 2026 06:18:32 +0000 ROA not before: Fri 02 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207605 IP address blocks: 62.164.170.0/24 maxlen: 24 109.237.76.0/24 maxlen: 24 109.237.77.0/24 maxlen: 24 176.119.205.0/24 maxlen: 24 193.143.68.0/24 maxlen: 24 195.189.140.0/24 maxlen: 24 195.189.141.0/24 maxlen: 24 2a05:4500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:94:dc:04:78:08:57:b7:2b:40:e4:98:8d:84:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Validity Not Before: Jan 2 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6785e729c3116b069049ee66a87c5240e6cf9dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:db:e1:2c:84:39:68:2a:79:05:8f:32:ac: e3:2b:17:f4:1f:09:28:e1:60:80:8e:bc:15:df:fa: 20:21:15:e5:18:eb:0e:b7:07:e1:11:27:05:31:3f: 9a:a3:8b:2c:79:f9:d6:4d:f5:6e:dd:4f:cc:68:11: c4:d7:48:a7:d6:7f:c5:86:74:3f:a7:7e:65:d5:5f: 85:95:93:59:94:e3:e1:18:5e:d9:50:f8:5a:7e:b3: d2:ef:1f:db:c2:12:3d:c4:82:2c:b7:67:51:f1:90: 9d:94:2a:60:53:8b:2c:0f:36:f5:fb:83:ce:46:96: 7a:10:d8:a4:b0:4c:54:ed:1e:fa:79:00:d7:37:ee: 9e:5b:77:da:39:6a:34:76:4b:fc:e2:b3:dd:1f:55: ec:42:19:c0:bb:27:88:96:79:ef:2d:1b:32:8e:4c: 77:b3:dd:38:53:0d:6d:16:a6:d5:cf:45:3a:7d:d3: dd:11:53:92:c6:58:12:7c:aa:c3:97:d7:a5:7a:d0: 4a:d3:ba:d9:6f:6a:ff:80:84:e4:71:b9:4a:8d:af: d0:8a:68:a2:70:d6:ef:ed:28:7e:f9:2f:06:9f:0a: 13:92:9c:fc:b9:a9:3b:bd:d6:79:11:30:01:b3:fb: df:60:ef:d5:85:31:c4:96:ff:e9:de:88:04:1b:0d: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:85:E7:29:C3:11:6B:06:90:49:EE:66:A8:7C:52:40:E6:CF:9D:FD X509v3 Authority Key Identifier: keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/Z4XnKcMRawaQSe5mqHxSQObPnf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.170.0/24 109.237.76.0/23 176.119.205.0/24 193.143.68.0/24 195.189.140.0/23 IPv6: 2a05:4500::/29 Signature Algorithm: sha256WithRSAEncryption 95:78:7b:8c:00:23:4a:78:c6:e8:20:4c:7f:64:44:fd:99:70: 7f:4a:ea:20:68:43:0e:3d:88:0a:8f:26:55:48:a6:e2:4a:65: e2:4f:77:25:c5:a6:b2:c1:53:19:0b:7a:93:d8:82:27:fc:54: cb:b1:c8:5c:8f:26:1a:b7:7c:15:c2:24:1c:4c:82:43:b7:29: 8d:bd:88:ae:8c:0d:42:a3:16:04:26:fb:07:bb:85:8d:ee:c6: 1e:e7:22:ed:5b:93:c5:6f:e9:bb:5b:52:46:e2:54:9a:90:75: 9f:b2:4e:7e:ce:e4:f5:da:30:04:db:60:7d:36:0a:a5:4f:80: ad:ff:2b:65:b6:08:39:71:73:60:1c:4c:50:87:a9:d8:45:29: a5:0f:41:67:c9:08:09:66:be:fe:25:a5:6f:32:44:8f:b5:16: 71:cc:8e:a8:1b:5f:8c:50:fb:c2:65:ab:04:2a:c8:eb:45:76: 15:df:0b:e8:75:0a:d1:9b:78:91:43:7b:15:0a:51:b0:7c:a9: c0:a4:37:81:e3:48:37:19:27:f2:c2:dd:be:ae:e9:0a:64:1e: 54:d2:69:aa:b0:1d:25:f2:d6:fe:17:80:69:2c:14:63:03:08: 4d:54:92:f6:e0:92:dd:f8:a1:6c:5f:5b:d4:4b:af:2d:ad:63: c4:2b:29:13 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9W5TcBHgIV7crQOSYjYR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMDFiMDg1MWI3Zjg5ZWE0YmIxMzJhN2Y1Mzk1YjlkMmFj YTFjMDIwHhcNMjYwMTAyMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Nzg1ZTcyOWMzMTE2YjA2OTA0OWVlNjZhODdjNTI0MGU2Y2Y5ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPb4SyEOWgqeQWPMqzjKxf0Hwko 4WCAjrwV3/ogIRXlGOsOtwfhEScFMT+ao4ssefnWTfVu3U/MaBHE10in1n/FhnQ/ p35l1V+FlZNZlOPhGF7ZUPhafrPS7x/bwhI9xIIst2dR8ZCdlCpgU4ssDzb1+4PO RpZ6ENiksExU7R76eQDXN+6eW3faOWo0dkv84rPdH1XsQhnAuyeIlnnvLRsyjkx3 s904Uw1tFqbVz0U6fdPdEVOSxlgSfKrDl9eletBK07rZb2r/gITkcblKja/Qimii cNbv7Sh++S8GnwoTkpz8uak7vdZ5ETABs/vfYO/VhTHElv/p3ogEGw1A1QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGeF5ynDEWsGkEnuZqh8UkDmz539MB8GA1UdIwQY MBaAFEsBsIUbf4nqS7Eyp/U5W50qyhwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgt YmQ1MDQzYzBkMWZiLzEvWjRYbktjTVJhd2FRU2U1bXFIeFNRT2JQbmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgtYmQ1MDQzYzBkMWZi LzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAPqSqAwQB be1MAwQAsHfNAwQAwY9EAwQBw72MMA0EAgACMAcDBQMqBUUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVeHuMACNKeMboIEx/ZET9mXB/SuogaEMOPYgKjyZVSKbiSmXiT3cl xaaywVMZC3qT2IIn/FTLschcjyYat3wVwiQcTIJDtymNvYiujA1CoxYEJvsHu4WN 7sYe5yLtW5PFb+m7W1JG4lSakHWfsk5+zuT12jAE22B9NgqlT4Ct/ytltgg5cXNg HExQh6nYRSmlD0FnyQgJZr7+JaVvMkSPtRZxzI6oG1+MUPvCZasEKsjrRXYV3wvo dQrRm3iRQ3sVClGwfKnApDeB40g3GSfywt2+rukKZB5U0mmqsB0l8tb+F4BpLBRj AwhNVJL24JLd+KFsX1vUS68trWPEKykT -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:04 2026 by rpki-client