This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/B4XqtMRju7ct1VHWSys1ZmsVDvA.roa File: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (raw, json) Hash identifier: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE= Subject key identifier: 07:85:EA:B4:C4:63:BB:B7:2D:D5:51:D6:4B:2B:35:66:6B:15:0E:F0 Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Certificate serial: 019B77C69B8526AD9B34FA0B580E113F7657 Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/B4XqtMRju7ct1VHWSys1ZmsVDvA.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.42.128.0/24 maxlen: 24 31.42.129.0/24 maxlen: 24 31.42.131.0/24 maxlen: 24 31.42.144.0/24 maxlen: 24 31.42.145.0/24 maxlen: 24 31.42.153.0/24 maxlen: 24 185.206.56.0/24 maxlen: 24 185.206.57.0/24 maxlen: 24 185.206.58.0/24 maxlen: 24 185.206.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9b:85:26:ad:9b:34:fa:0b:58:0e:11:3f:76:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0785eab4c463bbb72dd551d64b2b35666b150ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:d2:0a:44:a1:c1:5a:88:33:71:c5:0d:84: 55:d9:0b:b2:58:96:72:6b:9a:74:06:de:f3:c7:58: 90:46:96:94:8b:8c:02:00:4c:c7:da:ac:bb:fd:d9: 9f:0d:79:f6:01:01:c6:2f:29:b7:74:fa:26:19:d7: 74:92:1e:5a:ae:18:d8:00:43:37:c2:d6:cf:be:e9: 8e:30:fa:f2:da:fc:e3:12:08:05:7c:f8:5f:a0:be: 9c:fd:27:eb:83:a4:8d:0f:e9:2b:b6:8b:97:13:b9: b0:06:b1:ce:75:ff:ac:44:b6:7a:51:81:22:50:bf: 16:4c:66:ec:fb:fc:7f:d0:28:b1:b8:db:ba:c2:74: df:60:92:d1:15:8e:fe:a4:a3:ef:42:b5:81:c2:b7: 67:65:59:cb:be:11:45:96:75:21:41:29:be:a8:fb: 1f:fc:8d:68:03:39:78:ed:51:70:e2:57:d1:d0:d7: 06:9d:76:f2:f1:cd:5a:b0:b7:99:7d:67:c6:9e:ec: 5f:9d:05:2c:ea:81:17:5e:fd:58:48:2b:dc:eb:35: ea:86:97:ba:f8:4a:93:10:cd:be:18:37:ac:83:0a: c1:a1:69:89:29:af:03:b6:d8:af:ce:b3:40:8c:a4: a7:18:4f:ee:8c:d8:f9:49:c5:a2:05:75:8f:bb:6f: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:85:EA:B4:C4:63:BB:B7:2D:D5:51:D6:4B:2B:35:66:6B:15:0E:F0 X509v3 Authority Key Identifier: keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/B4XqtMRju7ct1VHWSys1ZmsVDvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.128.0/23 31.42.131.0/24 31.42.144.0/23 31.42.153.0/24 185.206.56.0/22 Signature Algorithm: sha256WithRSAEncryption ab:3c:e5:86:10:bd:b2:9c:d3:cc:cc:9d:27:78:48:66:be:5c: 9f:3c:b2:dd:42:c7:ae:e7:b9:df:57:0e:91:14:c9:7e:8a:62: 98:c0:69:c1:be:37:63:2f:53:02:ef:1f:ec:11:9f:a9:e6:91: 17:2c:6c:c5:66:36:4d:54:2d:75:77:2f:2e:b5:86:6f:c0:4e: ea:88:99:3a:a1:ac:78:b7:c3:bb:64:77:81:e8:ad:2f:f6:70: 72:18:d3:0d:bd:fc:57:19:d1:99:9f:be:eb:bf:4b:cd:ba:ad: 70:12:5f:f1:d6:03:bd:0b:f3:3e:96:c8:ad:30:0f:21:3b:6e: 17:26:a9:4e:02:0f:61:f9:ff:ad:e5:5a:af:d8:10:df:b6:2b: 45:ab:f9:c3:53:5c:54:e0:b3:74:97:a5:0c:42:86:66:8d:b3: bc:fe:74:d9:25:1b:48:09:ef:f6:9b:b8:f2:37:19:13:29:af: 44:73:7a:c8:e5:8e:c6:6a:c8:ff:45:f3:ad:78:03:b7:a3:02: 58:70:1b:47:0d:00:4d:b7:69:1c:01:a6:98:99:00:52:36:03: e7:29:dc:89:f1:07:1c:80:9a:ab:dc:4e:11:7b:56:9e:16:38: 70:df:a9:c3:4f:dd:83:8e:e8:1e:fc:55:32:7f:e3:91:91:a8: aa:60:b8:00 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xpuFJq2bNPoLWA4RP3ZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj MGZmOGMwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzg1ZWFiNGM0NjNiYmI3MmRkNTUxZDY0YjJiMzU2NjZiMTUwZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJDSCkShwVqIM3HFDYRV2QuyWJZy a5p0Bt7zx1iQRpaUi4wCAEzH2qy7/dmfDXn2AQHGLym3dPomGdd0kh5arhjYAEM3 wtbPvumOMPry2vzjEggFfPhfoL6c/Sfrg6SND+krtouXE7mwBrHOdf+sRLZ6UYEi UL8WTGbs+/x/0CixuNu6wnTfYJLRFY7+pKPvQrWBwrdnZVnLvhFFlnUhQSm+qPsf /I1oAzl47VFw4lfR0NcGnXby8c1asLeZfWfGnuxfnQUs6oEXXv1YSCvc6zXqhpe6 +EqTEM2+GDesgwrBoWmJKa8DttivzrNAjKSnGE/ujNj5ScWiBXWPu2+nIQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAeF6rTEY7u3LdVR1ksrNWZrFQ7wMB8GA1UdIwQY MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt MjE3Y2Y5Mzg0NWJjLzEvQjRYcXRNUmp1N2N0MVZIV1N5czFabXNWRHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBHyqAAwQA HyqDAwQBHyqQAwQAHyqZAwQCuc44MA0GCSqGSIb3DQEBCwUAA4IBAQCrPOWGEL2y nNPMzJ0neEhmvlyfPLLdQseu57nfVw6RFMl+imKYwGnBvjdjL1MC7x/sEZ+p5pEX LGzFZjZNVC11dy8utYZvwE7qiJk6oax4t8O7ZHeB6K0v9nByGNMNvfxXGdGZn77r v0vNuq1wEl/x1gO9C/M+lsitMA8hO24XJqlOAg9h+f+t5Vqv2BDftitFq/nDU1xU 4LN0l6UMQoZmjbO8/nTZJRtICe/2m7jyNxkTKa9Ec3rI5Y7Gasj/RfOteAO3owJY cBtHDQBNt2kcAaaYmQBSNgPnKdyJ8QccgJqr3E4Re1aeFjhw36nDT92Djuge/FUy f+ORkaiqYLgA -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:00 2026 by rpki-client