This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa File: 4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa (raw, json) Hash identifier: 0dpWI2PXhik+N7S7lz0H4gx+qXCOtuPMoys6zPW4AAE= Subject key identifier: E1:23:45:A7:A8:98:B4:13:22:E3:30:F6:7A:8E:ED:D5:0F:2E:7D:C2 Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067 Certificate serial: 019B7C7F689A82E4B9727B701877850AD9E6 Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa Signing time: Fri 02 Jan 2026 02:18:03 +0000 ROA not before: Fri 02 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31122 IP address blocks: 46.183.104.0/23 maxlen: 23 78.137.128.0/18 maxlen: 18 78.143.128.0/18 maxlen: 18 80.93.16.0/20 maxlen: 20 83.147.128.0/18 maxlen: 18 84.203.0.0/16 maxlen: 16 89.16.64.0/19 maxlen: 19 89.184.32.0/22 maxlen: 22 89.184.40.0/21 maxlen: 21 89.184.48.0/21 maxlen: 21 89.184.56.0/23 maxlen: 23 89.234.64.0/18 maxlen: 18 91.142.96.0/20 maxlen: 20 92.51.192.0/20 maxlen: 20 92.51.216.0/21 maxlen: 21 92.51.240.0/21 maxlen: 21 93.92.8.0/21 maxlen: 21 94.247.48.0/21 maxlen: 21 109.106.96.0/20 maxlen: 20 109.106.112.0/21 maxlen: 21 109.106.124.0/22 maxlen: 22 176.52.216.0/22 maxlen: 22 176.52.220.0/23 maxlen: 23 185.47.144.0/22 maxlen: 22 185.53.32.0/24 maxlen: 24 185.53.35.0/24 maxlen: 24 185.182.72.0/22 maxlen: 22 185.205.228.0/22 maxlen: 22 185.233.176.0/22 maxlen: 22 185.242.236.0/23 maxlen: 23 212.126.32.0/19 maxlen: 19 212.126.60.0/22 maxlen: 22 217.78.0.0/20 maxlen: 20 2a00:15b8::/32 maxlen: 32 2a00:15b8:400::/40 maxlen: 40 2a01:258::/32 maxlen: 32 2a01:8aa0::/32 maxlen: 32 2a02:220::/32 maxlen: 32 2a0a:e780::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:68:9a:82:e4:b9:72:7b:70:18:77:85:0a:d9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067 Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e12345a7a898b41322e330f67a8eedd50f2e7dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:cd:bb:0a:31:c4:eb:4b:e3:e7:80:66:d2: f2:6d:28:1f:2f:a9:b6:16:f8:47:98:02:83:29:bc: 3c:0f:70:32:74:e0:d5:ed:1c:f3:e7:92:dc:54:85: 25:74:7f:a7:41:0e:14:60:60:00:83:59:54:e3:3b: 6e:a8:44:b4:58:5b:70:54:68:b0:3e:db:a6:1c:f5: e0:f9:da:af:16:36:3c:14:d4:34:fd:d2:6c:f7:76: ed:ff:40:6d:9c:b3:2b:f1:3f:70:7c:3a:cc:35:fe: 35:81:a5:38:ea:bc:e7:9b:c9:40:42:6d:0a:94:de: 9a:35:f1:39:d6:64:ca:82:97:1f:64:2d:5c:8c:bc: 7d:27:bb:33:b0:ec:23:12:e8:0c:84:03:b4:f2:b3: ed:20:a1:24:df:f5:11:24:64:50:3e:53:64:99:cd: 76:04:94:78:cd:d0:64:df:74:6b:e2:a6:96:07:92: f3:97:01:ec:2d:90:b8:32:1e:f9:17:a3:ee:12:d1: 4e:e1:f3:77:6a:85:cc:f9:4d:63:45:e8:91:7c:e3: 5a:88:b0:4b:6f:ad:9f:de:ec:85:07:f2:af:3a:9f: ad:94:df:52:98:12:e3:a8:cf:fb:cc:bb:a4:18:10: 21:62:e7:72:3d:f6:be:9b:43:71:21:86:f7:61:17: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:23:45:A7:A8:98:B4:13:22:E3:30:F6:7A:8E:ED:D5:0F:2E:7D:C2 X509v3 Authority Key Identifier: keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.104.0/23 78.137.128.0/18 78.143.128.0/18 80.93.16.0/20 83.147.128.0/18 84.203.0.0/16 89.16.64.0/19 89.184.32.0/22 89.184.40.0-89.184.57.255 89.234.64.0/18 91.142.96.0/20 92.51.192.0/20 92.51.216.0/21 92.51.240.0/21 93.92.8.0/21 94.247.48.0/21 109.106.96.0-109.106.119.255 109.106.124.0/22 176.52.216.0-176.52.221.255 185.47.144.0/22 185.53.32.0/24 185.53.35.0/24 185.182.72.0/22 185.205.228.0/22 185.233.176.0/22 185.242.236.0/23 212.126.32.0/19 217.78.0.0/20 IPv6: 2a00:15b8::/32 2a01:258::/32 2a01:8aa0::/32 2a02:220::/32 2a0a:e780::/29 Signature Algorithm: sha256WithRSAEncryption af:aa:06:41:72:70:00:9f:d3:ad:e1:56:e7:5f:63:dd:2e:da: f2:cb:7d:d9:60:ec:8c:a1:1f:fc:78:db:ab:bc:f3:b0:43:dd: 63:a4:a5:51:dc:18:2d:ab:91:56:cc:e4:f3:9b:45:9b:98:99: 50:bc:84:68:b5:48:ff:1d:87:48:73:a5:72:17:0d:e7:53:fb: 5e:ce:49:da:73:a9:d7:e0:ec:28:48:cf:ef:ac:e9:97:58:a9: c6:09:81:d4:2a:3d:8d:4b:7f:d5:71:57:6d:87:16:4a:cf:70: da:4b:a5:73:87:eb:4a:6a:7f:7d:52:78:ae:cc:9e:0b:b7:c5: e6:a9:c7:40:bf:43:a1:f7:c9:33:73:ce:dc:ff:5f:aa:78:c2: 95:e4:9e:fe:34:0c:b2:2a:2d:c6:9c:99:ca:96:1b:0c:f7:fa: 63:8e:9a:47:08:e6:19:a9:2e:05:5c:d3:d3:8c:92:90:b5:99: 43:9a:ce:eb:36:00:26:c2:13:c5:fa:cb:d6:c8:04:55:53:e3: 95:76:97:07:55:88:5f:4f:5e:7d:f7:2d:fb:d5:ab:8b:ff:d2: bb:ad:e2:de:49:a1:75:87:f6:d5:38:b0:08:cc:e0:35:fd:fe: 5a:6f:8f:8e:c4:24:01:b1:d7:0b:8b:b5:58:a8:77:19:e5:8e: 23:bf:e9:47 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt8f2iaguS5cntwGHeFCtnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk MzcwNjcwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTIzNDVhN2E4OThiNDEzMjJlMzMwZjY3YThlZWRkNTBmMmU3ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YzNuwoxxOtL4+eAZtLybSgfL6m2 FvhHmAKDKbw8D3AydODV7Rzz55LcVIUldH+nQQ4UYGAAg1lU4ztuqES0WFtwVGiw PtumHPXg+dqvFjY8FNQ0/dJs93bt/0BtnLMr8T9wfDrMNf41gaU46rznm8lAQm0K lN6aNfE51mTKgpcfZC1cjLx9J7szsOwjEugMhAO08rPtIKEk3/URJGRQPlNkmc12 BJR4zdBk33Rr4qaWB5LzlwHsLZC4Mh75F6PuEtFO4fN3aoXM+U1jReiRfONaiLBL b62f3uyFB/KvOp+tlN9SmBLjqM/7zLukGBAhYudyPfa+m0NxIYb3YRfUWwIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFOEjRaeomLQTIuMw9nqO7dUPLn3CMB8GA1UdIwQY MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt MTgyMjg2N2UxNTk2LzEvNFNORnA2aVl0Qk1pNHpEMmVvN3QxUTh1ZmNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2 LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgcYEAgABMIG/AwQB LrdoAwQGTomAAwQGTo+AAwQEUF0QAwQGU5OAAwMAVMsDBAVZEEADBAJZuCAwDAME A1m4KAMEAVm4OAMEBlnqQAMEBFuOYAMEBFwzwAMEA1wz2AMEA1wz8AMEA11cCAME A173MDAMAwQFbWpgAwQDbWpwAwQCbWp8MAwDBAOwNNgDBAGwNNwDBAK5L5ADBAC5 NSADBAC5NSMDBAK5tkgDBAK5zeQDBAK56bADBAG58uwDBAXUfiADBATZTgAwKQQC AAIwIwMFACoAFbgDBQAqAQJYAwUAKgGKoAMFACoCAiADBQMqCueAMA0GCSqGSIb3 DQEBCwUAA4IBAQCvqgZBcnAAn9Ot4VbnX2PdLtryy33ZYOyMoR/8eNurvPOwQ91j pKVR3Bgtq5FWzOTzm0WbmJlQvIRotUj/HYdIc6VyFw3nU/tezknac6nX4OwoSM/v rOmXWKnGCYHUKj2NS3/VcVdthxZKz3DaS6Vzh+tKan99UniuzJ4Lt8XmqcdAv0Oh 98kzc87c/1+qeMKV5J7+NAyyKi3GnJnKlhsM9/pjjppHCOYZqS4FXNPTjJKQtZlD ms7rNgAmwhPF+svWyARVU+OVdpcHVYhfT1599y371auL/9K7reLeSaF1h/bVOLAI zOA1/f5ab4+OxCQBsdcLi7VYqHcZ5Y4jv+lH -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:08 2026 by rpki-client