This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/4LBzWO_530DcCpzjlEfXk_h_vW8.roa File: 4LBzWO_530DcCpzjlEfXk_h_vW8.roa (raw, json) Hash identifier: H+p9nsy8NewbJx1+0VvALNZxKQ+AzKGCdkwiJQ4ANZM= Subject key identifier: E0:B0:73:58:EF:F9:DF:40:DC:0A:9C:E3:94:47:D7:93:F8:7F:BD:6F Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Certificate serial: 019B7F83D958490A825469328C57B0379F7E Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/4LBzWO_530DcCpzjlEfXk_h_vW8.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 85.217.170.0/24 maxlen: 24 85.217.171.0/24 maxlen: 24 88.80.145.0/24 maxlen: 24 88.80.146.0/24 maxlen: 24 88.80.147.0/24 maxlen: 24 88.80.148.0/24 maxlen: 24 88.80.149.0/24 maxlen: 24 88.80.150.0/24 maxlen: 24 88.80.151.0/24 maxlen: 24 91.92.108.0/24 maxlen: 24 91.92.111.0/24 maxlen: 24 91.92.120.0/24 maxlen: 24 91.92.128.0/24 maxlen: 24 91.92.136.0/24 maxlen: 24 91.92.137.0/24 maxlen: 24 91.92.144.0/24 maxlen: 24 94.156.35.0/24 maxlen: 24 94.156.144.0/24 maxlen: 24 94.156.189.0/24 maxlen: 24 185.141.61.0/24 maxlen: 24 185.141.62.0/24 maxlen: 24 185.141.63.0/24 maxlen: 24 185.203.116.0/24 maxlen: 24 185.203.117.0/24 maxlen: 24 185.203.118.0/24 maxlen: 24 185.203.119.0/24 maxlen: 24 185.205.209.0/24 maxlen: 24 185.205.210.0/24 maxlen: 24 185.206.144.0/24 maxlen: 24 185.206.145.0/24 maxlen: 24 185.206.146.0/24 maxlen: 24 185.206.147.0/24 maxlen: 24 193.37.212.0/24 maxlen: 24 193.37.213.0/24 maxlen: 24 193.37.214.0/24 maxlen: 24 193.37.215.0/24 maxlen: 24 212.73.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d9:58:49:0a:82:54:69:32:8c:57:b0:37:9f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87 Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0b07358eff9df40dc0a9ce39447d793f87fbd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:1f:4c:d1:67:04:2a:f4:0b:ba:15:cc:8c: 98:4a:cc:ad:51:51:8a:57:ec:67:0f:c7:17:07:9c: c0:20:56:fe:6a:b4:81:6d:51:47:a8:a9:18:91:fb: 83:63:79:b9:5e:cc:79:84:3c:7b:41:cd:5a:21:28: 2c:69:5a:01:a2:8a:90:ed:25:9d:e7:06:d7:22:bd: 5d:cd:56:12:32:7c:95:a3:de:66:02:15:be:a2:8b: 38:b4:78:06:7d:14:f4:d3:40:41:6d:16:c2:41:c6: 47:ae:63:6b:ad:30:75:07:58:86:cb:08:5b:9e:1d: 29:58:04:72:c0:57:4e:99:e9:22:20:17:9a:4b:32: a0:05:55:f2:8c:77:96:44:91:7a:d7:0d:f3:57:b7: 9f:4a:ad:1e:62:14:66:39:13:56:56:10:64:87:e0: 26:23:af:6a:2f:b2:b5:a1:cd:86:3a:70:17:10:a9: a8:54:72:c3:ec:8b:72:cd:cc:41:85:fb:b4:31:a5: 89:1b:97:2c:a4:a0:95:c3:17:78:75:b7:73:fd:6f: e0:b7:3d:a2:d5:51:5a:dd:d2:a9:48:b5:f2:86:cb: d8:76:63:42:6b:a9:f8:ed:ac:f8:43:52:81:fe:f4: 16:70:50:d7:fa:78:74:36:e4:ef:26:04:37:58:7a: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B0:73:58:EF:F9:DF:40:DC:0A:9C:E3:94:47:D7:93:F8:7F:BD:6F X509v3 Authority Key Identifier: keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/4LBzWO_530DcCpzjlEfXk_h_vW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.170.0/23 88.80.145.0-88.80.151.255 91.92.108.0/24 91.92.111.0/24 91.92.120.0/24 91.92.128.0/24 91.92.136.0/23 91.92.144.0/24 94.156.35.0/24 94.156.144.0/24 94.156.189.0/24 185.141.61.0-185.141.63.255 185.203.116.0/22 185.205.209.0-185.205.210.255 185.206.144.0/22 193.37.212.0/22 212.73.150.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c7:7e:40:3c:da:2f:0c:c7:51:b0:17:9c:19:c2:77:74:96: 24:3f:d8:ea:3a:aa:7a:f9:ab:7a:76:e4:ae:ff:e6:27:76:c8: ad:67:6e:48:f6:e1:dc:12:2b:62:50:b7:4d:bf:bf:ae:32:ce: 01:30:35:a0:32:db:0c:8b:d7:59:33:a6:78:f0:1e:3b:ec:56: c2:2b:02:93:ae:35:98:b4:71:41:c9:f5:fe:72:ef:08:bf:e9: 38:bb:54:09:48:88:ca:97:ad:27:02:1a:41:2d:a6:78:7e:d4: d2:0d:68:c9:d3:b2:38:0e:38:9d:d1:2b:fa:87:6c:7d:36:3c: a5:fc:b5:bd:e1:bf:bb:2c:9f:0b:dd:b3:a2:62:fd:e3:ec:79: fe:c6:19:80:7c:26:b6:43:d3:53:dd:01:b8:74:70:b3:9e:8f: ed:9d:ed:7e:14:e9:69:45:1d:a0:6a:fd:74:f6:63:90:3e:80: b5:46:9d:85:a4:0a:b5:fe:c4:8d:7b:b3:52:66:89:03:eb:6d: 08:da:af:97:8d:8c:af:a7:e0:88:17:41:e1:10:19:8a:b5:49: b0:6c:9c:d1:ec:e2:a0:86:c9:63:e0:7e:51:41:9d:2b:25:16: ba:73:9a:cb:3b:f2:ea:57:ff:56:8a:b6:44:19:dd:e2:d9:40: 0a:b4:16:76 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt/g9lYSQqCVGkyjFewN59+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzhhMTcxM2M3NDc2ZTAwZWQyYjc3ZmQ5OGZkODkzMzAz NjVkODcwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGIwNzM1OGVmZjlkZjQwZGMwYTljZTM5NDQ3ZDc5M2Y4N2ZiZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumAfTNFnBCr0C7oVzIyYSsytUVGK V+xnD8cXB5zAIFb+arSBbVFHqKkYkfuDY3m5Xsx5hDx7Qc1aISgsaVoBooqQ7SWd 5wbXIr1dzVYSMnyVo95mAhW+oos4tHgGfRT000BBbRbCQcZHrmNrrTB1B1iGywhb nh0pWARywFdOmekiIBeaSzKgBVXyjHeWRJF61w3zV7efSq0eYhRmORNWVhBkh+Am I69qL7K1oc2GOnAXEKmoVHLD7ItyzcxBhfu0MaWJG5cspKCVwxd4dbdz/W/gtz2i 1VFa3dKpSLXyhsvYdmNCa6n47az4Q1KB/vQWcFDX+nh0NuTvJgQ3WHqwTwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFOCwc1jv+d9A3Aqc45RH15P4f71vMB8GA1UdIwQY MBaAFFbIoXE8dHbgDtK3f9mP2JMwNl2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQt OTFlMzJjNTE3MTUyLzEvNExCeldPXzUzMERjQ3B6amxFZlhrX2hfdlc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQtOTFlMzJjNTE3MTUy LzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAVXZ qjAMAwQAWFCRAwQDWFCQAwQAW1xsAwQAW1xvAwQAW1x4AwQAW1yAAwQBW1yIAwQA W1yQAwQAXpwjAwQAXpyQAwQAXpy9MAwDBAC5jT0DBAa5jQADBAK5y3QwDAMEALnN 0QMEALnN0gMEArnOkAMEAsEl1AMEANRJljANBgkqhkiG9w0BAQsFAAOCAQEAF8d+ QDzaLwzHUbAXnBnCd3SWJD/Y6jqqevmrenbkrv/mJ3bIrWduSPbh3BIrYlC3Tb+/ rjLOATA1oDLbDIvXWTOmePAeO+xWwisCk641mLRxQcn1/nLvCL/pOLtUCUiIypet JwIaQS2meH7U0g1oydOyOA44ndEr+odsfTY8pfy1veG/uyyfC92zomL94+x5/sYZ gHwmtkPTU90BuHRws56P7Z3tfhTpaUUdoGr9dPZjkD6AtUadhaQKtf7EjXuzUmaJ A+ttCNqvl42Mr6fgiBdB4RAZirVJsGyc0ezioIbJY+B+UUGdKyUWunOayzvy6lf/ Voq2RBnd4tlACrQWdg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:52 2026 by rpki-client