This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/4B0Zz1zjw16kb7KhrwGqBb4UIyU.roa File: 4B0Zz1zjw16kb7KhrwGqBb4UIyU.roa (raw, json) Hash identifier: Mr81N7UlME4C7uxslLERYhfpPhur3VmUfbKu11vZgps= Subject key identifier: E0:1D:19:CF:5C:E3:C3:5E:A4:6F:B2:A1:AF:01:AA:05:BE:14:23:25 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019B7CECD0C0F19D0FEF9FB345476BCF33FD Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/4B0Zz1zjw16kb7KhrwGqBb4UIyU.roa Signing time: Fri 02 Jan 2026 04:17:33 +0000 ROA not before: Fri 02 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203938 IP address blocks: 45.84.89.0/24 maxlen: 24 141.98.1.0/24 maxlen: 24 2a11:3a00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d0:c0:f1:9d:0f:ef:9f:b3:45:47:6b:cf:33:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Jan 2 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e01d19cf5ce3c35ea46fb2a1af01aa05be142325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:6a:8c:ce:5a:b3:00:70:f6:5c:99:b4:0c: b0:48:6c:f9:68:c2:d5:0e:b5:96:56:04:d0:d6:7f: 64:0d:8c:bf:68:24:fa:88:25:f6:6b:6d:23:83:35: 36:1b:76:a2:63:00:d7:30:75:ea:b2:3a:8a:e2:e5: 2b:67:5a:a9:8d:e3:28:83:c6:ef:65:8f:0e:c5:d2: b8:fa:ba:91:f3:5f:64:93:85:51:49:b7:4d:49:64: 55:a1:b2:19:31:8c:ea:01:7c:e1:41:bd:90:6c:fa: fa:04:6b:5a:4e:c7:6e:9a:b1:5e:3d:d5:64:00:f9: 80:cb:3c:47:56:8f:81:f9:43:3e:20:7a:57:76:4f: 55:23:30:c7:97:22:0b:fb:87:7d:c7:01:52:07:6b: 8e:b9:4b:53:8f:aa:ab:a3:49:cf:55:9a:bc:e8:82: 0b:2f:ba:34:4a:07:a0:54:86:94:7a:ca:ac:b6:e8: 96:61:97:87:c3:df:17:59:27:85:41:2c:eb:10:39: 83:76:b9:cc:25:ab:d8:12:e4:95:e5:20:5f:85:ed: fe:34:de:ae:6d:2c:e0:78:4b:31:ad:b9:29:78:60: 16:23:b2:8e:4a:cd:bd:5f:21:03:ae:fe:95:8a:f8: 81:93:5d:4a:4a:0c:27:f9:f7:43:42:02:8f:86:5a: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1D:19:CF:5C:E3:C3:5E:A4:6F:B2:A1:AF:01:AA:05:BE:14:23:25 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/4B0Zz1zjw16kb7KhrwGqBb4UIyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.89.0/24 141.98.1.0/24 IPv6: 2a11:3a00::/29 Signature Algorithm: sha256WithRSAEncryption 33:e8:1d:a5:5b:d8:77:f3:b5:46:33:5c:0a:d9:d8:9a:79:e8: 5b:b3:d7:9d:7b:10:d5:6a:39:1b:bb:33:5d:73:27:f9:fa:2e: 52:08:46:5a:c7:06:09:3f:2d:4d:15:00:08:9f:01:a0:de:a0: 3a:0a:8c:c0:f6:5d:9a:4c:4c:68:6c:fa:ea:b6:d9:03:86:cd: c3:13:0b:88:b9:47:70:cc:e6:13:c9:fd:74:d7:12:aa:d9:6f: 0b:1d:85:b4:ff:f2:df:82:25:ed:35:d9:54:27:95:69:e6:39: cb:bd:7d:42:5e:8f:59:d8:a9:83:3a:66:59:4c:05:59:24:46: 70:dc:c9:bb:c1:04:6e:e5:a2:b2:2b:76:8b:fc:c6:27:3a:2c: 9b:a5:eb:44:91:2c:d8:a7:a8:00:95:22:a0:c7:6e:20:1d:51: 26:b8:cb:97:d1:99:6d:81:01:c0:1d:08:4f:e1:c9:49:10:85: da:f1:bb:bb:f6:8b:e6:b8:08:15:92:0c:56:70:4d:7f:12:56: e6:71:d7:c0:d4:e6:3b:08:71:45:6f:d6:71:4f:dc:3d:81:82: ab:4a:a8:ce:e3:1f:f4:0d:3c:02:1d:1b:c1:dc:68:af:9b:b9: 63:e8:ab:de:fd:c6:01:5f:bc:da:1a:4d:0c:b1:ca:98:97:a0: 84:f9:8c:26 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87NDA8Z0P75+zRUdrzzP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwMTAyMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDFkMTljZjVjZTNjMzVlYTQ2ZmIyYTFhZjAxYWEwNWJlMTQyMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxBqjM5aswBw9lyZtAywSGz5aMLV DrWWVgTQ1n9kDYy/aCT6iCX2a20jgzU2G3aiYwDXMHXqsjqK4uUrZ1qpjeMog8bv ZY8OxdK4+rqR819kk4VRSbdNSWRVobIZMYzqAXzhQb2QbPr6BGtaTsdumrFePdVk APmAyzxHVo+B+UM+IHpXdk9VIzDHlyIL+4d9xwFSB2uOuUtTj6qro0nPVZq86IIL L7o0SgegVIaUesqstuiWYZeHw98XWSeFQSzrEDmDdrnMJavYEuSV5SBfhe3+NN6u bSzgeEsxrbkpeGAWI7KOSs29XyEDrv6ViviBk11KSgwn+fdDQgKPhlrDzQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOAdGc9c48NepG+yoa8BqgW+FCMlMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvNEIwWnoxemp3MTZrYjdLaHJ3R3FCYjRVSXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALVRZAwQA jWIBMA0EAgACMAcDBQMqEToAMA0GCSqGSIb3DQEBCwUAA4IBAQAz6B2lW9h387VG M1wK2diaeehbs9edexDVajkbuzNdcyf5+i5SCEZaxwYJPy1NFQAInwGg3qA6CozA 9l2aTExobPrqttkDhs3DEwuIuUdwzOYTyf101xKq2W8LHYW0//LfgiXtNdlUJ5Vp 5jnLvX1CXo9Z2KmDOmZZTAVZJEZw3Mm7wQRu5aKyK3aL/MYnOiybpetEkSzYp6gA lSKgx24gHVEmuMuX0ZltgQHAHQhP4clJEIXa8bu79ovmuAgVkgxWcE1/ElbmcdfA 1OY7CHFFb9ZxT9w9gYKrSqjO4x/0DTwCHRvB3Givm7lj6Kve/cYBX7zaGk0MscqY l6CE+Ywm -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:48 2026 by rpki-client