This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/4WPjuQdcTYFuaKklmsOnpFVG_k8.roa File: 4WPjuQdcTYFuaKklmsOnpFVG_k8.roa (raw, json) Hash identifier: RCXd7tm0HqyMJHrZAkQGbR+ZGjGMt/XtYWeMv5QHcoU= Subject key identifier: E1:63:E3:B9:07:5C:4D:81:6E:68:A9:25:9A:C3:A7:A4:55:46:FE:4F Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92 Certificate serial: 019B7758F515F3AABEF77B1BD8249DD75F0E Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/4WPjuQdcTYFuaKklmsOnpFVG_k8.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216139 IP address blocks: 2.56.90.0/24 maxlen: 24 46.30.40.0/24 maxlen: 24 46.30.41.0/24 maxlen: 24 46.30.42.0/24 maxlen: 24 46.30.43.0/24 maxlen: 24 46.30.44.0/24 maxlen: 24 46.30.45.0/24 maxlen: 24 46.30.46.0/24 maxlen: 24 46.30.47.0/24 maxlen: 24 95.142.32.0/24 maxlen: 24 95.142.41.0/24 maxlen: 24 109.234.32.0/24 maxlen: 24 178.208.64.0/24 maxlen: 24 178.208.65.0/24 maxlen: 24 178.208.66.0/24 maxlen: 24 178.208.67.0/24 maxlen: 24 178.208.72.0/24 maxlen: 24 178.208.73.0/24 maxlen: 24 178.208.74.0/24 maxlen: 24 178.208.75.0/24 maxlen: 24 178.208.76.0/24 maxlen: 24 178.208.77.0/24 maxlen: 24 178.208.78.0/24 maxlen: 24 178.208.79.0/24 maxlen: 24 178.208.80.0/24 maxlen: 24 178.208.81.0/24 maxlen: 24 178.208.82.0/24 maxlen: 24 178.208.83.0/24 maxlen: 24 178.208.84.0/24 maxlen: 24 178.208.85.0/24 maxlen: 24 178.208.86.0/24 maxlen: 24 178.208.88.0/24 maxlen: 24 178.208.89.0/24 maxlen: 24 178.208.90.0/24 maxlen: 24 178.208.91.0/24 maxlen: 24 178.208.93.0/24 maxlen: 24 185.105.108.0/24 maxlen: 24 2a09:c140:feed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f5:15:f3:aa:be:f7:7b:1b:d8:24:9d:d7:5f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e163e3b9075c4d816e68a9259ac3a7a45546fe4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ec:fc:e0:7b:f8:5e:5a:f7:10:db:c3:bc:ea: 07:72:ca:6f:66:8e:5d:b6:a0:37:64:52:8f:9c:ca: 39:ba:df:be:2d:7a:b7:14:5b:bf:c0:45:3b:c2:10: 00:d7:f7:28:92:d2:7a:5b:6e:4a:39:cf:24:7c:3a: e4:17:d9:50:9b:8c:bf:d2:bf:7c:66:1a:ca:45:06: 36:d3:56:3a:70:42:bc:b6:af:07:4c:eb:76:a6:78: e5:de:d0:d7:93:f5:0d:c9:3e:9b:c7:61:a0:db:64: b8:d1:e3:43:c8:b2:e1:01:1f:90:98:02:45:fe:8d: b0:8e:a5:12:6b:d2:b6:fa:d1:11:eb:ad:12:ad:dc: 54:f4:df:d5:42:c5:ea:ba:1a:a8:3f:3e:f5:65:4c: 28:f8:a2:0e:82:81:eb:16:06:5f:07:d8:79:b3:e8: 37:94:25:0f:42:b3:46:3e:b3:9b:5e:cd:53:7f:99: d4:7f:1c:a0:17:c4:ce:35:78:e2:b0:d7:05:e3:98: 64:e6:30:91:ac:49:a6:6f:53:9f:b8:4d:53:55:d4: 11:b5:f9:22:98:4d:62:52:1e:94:ac:34:92:f6:7d: da:0b:cd:0b:ac:2a:0f:58:5f:74:e1:b7:19:8c:92: eb:53:56:5d:df:bd:5e:ac:37:80:bc:ff:e2:98:49: 37:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:E3:B9:07:5C:4D:81:6E:68:A9:25:9A:C3:A7:A4:55:46:FE:4F X509v3 Authority Key Identifier: keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/4WPjuQdcTYFuaKklmsOnpFVG_k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.90.0/24 46.30.40.0/21 95.142.32.0/24 95.142.41.0/24 109.234.32.0/24 178.208.64.0/22 178.208.72.0-178.208.86.255 178.208.88.0/22 178.208.93.0/24 185.105.108.0/24 IPv6: 2a09:c140:feed::/48 Signature Algorithm: sha256WithRSAEncryption 2d:b8:bf:d1:b8:7b:31:23:da:51:24:a4:80:41:02:ca:b1:75: 82:f0:1b:7e:4f:f2:9c:1d:5d:bc:cf:6b:f5:8a:5f:68:13:54: 02:3e:46:ee:a0:a2:dd:93:81:6f:48:74:aa:54:aa:f8:31:76: 68:e2:49:a2:de:0c:5c:c0:59:0c:8b:7a:97:75:ea:35:cd:77: f0:a2:11:fd:71:94:44:9f:c7:84:51:d5:03:f4:6b:2c:f2:f0: e8:50:93:f1:9f:ce:56:af:79:7f:40:4f:38:26:72:58:94:d6: 43:59:04:0f:36:8f:63:58:2f:7c:11:20:4f:d1:a1:21:aa:92: 6b:8a:a3:ca:92:66:ef:5f:c1:2f:e6:60:cc:98:30:23:13:32: 36:32:98:2c:46:10:fd:85:11:ff:c5:9f:a3:d1:ba:07:ea:ec: e2:b5:87:98:bd:be:23:73:55:fe:b5:19:10:74:8b:2d:df:4d: 0a:cc:0b:71:ea:5c:d1:84:85:e8:08:52:94:85:54:dc:73:9a: 40:a6:ff:90:18:95:09:52:e8:de:64:33:68:5b:73:f7:ec:30: 3d:04:6e:96:cd:c7:6c:24:dc:54:bf:fb:85:c5:1b:8a:0b:88: 35:75:2d:7b:fb:ec:3f:a3:3a:94:69:13:ed:b8:b6:33:ee:9f: cd:00:93:ea -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt3WPUV86q+93sb2CSd118OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0 ZjJkOTIwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTYzZTNiOTA3NWM0ZDgxNmU2OGE5MjU5YWMzYTdhNDU1NDZmZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+z84Hv4Xlr3ENvDvOoHcspvZo5d tqA3ZFKPnMo5ut++LXq3FFu/wEU7whAA1/coktJ6W25KOc8kfDrkF9lQm4y/0r98 ZhrKRQY201Y6cEK8tq8HTOt2pnjl3tDXk/UNyT6bx2Gg22S40eNDyLLhAR+QmAJF /o2wjqUSa9K2+tER660SrdxU9N/VQsXquhqoPz71ZUwo+KIOgoHrFgZfB9h5s+g3 lCUPQrNGPrObXs1Tf5nUfxygF8TONXjisNcF45hk5jCRrEmmb1OfuE1TVdQRtfki mE1iUh6UrDSS9n3aC80LrCoPWF904bcZjJLrU1Zd371erDeAvP/imEk31QIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFOFj47kHXE2BbmipJZrDp6RVRv5PMB8GA1UdIwQY MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt MGUxYjhmZWE4OTEzLzEvNFdQanVRZGNUWUZ1YUtrbG1zT25wRlZHX2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBKBAIAATBEAwQAAjhaAwQD Lh4oAwQAX44gAwQAX44pAwQAbeogAwQCstBAMAwDBAOy0EgDBACy0FYDBAKy0FgD BACy0F0DBAC5aWwwDwQCAAIwCQMHACoJwUD+7TANBgkqhkiG9w0BAQsFAAOCAQEA Lbi/0bh7MSPaUSSkgEECyrF1gvAbfk/ynB1dvM9r9YpfaBNUAj5G7qCi3ZOBb0h0 qlSq+DF2aOJJot4MXMBZDIt6l3XqNc138KIR/XGURJ/HhFHVA/RrLPLw6FCT8Z/O Vq95f0BPOCZyWJTWQ1kEDzaPY1gvfBEgT9GhIaqSa4qjypJm71/BL+ZgzJgwIxMy NjKYLEYQ/YUR/8Wfo9G6B+rs4rWHmL2+I3NV/rUZEHSLLd9NCswLcepc0YSF6AhS lIVU3HOaQKb/kBiVCVLo3mQzaFtz9+wwPQRuls3HbCTcVL/7hcUbiguINXUte/vs P6M6lGkT7bi2M+6fzQCT6g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:34 2026 by rpki-client