This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa File: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (raw, json) Hash identifier: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo= Subject key identifier: 46:A5:CE:9D:FB:A1:82:D3:8B:DD:ED:AB:76:B5:4A:FC:27:27:D3:C0 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B797EC8CF3379DDAAE47E975AADCBF489 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43700 IP address blocks: 14.102.4.0/22 maxlen: 24 31.172.224.0/22 maxlen: 22 45.84.244.0/22 maxlen: 22 78.158.0.0/19 maxlen: 19 78.158.0.0/20 maxlen: 20 78.158.16.0/20 maxlen: 20 95.215.140.0/22 maxlen: 22 185.246.240.0/22 maxlen: 22 185.252.108.0/22 maxlen: 22 185.252.204.0/22 maxlen: 22 216.25.0.0/22 maxlen: 22 216.25.0.0/23 maxlen: 23 216.25.2.0/24 maxlen: 24 216.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c8:cf:33:79:dd:aa:e4:7e:97:5a:ad:cb:f4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46a5ce9dfba182d38bddedab76b54afc2727d3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:5e:21:4a:f1:cf:71:86:d7:53:d2:89:44: fa:c0:0c:60:bb:cf:2f:bf:81:53:b0:1b:f4:8e:58: b7:54:1e:07:c6:f0:93:49:2c:ae:ae:49:da:f9:86: 52:b8:ff:ef:71:e8:a4:33:e6:93:2d:77:d1:53:ec: d9:10:8f:c1:f3:f3:32:29:28:c6:9a:39:8f:76:76: d6:d4:b9:b0:82:81:54:5a:be:bd:ed:55:16:62:25: b7:f6:4c:a8:0f:de:2d:53:63:b6:eb:36:de:0e:eb: 12:cf:05:50:8d:fc:ef:f2:25:90:d2:d2:f7:66:3f: 9a:7f:bf:8b:73:a1:ae:83:4e:ad:07:fe:85:f6:80: 1c:ef:13:a4:a4:8d:37:b6:6c:00:e7:1d:57:8b:8e: 7a:4b:3e:b4:5e:d0:e4:19:5e:1b:36:08:07:43:35: f9:d0:6f:b1:5e:ec:fe:72:25:f0:87:1f:2c:2e:16: 99:ef:4b:21:85:4b:c4:8a:58:38:12:eb:c5:71:d3: eb:3b:95:42:61:3c:66:5e:0b:8e:b7:dc:6c:67:e8: a4:bd:5e:77:c9:b6:0e:68:a2:af:96:87:60:d4:ae: 53:37:f0:ef:f5:8a:e1:62:34:c2:a1:75:31:b1:19: 1c:16:ff:aa:10:53:b1:5c:21:7f:ea:90:73:25:c3: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A5:CE:9D:FB:A1:82:D3:8B:DD:ED:AB:76:B5:4A:FC:27:27:D3:C0 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.4.0/22 31.172.224.0/22 45.84.244.0/22 78.158.0.0/19 95.215.140.0/22 185.246.240.0/22 185.252.108.0/22 185.252.204.0/22 216.25.0.0/22 Signature Algorithm: sha256WithRSAEncryption 20:00:b4:68:9d:ce:b6:a8:03:4c:6e:20:75:1f:5f:2b:fe:83: 6c:d8:cf:0f:43:a4:db:94:38:f0:77:c6:6b:2f:64:b2:77:9b: 86:e6:55:4d:1e:23:ac:58:c8:31:20:5e:36:a7:4f:b9:90:01: bb:b9:e9:88:fb:6d:bf:97:8e:f3:b8:5e:26:14:0a:7b:3b:50: 05:16:6a:a8:bc:0d:b9:10:87:b8:9f:0a:3d:2d:4b:4b:b2:07: a0:9c:8f:5a:b0:4d:c3:08:06:5f:db:bc:f7:c5:68:a8:d5:48: 07:ca:ec:5a:77:85:34:85:2d:b1:e8:3a:3e:cf:e5:ca:30:30: 1f:5b:7b:84:fd:cf:0f:93:bc:8c:c3:3d:78:46:53:09:6b:86: 23:3e:82:44:2b:4a:49:d1:5c:6f:51:90:9c:35:07:ee:15:fe: 55:ab:9b:f2:bf:2c:07:12:e3:79:7e:57:20:30:11:82:d7:0c: 54:66:34:22:22:3f:c0:4c:3d:cd:98:36:bb:48:64:b3:95:ae: af:75:0c:cc:5a:3d:9c:17:6f:6d:65:a1:f3:28:d8:18:e7:2a: 83:ea:2b:19:03:b1:1b:78:7e:97:b0:3f:b6:68:15:47:0c:51: 40:81:e5:fc:5b:a7:f3:5d:b1:b2:dc:7a:0d:78:86:23:8d:fc: 44:3a:a3:66 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt5fsjPM3ndquR+l1qty/SJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmE1Y2U5ZGZiYTE4MmQzOGJkZGVkYWI3NmI1NGFmYzI3MjdkM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWNeIUrxz3GG11PSiUT6wAxgu88v v4FTsBv0jli3VB4HxvCTSSyurkna+YZSuP/vceikM+aTLXfRU+zZEI/B8/MyKSjG mjmPdnbW1LmwgoFUWr697VUWYiW39kyoD94tU2O26zbeDusSzwVQjfzv8iWQ0tL3 Zj+af7+Lc6Gug06tB/6F9oAc7xOkpI03tmwA5x1Xi456Sz60XtDkGV4bNggHQzX5 0G+xXuz+ciXwhx8sLhaZ70shhUvEilg4EuvFcdPrO5VCYTxmXguOt9xsZ+ikvV53 ybYOaKKvlodg1K5TN/Dv9YrhYjTCoXUxsRkcFv+qEFOxXCF/6pBzJcPIZwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEalzp37oYLTi93tq3a1SvwnJ9PAMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvUnFYT25mdWhndE9MM2UycmRyVktfQ2NuMDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCDmYEAwQC H6zgAwQCLVT0AwQFTp4AAwQCX9eMAwQCufbwAwQCufxsAwQCufzMAwQC2BkAMA0G CSqGSIb3DQEBCwUAA4IBAQAgALRonc62qANMbiB1H18r/oNs2M8PQ6TblDjwd8Zr L2Syd5uG5lVNHiOsWMgxIF42p0+5kAG7uemI+22/l47zuF4mFAp7O1AFFmqovA25 EIe4nwo9LUtLsgegnI9asE3DCAZf27z3xWio1UgHyuxad4U0hS2x6Do+z+XKMDAf W3uE/c8Pk7yMwz14RlMJa4YjPoJEK0pJ0VxvUZCcNQfuFf5Vq5vyvywHEuN5flcg MBGC1wxUZjQiIj/ATD3NmDa7SGSzla6vdQzMWj2cF29tZaHzKNgY5yqD6isZA7Eb eH6XsD+2aBVHDFFAgeX8W6fzXbGy3HoNeIYjjfxEOqNm -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:12 2026 by rpki-client