This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/4OrfC0gESmi91J763IQoNP33VaY.roa File: 4OrfC0gESmi91J763IQoNP33VaY.roa (raw, json) Hash identifier: UOBol6M5aYlHh1KzK/jjTCQLc+/4wpm6CbL5n4iAyts= Subject key identifier: E0:EA:DF:0B:48:04:4A:68:BD:D4:9E:FA:DC:84:28:34:FD:F7:55:A6 Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197 Certificate serial: 019B7F84B432EC2D4263A9FB40360A9BEDFE Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/4OrfC0gESmi91J763IQoNP33VaY.roa Signing time: Fri 02 Jan 2026 16:22:41 +0000 ROA not before: Fri 02 Jan 2026 16:22:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35725 IP address blocks: 89.33.32.0/21 maxlen: 21 89.33.48.0/21 maxlen: 21 178.138.0.0/16 maxlen: 16 178.138.0.0/18 maxlen: 18 178.138.1.0/24 maxlen: 24 178.138.32.0/22 maxlen: 22 178.138.36.0/24 maxlen: 24 178.138.38.0/24 maxlen: 24 178.138.39.0/24 maxlen: 24 178.138.40.0/23 maxlen: 23 178.138.42.0/24 maxlen: 24 178.138.43.0/24 maxlen: 24 178.138.62.0/24 maxlen: 24 178.138.63.0/24 maxlen: 24 178.138.96.0/22 maxlen: 22 178.138.96.0/23 maxlen: 23 178.138.98.0/23 maxlen: 23 178.138.104.0/24 maxlen: 24 178.138.126.0/23 maxlen: 23 178.138.192.0/23 maxlen: 23 178.138.194.0/23 maxlen: 23 193.104.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b4:32:ec:2d:42:63:a9:fb:40:36:0a:9b:ed:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197 Validity Not Before: Jan 2 16:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0eadf0b48044a68bdd49efadc842834fdf755a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:6f:af:f8:82:fd:6b:eb:1c:90:2c:37:58: 9c:65:79:8b:20:4d:df:fa:53:6b:6e:ae:73:a4:d7: 80:49:a2:13:a7:95:cd:75:9d:81:8a:e5:55:1b:25: 70:58:0d:d2:ca:f8:83:3e:9c:51:0e:d5:3b:2b:cf: 6d:db:16:47:56:0d:bd:d3:5f:ad:a7:89:b6:d6:96: 0c:94:7f:9e:7f:38:ce:a8:c3:83:7c:a7:f0:c7:0e: b1:8f:5b:4d:5b:99:18:99:53:a2:fd:a4:27:b0:b7: fb:c6:78:18:7a:9f:46:4e:3e:82:06:40:a4:50:e1: c7:8f:1a:7e:e5:2c:27:31:70:ae:7c:4d:b2:e3:52: b8:1c:72:bd:0a:ed:81:f1:f4:2c:db:a0:fb:4b:f6: 71:79:a5:ab:25:72:69:9f:6e:5d:4c:a5:a5:f7:e4: f3:0f:96:6d:72:77:f0:dd:f7:f1:18:14:c9:d4:ec: 87:2c:55:2c:73:4e:77:81:e7:65:8c:fe:a5:0a:6d: 35:24:92:89:6b:9c:58:21:c7:a7:f2:3d:57:f5:fe: 64:d8:24:8c:2d:58:29:02:ca:5e:79:09:e6:9e:86: 37:75:89:f5:be:c4:29:79:82:e2:83:a2:0e:3d:f6: c2:0b:b7:cb:4a:89:0c:7b:9d:1b:59:22:62:b7:75: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:DF:0B:48:04:4A:68:BD:D4:9E:FA:DC:84:28:34:FD:F7:55:A6 X509v3 Authority Key Identifier: keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/4OrfC0gESmi91J763IQoNP33VaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.32.0/21 89.33.48.0/21 178.138.0.0/16 193.104.247.0/24 Signature Algorithm: sha256WithRSAEncryption 42:a6:ed:8f:cb:5f:91:23:d4:ad:5c:cb:11:a1:26:ae:6f:98: b1:3f:71:a1:d7:b0:16:ea:c7:a7:d3:07:e6:54:43:47:dd:a4: b1:f3:90:95:6a:ab:78:90:45:bf:e8:fd:e3:13:bc:dc:fa:83: e3:01:71:fd:00:75:d0:e0:31:af:ba:4f:bc:3b:d4:3e:7b:43: 92:ce:9c:5c:bc:97:fc:6f:e7:a6:e2:f4:79:7a:e9:0c:38:b2: 84:7f:a2:a6:8f:f1:fc:75:2e:54:11:62:e2:12:e0:3e:da:13: 01:aa:6d:80:1d:13:42:e6:c2:e5:2c:d4:7d:4c:a5:b8:f0:e2: d8:77:25:50:cc:95:aa:37:1a:f9:2d:0b:1d:59:91:d7:96:bc: 19:b0:b1:eb:05:d1:d1:ff:ad:2a:a6:e3:e2:52:a6:d3:45:e6: e9:79:c0:40:98:32:6b:ce:61:3d:ba:d0:e8:f5:7c:65:3e:54: 4f:89:49:7a:10:0c:06:43:3c:27:fb:ae:99:c8:a2:1a:12:77: 82:57:0d:0e:73:6f:ef:75:94:6e:f4:14:53:b7:ab:f1:fd:d1: 89:32:13:5b:b6:6e:52:ca:aa:a1:90:30:ca:4e:a3:69:1c:b0: 53:28:ec:f5:c3:09:b2:97:fb:46:3d:24:b9:08:f5:3b:37:10: 1a:0d:5f:22 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hLQy7C1CY6n7QDYKm+3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODA2NTFhYmEwNjZiNDA4NGE3ZWQyMGQ3ZjUyMDFiMjI5 NmMxOTcwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVhZGYwYjQ4MDQ0YTY4YmRkNDllZmFkYzg0MjgzNGZkZjc1NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hhvr/iC/WvrHJAsN1icZXmLIE3f +lNrbq5zpNeASaITp5XNdZ2BiuVVGyVwWA3SyviDPpxRDtU7K89t2xZHVg2901+t p4m21pYMlH+efzjOqMODfKfwxw6xj1tNW5kYmVOi/aQnsLf7xngYep9GTj6CBkCk UOHHjxp+5SwnMXCufE2y41K4HHK9Cu2B8fQs26D7S/ZxeaWrJXJpn25dTKWl9+Tz D5Ztcnfw3ffxGBTJ1OyHLFUsc053gedljP6lCm01JJKJa5xYIcen8j1X9f5k2CSM LVgpAspeeQnmnoY3dYn1vsQpeYLig6IOPfbCC7fLSokMe50bWSJit3UolwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFODq3wtIBEpovdSe+tyEKDT991WmMB8GA1UdIwQY MBaAFDaAZRq6BmtAhKftINf1IBsilsGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDct NTIyNGNmMTNmNTg2LzEvNE9yZkMwZ0VTbWk5MUo3NjNJUW9OUDMzVmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDctNTIyNGNmMTNmNTg2 LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQDWSEgAwQD WSEwAwMAsooDBADBaPcwDQYJKoZIhvcNAQELBQADggEBAEKm7Y/LX5Ej1K1cyxGh Jq5vmLE/caHXsBbqx6fTB+ZUQ0fdpLHzkJVqq3iQRb/o/eMTvNz6g+MBcf0AddDg Ma+6T7w71D57Q5LOnFy8l/xv56bi9Hl66Qw4soR/oqaP8fx1LlQRYuIS4D7aEwGq bYAdE0LmwuUs1H1Mpbjw4th3JVDMlao3GvktCx1ZkdeWvBmwsesF0dH/rSqm4+JS ptNF5ul5wECYMmvOYT260Oj1fGU+VE+JSXoQDAZDPCf7rpnIohoSd4JXDQ5zb+91 lG70FFO3q/H90YkyE1u2blLKqqGQMMpOo2kcsFMo7PXDCbKX+0Y9JLkI9Ts3EBoN XyI= -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:32 2026 by rpki-client