This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa File: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (raw, json) Hash identifier: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc= Subject key identifier: 46:22:C3:B9:4F:E4:BE:66:7C:38:A4:3D:C7:B8:5E:8E:A7:04:EA:A2 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019B78A2DE611FFFBF1008B53E9D3B21DCEC Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213438 IP address blocks: 94.26.105.0/24 maxlen: 24 192.109.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:de:61:1f:ff:bf:10:08:b5:3e:9d:3b:21:dc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4622c3b94fe4be667c38a43dc7b85e8ea704eaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5d:3a:41:47:35:be:92:24:63:fd:32:b1:ec: 12:b0:d7:bf:32:90:0f:63:2f:c4:0c:59:13:f6:b2: 99:b2:ca:b2:e1:66:36:89:f8:60:33:35:01:ad:dd: 07:b4:cf:0e:c2:a0:66:4b:5d:70:bf:04:11:06:d8: d8:a5:e3:68:c3:56:68:c5:71:c0:6c:bb:0d:95:29: f2:31:7f:68:aa:75:d7:07:7b:7f:0c:93:b0:4d:06: 04:2b:04:ef:02:d0:31:67:8c:f4:91:1b:bb:61:6a: 71:60:ef:af:24:5f:3b:3d:a9:76:37:09:a6:37:52: 85:8c:c8:06:ab:2c:70:39:34:3f:d6:51:4f:60:0a: 1d:26:ec:d0:8f:0d:a8:10:36:bd:41:25:b3:89:94: 06:a9:cd:9c:53:ea:b7:2d:1a:30:d7:fb:28:45:72: e9:87:54:ec:12:4e:4c:30:66:0c:cb:d0:ba:ea:67: 4a:3a:86:d6:2c:a6:c1:d2:6c:5d:06:56:7a:ad:af: 2f:31:92:b1:03:ea:16:3d:23:22:05:b5:0b:c5:a4: 5e:8a:9c:c1:c3:75:c9:08:2f:ca:86:4c:6e:9b:9e: b7:1f:ba:ea:8f:6b:db:99:76:26:0c:f9:46:9d:72: 20:1d:93:bd:31:fa:57:c4:e5:b9:df:32:af:4e:3f: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:22:C3:B9:4F:E4:BE:66:7C:38:A4:3D:C7:B8:5E:8E:A7:04:EA:A2 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.105.0/24 192.109.138.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e8:1f:22:63:db:76:4b:b4:f1:6d:32:f7:d6:aa:ec:c3:4e: 86:06:f9:5c:4e:16:87:1f:be:c9:05:52:ff:34:8b:02:49:01: cb:43:01:3a:0e:06:73:df:ad:46:31:cb:de:a3:08:ec:41:d4: 2c:94:74:ae:d6:7f:38:4c:85:13:0d:be:6f:dd:b4:09:3e:08: 57:74:32:81:58:c7:07:9d:3b:d6:e2:2c:1f:f9:ed:10:4b:c1: 2c:0d:e2:8e:64:80:b6:aa:31:24:9f:70:0e:02:37:56:e4:9e: 84:2c:75:58:7c:16:b2:5b:09:f8:ef:17:57:c6:e8:46:a8:0a: d4:29:eb:e7:95:db:01:2d:8e:32:06:be:e6:a8:dd:6b:50:9f: 57:e2:b2:d0:74:89:6d:41:f7:1b:ad:21:35:b6:9c:eb:ac:8f: 14:84:85:13:bd:2e:11:26:70:cd:fb:89:27:48:67:c7:1f:93: 74:0c:c3:3e:cb:e5:b6:1b:b3:a6:42:de:93:a8:90:09:7b:a3: 71:83:da:1b:95:8a:2d:03:40:2a:5d:3b:b9:c9:6d:a3:24:0c: 2f:62:c8:85:94:ab:14:e5:26:83:8c:4e:13:e0:01:3f:1c:1a: e6:c5:21:ba:a8:5b:2c:3c:b3:4d:93:0f:c4:54:0a:2d:f1:84: d4:df:c7:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ot5hH/+/EAi1Pp07IdzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjIyYzNiOTRmZTRiZTY2N2MzOGE0M2RjN2I4NWU4ZWE3MDRlYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8F06QUc1vpIkY/0ysewSsNe/MpAP Yy/EDFkT9rKZssqy4WY2ifhgMzUBrd0HtM8OwqBmS11wvwQRBtjYpeNow1ZoxXHA bLsNlSnyMX9oqnXXB3t/DJOwTQYEKwTvAtAxZ4z0kRu7YWpxYO+vJF87Pal2Nwmm N1KFjMgGqyxwOTQ/1lFPYAodJuzQjw2oEDa9QSWziZQGqc2cU+q3LRow1/soRXLp h1TsEk5MMGYMy9C66mdKOobWLKbB0mxdBlZ6ra8vMZKxA+oWPSMiBbULxaReipzB w3XJCC/Khkxum563H7rqj2vbmXYmDPlGnXIgHZO9MfpXxOW53zKvTj8fnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEYiw7lP5L5mfDikPce4Xo6nBOqiMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvUmlMRHVVX2t2bVo4T0tROXg3aGVqcWNFNnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXhppAwQA wG2KMA0GCSqGSIb3DQEBCwUAA4IBAQCZ6B8iY9t2S7TxbTL31qrsw06GBvlcThaH H77JBVL/NIsCSQHLQwE6DgZz361GMcveowjsQdQslHSu1n84TIUTDb5v3bQJPghX dDKBWMcHnTvW4iwf+e0QS8EsDeKOZIC2qjEkn3AOAjdW5J6ELHVYfBayWwn47xdX xuhGqArUKevnldsBLY4yBr7mqN1rUJ9X4rLQdIltQfcbrSE1tpzrrI8UhIUTvS4R JnDN+4knSGfHH5N0DMM+y+W2G7OmQt6TqJAJe6Nxg9oblYotA0AqXTu5yW2jJAwv YsiFlKsU5SaDjE4T4AE/HBrmxSG6qFssPLNNkw/EVAot8YTU38c0 -----END CERTIFICATE-----Generated at Fri Jan 23 15:13:56 2026 by rpki-client