This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IXaJnoaDD9Rt7kPxp2bAEwoIPWY.roa File: IXaJnoaDD9Rt7kPxp2bAEwoIPWY.roa (raw, json) Hash identifier: 60QmPiFwIUVTE8e7k+VoNinb5v3OS9d+IyCJeoDXnAg= Subject key identifier: 21:76:89:9E:86:83:0F:D4:6D:EE:43:F1:A7:66:C0:13:0A:08:3D:66 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8559529AC0CC6B4135A348D249E75E Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IXaJnoaDD9Rt7kPxp2bAEwoIPWY.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146943 IP address blocks: 194.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:59:52:9a:c0:cc:6b:41:35:a3:48:d2:49:e7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2176899e86830fd46dee43f1a766c0130a083d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:25:db:54:23:f0:bf:6b:aa:c3:0c:f2:f5: 9f:30:ff:10:4a:00:09:bd:19:c9:cf:0a:19:86:52: f8:12:5e:eb:61:21:9b:ee:14:75:62:7f:e0:b8:a5: b5:21:43:6c:22:b4:30:5d:ea:55:49:f7:09:bf:7a: f7:de:a8:8a:b0:3a:14:17:30:95:9e:2f:cb:aa:22: 9a:be:8e:d6:dc:ba:68:6c:7a:ba:6f:80:97:bc:a0: e2:0c:79:61:73:c9:83:d7:ca:ad:79:12:e8:24:c5: 22:30:ed:a5:e6:41:79:4a:5a:67:36:fb:8d:f6:7a: 61:74:17:7d:da:8c:6e:39:42:12:6e:4c:29:85:0d: 54:8f:f5:ae:13:ba:f4:b7:c2:6d:b3:10:fa:75:d6: bc:c8:fa:68:d5:d4:62:18:53:4e:97:65:7a:b4:63: 9a:28:26:fb:24:0e:ce:bf:8f:6a:f3:5a:2f:a2:a6: 34:bf:00:6b:5b:a6:48:11:f0:f2:0e:7a:34:ef:96: 3f:88:69:fd:2a:62:c7:f0:57:1e:d4:66:b7:94:1d: 5c:20:e2:60:d6:f9:ef:f4:c4:76:24:09:4a:e9:cd: 2d:40:19:e6:a2:55:2f:99:a4:33:55:bf:ec:8f:47: 99:9f:28:15:44:ae:2e:26:5c:d7:1f:5f:ce:2d:75: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:76:89:9E:86:83:0F:D4:6D:EE:43:F1:A7:66:C0:13:0A:08:3D:66 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IXaJnoaDD9Rt7kPxp2bAEwoIPWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:b5:9e:14:b2:7e:62:87:df:f7:b4:e2:b5:4c:68:08:08:9c: 6a:13:f7:6d:61:b2:f6:40:83:a5:f5:b8:59:0b:37:e6:b6:e1: d5:19:a6:7d:49:dd:ce:b2:53:4a:ce:ca:62:3b:70:1f:2e:69: 87:9c:a4:f4:af:9c:85:2e:75:60:db:cc:f4:f5:59:50:cf:e6: cb:0e:fd:de:17:63:67:b2:df:35:f5:2f:6f:9b:79:5b:4a:4a: 4b:48:63:b7:57:91:56:d9:30:c0:ca:f8:ab:3b:36:c0:0a:f3: 57:96:05:20:bb:ab:1c:62:d2:e3:4d:d8:2e:22:74:b2:08:c5: 58:7b:30:c4:d6:49:b1:76:23:8a:4e:fe:d6:55:2c:b7:22:e2: a0:be:c0:97:65:27:5d:b6:40:f0:22:6f:d0:b1:f5:32:f4:4e: 4a:1c:38:e6:54:34:77:cc:28:d9:7a:1d:cc:8b:f1:a1:ae:31: 31:83:e1:8d:a6:86:bb:cd:ad:04:fd:36:54:20:27:7b:c6:9a: ef:07:74:89:1f:31:7a:b5:34:7e:69:0c:3b:dc:ea:6b:80:cf: 0e:35:6c:a8:b6:16:2a:08:df:47:49:6d:a9:68:42:02:65:59: c8:05:22:00:df:20:f6:b7:0a:b1:49:0b:79:0a:b5:70:5b:14: 5d:6e:5e:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVlSmsDMa0E1o0jSSedeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTc2ODk5ZTg2ODMwZmQ0NmRlZTQzZjFhNzY2YzAxMzBhMDgzZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0l21Qj8L9rqsMM8vWfMP8QSgAJ vRnJzwoZhlL4El7rYSGb7hR1Yn/guKW1IUNsIrQwXepVSfcJv3r33qiKsDoUFzCV ni/LqiKavo7W3LpobHq6b4CXvKDiDHlhc8mD18qteRLoJMUiMO2l5kF5SlpnNvuN 9nphdBd92oxuOUISbkwphQ1Uj/WuE7r0t8JtsxD6dda8yPpo1dRiGFNOl2V6tGOa KCb7JA7Ov49q81ovoqY0vwBrW6ZIEfDyDno075Y/iGn9KmLH8Fce1Ga3lB1cIOJg 1vnv9MR2JAlK6c0tQBnmolUvmaQzVb/sj0eZnygVRK4uJlzXH1/OLXWLrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCF2iZ6Ggw/Ube5D8admwBMKCD1mMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvSVhhSm5vYUREOVJ0N2tQeHAyYkFFd29JUFdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfMMA0G CSqGSIb3DQEBCwUAA4IBAQB7tZ4Usn5ih9/3tOK1TGgICJxqE/dtYbL2QIOl9bhZ CzfmtuHVGaZ9Sd3OslNKzspiO3AfLmmHnKT0r5yFLnVg28z09VlQz+bLDv3eF2Nn st819S9vm3lbSkpLSGO3V5FW2TDAyvirOzbACvNXlgUgu6scYtLjTdguInSyCMVY ezDE1kmxdiOKTv7WVSy3IuKgvsCXZSddtkDwIm/QsfUy9E5KHDjmVDR3zCjZeh3M i/GhrjExg+GNpoa7za0E/TZUICd7xprvB3SJHzF6tTR+aQw73OprgM8ONWyothYq CN9HSW2paEICZVnIBSIA3yD2twqxSQt5CrVwWxRdbl47 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client