This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_64XrmwIaLNA0Cfqiovy6pCVOpk.roa File: _64XrmwIaLNA0Cfqiovy6pCVOpk.roa (raw, json) Hash identifier: Z2WLohIaql6ERKD/ba6WPxTHR4K8vsk14ZTv6xWM0Ts= Subject key identifier: FF:AE:17:AE:6C:08:68:B3:40:D0:27:EA:8A:8B:F2:EA:90:95:3A:99 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8556C1FBA03C5AF1E8318ABB2C0A01 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_64XrmwIaLNA0Cfqiovy6pCVOpk.roa Signing time: Fri 02 Jan 2026 16:23:23 +0000 ROA not before: Fri 02 Jan 2026 16:23:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60647 IP address blocks: 212.192.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:56:c1:fb:a0:3c:5a:f1:e8:31:8a:bb:2c:0a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffae17ae6c0868b340d027ea8a8bf2ea90953a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:9a:ca:90:fe:9d:76:db:6b:43:68:c8:b4: 49:8a:ab:44:ea:19:7f:89:3c:59:c4:85:3a:33:82: 57:13:0b:5b:65:c8:35:49:eb:0c:69:04:97:1e:6c: d1:5f:2d:fc:de:9b:47:95:73:d3:22:ca:c6:bf:8a: d4:d1:f2:b2:4e:e7:c9:a9:99:f5:9a:7c:53:84:6d: 6c:f2:ce:9c:da:4b:45:d2:a5:78:92:8f:f1:19:6b: 6e:b5:ca:bc:67:e2:62:d1:80:27:90:82:6d:a0:66: e3:1a:b2:66:c9:67:61:f4:95:cc:8e:c0:37:06:00: 4b:8c:33:5a:a9:38:0b:f4:15:76:68:d7:5d:04:55: d2:7d:07:87:2a:9d:01:43:66:b0:8b:1c:88:74:ef: 24:3b:59:a1:fd:38:6e:58:41:b9:25:74:39:68:e9: 07:36:10:df:25:1a:47:9f:5c:a2:1d:7b:15:3a:8b: 23:ba:ec:ef:13:db:40:31:0d:1d:4c:d7:fc:ea:ba: 3c:b4:fc:36:ad:46:fe:20:94:77:0c:f6:5f:62:b8: 01:9c:76:3e:de:75:6c:10:8c:1d:d4:76:14:35:bc: f1:5e:5f:f6:dd:f9:53:1e:7f:9f:16:ce:e3:ba:c6: a5:a7:e3:cc:2b:48:57:9a:ef:01:b4:a6:a7:a6:25: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AE:17:AE:6C:08:68:B3:40:D0:27:EA:8A:8B:F2:EA:90:95:3A:99 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_64XrmwIaLNA0Cfqiovy6pCVOpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.252.0/24 Signature Algorithm: sha256WithRSAEncryption 09:76:f2:1c:78:ad:00:53:5d:64:4d:94:2f:cc:38:fe:01:c7: 7b:88:d3:3f:1d:eb:ae:e9:46:73:a7:69:71:4f:7e:88:87:96: 33:e2:4e:f3:d3:91:e1:41:98:01:a1:4d:fc:ea:29:11:ba:56: be:e4:bf:a6:1d:98:75:47:64:b9:67:91:7c:98:99:f3:01:1f: 20:9b:62:66:fa:3f:84:79:8b:e5:6b:80:1a:84:91:2b:72:d6: fc:df:24:b6:70:eb:21:f9:01:f2:a3:61:99:8b:4e:1d:b6:13: f9:53:d0:ac:8c:b6:f0:85:57:68:6d:d7:1c:d2:1b:3a:99:11: fa:4c:4e:3e:b6:1f:0e:14:c9:55:11:3e:9f:c9:9a:c5:bb:2c: b4:12:aa:e0:9e:34:f7:1f:13:3f:71:eb:f5:65:43:54:29:7f: 6e:4d:c1:f5:fa:de:41:de:18:5b:06:e9:a8:f0:9a:00:0c:4f: 98:35:1f:a0:6d:32:fd:1b:d0:70:b7:7a:6e:96:e9:fe:22:48: ad:52:af:f1:71:b1:ba:0c:c1:19:82:13:b0:4c:8e:8d:30:cb: f3:4f:69:a0:67:30:a5:07:3b:13:d5:a7:f5:e2:2d:55:ab:c1: 2f:4b:d2:c0:90:e5:d1:10:83:b7:5c:1d:f9:b0:a9:b3:fa:19: a8:9a:0b:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVbB+6A8WvHoMYq7LAoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmFlMTdhZTZjMDg2OGIzNDBkMDI3ZWE4YThiZjJlYTkwOTUzYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3OaypD+nXbba0NoyLRJiqtE6hl/ iTxZxIU6M4JXEwtbZcg1SesMaQSXHmzRXy383ptHlXPTIsrGv4rU0fKyTufJqZn1 mnxThG1s8s6c2ktF0qV4ko/xGWtutcq8Z+Ji0YAnkIJtoGbjGrJmyWdh9JXMjsA3 BgBLjDNaqTgL9BV2aNddBFXSfQeHKp0BQ2awixyIdO8kO1mh/ThuWEG5JXQ5aOkH NhDfJRpHn1yiHXsVOosjuuzvE9tAMQ0dTNf86ro8tPw2rUb+IJR3DPZfYrgBnHY+ 3nVsEIwd1HYUNbzxXl/23flTHn+fFs7jusalp+PMK0hXmu8BtKanpiV1fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+uF65sCGizQNAn6oqL8uqQlTqZMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvXzY0WHJtd0lhTE5BMENmcWlvdnk2cENWT3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MD8MA0G CSqGSIb3DQEBCwUAA4IBAQAJdvIceK0AU11kTZQvzDj+Acd7iNM/Heuu6UZzp2lx T36Ih5Yz4k7z05HhQZgBoU386ikRula+5L+mHZh1R2S5Z5F8mJnzAR8gm2Jm+j+E eYvla4AahJErctb83yS2cOsh+QHyo2GZi04dthP5U9CsjLbwhVdobdcc0hs6mRH6 TE4+th8OFMlVET6fyZrFuyy0EqrgnjT3HxM/cev1ZUNUKX9uTcH1+t5B3hhbBumo 8JoADE+YNR+gbTL9G9Bwt3pulun+IkitUq/xcbG6DMEZghOwTI6NMMvzT2mgZzCl BzsT1af14i1Vq8EvS9LAkOXREIO3XB35sKmz+hmomgs0 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:18 2026 by rpki-client