This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x_AZ8R1TSEEJ9_rSz2trFSXpbfA.roa File: x_AZ8R1TSEEJ9_rSz2trFSXpbfA.roa (raw, json) Hash identifier: /J9i1ltIyoCB9npneULq8dcrFAwn7w2mzOFaJgxoR7c= Subject key identifier: C7:F0:19:F1:1D:53:48:41:09:F7:FA:D2:CF:6B:6B:15:25:E9:6D:F0 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854E182593038521248E7B26E730E0 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x_AZ8R1TSEEJ9_rSz2trFSXpbfA.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44620 IP address blocks: 194.87.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4e:18:25:93:03:85:21:24:8e:7b:26:e7:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7f019f11d53484109f7fad2cf6b6b1525e96df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:f6:a2:43:66:93:5f:51:61:c3:73:ff:fa: fa:66:47:65:6b:7a:15:f2:ef:e6:58:1b:87:3c:da: ae:6f:20:b7:d1:e6:81:a3:e3:05:b9:c4:83:0b:fe: 4d:00:8b:0c:b4:b1:a4:73:61:12:fe:1d:2b:0a:fc: 38:ad:0e:1c:b3:e1:97:a0:d9:d0:0f:bb:e5:20:1a: 26:6e:bf:a3:4e:9f:50:b5:0a:3a:26:00:96:7e:b8: c8:f0:e1:59:e0:d3:56:2c:1f:c5:6f:a8:5a:78:0b: 1f:06:82:4b:4e:8e:5f:b4:5e:32:79:2e:5a:e6:b8: 40:b8:85:97:3a:30:94:2b:b7:95:2f:f0:c1:f2:4e: 77:3a:87:fe:3c:8b:8f:86:52:13:87:c2:2d:db:e0: 70:11:eb:52:bb:0f:49:e3:1d:b9:61:f6:12:d9:96: 1d:3b:f9:12:20:10:98:79:15:de:0b:91:ed:89:71: 0e:88:8e:68:ab:e4:ee:32:fb:97:a3:10:30:bf:be: ff:f2:3d:b0:28:a4:b5:c1:d6:d2:bd:ea:d3:bb:b6: 07:db:12:93:44:ea:60:c6:77:45:77:37:9f:cd:e7: 05:84:74:b4:4e:e2:87:92:bf:23:80:26:34:bc:0b: b4:9d:74:1c:c2:55:e5:b3:b0:e6:cc:65:2a:b7:7c: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:19:F1:1D:53:48:41:09:F7:FA:D2:CF:6B:6B:15:25:E9:6D:F0 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/x_AZ8R1TSEEJ9_rSz2trFSXpbfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.246.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f5:78:e5:24:51:c6:6a:a2:da:9c:d0:18:53:25:c4:3f:ae: c4:0a:43:4c:74:e7:61:38:9b:c0:62:77:9e:fb:e3:8e:d6:a6: e9:ce:1a:03:55:6a:eb:17:cb:45:ea:0d:32:b4:f5:94:d2:d3: 46:52:cf:8b:6d:82:af:d2:03:94:ef:9e:51:da:58:86:01:f5: 85:ec:8a:8e:ec:4b:ff:a9:e7:b7:71:7d:af:30:5e:fe:fa:2b: f1:65:0b:24:eb:00:a8:8a:8e:51:cd:1f:a5:99:e7:69:03:22: f9:44:94:ec:b1:58:11:b7:8e:5e:dc:a3:93:ca:1f:6f:ec:21: 9c:86:4b:ce:ec:b9:8b:86:2d:d1:06:ca:e5:f0:29:fb:b8:84: fc:a9:78:28:ec:1b:f6:3a:18:54:29:6b:25:16:ec:17:c4:07: 76:b0:ef:f6:1d:b2:be:e2:3a:70:f8:5b:3d:35:b2:08:89:62: c9:ed:c8:11:22:ff:4e:ce:07:89:7e:14:f8:3a:a7:91:20:03: 73:86:32:d3:66:d1:e6:cd:af:d0:49:00:3f:87:51:1b:04:b7: 8b:67:23:06:7c:43:03:de:5e:8b:da:03:a5:f6:3c:12:66:ac: cb:9c:db:3a:e0:5d:ad:ca:9c:45:7f:38:22:49:60:59:89:a2: 58:b3:c6:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hU4YJZMDhSEkjnsm5zDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2YwMTlmMTFkNTM0ODQxMDlmN2ZhZDJjZjZiNmIxNTI1ZTk2ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/z2okNmk19RYcNz//r6Zkdla3oV 8u/mWBuHPNqubyC30eaBo+MFucSDC/5NAIsMtLGkc2ES/h0rCvw4rQ4cs+GXoNnQ D7vlIBombr+jTp9QtQo6JgCWfrjI8OFZ4NNWLB/Fb6haeAsfBoJLTo5ftF4yeS5a 5rhAuIWXOjCUK7eVL/DB8k53Oof+PIuPhlITh8It2+BwEetSuw9J4x25YfYS2ZYd O/kSIBCYeRXeC5HtiXEOiI5oq+TuMvuXoxAwv77/8j2wKKS1wdbSverTu7YH2xKT ROpgxndFdzefzecFhHS0TuKHkr8jgCY0vAu0nXQcwlXls7DmzGUqt3zH3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfwGfEdU0hBCff60s9raxUl6W3wMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEveF9BWjhSMVRTRUVKOV9yU3oydHJGU1hwYmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlf2MA0G CSqGSIb3DQEBCwUAA4IBAQBJ9XjlJFHGaqLanNAYUyXEP67ECkNMdOdhOJvAYnee ++OO1qbpzhoDVWrrF8tF6g0ytPWU0tNGUs+LbYKv0gOU755R2liGAfWF7IqO7Ev/ qee3cX2vMF7++ivxZQsk6wCoio5RzR+lmedpAyL5RJTssVgRt45e3KOTyh9v7CGc hkvO7LmLhi3RBsrl8Cn7uIT8qXgo7Bv2OhhUKWslFuwXxAd2sO/2HbK+4jpw+Fs9 NbIIiWLJ7cgRIv9OzgeJfhT4OqeRIANzhjLTZtHmza/QSQA/h1EbBLeLZyMGfEMD 3l6L2gOl9jwSZqzLnNs64F2typxFfzgiSWBZiaJYs8bR -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client