This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa File: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (raw, json) Hash identifier: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk= Subject key identifier: A4:45:EC:A7:FC:07:1C:62:DA:66:16:61:60:5A:1E:2B:20:1E:E3:15 Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d Certificate serial: 019B7758C289324294D2352D955094C36AA4 Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20900 IP address blocks: 194.4.7.0/24 maxlen: 24 194.4.10.0/24 maxlen: 24 194.4.12.0/24 maxlen: 24 194.4.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:89:32:42:94:d2:35:2d:95:50:94:c3:6a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a445eca7fc071c62da661661605a1e2b201ee315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:0b:87:aa:8e:d9:6a:05:d1:9a:63:97:80: 97:fe:c1:12:47:a7:d3:c5:d6:72:cd:67:a3:9a:5b: 5d:83:16:07:5f:c4:be:8e:03:25:d5:27:8e:27:1d: fd:9e:e8:ab:8e:8d:6a:a4:ce:5c:17:9b:c2:f1:ec: ef:75:7d:07:ad:b7:a6:fd:81:8a:b7:1b:2b:5f:f6: 3d:59:92:c3:1f:cb:67:63:69:62:51:3c:aa:32:fc: 8d:6f:1b:a4:92:bf:c3:83:28:2b:4f:43:82:3d:45: b9:61:55:66:fb:a6:f0:3b:cf:bf:25:2e:34:e6:c9: 20:ab:91:1c:b1:e9:97:ec:25:b0:00:43:95:c9:e8: 62:99:32:1b:6f:74:43:52:fa:8e:3c:d7:6f:cf:56: 5a:16:05:50:4b:15:6c:bb:49:21:0e:40:40:8e:22: ed:2b:5e:b2:e2:23:a4:fc:d1:75:9c:e8:ab:25:73: cb:ac:0c:ba:95:90:f1:d7:db:14:07:a9:be:16:5b: f0:3b:c4:24:35:25:cb:b2:08:07:e1:52:c1:2a:8b: e4:1e:b7:82:49:cd:04:81:2c:23:b1:7c:b9:61:61: a0:6e:ba:02:39:f7:d7:09:45:f4:f0:b3:18:a4:09: be:73:d1:eb:2f:b5:bb:29:59:c0:b4:f7:61:9c:e7: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:45:EC:A7:FC:07:1C:62:DA:66:16:61:60:5A:1E:2B:20:1E:E3:15 X509v3 Authority Key Identifier: keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.7.0/24 194.4.10.0/24 194.4.12.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:eb:74:c9:49:31:04:8c:8a:9d:10:fc:ba:64:54:d1:4c:46: bf:d7:bc:94:9e:3f:13:d4:ba:e4:06:33:f8:48:e5:b9:6c:37: 6d:21:f1:8f:98:8b:c3:8c:9a:c2:5a:72:df:1f:8c:69:f3:cf: e9:61:0e:5a:4a:38:3f:3a:99:16:ea:43:f8:0a:78:9e:2b:b8: b2:24:f3:78:87:37:50:53:73:a3:73:be:99:0f:0e:9e:5f:50: 4c:51:0f:22:4b:0e:7b:35:dd:09:79:8a:47:f9:f3:9e:3f:c3: ed:5d:a8:a2:f2:9b:7d:6e:22:2a:22:18:80:cc:ce:bf:3c:95: 35:ca:f4:20:27:43:48:a7:0d:0f:07:77:f2:29:70:61:c2:d3: 1a:73:05:2a:77:57:10:92:8b:db:21:c0:89:d3:ed:4a:8d:42: 31:ae:c5:5d:06:3c:7d:5e:69:56:77:3b:10:78:4c:e0:b0:6b: ec:fb:4d:05:45:e3:39:56:8a:ff:0c:a3:42:3a:12:fc:57:29: be:7a:9a:5c:86:2a:1f:0e:3c:7a:40:b7:35:fc:bb:fe:18:0e: f0:e5:f8:b5:a6:35:ed:30:1b:76:3b:f0:9f:f4:73:3c:c9:7a: 2a:cb:05:70:41:c9:c1:95:4c:41:4f:92:fd:74:6b:c2:25:3b: 92:dc:56:46 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WMKJMkKU0jUtlVCUw2qkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjQyNmY0ODNjMzZhYWNkYTg3MzIzMjRhYjg4YWQ1ODAw YzlhMmQwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQ1ZWNhN2ZjMDcxYzYyZGE2NjE2NjE2MDVhMWUyYjIwMWVlMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4MLh6qO2WoF0Zpjl4CX/sESR6fT xdZyzWejmltdgxYHX8S+jgMl1SeOJx39nuirjo1qpM5cF5vC8ezvdX0Hrbem/YGK txsrX/Y9WZLDH8tnY2liUTyqMvyNbxukkr/DgygrT0OCPUW5YVVm+6bwO8+/JS40 5skgq5EcsemX7CWwAEOVyehimTIbb3RDUvqOPNdvz1ZaFgVQSxVsu0khDkBAjiLt K16y4iOk/NF1nOirJXPLrAy6lZDx19sUB6m+FlvwO8QkNSXLsggH4VLBKovkHreC Sc0EgSwjsXy5YWGgbroCOffXCUX08LMYpAm+c9HrL7W7KVnAtPdhnOfqwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKRF7Kf8Bxxi2mYWYWBaHisgHuMVMB8GA1UdIwQY MBaAFJBkJvSDw2qs2ocyMkq4itWADJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEt OTRjNWFkMTdhN2EwLzEvcEVYc3Bfd0hIR0xhWmhaaFlGb2VLeUFlNHhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85NGQ0NDEtZDk4Ny00MDYyLTg5YzEtOTRjNWFkMTdhN2Ew LzEva0dRbTlJUERhcXphaHpJeVNyaUsxWUFNbWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwgQHAwQA wgQKAwQBwgQMMA0GCSqGSIb3DQEBCwUAA4IBAQCc63TJSTEEjIqdEPy6ZFTRTEa/ 17yUnj8T1LrkBjP4SOW5bDdtIfGPmIvDjJrCWnLfH4xp88/pYQ5aSjg/OpkW6kP4 CnieK7iyJPN4hzdQU3Ojc76ZDw6eX1BMUQ8iSw57Nd0JeYpH+fOeP8PtXaii8pt9 biIqIhiAzM6/PJU1yvQgJ0NIpw0PB3fyKXBhwtMacwUqd1cQkovbIcCJ0+1KjUIx rsVdBjx9XmlWdzsQeEzgsGvs+00FReM5Vor/DKNCOhL8Vym+eppchiofDjx6QLc1 /Lv+GA7w5fi1pjXtMBt2O/Cf9HM8yXoqywVwQcnBlUxBT5L9dGvCJTuS3FZG -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:03 2026 by rpki-client