This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0J0U4ruD7JF4K2HNMTuNQcgncC4.roa File: 0J0U4ruD7JF4K2HNMTuNQcgncC4.roa (raw, json) Hash identifier: 7fBWsG0mdN0C696G6XpLJuPbqW6+EjnW99zFafYdgrQ= Subject key identifier: D0:9D:14:E2:BB:83:EC:91:78:2B:61:CD:31:3B:8D:41:C8:27:70:2E Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B6184FF86B3FC1672D4B1C82DB3B Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0J0U4ruD7JF4K2HNMTuNQcgncC4.roa Signing time: Fri 02 Jan 2026 16:20:31 +0000 ROA not before: Fri 02 Jan 2026 16:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23959 IP address blocks: 194.50.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b6:18:4f:f8:6b:3f:c1:67:2d:4b:1c:82:db:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d09d14e2bb83ec91782b61cd313b8d41c827702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:10:fc:d2:aa:8d:a6:a9:df:3e:14:52:a5: 9d:7c:f2:48:58:6f:00:93:ac:b6:de:91:83:b9:f0: 2d:af:ce:08:d0:65:10:99:b5:ff:35:d3:02:7d:00: 7a:5e:94:80:b1:74:8e:72:70:2b:b6:55:3d:09:a1: 5a:79:f3:78:e5:9f:eb:d1:24:50:73:af:13:05:58: 43:7a:86:80:3c:46:6e:d9:aa:60:19:1f:b9:30:2a: 7f:a9:a8:ac:e5:bb:43:d4:a3:10:f8:6d:90:1b:37: 2e:f7:2d:6c:61:31:5d:8b:ae:c0:f5:b7:47:3a:c3: bf:d2:16:76:b0:71:f7:68:a4:b7:1e:e6:fd:c4:96: 45:d0:88:2c:b5:b5:6d:f6:c1:cc:69:ea:b6:f7:08: de:f4:88:a1:c9:b0:30:11:d0:09:2e:0c:f6:76:88: 94:4d:0b:2a:1d:04:1c:d1:2b:9e:09:06:42:9c:4c: ec:6a:fb:41:86:6a:b6:3a:2c:38:74:13:42:ce:e7: 99:c3:53:78:01:e9:07:fb:9c:54:10:8f:e1:df:c2: eb:e5:f7:d2:28:f0:4a:a4:1d:63:ba:47:f8:53:68: d2:7e:cb:95:e9:e4:8e:b2:b5:44:b1:72:77:b5:0b: 24:12:9c:34:20:0f:36:41:07:39:69:be:f1:4d:71: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:14:E2:BB:83:EC:91:78:2B:61:CD:31:3B:8D:41:C8:27:70:2E X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0J0U4ruD7JF4K2HNMTuNQcgncC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.18.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e2:b4:c0:04:93:d0:de:39:48:de:e6:35:14:3e:af:b7:81: 98:07:f0:8d:d0:83:76:b6:ad:d7:0d:7a:7e:d9:cd:2c:7d:1f: 53:04:88:d0:e2:7e:88:2c:38:52:c6:68:7f:2f:63:9d:2f:69: 21:3b:6f:0c:82:1e:f8:3d:72:ed:ca:77:e7:7d:2a:de:b8:46: e2:ed:d5:4c:ec:32:21:88:fc:79:f2:5f:ae:37:b1:0b:82:3b: 02:21:9c:1c:e4:26:29:8e:47:a4:ce:e5:c7:5e:92:03:c7:c3: 25:ee:32:5c:ff:7e:ba:96:5a:b8:fa:31:83:87:26:eb:c0:1d: fc:b7:fc:26:de:72:07:40:83:c6:57:f1:7f:77:3a:8c:73:b4: 48:c8:7c:d0:ba:2d:73:56:09:0c:45:04:e6:71:ea:ea:2c:77: 46:7a:99:f1:14:c0:8d:18:f6:29:f9:7f:5e:56:e8:f6:db:51: e7:b3:32:32:ad:8c:f8:54:0e:53:76:8c:f8:d5:2f:db:fd:24: 10:4b:74:67:90:93:6c:4f:26:59:97:9c:c9:a8:6d:47:43:56: a0:f9:4f:cd:f3:91:d0:88:2a:b0:83:1c:7e:e6:35:78:e1:53: 9b:e6:36:f4:a7:33:cf:67:8f:6c:c8:e8:cc:71:58:b2:98:41: 73:1c:22:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grYYT/hrP8FnLUscgts7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDlkMTRlMmJiODNlYzkxNzgyYjYxY2QzMTNiOGQ0MWM4Mjc3MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhIQ/NKqjaap3z4UUqWdfPJIWG8A k6y23pGDufAtr84I0GUQmbX/NdMCfQB6XpSAsXSOcnArtlU9CaFaefN45Z/r0SRQ c68TBVhDeoaAPEZu2apgGR+5MCp/qais5btD1KMQ+G2QGzcu9y1sYTFdi67A9bdH OsO/0hZ2sHH3aKS3Hub9xJZF0IgstbVt9sHMaeq29wje9IihybAwEdAJLgz2doiU TQsqHQQc0SueCQZCnEzsavtBhmq2Oiw4dBNCzueZw1N4AekH+5xUEI/h38Lr5ffS KPBKpB1jukf4U2jSfsuV6eSOsrVEsXJ3tQskEpw0IA82QQc5ab7xTXG30wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCdFOK7g+yReCthzTE7jUHIJ3AuMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvMEowVTRydUQ3SkY0SzJITk1UdU5RY2duY0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjISMA0G CSqGSIb3DQEBCwUAA4IBAQBm4rTABJPQ3jlI3uY1FD6vt4GYB/CN0IN2tq3XDXp+ 2c0sfR9TBIjQ4n6ILDhSxmh/L2OdL2khO28Mgh74PXLtynfnfSreuEbi7dVM7DIh iPx58l+uN7ELgjsCIZwc5CYpjkekzuXHXpIDx8Ml7jJc/366llq4+jGDhybrwB38 t/wm3nIHQIPGV/F/dzqMc7RIyHzQui1zVgkMRQTmcerqLHdGepnxFMCNGPYp+X9e Vuj221HnszIyrYz4VA5Tdoz41S/b/SQQS3RnkJNsTyZZl5zJqG1HQ1ag+U/N85HQ iCqwgxx+5jV44VOb5jb0pzPPZ49syOjMcViymEFzHCKH -----END CERTIFICATE-----Generated at Tue Jan 20 15:18:58 2026 by rpki-client