This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa File: 1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa (raw, json) Hash identifier: ZZsyj+78mzK435bwg8IeS0gsZEU0AFtCxgKahg6foPg= Subject key identifier: FA:7F:36:55:29:0E:C6:B4:8A:81:5D:4F:B0:6B:F0:28:A4:9F:09:D2 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF1656FE6746AB75CFD0CE0A61ADE2A Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa Signing time: Fri 02 Jan 2026 18:21:25 +0000 ROA not before: Fri 02 Jan 2026 18:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 194.38.48.0/24 maxlen: 24 194.38.50.0/24 maxlen: 24 194.38.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:65:6f:e6:74:6a:b7:5c:fd:0c:e0:a6:1a:de:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa7f3655290ec6b48a815d4fb06bf028a49f09d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:7e:1d:b7:d9:db:ca:31:18:b9:8f:f2:32: 2a:08:39:96:9e:5b:8a:fd:19:01:32:bd:80:61:dc: 54:0c:a3:6a:ea:b7:b7:f4:dd:f3:70:40:d4:ef:6d: 17:5b:f6:b8:c1:b5:43:52:90:5d:a6:84:4e:21:f9: 56:e5:50:d3:10:7d:98:5f:73:76:cc:77:6d:2e:6b: 27:43:c8:f5:d8:48:0d:f2:d5:9b:3a:c4:eb:51:0f: 60:4f:66:bd:39:ec:15:d1:c0:0e:fa:54:ed:50:78: 64:a7:4e:de:ae:cf:f8:0d:ca:84:d7:8f:bf:11:ba: 2d:ec:5f:2c:1a:fe:72:01:e2:f1:1a:33:4e:51:34: 1c:fc:45:f4:1f:d1:ae:c4:f0:76:f1:31:cc:28:92: e7:83:5f:7e:c3:40:3f:b7:f0:36:09:f3:e1:b7:d6: da:89:84:89:a6:95:31:81:b0:0f:57:60:7a:32:3a: bc:b1:e2:9c:50:d0:03:bf:b1:cd:90:41:6f:73:37: d2:d2:9b:04:ea:09:92:68:56:42:9e:8c:d3:cf:4b: aa:28:3c:45:44:88:d4:42:87:11:84:d8:f3:85:3a: 99:27:a1:9b:69:92:1e:2f:71:13:02:27:9b:f2:4f: b6:9e:60:18:7f:16:d9:1e:f1:ea:a1:05:e2:2d:9c: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:36:55:29:0E:C6:B4:8A:81:5D:4F:B0:6B:F0:28:A4:9F:09:D2 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-n82VSkOxrSKgV1PsGvwKKSfCdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.48.0/24 194.38.50.0/23 Signature Algorithm: sha256WithRSAEncryption a0:55:5b:6e:a5:55:84:93:d5:ae:2a:c6:17:2d:1b:e1:af:52: 1f:a1:58:83:5c:8f:46:c6:61:28:3f:06:3b:b9:60:b2:89:52: 50:cd:fc:2a:48:d8:94:e1:a1:5d:52:54:64:a2:f6:10:da:0a: e1:25:63:15:61:7c:34:36:3d:18:51:bd:e0:87:88:ca:a1:1a: b0:1c:91:a6:20:93:c8:38:53:04:78:f2:8c:8a:f4:6d:90:ad: 1b:43:04:2b:65:e9:bb:0e:f0:af:ba:83:7a:08:cc:a5:70:6f: 90:cb:d8:e8:9a:34:3f:f6:61:b8:58:34:76:aa:53:88:25:3e: 54:df:19:cb:70:1f:49:b6:03:95:73:2c:24:1b:53:c7:f1:af: 85:11:d8:12:a6:38:e1:9e:63:4e:b1:65:da:f5:e6:2e:1d:0c: 0b:84:d9:71:17:41:83:a1:d0:05:1d:05:36:36:b5:cc:f4:83: 90:4a:9e:52:4d:9d:d3:8e:9c:8f:41:2e:61:c2:ac:75:d7:dd: 7b:5f:fb:11:b0:29:b4:07:02:36:3e:f4:ab:a2:20:b8:2d:fb: 59:64:d1:70:41:10:9a:a1:6b:d0:e7:4d:02:e6:98:ef:2c:bc: bf:89:97:97:56:91:d0:d7:7b:66:1d:7c:b4:9c:e9:dd:36:f1: 1c:29:e5:48 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/8WVv5nRqt1z9DOCmGt4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTdmMzY1NTI5MGVjNmI0OGE4MTVkNGZiMDZiZjAyOGE0OWYwOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0F+HbfZ28oxGLmP8jIqCDmWnluK /RkBMr2AYdxUDKNq6re39N3zcEDU720XW/a4wbVDUpBdpoROIflW5VDTEH2YX3N2 zHdtLmsnQ8j12EgN8tWbOsTrUQ9gT2a9OewV0cAO+lTtUHhkp07ers/4DcqE14+/ Ebot7F8sGv5yAeLxGjNOUTQc/EX0H9GuxPB28THMKJLng19+w0A/t/A2CfPht9ba iYSJppUxgbAPV2B6Mjq8seKcUNADv7HNkEFvczfS0psE6gmSaFZCnozTz0uqKDxF RIjUQocRhNjzhTqZJ6GbaZIeL3ETAieb8k+2nmAYfxbZHvHqoQXiLZyWYwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPp/NlUpDsa0ioFdT7Br8CiknwnSMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvMS1uODJWU2tPeHJTS2dWMVBzR3Z3S0tTZkNkSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTkvZmViZWY4LWEwZWEtNGM3ZS04ODA2LTIwZTE5NzgwY2Iy ZS8xLzBJMnB6d0RVMVl1RlRfeGlBUThqV3diZk5Vby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMImMAME AcImMjANBgkqhkiG9w0BAQsFAAOCAQEAoFVbbqVVhJPVrirGFy0b4a9SH6FYg1yP RsZhKD8GO7lgsolSUM38KkjYlOGhXVJUZKL2ENoK4SVjFWF8NDY9GFG94IeIyqEa sByRpiCTyDhTBHjyjIr0bZCtG0MEK2Xpuw7wr7qDegjMpXBvkMvY6Jo0P/ZhuFg0 dqpTiCU+VN8Zy3AfSbYDlXMsJBtTx/GvhRHYEqY44Z5jTrFl2vXmLh0MC4TZcRdB g6HQBR0FNja1zPSDkEqeUk2d046cj0EuYcKsddfde1/7EbAptAcCNj70q6IguC37 WWTRcEEQmqFr0OdNAuaY7yy8v4mXl1aR0Nd7Zh18tJzp3TbxHCnlSA== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:03 2026 by rpki-client