This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa File: CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa (raw, json) Hash identifier: sI3YWga44CFHLW4l4QO3EywjCuMYYSObR+oVP14vFnU= Subject key identifier: 0A:4B:CC:E1:1A:90:FB:BF:3A:55:C6:C1:6A:82:19:8D:4D:D9:25:00 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16698A99BE359EEA9AF57094449A6 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa Signing time: Fri 02 Jan 2026 18:21:25 +0000 ROA not before: Fri 02 Jan 2026 18:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 194.38.48.0/24 maxlen: 24 194.38.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:66:98:a9:9b:e3:59:ee:a9:af:57:09:44:49:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a4bcce11a90fbbf3a55c6c16a82198d4dd92500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:fe:16:cb:48:c7:9f:09:a0:b3:c8:1c:61: 9e:54:35:28:71:7b:d0:9e:97:e5:70:4f:2b:06:d3: 05:e0:76:cf:7b:d9:d1:41:7e:07:25:be:b1:76:0f: fc:33:ea:c5:bd:4d:87:ef:a1:b2:dd:35:6f:bf:36: 1c:42:db:22:bf:6c:f5:b7:65:11:08:dd:e6:f2:12: d9:9f:79:b6:cf:b0:33:36:89:4a:ff:03:73:e5:57: a7:c4:a4:ae:63:f8:37:1e:15:51:e7:3f:64:f6:1e: 8d:aa:74:6c:04:68:cb:08:ef:2a:ad:31:c6:ff:e1: f7:a7:6e:cc:80:ca:78:fe:b9:3c:60:01:da:bb:ee: b2:00:3b:f8:93:62:33:83:5c:09:a5:53:e7:ff:01: 13:30:0c:26:8f:30:4e:96:a4:2f:58:a9:e0:4f:df: 2c:aa:6b:96:c0:6b:05:02:de:d4:c9:e6:d3:df:af: 11:33:92:30:c0:be:ad:dd:29:98:4b:ae:46:6a:0e: c7:eb:aa:40:83:8d:e1:16:a0:6e:00:87:32:2c:18: 2a:3d:08:c1:61:a9:59:71:30:2e:6b:bd:1e:03:ab: bf:75:6b:c6:f6:a2:17:10:5a:f2:c1:83:f5:c9:4c: 22:9b:ea:86:a6:d0:e2:b1:ce:8a:43:0a:9e:e8:86: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:CC:E1:1A:90:FB:BF:3A:55:C6:C1:6A:82:19:8D:4D:D9:25:00 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/CkvM4RqQ-786VcbBaoIZjU3ZJQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.48.0/24 194.38.50.0/24 Signature Algorithm: sha256WithRSAEncryption 27:25:b9:ed:41:db:79:0d:14:a5:3d:f3:13:64:73:bf:48:fb: 19:9c:15:3e:ad:0b:d0:46:48:5d:62:bd:84:39:75:8b:1c:1b: 6c:56:41:8d:66:9c:e2:a1:57:e5:ab:83:7e:63:05:ad:32:a2: 82:b2:a5:d9:e3:25:84:b9:83:30:f7:5d:31:af:20:4b:4d:f2: 45:f3:38:55:95:06:4d:6f:fb:46:7e:2c:fc:40:dd:70:bb:72: 13:1f:72:bb:a9:78:eb:38:43:6d:a5:41:bf:38:d7:15:d0:ed: 1f:9d:05:d5:2a:6f:a4:83:c7:a8:ea:6c:53:54:73:9e:c7:04: c8:93:82:bc:9c:02:10:e3:ca:17:9b:3f:30:11:5a:bd:40:a5: c1:38:16:07:6f:98:34:1e:32:59:38:62:53:7e:5b:8e:01:20: 5f:56:a3:92:d8:99:58:14:c5:67:1a:da:39:bc:19:92:80:bc: 10:11:1f:c0:8f:27:8a:49:14:2e:a1:3b:c0:4c:05:dc:53:31: 41:72:e3:b6:2d:f9:7c:42:ea:75:8e:4a:13:38:76:fb:8f:6c: c7:12:d7:ca:a6:62:c3:31:88:ba:da:49:26:1a:43:1a:c7:db: b2:06:90:30:f5:c9:a7:9d:55:d7:f8:64:4e:c1:e4:98:9e:09: 76:0d:78:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8WaYqZvjWe6pr1cJREmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTRiY2NlMTFhOTBmYmJmM2E1NWM2YzE2YTgyMTk4ZDRkZDkyNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdz+FstIx58JoLPIHGGeVDUocXvQ npflcE8rBtMF4HbPe9nRQX4HJb6xdg/8M+rFvU2H76Gy3TVvvzYcQtsiv2z1t2UR CN3m8hLZn3m2z7AzNolK/wNz5VenxKSuY/g3HhVR5z9k9h6NqnRsBGjLCO8qrTHG /+H3p27MgMp4/rk8YAHau+6yADv4k2Izg1wJpVPn/wETMAwmjzBOlqQvWKngT98s qmuWwGsFAt7UyebT368RM5IwwL6t3SmYS65Gag7H66pAg43hFqBuAIcyLBgqPQjB YalZcTAua70eA6u/dWvG9qIXEFrywYP1yUwim+qGptDisc6KQwqe6IbElQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFApLzOEakPu/OlXGwWqCGY1N2SUAMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvQ2t2TTRScVEtNzg2VmNiQmFvSVpqVTNaSlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiYwAwQA wiYyMA0GCSqGSIb3DQEBCwUAA4IBAQAnJbntQdt5DRSlPfMTZHO/SPsZnBU+rQvQ RkhdYr2EOXWLHBtsVkGNZpzioVflq4N+YwWtMqKCsqXZ4yWEuYMw910xryBLTfJF 8zhVlQZNb/tGfiz8QN1wu3ITH3K7qXjrOENtpUG/ONcV0O0fnQXVKm+kg8eo6mxT VHOexwTIk4K8nAIQ48oXmz8wEVq9QKXBOBYHb5g0HjJZOGJTfluOASBfVqOS2JlY FMVnGto5vBmSgLwQER/AjyeKSRQuoTvATAXcUzFBcuO2Lfl8Qup1jkoTOHb7j2zH EtfKpmLDMYi62kkmGkMax9uyBpAw9cmnnVXX+GROweSYngl2DXjC -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:37 2026 by rpki-client