This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/622jRVtwPhpwD9-lnyq9_mNkf9c.roa File: 622jRVtwPhpwD9-lnyq9_mNkf9c.roa (raw, json) Hash identifier: VLNc8YNmd0tu2Sp9JmeiUl8K/tZHbshmjGVWO9/Za8Y= Subject key identifier: EB:6D:A3:45:5B:70:3E:1A:70:0F:DF:A5:9F:2A:BD:FE:63:64:7F:D7 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75AFF69442D7BD44C4A857EFDAD8B Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/622jRVtwPhpwD9-lnyq9_mNkf9c.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 194.26.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5a:ff:69:44:2d:7b:d4:4c:4a:85:7e:fd:ad:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb6da3455b703e1a700fdfa59f2abdfe63647fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:c8:eb:e7:e0:e6:76:e6:49:ff:8a:0d:34: df:f7:1b:7b:10:b4:2b:75:1e:4b:f6:db:a5:10:34: 00:ae:e2:35:c6:cf:2f:68:fa:82:61:70:b9:c7:5e: 89:43:fc:82:d7:d7:17:f9:e6:37:fe:8d:2f:2a:16: dd:ce:0b:7c:9d:cf:e0:98:b8:3f:fc:43:bb:79:83: 10:c4:2d:ab:5c:cf:82:9f:d3:c2:0e:76:da:53:3c: ff:81:7a:17:e8:7e:9d:ab:5a:9c:9e:b5:7b:03:ac: ab:c1:b1:9a:cf:c1:29:43:1e:7e:34:7e:0b:a4:2b: 56:b8:0c:ad:76:43:d3:6e:a0:92:04:a4:c2:7c:fe: 55:c4:43:b3:f6:ab:c0:69:c8:e3:7a:10:4c:6f:b3: 5c:16:c5:59:7d:3a:3f:d0:e7:54:2f:c3:44:bf:69: b2:b9:a7:33:61:bf:6b:47:88:da:9b:fa:33:fa:46: d8:4b:04:9f:24:13:0e:4b:cf:c1:a9:9a:95:67:f9: 87:be:77:d9:b8:a4:1e:9b:25:6c:5d:17:bf:0d:b8: cf:1b:4f:0f:78:84:a0:73:e0:cb:67:a1:f6:35:0e: 43:23:30:9d:1d:78:55:5b:a3:6e:4c:c5:e0:fc:4d: 5b:f6:7e:07:ec:10:da:ac:63:be:1d:a1:19:a4:9d: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:A3:45:5B:70:3E:1A:70:0F:DF:A5:9F:2A:BD:FE:63:64:7F:D7 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/622jRVtwPhpwD9-lnyq9_mNkf9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.215.0/24 Signature Algorithm: sha256WithRSAEncryption a7:62:15:f0:77:54:3c:1c:86:02:fb:a4:17:4a:53:7b:c9:bd: a0:bb:88:0e:55:37:e9:e2:09:4d:e8:2b:44:4a:8c:96:a3:79: fa:d5:f5:81:92:2c:e7:e8:3e:0a:d0:0d:25:92:85:4b:a9:b3: db:d2:b8:d7:f8:46:fa:bd:11:76:87:37:fb:7a:f8:ef:fc:29: 8f:5d:fb:e1:68:d0:27:a6:e6:39:65:f1:67:75:0d:c9:b6:f2: 8e:f2:56:2a:d8:0d:29:7d:1b:54:4f:7b:32:c2:8e:8d:44:71: 57:ff:3e:30:1f:b6:4d:e4:0b:3a:fc:34:2f:21:08:90:8f:53: 93:3b:22:e1:c2:f7:82:0a:97:23:a6:fb:b2:ce:c9:61:15:b7: 5c:43:3c:53:8c:74:3a:f1:44:6b:b4:40:a0:bb:49:a9:5c:ce: 73:50:89:d9:3d:29:3f:50:bd:d0:38:fc:a8:be:f0:54:e3:b2: 70:52:fb:fc:73:d6:7a:94:46:4b:90:03:26:1f:00:d5:fd:b8: 93:8a:66:ec:5d:a3:5e:70:34:c0:66:50:25:58:0c:87:6f:56: 5a:80:9f:b3:6e:8a:9c:af:89:d8:92:ed:37:ef:d2:45:68:a1: a0:c9:3c:fc:2a:23:c5:cb:bf:58:64:eb:8a:3e:05:88:75:e7: 89:0c:3b:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1r/aUQte9RMSoV+/a2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjZkYTM0NTViNzAzZTFhNzAwZmRmYTU5ZjJhYmRmZTYzNjQ3ZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs37I6+fg5nbmSf+KDTTf9xt7ELQr dR5L9tulEDQAruI1xs8vaPqCYXC5x16JQ/yC19cX+eY3/o0vKhbdzgt8nc/gmLg/ /EO7eYMQxC2rXM+Cn9PCDnbaUzz/gXoX6H6dq1qcnrV7A6yrwbGaz8EpQx5+NH4L pCtWuAytdkPTbqCSBKTCfP5VxEOz9qvAacjjehBMb7NcFsVZfTo/0OdUL8NEv2my uaczYb9rR4jam/oz+kbYSwSfJBMOS8/BqZqVZ/mHvnfZuKQemyVsXRe/DbjPG08P eISgc+DLZ6H2NQ5DIzCdHXhVW6NuTMXg/E1b9n4H7BDarGO+HaEZpJ1dKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtto0VbcD4acA/fpZ8qvf5jZH/XMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvNjIyalJWdHdQaHB3RDktbG55cTlfbU5rZjljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrXMA0G CSqGSIb3DQEBCwUAA4IBAQCnYhXwd1Q8HIYC+6QXSlN7yb2gu4gOVTfp4glN6CtE SoyWo3n61fWBkizn6D4K0A0lkoVLqbPb0rjX+Eb6vRF2hzf7evjv/CmPXfvhaNAn puY5ZfFndQ3JtvKO8lYq2A0pfRtUT3sywo6NRHFX/z4wH7ZN5As6/DQvIQiQj1OT OyLhwveCCpcjpvuyzslhFbdcQzxTjHQ68URrtECgu0mpXM5zUInZPSk/UL3QOPyo vvBU47JwUvv8c9Z6lEZLkAMmHwDV/biTimbsXaNecDTAZlAlWAyHb1ZagJ+zboqc r4nYku0379JFaKGgyTz8KiPFy79YZOuKPgWIdeeJDDsF -----END CERTIFICATE-----Generated at Sat Jan 3 19:03:36 2026 by rpki-client