This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iOPUnNi9vJoqljLnZg4ePc_db44.roa File: iOPUnNi9vJoqljLnZg4ePc_db44.roa (raw, json) Hash identifier: VDjDQIRCtUhow6RjTpPkitHhNEVHVHUw71nqWGX0jfE= Subject key identifier: 88:E3:D4:9C:D8:BD:BC:9A:2A:96:32:E7:66:0E:1E:3D:CF:DD:6F:8E Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12E930FF9A9CCC04044F21967B81CA Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iOPUnNi9vJoqljLnZg4ePc_db44.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12368 IP address blocks: 194.209.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e9:30:ff:9a:9c:cc:04:04:4f:21:96:7b:81:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e3d49cd8bdbc9a2a9632e7660e1e3dcfdd6f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:3d:fd:0b:c1:3f:d4:f1:a3:41:30:35:20: 40:e8:8f:90:4e:c3:57:9c:8a:2f:26:63:52:58:cd: 32:0b:95:3c:ec:51:2e:d4:d9:70:de:09:9a:79:63: e3:fa:3e:a4:b5:48:f6:10:2c:c0:ec:a3:23:67:ee: fd:d8:61:11:51:02:7a:27:87:5b:52:ec:87:e9:5e: 70:93:2b:47:53:ca:d1:a6:ed:06:34:31:19:ed:98: 8d:5a:d0:e3:40:9f:e7:57:e1:12:58:bf:65:68:1d: a6:3b:37:ad:80:d6:7e:60:4a:76:ba:dc:ae:bd:c4: 35:7a:ef:3b:d7:5c:d8:0c:53:7d:18:a6:80:52:68: 5a:36:e6:fe:65:4e:77:74:dc:70:eb:4e:98:4c:b9: ba:8f:5f:06:25:76:c3:e0:89:32:08:0a:fa:63:4f: 7a:51:e4:a3:9e:8c:a2:0c:1e:5b:43:bd:c2:b4:16: b3:37:b9:da:3f:6c:e7:e0:e7:83:fb:ef:0f:ad:65: da:9b:19:8a:00:d0:16:8e:c7:53:f4:1e:ea:4e:16: 2e:f5:78:63:56:bb:74:0f:60:8d:d1:bc:c6:15:70: 13:28:5c:d5:9b:79:eb:a5:b2:23:74:30:78:82:12: 41:9d:50:8f:a4:db:ad:c2:af:e0:21:4c:5a:07:c8: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:D4:9C:D8:BD:BC:9A:2A:96:32:E7:66:0E:1E:3D:CF:DD:6F:8E X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iOPUnNi9vJoqljLnZg4ePc_db44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.83.0/24 Signature Algorithm: sha256WithRSAEncryption bb:93:c2:46:71:d6:ee:42:53:ae:e1:64:72:77:ef:b1:d9:7d: ee:de:c9:ed:32:3c:eb:32:79:10:e1:5f:f7:1f:d4:67:ca:d6: 73:73:de:28:f3:86:e5:74:4a:c4:f8:00:1f:72:3d:46:bf:c2: ec:74:7a:c6:ea:f9:a5:ef:55:65:3b:d0:88:bb:22:37:b0:c4: e4:78:25:5b:27:cd:c1:29:6e:9d:19:82:74:d6:df:cf:1b:ab: a1:c3:68:48:24:23:ad:ca:af:78:09:00:70:0c:42:95:6d:73: 93:0b:d8:6f:0f:b4:0a:bf:6e:c3:3e:91:7d:da:e9:7e:39:e6: 95:2c:3e:e0:e8:66:64:8c:29:48:d4:d6:9c:40:6b:a1:8c:52: 05:fb:8d:0b:36:df:95:e9:11:a0:da:7a:ff:10:6d:7a:9c:41: ff:f8:18:f3:37:4c:a9:d1:04:8c:71:52:4c:95:3c:d8:8a:43: 28:1d:2e:2a:92:f6:87:b0:9e:90:37:16:63:1e:18:8a:ac:0e: d8:27:09:3c:c4:a8:88:ec:b1:64:d9:78:8c:3e:4c:eb:2f:f1: 32:b0:6e:6f:a4:f2:91:c5:d5:89:8c:b6:b3:03:1b:6d:1d:9a: a3:ec:0f:ea:b8:82:84:5e:ea:26:2c:02:e8:ca:de:db:da:08: 3e:c6:93:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eukw/5qczAQETyGWe4HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGUzZDQ5Y2Q4YmRiYzlhMmE5NjMyZTc2NjBlMWUzZGNmZGQ2ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB89/QvBP9Txo0EwNSBA6I+QTsNX nIovJmNSWM0yC5U87FEu1Nlw3gmaeWPj+j6ktUj2ECzA7KMjZ+792GERUQJ6J4db UuyH6V5wkytHU8rRpu0GNDEZ7ZiNWtDjQJ/nV+ESWL9laB2mOzetgNZ+YEp2utyu vcQ1eu8711zYDFN9GKaAUmhaNub+ZU53dNxw606YTLm6j18GJXbD4IkyCAr6Y096 UeSjnoyiDB5bQ73CtBazN7naP2zn4OeD++8PrWXamxmKANAWjsdT9B7qThYu9Xhj Vrt0D2CN0bzGFXATKFzVm3nrpbIjdDB4ghJBnVCPpNutwq/gIUxaB8hwNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjj1JzYvbyaKpYy52YOHj3P3W+OMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvaU9QVW5OaTl2Sm9xbGpMblpnNGVQY19kYjQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFTMA0G CSqGSIb3DQEBCwUAA4IBAQC7k8JGcdbuQlOu4WRyd++x2X3u3sntMjzrMnkQ4V/3 H9RnytZzc94o84bldErE+AAfcj1Gv8LsdHrG6vml71VlO9CIuyI3sMTkeCVbJ83B KW6dGYJ01t/PG6uhw2hIJCOtyq94CQBwDEKVbXOTC9hvD7QKv27DPpF92ul+OeaV LD7g6GZkjClI1NacQGuhjFIF+40LNt+V6RGg2nr/EG16nEH/+BjzN0yp0QSMcVJM lTzYikMoHS4qkvaHsJ6QNxZjHhiKrA7YJwk8xKiI7LFk2XiMPkzrL/EysG5vpPKR xdWJjLazAxttHZqj7A/quIKEXuomLALoyt7b2gg+xpO5 -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:25 2026 by rpki-client