This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/inWvhaDWxDVIBch_1xrHeYja-aQ.roa File: inWvhaDWxDVIBch_1xrHeYja-aQ.roa (raw, json) Hash identifier: tfIJJrmDz7NLFdyudnofAgGPOi99Wj/H+HQ1qBvoA+4= Subject key identifier: 8A:75:AF:85:A0:D6:C4:35:48:05:C8:7F:D7:1A:C7:79:88:DA:F9:A4 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C130078FB735F1DFB828EEDD6A66220 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/inWvhaDWxDVIBch_1xrHeYja-aQ.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203104 IP address blocks: 194.209.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:00:78:fb:73:5f:1d:fb:82:8e:ed:d6:a6:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a75af85a0d6c4354805c87fd71ac77988daf9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:d3:52:13:1a:de:d2:3d:20:d6:54:10:2c: 9f:97:35:30:a5:04:17:ac:4b:f2:7d:17:65:10:e2: ef:ae:70:9a:f4:c0:f2:8e:33:d4:9c:95:5f:16:70: 29:c5:7a:97:1f:cb:2b:fa:de:85:75:7f:6a:73:e8: 65:e2:d1:fa:ab:88:c8:30:1a:1a:36:61:ed:b0:9d: 32:a3:aa:42:64:85:82:35:b0:2c:96:9b:6c:2b:6f: 1b:5d:04:94:cf:7f:6b:54:a8:b2:90:35:bf:8c:ce: 79:77:84:7c:50:30:75:f4:46:dc:ca:29:18:05:73: 16:b8:cc:19:d1:8e:f1:bf:68:eb:1a:4c:03:22:de: 6e:fe:07:a9:7c:d3:d1:3c:25:9d:43:0a:7b:80:13: f2:b4:25:ac:76:e7:35:03:1e:3d:74:3d:cc:94:d7: c0:d8:e7:3b:3a:ae:c5:cc:25:cc:20:de:51:46:73: 69:c2:e6:3b:18:41:a0:6a:c5:9e:c5:4b:36:17:59: f9:a3:1d:5f:56:81:3c:bb:fb:a9:4a:47:f3:53:76: e3:74:96:f9:2b:89:ad:dd:ce:3d:ed:68:d7:2c:01: 60:ff:3a:0b:4f:0b:fd:e2:1e:fb:fa:73:de:d0:b3: 7f:41:1f:12:d6:f4:49:60:a4:c3:cd:88:9f:6a:4f: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:75:AF:85:A0:D6:C4:35:48:05:C8:7F:D7:1A:C7:79:88:DA:F9:A4 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/inWvhaDWxDVIBch_1xrHeYja-aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.145.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b1:59:13:51:d9:83:1c:40:bc:a2:63:c4:20:9a:1b:65:91: 71:3a:12:4b:7a:2a:9b:5c:d4:44:02:c2:c1:ac:6f:bd:37:41: fc:23:32:ae:be:64:ed:75:16:53:69:0c:19:60:d9:0d:d0:ff: 8e:3f:6b:0c:f6:6a:94:c0:d8:d6:22:27:a6:01:a0:b9:a6:4c: 51:eb:f8:57:45:fd:b9:3b:00:b2:a1:5a:b9:1e:f9:12:0a:9c: e2:d7:a0:a9:72:7e:93:40:75:20:be:46:67:69:21:1b:7c:18: a5:d7:4c:43:b6:14:2c:18:e2:4c:e3:41:a1:f7:e3:ba:85:46: 35:2a:0c:60:91:22:92:35:23:e6:e7:9f:5a:a5:fc:ac:ab:ac: 50:cd:05:9e:e7:d1:b7:9b:e1:36:3d:3a:bd:64:a7:a8:76:c4: 47:f4:7d:6a:10:b0:6b:d3:9a:3e:cd:3f:df:2f:4e:5e:9a:ae: 7b:83:4f:ea:00:85:c4:70:03:99:ba:d0:d6:fe:04:9a:52:55: 31:53:c2:6b:72:80:34:59:b7:1a:64:88:64:65:4e:b9:90:01: d3:25:66:15:f9:5e:f5:7b:d0:06:b7:f0:96:56:c1:e4:cc:96: ca:1c:08:00:d9:a3:24:c0:3b:83:7f:69:2e:3b:e4:b8:8c:ba: 4e:45:d5:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwB4+3NfHfuCju3WpmIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTc1YWY4NWEwZDZjNDM1NDgwNWM4N2ZkNzFhYzc3OTg4ZGFmOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTzTUhMa3tI9INZUECyflzUwpQQX rEvyfRdlEOLvrnCa9MDyjjPUnJVfFnApxXqXH8sr+t6FdX9qc+hl4tH6q4jIMBoa NmHtsJ0yo6pCZIWCNbAslptsK28bXQSUz39rVKiykDW/jM55d4R8UDB19EbcyikY BXMWuMwZ0Y7xv2jrGkwDIt5u/gepfNPRPCWdQwp7gBPytCWsduc1Ax49dD3MlNfA 2Oc7Oq7FzCXMIN5RRnNpwuY7GEGgasWexUs2F1n5ox1fVoE8u/upSkfzU3bjdJb5 K4mt3c497WjXLAFg/zoLTwv94h77+nPe0LN/QR8S1vRJYKTDzYifak8fwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIp1r4Wg1sQ1SAXIf9cax3mI2vmkMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvaW5XdmhhRFd4RFZJQmNoXzF4ckhlWWphLWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGRMA0G CSqGSIb3DQEBCwUAA4IBAQAasVkTUdmDHEC8omPEIJobZZFxOhJLeiqbXNREAsLB rG+9N0H8IzKuvmTtdRZTaQwZYNkN0P+OP2sM9mqUwNjWIiemAaC5pkxR6/hXRf25 OwCyoVq5HvkSCpzi16Cpcn6TQHUgvkZnaSEbfBil10xDthQsGOJM40Gh9+O6hUY1 KgxgkSKSNSPm559apfysq6xQzQWe59G3m+E2PTq9ZKeodsRH9H1qELBr05o+zT/f L05emq57g0/qAIXEcAOZutDW/gSaUlUxU8JrcoA0WbcaZIhkZU65kAHTJWYV+V71 e9AGt/CWVsHkzJbKHAgA2aMkwDuDf2kuO+S4jLpORdUx -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:39 2026 by rpki-client