This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/shGMn79T12TdRlURIHvHiITUS0A.roa File: shGMn79T12TdRlURIHvHiITUS0A.roa (raw, json) Hash identifier: NuMr9uMFhQx1Qy5eTLJiQCpMUuGd9GhII06yfTjA/2E= Subject key identifier: B2:11:8C:9F:BF:53:D7:64:DD:46:55:11:20:7B:C7:88:84:D4:4B:40 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1305265C4173B4C733D9AD5D662228 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/shGMn79T12TdRlURIHvHiITUS0A.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206466 IP address blocks: 194.6.170.0/24 maxlen: 24 194.6.173.0/24 maxlen: 24 194.209.31.0/24 maxlen: 24 194.209.199.0/24 maxlen: 24 195.65.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:05:26:5c:41:73:b4:c7:33:d9:ad:5d:66:22:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2118c9fbf53d764dd465511207bc78884d44b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:94:9f:9b:b5:2d:8d:15:fa:9f:f4:88:ee:7a: b9:e7:8e:85:1f:32:7c:10:9b:e7:cf:4b:03:67:a3: 9d:f0:dc:f1:5a:0f:ae:33:11:4e:b0:a1:2d:85:a5: f0:ed:37:56:13:67:81:39:18:f3:e2:07:8d:54:e9: 74:04:08:f0:09:03:9c:89:50:33:d7:c0:c3:cb:00: b9:7c:d4:c1:c9:2b:c5:ee:0e:19:35:d8:c8:60:ee: a7:66:60:d6:65:1e:8e:1c:fd:f1:4e:b4:4e:28:56: 85:19:c1:e8:e6:1d:0e:a0:f4:7c:96:b5:52:42:09: 06:ff:17:7f:25:5d:9d:47:11:36:cd:6f:6e:69:18: 8c:86:e6:ab:4f:d3:8b:fb:0b:a6:61:26:63:37:6a: eb:fa:06:22:46:e3:22:36:d8:a6:76:91:c8:2e:5b: c8:63:80:ff:08:1f:6a:36:b6:22:65:26:54:79:de: 50:4e:06:eb:b8:9a:5b:1a:f9:b9:43:69:7b:6d:f8: 70:05:4b:7e:ac:1b:62:c8:fe:ba:c0:88:14:df:df: 5f:f8:fb:17:1c:82:e9:f2:85:09:86:42:35:18:0c: 5f:aa:f8:9d:9d:1f:26:98:ca:7a:30:f1:3c:b7:af: bb:db:2f:b9:af:ca:6e:83:3c:9f:cc:f8:66:2f:ff: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:8C:9F:BF:53:D7:64:DD:46:55:11:20:7B:C7:88:84:D4:4B:40 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/shGMn79T12TdRlURIHvHiITUS0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.170.0/24 194.6.173.0/24 194.209.31.0/24 194.209.199.0/24 195.65.142.0/24 Signature Algorithm: sha256WithRSAEncryption 95:a7:2c:0c:06:bf:30:d5:b9:49:0d:85:52:5b:7e:8a:2d:c2: 8a:47:b5:c2:83:bf:df:3e:70:6b:8b:42:25:1c:38:ef:9c:b5: b1:25:3c:76:8e:7f:30:bf:5f:f4:a3:f1:7f:2d:4e:8a:94:7b: f5:51:89:ac:1f:f5:06:54:9c:1e:03:1b:7a:7c:58:6f:7f:b8: 7c:07:3a:3f:3a:85:2c:01:15:68:b1:d0:ab:72:c8:cf:e0:df: 51:9d:62:5f:59:e5:a1:7c:6b:fb:98:59:a0:b6:40:d6:00:df: a5:6e:8b:4c:e5:e6:f5:b8:be:44:b4:65:e4:f8:a9:e8:5d:16: 7c:8f:d4:c3:17:e1:17:89:6f:14:2c:a8:3b:4a:dc:30:66:b2: 5a:61:af:18:7b:11:80:63:01:4d:fe:29:a6:a0:d8:ad:05:0f: d6:8a:06:b5:eb:09:0d:44:ce:37:11:fc:7c:b1:76:8f:35:df: cb:c8:e4:d2:60:82:e9:c2:a0:54:46:83:5c:17:f4:a7:5f:ec: 79:9e:42:d6:21:99:4a:20:7c:08:78:fd:35:38:a8:62:61:63: 71:0b:9b:f9:e4:9b:a3:d8:23:6e:46:72:b0:d9:89:cb:e9:69: b6:a0:62:f8:91:ad:9e:7b:60:bb:e9:a0:ea:36:7f:9e:c6:ae: 0a:6f:bd:2a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8EwUmXEFztMcz2a1dZiIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjExOGM5ZmJmNTNkNzY0ZGQ0NjU1MTEyMDdiYzc4ODg0ZDQ0YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpSfm7UtjRX6n/SI7nq5546FHzJ8 EJvnz0sDZ6Od8NzxWg+uMxFOsKEthaXw7TdWE2eBORjz4geNVOl0BAjwCQOciVAz 18DDywC5fNTBySvF7g4ZNdjIYO6nZmDWZR6OHP3xTrROKFaFGcHo5h0OoPR8lrVS QgkG/xd/JV2dRxE2zW9uaRiMhuarT9OL+wumYSZjN2rr+gYiRuMiNtimdpHILlvI Y4D/CB9qNrYiZSZUed5QTgbruJpbGvm5Q2l7bfhwBUt+rBtiyP66wIgU399f+PsX HILp8oUJhkI1GAxfqvidnR8mmMp6MPE8t6+72y+5r8pugzyfzPhmL//pMQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLIRjJ+/U9dk3UZVESB7x4iE1EtAMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvc2hHTW43OVQxMlRkUmxVUklIdkhpSVRVUzBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwgaqAwQA wgatAwQAwtEfAwQAwtHHAwQAw0GOMA0GCSqGSIb3DQEBCwUAA4IBAQCVpywMBr8w 1blJDYVSW36KLcKKR7XCg7/fPnBri0IlHDjvnLWxJTx2jn8wv1/0o/F/LU6KlHv1 UYmsH/UGVJweAxt6fFhvf7h8Bzo/OoUsARVosdCrcsjP4N9RnWJfWeWhfGv7mFmg tkDWAN+lbotM5eb1uL5EtGXk+KnoXRZ8j9TDF+EXiW8ULKg7StwwZrJaYa8YexGA YwFN/immoNitBQ/Wiga16wkNRM43Efx8sXaPNd/LyOTSYILpwqBURoNcF/SnX+x5 nkLWIZlKIHwIeP01OKhiYWNxC5v55Juj2CNuRnKw2YnL6Wm2oGL4ka2ee2C76aDq Nn+exq4Kb70q -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:22 2026 by rpki-client