This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/40tYHzrdIOKM0_j4QKh_7shzx8k.roa File: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (raw, json) Hash identifier: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA= Subject key identifier: E3:4B:58:1F:3A:DD:20:E2:8C:D3:F8:F8:40:A8:7F:EE:C8:73:C7:C9 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019B7DCB6878E1E988A66280389C445CF393 Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/40tYHzrdIOKM0_j4QKh_7shzx8k.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56876 IP address blocks: 94.250.192.0/19 maxlen: 24 176.57.128.0/18 maxlen: 24 185.137.120.0/22 maxlen: 24 193.192.58.0/23 maxlen: 24 2a00:e440::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:68:78:e1:e9:88:a6:62:80:38:9c:44:5c:f3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e34b581f3add20e28cd3f8f840a87feec873c7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:60:72:f4:fd:98:16:9c:cc:61:9b:70:a6: 00:3c:ef:c8:3a:e1:cb:98:38:f9:01:95:8b:a4:3c: db:8f:b4:83:36:ca:9c:9a:7e:d1:73:51:2a:ef:3a: c1:1e:18:a7:ce:ce:40:db:0b:3f:02:f0:fa:07:f7: 7f:46:47:d1:1a:14:9d:68:d1:78:09:32:71:31:c6: 5c:4d:e5:92:9c:31:9d:2a:2d:60:7c:63:ad:df:50: 23:4f:e4:3e:43:1d:c5:67:cd:09:37:29:d5:90:36: 8b:3a:45:d0:69:94:71:04:4f:ac:17:86:35:e2:77: 7e:4a:82:82:73:76:46:b2:b2:d9:d5:4f:f9:2c:17: 05:c0:14:f1:8d:b9:58:79:86:e3:86:23:bb:c9:af: 89:df:1c:db:98:3e:10:2d:13:da:dc:b5:ca:1d:5d: 54:7f:77:00:72:36:be:67:a2:1f:dd:d9:d2:65:11: 48:68:e4:ac:8e:b0:72:ee:aa:e7:5d:08:bf:05:db: 2e:53:6a:0f:1c:5d:17:ef:df:49:64:d1:9d:b7:22: d3:64:db:32:f4:a5:81:1f:a4:d3:59:3d:d8:db:24: ca:fc:61:00:46:84:46:38:5d:7d:83:35:4a:ab:1c: d9:37:87:02:0e:9a:c6:11:24:03:85:34:34:3b:7d: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:58:1F:3A:DD:20:E2:8C:D3:F8:F8:40:A8:7F:EE:C8:73:C7:C9 X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/40tYHzrdIOKM0_j4QKh_7shzx8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.250.192.0/19 176.57.128.0/18 185.137.120.0/22 193.192.58.0/23 IPv6: 2a00:e440::/32 Signature Algorithm: sha256WithRSAEncryption ae:11:81:d2:e5:15:07:96:c8:5f:71:f6:78:22:2d:e0:9e:37: 2b:cc:3a:d0:05:fa:76:d4:7a:86:ae:20:56:90:fa:a6:92:c4: f0:a0:c7:da:04:20:f7:be:f2:58:d7:aa:d3:93:1c:b5:36:85: b0:05:71:0e:f8:04:26:57:16:13:82:e8:39:b0:17:3d:8e:bc: 47:8f:b6:5b:8d:4b:37:43:f7:ab:2e:31:0b:1a:03:08:27:9b: 33:fa:78:85:51:ab:0c:a6:ec:9a:57:75:b4:7e:08:ba:7a:0b: 93:9e:93:2d:8f:3f:ce:d1:d5:18:58:4d:cb:2f:25:0d:8e:e2: 00:be:62:49:98:13:06:4d:ea:91:86:1d:13:9b:6a:0a:bb:74: f2:e7:5a:06:d2:1d:2f:35:10:5c:29:3d:ee:08:06:23:79:82: 2d:b1:a8:a3:e1:10:71:cc:88:d1:30:6b:3e:86:fc:6d:7c:33: 5c:75:bd:9b:e5:51:8c:cb:6c:01:95:3c:74:95:de:4b:d2:dd: 2e:e2:f9:ba:41:67:05:42:ed:f0:ea:22:65:ac:78:03:aa:f4: 27:c3:86:f6:0e:55:e9:6f:b7:6d:3e:89:bb:ad:b8:7c:3b:db: ae:b5:8c:1f:e4:ad:9f:ba:59:3e:f2:1b:f1:73:e7:3a:89:76: 52:50:3a:a6 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9y2h44emIpmKAOJxEXPOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzRiNTgxZjNhZGQyMGUyOGNkM2Y4Zjg0MGE4N2ZlZWM4NzNjN2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYdgcvT9mBaczGGbcKYAPO/IOuHL mDj5AZWLpDzbj7SDNsqcmn7Rc1Eq7zrBHhinzs5A2ws/AvD6B/d/RkfRGhSdaNF4 CTJxMcZcTeWSnDGdKi1gfGOt31AjT+Q+Qx3FZ80JNynVkDaLOkXQaZRxBE+sF4Y1 4nd+SoKCc3ZGsrLZ1U/5LBcFwBTxjblYeYbjhiO7ya+J3xzbmD4QLRPa3LXKHV1U f3cAcja+Z6If3dnSZRFIaOSsjrBy7qrnXQi/BdsuU2oPHF0X799JZNGdtyLTZNsy 9KWBH6TTWT3Y2yTK/GEARoRGOF19gzVKqxzZN4cCDprGESQDhTQ0O31I2wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFONLWB863SDijNP4+ECof+7Ic8fJMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xLzQwdFlIenJkSU9LTTBfajRRS2hfN3Noeng4ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQzLWE4OWY4MTc3NjQw Ni8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAVe+sAD BAawOYADBAK5iXgDBAHBwDowDQQCAAIwBwMFACoA5EAwDQYJKoZIhvcNAQELBQAD ggEBAK4RgdLlFQeWyF9x9ngiLeCeNyvMOtAF+nbUeoauIFaQ+qaSxPCgx9oEIPe+ 8ljXqtOTHLU2hbAFcQ74BCZXFhOC6DmwFz2OvEePtluNSzdD96suMQsaAwgnmzP6 eIVRqwym7JpXdbR+CLp6C5Oeky2PP87R1RhYTcsvJQ2O4gC+YkmYEwZN6pGGHROb agq7dPLnWgbSHS81EFwpPe4IBiN5gi2xqKPhEHHMiNEwaz6G/G18M1x1vZvlUYzL bAGVPHSV3kvS3S7i+bpBZwVC7fDqImWseAOq9CfDhvYOVelvt20+ibutuHw72661 jB/krZ+6WT7yG/Fz5zqJdlJQOqY= -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:49 2026 by rpki-client