This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/d_KcExhZYwBEheZr9F_y1XHHDJE.roa File: d_KcExhZYwBEheZr9F_y1XHHDJE.roa (raw, json) Hash identifier: X+H5YH26W64tz1M5JmCCPiwEldldQNGg8Zq1TYbtn3k= Subject key identifier: 77:F2:9C:13:18:59:63:00:44:85:E6:6B:F4:5F:F2:D5:71:C7:0C:91 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3606D9CD79167B58F25B534D63E55C Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/d_KcExhZYwBEheZr9F_y1XHHDJE.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51219 IP address blocks: 194.104.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:06:d9:cd:79:16:7b:58:f2:5b:53:4d:63:e5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77f29c13185963004485e66bf45ff2d571c70c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4e:e4:75:aa:08:69:d4:30:80:a4:f0:e8:52: 57:37:d6:6c:e3:5e:3b:4c:ab:aa:c5:81:f3:84:f4: 22:32:40:95:6d:c8:b4:ad:ef:57:b5:47:0c:d1:d9: 57:59:99:8d:e6:84:75:18:a0:62:ae:f4:9b:fa:4a: 6a:78:ee:89:f0:85:07:0d:c4:15:c5:a2:d4:85:7a: 7e:74:39:75:c4:65:d1:28:b2:53:a7:62:c6:df:a1: 74:1e:3f:ee:38:f5:29:e1:c4:47:66:c2:38:74:bc: 35:0b:93:ae:15:cb:dd:63:be:0d:09:d8:1a:97:1f: e3:a0:db:fc:2a:62:96:7b:aa:f1:bd:78:c1:86:7d: 7a:99:58:ce:c6:e0:c7:18:a3:ed:d5:b5:7d:eb:08: b9:b6:cf:87:0c:7d:39:c0:0d:b7:cd:05:0f:28:4e: 00:d1:b3:58:3c:7c:27:ad:0b:1b:86:bb:a9:5b:25: 3a:a9:82:74:8f:77:bb:d1:40:ae:60:e1:fc:96:a6: 00:6f:6c:0b:71:ec:f5:3d:07:e6:c5:29:40:9d:ac: 9e:cf:c5:4b:43:c4:5e:ef:93:9b:f6:9f:63:ac:40: 9f:65:de:ac:66:dd:c6:f6:f3:63:bd:a0:35:ef:13: f8:67:19:0b:af:1a:5c:33:7d:45:1a:d0:86:f9:c0: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F2:9C:13:18:59:63:00:44:85:E6:6B:F4:5F:F2:D5:71:C7:0C:91 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/d_KcExhZYwBEheZr9F_y1XHHDJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.230.0/24 Signature Algorithm: sha256WithRSAEncryption 60:e3:fd:f5:14:bc:b2:13:2f:ae:56:36:01:8c:3c:14:09:f4: a2:f9:d3:94:15:82:f3:65:24:88:d5:57:f3:0f:86:e9:ae:62: 39:b5:ec:fd:77:0c:24:0b:82:b0:f6:46:f8:88:87:61:e3:7b: 3b:7c:56:c7:54:33:a3:ad:ed:b1:2f:0b:5f:78:33:db:ee:1d: c8:dd:bc:3b:24:90:c5:79:ec:51:4f:01:0b:d4:f1:e2:f8:ba: bb:f5:59:fc:2d:be:95:0e:94:e1:21:81:65:d7:63:95:d9:1c: d1:24:e9:39:1c:b1:2e:90:7a:cc:8f:0f:b8:cc:f5:27:03:df: 5e:e4:4d:f8:ab:a2:6e:90:c5:10:3e:95:90:bd:26:72:f3:23: b3:99:79:9c:cb:de:4c:6f:a9:97:75:2a:79:4a:a1:d8:18:65: d0:3f:00:b6:cb:8a:c0:ff:68:40:2a:7d:bf:70:83:10:74:8a: e1:d7:0c:dd:2e:d0:49:9f:ff:d3:fd:0d:c4:cc:ae:7b:e7:66: e1:fc:63:56:b2:88:c7:67:a6:10:07:d3:32:66:78:ed:ed:b7: bd:b0:69:fa:e4:fc:8e:39:93:dd:d3:8a:72:2e:8a:68:6b:67: 58:d0:c0:a6:62:57:5a:a0:33:44:a7:ed:cb:28:13:99:60:cf: ba:76:80:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgbZzXkWe1jyW1NNY+VcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2YyOWMxMzE4NTk2MzAwNDQ4NWU2NmJmNDVmZjJkNTcxYzcwYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U7kdaoIadQwgKTw6FJXN9Zs4147 TKuqxYHzhPQiMkCVbci0re9XtUcM0dlXWZmN5oR1GKBirvSb+kpqeO6J8IUHDcQV xaLUhXp+dDl1xGXRKLJTp2LG36F0Hj/uOPUp4cRHZsI4dLw1C5OuFcvdY74NCdga lx/joNv8KmKWe6rxvXjBhn16mVjOxuDHGKPt1bV96wi5ts+HDH05wA23zQUPKE4A 0bNYPHwnrQsbhrupWyU6qYJ0j3e70UCuYOH8lqYAb2wLcez1PQfmxSlAnayez8VL Q8Re75Ob9p9jrECfZd6sZt3G9vNjvaA17xP4ZxkLrxpcM31FGtCG+cCIswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHfynBMYWWMARIXma/Rf8tVxxwyRMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZF9LY0V4aFpZd0JFaGVacjlGX3kxWEhIREpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjmMA0G CSqGSIb3DQEBCwUAA4IBAQBg4/31FLyyEy+uVjYBjDwUCfSi+dOUFYLzZSSI1Vfz D4bprmI5tez9dwwkC4Kw9kb4iIdh43s7fFbHVDOjre2xLwtfeDPb7h3I3bw7JJDF eexRTwEL1PHi+Lq79Vn8Lb6VDpThIYFl12OV2RzRJOk5HLEukHrMjw+4zPUnA99e 5E34q6JukMUQPpWQvSZy8yOzmXmcy95Mb6mXdSp5SqHYGGXQPwC2y4rA/2hAKn2/ cIMQdIrh1wzdLtBJn//T/Q3EzK5752bh/GNWsojHZ6YQB9MyZnjt7be9sGn65PyO OZPd04pyLopoa2dY0MCmYldaoDNEp+3LKBOZYM+6doD3 -----END CERTIFICATE-----Generated at Thu Jan 15 13:20:11 2026 by rpki-client