This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_eaQ02T6ijwnlI3__aEmcZWsdt4.roa File: _eaQ02T6ijwnlI3__aEmcZWsdt4.roa (raw, json) Hash identifier: 4KKWVz/Vn3eE/EcqKDCvp7UlgbDwvge6wfZauMe7278= Subject key identifier: FD:E6:90:D3:64:FA:8A:3C:27:94:8D:FF:FD:A1:26:71:95:AC:76:DE Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EC74D99470941B59FCC39C1ADF36A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_eaQ02T6ijwnlI3__aEmcZWsdt4.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47479 IP address blocks: 194.28.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c7:4d:99:47:09:41:b5:9f:cc:39:c1:ad:f3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fde690d364fa8a3c27948dfffda1267195ac76de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:17:f0:11:5e:37:3f:94:1b:ad:bc:28:42: 2d:24:b4:fe:ff:a1:88:e0:98:e8:04:f0:2c:4c:53: ea:85:07:d8:f7:fd:23:cd:61:a9:40:d2:b0:74:7d: fe:60:b8:3e:21:10:ed:7b:3d:1c:58:b0:53:71:14: cb:19:56:17:68:48:2a:59:9e:c2:fb:8b:91:37:c7: 15:83:79:39:60:55:da:3c:ed:b8:70:7d:32:7d:dd: c4:52:35:1e:ef:83:3f:82:1e:3b:7f:dc:91:4b:15: af:7b:79:10:ab:79:3e:8a:61:d6:fb:ae:d2:fa:4c: 72:e4:09:cd:23:8e:69:90:24:33:96:d6:53:a7:0b: c9:42:4c:65:c1:03:88:f9:0a:ee:f3:9d:39:15:a5: 1b:ef:95:39:14:54:d9:a2:7e:0c:b0:62:a4:52:70: 08:95:b9:29:b4:af:64:4c:e8:53:ad:33:69:d6:f8: 87:db:83:88:4a:bb:a7:61:1c:29:23:d0:04:14:96: 4e:8e:f5:02:6c:e7:50:fa:24:e5:26:0d:35:81:77: 98:b8:43:08:53:a4:d9:0c:c5:96:f8:08:a2:5b:54: d0:1e:34:d1:b0:e4:82:4c:80:d6:86:6f:8f:1f:3f: 4c:60:c1:94:f7:16:85:eb:20:32:6d:06:b9:46:6f: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E6:90:D3:64:FA:8A:3C:27:94:8D:FF:FD:A1:26:71:95:AC:76:DE X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/_eaQ02T6ijwnlI3__aEmcZWsdt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.128.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b8:40:ff:ab:e1:60:a7:4c:a9:92:9f:60:dc:43:39:62:43: 65:c5:62:38:24:a7:44:7a:73:1c:00:56:09:da:73:3d:94:5d: 8d:65:80:ed:cf:78:b9:a3:46:69:b6:3c:09:64:72:5b:99:9b: 70:d7:28:54:a2:ef:d2:0d:ac:cf:65:86:f4:30:3d:4d:f1:91: 6b:b7:18:5e:a7:2a:06:88:d3:52:21:fd:52:40:90:15:37:75: fd:93:2e:bc:fe:aa:79:7a:f9:38:d1:a5:01:c4:3e:23:d3:b9: 2e:ed:9f:ef:44:5f:74:76:a8:8f:5f:2a:8b:d3:0e:ef:65:da: 3b:3c:8f:cd:e6:59:19:a4:46:4c:f7:6b:ee:65:85:4a:04:7b: 0a:11:f8:a9:41:15:dd:26:1f:1c:e6:ab:2b:f8:ea:36:99:13: 2f:a8:15:41:c3:e1:a0:d2:3f:e6:24:b9:df:ce:f4:ae:f8:4e: 85:22:49:c5:80:1c:68:b3:d2:48:05:10:d5:cd:eb:43:44:75: de:f0:b1:e6:ad:5a:b5:49:e7:5e:2a:7f:63:05:0f:89:66:3b: cc:70:20:7e:9e:77:39:19:af:54:ba:80:81:5e:ab:db:b7:38: d9:60:2d:72:c9:78:ed:b5:c8:f7:8b:96:e2:c1:5a:4c:26:3c: fd:f0:3a:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsdNmUcJQbWfzDnBrfNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGU2OTBkMzY0ZmE4YTNjMjc5NDhkZmZmZGExMjY3MTk1YWM3NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vIX8BFeNz+UG628KEItJLT+/6GI 4JjoBPAsTFPqhQfY9/0jzWGpQNKwdH3+YLg+IRDtez0cWLBTcRTLGVYXaEgqWZ7C +4uRN8cVg3k5YFXaPO24cH0yfd3EUjUe74M/gh47f9yRSxWve3kQq3k+imHW+67S +kxy5AnNI45pkCQzltZTpwvJQkxlwQOI+Qru8505FaUb75U5FFTZon4MsGKkUnAI lbkptK9kTOhTrTNp1viH24OISrunYRwpI9AEFJZOjvUCbOdQ+iTlJg01gXeYuEMI U6TZDMWW+AiiW1TQHjTRsOSCTIDWhm+PHz9MYMGU9xaF6yAybQa5Rm9R2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3mkNNk+oo8J5SN//2hJnGVrHbeMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvX2VhUTAyVDZpandubEkzX19hRW1jWldzZHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhyAMA0G CSqGSIb3DQEBCwUAA4IBAQBruED/q+Fgp0ypkp9g3EM5YkNlxWI4JKdEenMcAFYJ 2nM9lF2NZYDtz3i5o0ZptjwJZHJbmZtw1yhUou/SDazPZYb0MD1N8ZFrtxhepyoG iNNSIf1SQJAVN3X9ky68/qp5evk40aUBxD4j07ku7Z/vRF90dqiPXyqL0w7vZdo7 PI/N5lkZpEZM92vuZYVKBHsKEfipQRXdJh8c5qsr+Oo2mRMvqBVBw+Gg0j/mJLnf zvSu+E6FIknFgBxos9JIBRDVzetDRHXe8LHmrVq1SedeKn9jBQ+JZjvMcCB+nnc5 Ga9UuoCBXqvbtzjZYC1yyXjttcj3i5biwVpMJjz98DrO -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:02 2026 by rpki-client