This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ip4Ns9I7oRvj2DnjtB5IhTvR3qA.roa File: ip4Ns9I7oRvj2DnjtB5IhTvR3qA.roa (raw, json) Hash identifier: jUzg5BCq1OTl9EH8tjEMEjTmTYQ41l2FuekOWI6X0ss= Subject key identifier: 8A:9E:0D:B3:D2:3B:A1:1B:E3:D8:39:E3:B4:1E:48:85:3B:D1:DE:A0 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EBD98D81AD88E0A3EA5888E7FA927 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ip4Ns9I7oRvj2DnjtB5IhTvR3qA.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 188.255.231.0/24 maxlen: 24 188.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bd:98:d8:1a:d8:8e:0a:3e:a5:88:8e:7f:a9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a9e0db3d23ba11be3d839e3b41e48853bd1dea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:8f:bd:4e:5d:3e:55:4e:e6:2d:5d:21:d5: 34:81:2c:29:4c:ca:4c:85:c1:8e:20:40:0b:62:ea: ce:2a:07:d1:1b:f9:65:3b:d9:f4:2d:aa:d4:7b:ae: f7:d9:36:18:46:30:b3:ae:91:ec:01:c6:a6:5c:1d: eb:3a:b3:ce:85:fc:0f:3d:9c:7f:bd:62:0d:87:17: 19:e1:63:9a:dc:ee:aa:80:e8:d5:e6:d2:98:ea:9c: a2:f4:19:31:d6:dc:12:33:9f:53:43:9a:5e:dd:48: c4:0b:a8:c4:a1:e8:e8:32:e0:f2:5b:e4:62:d2:42: fd:c9:8d:9c:78:00:7e:bb:8f:6b:18:25:44:56:d9: 7d:82:94:90:bc:7c:76:98:34:b4:0e:66:07:ba:36: 69:69:85:32:5c:8e:65:aa:8d:e8:6d:cc:ba:d8:7b: d6:27:99:03:72:11:48:b7:ee:20:d8:da:13:3a:8a: 50:33:36:2d:87:c8:f0:b9:e3:d0:28:d0:60:1e:5c: 11:e7:5e:31:7e:cf:af:4d:4c:93:9d:e7:36:55:b1: 5b:e5:93:c7:5f:91:ca:9a:2a:41:0e:dc:7e:cd:06: c0:f0:20:46:bf:f8:8f:29:0b:35:15:d5:86:fb:c9: 4c:22:8e:da:bb:10:76:dc:fb:b6:6a:9b:9e:2e:6e: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:0D:B3:D2:3B:A1:1B:E3:D8:39:E3:B4:1E:48:85:3B:D1:DE:A0 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ip4Ns9I7oRvj2DnjtB5IhTvR3qA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.231.0/24 188.255.253.0/24 Signature Algorithm: sha256WithRSAEncryption 94:3a:ff:d9:e8:53:56:cc:f0:5d:90:07:15:27:fe:7c:ae:f5: 01:c5:6f:59:af:83:40:02:01:b9:25:0e:6c:3f:71:f2:11:58: 9f:56:09:45:91:bf:1a:eb:82:0a:f7:d2:d8:59:a2:09:0f:1e: 7f:c7:66:7f:41:9d:21:20:01:9d:e7:53:be:90:d9:e9:05:4b: 20:35:c9:97:5a:ba:4b:61:ac:7e:7a:f9:32:c5:61:51:5c:02: 8d:e0:73:e0:48:60:1c:3a:bf:53:95:96:ff:ea:45:87:76:a0: 55:82:f9:93:b8:e2:61:b7:16:da:ec:b7:aa:ed:27:3b:5f:37: a4:13:c1:8a:37:9a:87:58:6c:e5:e4:1b:b3:67:26:c4:61:7a: b4:c1:93:f5:45:48:c2:25:07:af:9b:f2:fb:82:10:66:ed:41: 93:4b:44:86:91:44:a9:f4:1a:32:70:7b:88:41:61:a6:5e:c3: 2c:8e:ac:b3:44:03:13:d5:71:81:95:89:c2:a0:28:fb:42:64: cf:17:ff:a6:5f:a4:c9:2b:b5:b5:55:b3:df:09:60:72:5a:c8: a2:8a:4c:8c:f2:22:4c:ac:a8:e1:cf:a0:43:9e:18:e5:a3:7f: ad:74:2c:40:67:46:ef:45:e5:7b:fa:51:f7:34:34:dc:b6:18: b8:07:29:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fr2Y2BrYjgo+pYiOf6knMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTllMGRiM2QyM2JhMTFiZTNkODM5ZTNiNDFlNDg4NTNiZDFkZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hmPvU5dPlVO5i1dIdU0gSwpTMpM hcGOIEALYurOKgfRG/llO9n0LarUe6732TYYRjCzrpHsAcamXB3rOrPOhfwPPZx/ vWINhxcZ4WOa3O6qgOjV5tKY6pyi9Bkx1twSM59TQ5pe3UjEC6jEoejoMuDyW+Ri 0kL9yY2ceAB+u49rGCVEVtl9gpSQvHx2mDS0DmYHujZpaYUyXI5lqo3obcy62HvW J5kDchFIt+4g2NoTOopQMzYth8jwuePQKNBgHlwR514xfs+vTUyTnec2VbFb5ZPH X5HKmipBDtx+zQbA8CBGv/iPKQs1FdWG+8lMIo7auxB23Pu2apueLm6aNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIqeDbPSO6Eb49g547QeSIU70d6gMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvaXA0TnM5STdvUnZqMkRuanRCNUloVHZSM3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvP/nAwQA vP/9MA0GCSqGSIb3DQEBCwUAA4IBAQCUOv/Z6FNWzPBdkAcVJ/58rvUBxW9Zr4NA AgG5JQ5sP3HyEVifVglFkb8a64IK99LYWaIJDx5/x2Z/QZ0hIAGd51O+kNnpBUsg NcmXWrpLYax+evkyxWFRXAKN4HPgSGAcOr9TlZb/6kWHdqBVgvmTuOJhtxba7Leq 7Sc7XzekE8GKN5qHWGzl5BuzZybEYXq0wZP1RUjCJQevm/L7ghBm7UGTS0SGkUSp 9BoycHuIQWGmXsMsjqyzRAMT1XGBlYnCoCj7QmTPF/+mX6TJK7W1VbPfCWByWsii ikyM8iJMrKjhz6BDnhjlo3+tdCxAZ0bvReV7+lH3NDTcthi4Byls -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:04 2026 by rpki-client