This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa File: ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa (raw, json) Hash identifier: 4ukNbla1Rh/IrJg9w1Y8a9K5puzNuFrwpCnA9N5ug2I= Subject key identifier: 8B:19:47:36:ED:BF:9A:7C:C0:24:11:AC:E3:68:0C:64:E5:D5:4B:E4 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA26945D42937C82DEF2CD4D49CB43 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47447 IP address blocks: 194.124.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:26:94:5d:42:93:7c:82:de:f2:cd:4d:49:cb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b194736edbf9a7cc02411ace3680c64e5d54be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:f3:95:1d:4c:94:9b:59:a2:ec:d9:13:0c: ae:ba:0c:b7:11:35:76:c6:38:e1:b1:29:8f:6c:2e: 93:70:c3:9c:b0:36:5a:77:04:0c:90:15:a6:ee:0c: 93:e9:e2:92:bf:b8:4d:36:45:6e:03:27:fc:05:6f: 1d:79:cd:36:57:e6:17:de:31:41:ca:b4:01:5c:82: 9d:fe:34:5d:45:43:15:36:f3:08:de:2d:7a:80:ef: 46:47:41:77:62:37:e0:17:44:da:8a:54:9c:b8:71: 13:9d:56:c6:58:9c:15:d3:8e:97:81:32:11:cd:ec: 2a:e0:bb:1d:b8:25:f4:e0:38:b7:53:c0:a9:8a:77: 73:6f:96:2e:2f:5c:80:8a:db:a5:31:43:80:66:e4: 45:6c:51:7a:46:54:f8:e1:e4:85:4b:1d:b3:42:40: 44:e7:ec:93:eb:24:41:f5:02:28:0a:a9:3c:23:49: 6e:e6:5c:34:2b:e7:7e:78:d3:75:73:80:c1:00:a5: 87:66:9a:47:93:c8:b2:6d:f4:ac:c2:b7:e9:cc:86: 67:27:6e:6c:e6:9a:be:d7:14:94:4e:dd:20:ee:d7: 39:c2:84:32:df:ec:78:4b:b9:bb:ab:43:00:7b:51: 92:ae:be:b2:9f:f0:f0:2b:99:c5:77:67:88:9e:2d: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:47:36:ED:BF:9A:7C:C0:24:11:AC:E3:68:0C:64:E5:D5:4B:E4 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ixlHNu2_mnzAJBGs42gMZOXVS-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.40.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:41:fd:33:f8:4f:b8:9c:0b:a3:aa:51:c2:34:41:d2:46:aa: 4f:8c:67:fc:ca:32:d7:7b:c0:34:2d:74:f5:61:fa:7b:d7:a3: 8e:29:db:6a:15:99:19:74:95:41:bf:4c:4d:f4:f7:1e:f0:87: a8:ed:8c:2f:f4:9f:2e:33:b9:61:59:c8:a3:5c:57:c7:a5:ad: d7:61:cb:75:f2:9e:62:e2:cf:8a:ca:c3:41:87:70:3a:df:78: 0a:30:bf:32:3d:0a:c7:a2:65:a1:89:2d:6e:f0:f7:e8:5b:0f: 1d:69:85:58:b3:41:22:a6:fa:1d:5f:3c:f7:85:60:c4:63:66: 9b:2d:86:f1:ff:98:71:fa:b1:7e:02:b3:f1:21:43:c7:4b:a3: 17:3f:76:3d:89:e8:00:00:72:be:66:a2:fb:f4:aa:1b:9a:13: 6e:1d:cf:8f:67:37:82:b3:af:e0:42:fc:f4:62:76:c6:24:44: 7a:78:ca:ed:fc:23:42:f5:e2:77:f2:69:2c:40:a3:49:3d:8b: 76:7f:4a:1e:fd:a2:ea:97:4f:52:2c:47:db:10:d0:88:1c:12: bd:64:33:8e:98:d9:4b:72:4f:0d:d4:b9:4f:eb:30:0c:69:82: d0:84:e9:cd:b6:61:fb:ae:93:e5:bc:a1:5a:90:d0:63:97:0d: f4:e5:e7:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yiaUXUKTfILe8s1NSctDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjE5NDczNmVkYmY5YTdjYzAyNDExYWNlMzY4MGM2NGU1ZDU0YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3/zlR1MlJtZouzZEwyuugy3ETV2 xjjhsSmPbC6TcMOcsDZadwQMkBWm7gyT6eKSv7hNNkVuAyf8BW8dec02V+YX3jFB yrQBXIKd/jRdRUMVNvMI3i16gO9GR0F3YjfgF0TailScuHETnVbGWJwV046XgTIR zewq4LsduCX04Di3U8Cpindzb5YuL1yAitulMUOAZuRFbFF6RlT44eSFSx2zQkBE 5+yT6yRB9QIoCqk8I0lu5lw0K+d+eNN1c4DBAKWHZppHk8iybfSswrfpzIZnJ25s 5pq+1xSUTt0g7tc5woQy3+x4S7m7q0MAe1GSrr6yn/DwK5nFd2eIni3KswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsZRzbtv5p8wCQRrONoDGTl1UvkMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvaXhsSE51Ml9tbnpBSkJHczQyZ01aT1hWUy1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnwoMA0G CSqGSIb3DQEBCwUAA4IBAQArQf0z+E+4nAujqlHCNEHSRqpPjGf8yjLXe8A0LXT1 Yfp716OOKdtqFZkZdJVBv0xN9Pce8Ieo7Ywv9J8uM7lhWcijXFfHpa3XYct18p5i 4s+KysNBh3A633gKML8yPQrHomWhiS1u8PfoWw8daYVYs0EipvodXzz3hWDEY2ab LYbx/5hx+rF+ArPxIUPHS6MXP3Y9iegAAHK+ZqL79KobmhNuHc+PZzeCs6/gQvz0 YnbGJER6eMrt/CNC9eJ38mksQKNJPYt2f0oe/aLql09SLEfbENCIHBK9ZDOOmNlL ck8N1LlP6zAMaYLQhOnNtmH7rpPlvKFakNBjlw305edH -----END CERTIFICATE-----Generated at Mon Jan 19 21:25:53 2026 by rpki-client