This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/aROMX3nhLZqryNRJXwP1ZsS073k.roa File: aROMX3nhLZqryNRJXwP1ZsS073k.roa (raw, json) Hash identifier: g+wD5MW4jZTbZvYAo4VBlWyrm2dqeMZiBJUsm2vjVD8= Subject key identifier: 69:13:8C:5F:79:E1:2D:9A:AB:C8:D4:49:5F:03:F5:66:C4:B4:EF:79 Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c Certificate serial: 019B7CED8169919A427E99CB546751BCD245 Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/aROMX3nhLZqryNRJXwP1ZsS073k.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12409 IP address blocks: 212.94.192.0/19 maxlen: 19 2a0a:fc80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:81:69:91:9a:42:7e:99:cb:54:67:51:bc:d2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69138c5f79e12d9aabc8d4495f03f566c4b4ef79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:f8:1c:ff:ec:47:b8:6f:96:15:4d:bc:94: bb:65:32:d2:3e:41:d0:5a:3d:a6:5e:b1:62:6d:40: 26:bb:66:be:92:a9:85:52:7c:bb:78:1b:7e:ca:f6: 1e:d0:21:88:69:fb:81:c3:e6:af:91:b8:00:f5:b2: fc:9b:0c:73:0b:d1:56:ed:b8:f3:23:2d:79:44:ca: 26:e1:8a:7b:b2:71:8a:c1:6c:27:b5:5e:cf:4c:dd: 75:1a:24:aa:86:ab:12:b7:ff:e4:1d:40:bf:a9:c9: 59:18:1f:43:63:98:6e:b2:a4:ad:3e:ed:10:b0:1d: f3:2f:a1:c9:42:90:01:80:1f:28:22:01:55:d0:89: 5b:71:4d:28:a6:63:56:f1:ac:a1:61:5b:64:f2:f2: c9:8c:a7:94:88:28:05:60:54:82:39:91:6f:fd:f0: c7:2f:1e:d5:66:4b:aa:44:9f:26:d6:19:b0:81:a6: 76:4c:1b:48:e9:17:cc:9a:b8:7c:3d:b5:7f:62:5a: 53:b0:e1:a0:61:0c:46:c9:03:39:14:42:92:ec:25: 05:f6:c5:d0:54:1f:f2:88:a7:9b:a3:d8:a3:9f:16: 05:d2:bb:e8:06:d9:3e:25:30:53:59:93:8b:d2:04: a8:9b:4c:99:c7:2e:54:d3:4a:ee:3b:98:75:86:7d: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:13:8C:5F:79:E1:2D:9A:AB:C8:D4:49:5F:03:F5:66:C4:B4:EF:79 X509v3 Authority Key Identifier: keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/aROMX3nhLZqryNRJXwP1ZsS073k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.94.192.0/19 IPv6: 2a0a:fc80::/32 Signature Algorithm: sha256WithRSAEncryption 31:43:a0:72:85:bc:0f:8a:dc:b9:9b:53:f7:6a:ca:37:22:f7: 52:76:1a:6a:42:85:99:0d:50:a0:04:c8:9a:f0:e3:97:39:38: 61:62:c7:f5:47:92:ff:88:fe:16:2c:3e:2e:0a:74:ca:30:69: 90:ea:f0:75:41:13:ad:2f:88:03:2e:d2:85:f7:46:f1:c7:00: f9:b0:06:fe:9c:a6:1c:76:ad:7e:a5:a8:a8:fa:cf:a8:64:eb: ec:1d:e9:75:5c:0a:5d:ab:d6:5d:d2:c6:d2:4f:0c:dd:01:87: 17:01:32:25:88:c9:89:62:ff:ec:66:0c:52:de:a7:f4:a3:89: 18:f5:72:87:04:2d:55:aa:d0:4a:03:df:67:3a:5c:b9:32:1f: 09:c6:b5:d5:f8:f7:63:44:49:c3:54:e1:aa:38:af:ee:8b:5d: 11:7d:90:c6:72:85:81:51:a3:bb:91:36:d5:5b:9b:81:8b:25: a2:92:06:b5:c0:37:4f:86:0a:e1:b8:28:8c:8b:d9:d3:9d:13: 28:90:f0:a6:4f:e2:2d:f5:2e:15:d5:bb:de:59:04:de:c8:34: 48:d9:a2:bd:14:fd:4a:ad:13:f3:b9:c1:51:21:2a:40:b0:f9: de:0b:10:3f:79:a3:09:60:4a:10:e8:fe:e4:83:4a:8d:c6:ae: 23:af:68:8d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87YFpkZpCfpnLVGdRvNJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDBmYzgyNTkwNzVjZDY3NWYzMTlkN2FmNGZhNzEzMDQ4 YTUxNWMwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTEzOGM1Zjc5ZTEyZDlhYWJjOGQ0NDk1ZjAzZjU2NmM0YjRlZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY74HP/sR7hvlhVNvJS7ZTLSPkHQ Wj2mXrFibUAmu2a+kqmFUny7eBt+yvYe0CGIafuBw+avkbgA9bL8mwxzC9FW7bjz Iy15RMom4Yp7snGKwWwntV7PTN11GiSqhqsSt//kHUC/qclZGB9DY5husqStPu0Q sB3zL6HJQpABgB8oIgFV0IlbcU0opmNW8ayhYVtk8vLJjKeUiCgFYFSCOZFv/fDH Lx7VZkuqRJ8m1hmwgaZ2TBtI6RfMmrh8PbV/YlpTsOGgYQxGyQM5FEKS7CUF9sXQ VB/yiKebo9ijnxYF0rvoBtk+JTBTWZOL0gSom0yZxy5U00ruO5h1hn3htwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGkTjF954S2aq8jUSV8D9WbEtO95MB8GA1UdIwQY MBaAFMjQ/IJZB1zWdfMZ169PpxMEilFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3Mjgt N2EyZmQxMDI2OWJlLzEvYVJPTVgzbmhMWnFyeU5SSlh3UDFac1MwNzNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80NWM4NjItOWUzMy00NWM4LWE3MjgtN2EyZmQxMDI2OWJl LzEveU5EOGdsa0hYTloxOHhuWHIwLW5Fd1NLVVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1F7AMA0E AgACMAcDBQAqCvyAMA0GCSqGSIb3DQEBCwUAA4IBAQAxQ6ByhbwPity5m1P3aso3 IvdSdhpqQoWZDVCgBMia8OOXOThhYsf1R5L/iP4WLD4uCnTKMGmQ6vB1QROtL4gD LtKF90bxxwD5sAb+nKYcdq1+paio+s+oZOvsHel1XApdq9Zd0sbSTwzdAYcXATIl iMmJYv/sZgxS3qf0o4kY9XKHBC1VqtBKA99nOly5Mh8JxrXV+PdjREnDVOGqOK/u i10RfZDGcoWBUaO7kTbVW5uBiyWikga1wDdPhgrhuCiMi9nTnRMokPCmT+It9S4V 1bveWQTeyDRI2aK9FP1KrRPzucFRISpAsPneCxA/eaMJYEoQ6P7kg0qNxq4jr2iN -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:21 2026 by rpki-client