This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/d6m94tH0anOa-FWzt96zJw4rWqM.roa File: d6m94tH0anOa-FWzt96zJw4rWqM.roa (raw, json) Hash identifier: VXa480FkV+R92FQTcYLaqarEcGnxznUTZLh1NwOBPhA= Subject key identifier: 77:A9:BD:E2:D1:F4:6A:73:9A:F8:55:B3:B7:DE:B3:27:0E:2B:5A:A3 Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed Certificate serial: 019B797DF4DA1F07D07465F4250A4DCFF118 Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/d6m94tH0anOa-FWzt96zJw4rWqM.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.15.242.0/23 maxlen: 23 194.15.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f4:da:1f:07:d0:74:65:f4:25:0a:4d:cf:f1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77a9bde2d1f46a739af855b3b7deb3270e2b5aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:f2:e4:af:74:4f:73:ca:39:1e:e8:96:b4: f2:a5:70:4a:07:ea:c1:ec:ed:7e:33:75:4f:4c:d8: 1c:a8:db:f8:b1:b9:fc:47:ff:d1:bf:a7:33:33:40: bf:36:f5:b2:bd:f4:bf:3c:34:4a:c3:88:2e:35:13: ab:ee:1d:46:57:0f:22:ef:a6:55:a3:37:89:70:79: b5:a1:56:9d:e8:3d:d7:fc:ab:3e:37:ef:a8:ab:59: 04:75:63:72:20:39:6a:80:39:59:fe:84:cc:bd:b1: a2:2d:4a:0f:4c:be:ba:2a:8d:6c:fb:53:76:74:6d: 1c:fa:f8:b7:3a:37:91:f2:39:14:d8:95:b8:bc:f9: c3:79:34:c1:78:83:ce:2f:96:fb:92:e1:48:21:c3: 69:85:a7:25:66:14:94:28:a3:6c:7d:c2:36:d4:a0: 38:77:e1:9a:b0:6e:d0:b1:9a:26:c6:71:94:f5:75: 49:36:e8:d3:57:cb:e7:80:bb:58:c0:cf:11:36:cc: 6c:c7:32:e4:ff:e9:6e:e1:3d:6b:2d:89:f7:22:31: b4:b0:e8:df:5c:67:49:c8:ab:20:64:f4:a5:ae:9f: 20:0f:4f:43:8d:ab:20:96:d4:10:3e:7c:c8:a3:94: 23:ea:9d:fd:35:8d:16:e1:5d:19:b2:68:b5:89:67: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:BD:E2:D1:F4:6A:73:9A:F8:55:B3:B7:DE:B3:27:0E:2B:5A:A3 X509v3 Authority Key Identifier: keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/d6m94tH0anOa-FWzt96zJw4rWqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.242.0-194.15.247.255 Signature Algorithm: sha256WithRSAEncryption 37:2b:13:e3:14:84:ca:8b:85:83:15:d3:30:50:d5:8e:e9:1b: 35:ac:55:13:b7:73:77:23:71:95:4a:37:cb:cf:11:6b:25:b0: 07:d6:52:31:55:69:ac:d9:80:6a:09:c0:54:0a:ad:01:62:47: a9:2e:3a:bb:1e:1c:1b:c9:a0:65:45:cc:bf:09:e2:72:46:4c: 44:3a:55:90:b7:42:4c:5a:d3:13:8d:92:30:ee:d3:51:f9:91: df:6f:56:f3:19:a1:c7:bf:5f:50:e9:c0:9f:de:0c:b8:20:b8: 29:9e:1b:a3:17:22:25:3c:ef:27:67:c0:8b:51:1e:a7:54:aa: 9f:81:76:b4:32:ea:b3:5b:71:da:45:94:14:23:47:6e:e7:37: b5:72:4b:59:9d:21:02:d9:c0:e1:e7:9e:fb:10:09:30:f8:8a: 1f:bc:ae:32:73:11:66:43:49:20:50:8a:b4:ae:8f:b0:f8:e2: ad:d0:d9:0c:47:34:a4:e7:6e:d5:d5:7a:59:81:8c:59:ba:46: de:96:0e:8f:36:b3:54:0c:ae:33:81:93:d2:06:58:7c:7e:6d: f8:2d:b0:13:ca:7a:dd:f7:55:6e:57:81:e4:af:16:39:f9:23: ba:30:4d:d7:db:0a:40:d1:7d:73:76:9a:94:b3:30:6d:8c:91: 6b:c7:66:63 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ffTaHwfQdGX0JQpNz/EYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3 NWZmZWQwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2E5YmRlMmQxZjQ2YTczOWFmODU1YjNiN2RlYjMyNzBlMmI1YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowry5K90T3PKOR7olrTypXBKB+rB 7O1+M3VPTNgcqNv4sbn8R//Rv6czM0C/NvWyvfS/PDRKw4guNROr7h1GVw8i76ZV ozeJcHm1oVad6D3X/Ks+N++oq1kEdWNyIDlqgDlZ/oTMvbGiLUoPTL66Ko1s+1N2 dG0c+vi3OjeR8jkU2JW4vPnDeTTBeIPOL5b7kuFIIcNphaclZhSUKKNsfcI21KA4 d+GasG7QsZomxnGU9XVJNujTV8vngLtYwM8RNsxsxzLk/+lu4T1rLYn3IjG0sOjf XGdJyKsgZPSlrp8gD09DjasgltQQPnzIo5Qj6p39NY0W4V0Zsmi1iWfbXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHepveLR9GpzmvhVs7fesycOK1qjMB8GA1UdIwQY MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt N2ZhZTA2NWI2NDZhLzEvZDZtOTR0SDBhbk9hLUZXenQ5NnpKdzRyV3FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCD/ID BAPCD/AwDQYJKoZIhvcNAQELBQADggEBADcrE+MUhMqLhYMV0zBQ1Y7pGzWsVRO3 c3cjcZVKN8vPEWslsAfWUjFVaazZgGoJwFQKrQFiR6kuOrseHBvJoGVFzL8J4nJG TEQ6VZC3Qkxa0xONkjDu01H5kd9vVvMZoce/X1DpwJ/eDLgguCmeG6MXIiU87ydn wItRHqdUqp+BdrQy6rNbcdpFlBQjR27nN7VyS1mdIQLZwOHnnvsQCTD4ih+8rjJz EWZDSSBQirSuj7D44q3Q2QxHNKTnbtXVelmBjFm6Rt6WDo82s1QMrjOBk9IGWHx+ bfgtsBPKet33VW5XgeSvFjn5I7owTdfbCkDRfXN2mpSzMG2MkWvHZmM= -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:02 2026 by rpki-client