This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/1ObfCdLE7dKk-d-Joasz4Il0A1o.roa File: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (raw, json) Hash identifier: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34= Subject key identifier: D4:E6:DF:09:D2:C4:ED:D2:A4:F9:DF:89:A1:AB:33:E0:89:74:03:5A Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d Certificate serial: 019B7DC9ECC2D7ACC63AD204A67108ECA00F Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/1ObfCdLE7dKk-d-Joasz4Il0A1o.roa Signing time: Fri 02 Jan 2026 08:19:03 +0000 ROA not before: Fri 02 Jan 2026 08:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.232.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ec:c2:d7:ac:c6:3a:d2:04:a6:71:08:ec:a0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e6df09d2c4edd2a4f9df89a1ab33e08974035a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:67:ae:43:4c:89:42:78:eb:82:25:61:64: 47:f8:87:af:1c:8b:58:18:e0:76:7d:ef:25:f7:58: fb:24:5c:ae:a2:53:02:02:aa:9e:ef:77:3c:f3:c8: b0:58:48:4c:4c:3e:4e:e4:a3:2b:2d:de:e1:f9:a7: 55:bf:cb:ff:40:99:ec:25:b4:cb:e7:51:89:34:c4: 98:0e:eb:6c:3d:75:dd:ce:3b:38:e2:f3:6b:fb:06: 79:c7:a1:bb:97:c7:bc:21:a9:ce:31:92:cb:e8:62: df:8b:ff:61:5d:1c:d3:31:a5:42:18:25:95:5f:19: 9c:19:c2:89:31:82:63:ba:40:aa:26:de:a0:ad:5a: ca:ab:bf:4d:f0:53:36:7b:7c:be:7e:99:f7:6a:c3: 6b:a5:f1:5e:98:33:df:7b:60:39:45:7a:03:0b:a8: 6a:ff:78:e6:44:e2:99:6c:1d:5a:36:49:ac:32:87: 73:75:95:52:35:11:d7:b7:92:28:1f:01:6d:49:7f: 80:a8:11:63:18:44:c7:1a:a5:c3:d3:02:41:30:4b: d7:b0:00:35:99:b0:f1:58:53:b7:91:eb:68:9f:99: 54:06:12:e9:e7:89:ad:1f:57:90:c5:36:da:41:83: a5:1b:7a:d3:f6:d5:c5:35:32:a4:bb:7f:c2:ad:26: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E6:DF:09:D2:C4:ED:D2:A4:F9:DF:89:A1:AB:33:E0:89:74:03:5A X509v3 Authority Key Identifier: keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/1ObfCdLE7dKk-d-Joasz4Il0A1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:85:64:62:f1:cc:b9:1b:5c:a0:b3:d8:1d:cb:71:06:d9:5e: a7:a2:41:db:07:91:a5:c6:d0:ce:2d:53:ce:dc:1e:ae:46:a1: fc:ae:65:df:8d:d5:c6:69:12:d0:bc:f5:fa:ab:00:28:24:db: 80:14:dd:97:bf:9a:32:85:3c:4c:24:4f:31:7c:c5:c1:cd:a3: 90:b3:30:a4:a2:8e:9f:c1:7e:5d:43:b8:bc:94:07:0e:0f:c1: 7d:08:18:76:61:f0:dd:12:f1:38:d7:84:18:0a:1e:ed:49:f8: a9:d0:ae:e7:ac:09:78:b0:a0:f4:4a:a4:0e:44:8a:06:de:c3: 85:6f:5c:5e:b6:6a:22:46:15:69:b5:71:37:be:f9:5d:ea:d8: 5c:ac:77:52:cd:e5:5c:32:d2:93:d4:23:3f:90:e3:07:97:92: a3:01:1a:36:7c:5c:c8:97:ae:8d:bd:35:e2:9e:39:c8:ce:4a: 8f:94:9e:42:e2:a7:06:08:11:ec:65:80:65:b4:e3:e2:21:d8: 23:71:8f:f3:96:7a:45:5c:5f:df:c0:c6:fe:82:16:68:c4:70: 75:1c:be:9f:10:0b:b2:da:99:4d:b1:a6:d7:45:03:28:4a:54: 36:39:88:46:df:de:bc:2f:dd:c4:ef:96:82:93:4c:b7:f3:84: fc:b7:3a:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yezC16zGOtIEpnEI7KAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5 ZjU4OGQwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGU2ZGYwOWQyYzRlZGQyYTRmOWRmODlhMWFiMzNlMDg5NzQwMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF5nrkNMiUJ464IlYWRH+IevHItY GOB2fe8l91j7JFyuolMCAqqe73c888iwWEhMTD5O5KMrLd7h+adVv8v/QJnsJbTL 51GJNMSYDutsPXXdzjs44vNr+wZ5x6G7l8e8IanOMZLL6GLfi/9hXRzTMaVCGCWV XxmcGcKJMYJjukCqJt6grVrKq79N8FM2e3y+fpn3asNrpfFemDPfe2A5RXoDC6hq /3jmROKZbB1aNkmsModzdZVSNRHXt5IoHwFtSX+AqBFjGETHGqXD0wJBMEvXsAA1 mbDxWFO3keton5lUBhLp54mtH1eQxTbaQYOlG3rT9tXFNTKku3/CrSZS4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTm3wnSxO3SpPnfiaGrM+CJdANaMB8GA1UdIwQY MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt OTZhZGZmZTJlODZhLzEvMU9iZkNkTEU3ZEtrLWQtSm9hc3o0SWwwQTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuehjMA0G CSqGSIb3DQEBCwUAA4IBAQAchWRi8cy5G1ygs9gdy3EG2V6nokHbB5GlxtDOLVPO 3B6uRqH8rmXfjdXGaRLQvPX6qwAoJNuAFN2Xv5oyhTxMJE8xfMXBzaOQszCkoo6f wX5dQ7i8lAcOD8F9CBh2YfDdEvE414QYCh7tSfip0K7nrAl4sKD0SqQORIoG3sOF b1xetmoiRhVptXE3vvld6thcrHdSzeVcMtKT1CM/kOMHl5KjARo2fFzIl66NvTXi njnIzkqPlJ5C4qcGCBHsZYBltOPiIdgjcY/zlnpFXF/fwMb+ghZoxHB1HL6fEAuy 2plNsabXRQMoSlQ2OYhG3968L93E75aCk0y384T8tzrS -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:46 2026 by rpki-client