This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/rETz40juPgcEcnRiiNd5Zkfp5E0.roa File: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (raw, json) Hash identifier: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o= Subject key identifier: AC:44:F3:E3:48:EE:3E:07:04:72:74:62:88:D7:79:66:47:E9:E4:4D Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Certificate serial: 019B7AC94811DF87AB8DD9D96088D980E8CA Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/rETz40juPgcEcnRiiNd5Zkfp5E0.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205020 IP address blocks: 94.142.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:48:11:df:87:ab:8d:d9:d9:60:88:d9:80:e8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac44f3e348ee3e070472746288d7796647e9e44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:d9:56:ea:ba:7e:98:b1:9e:ff:40:83:b1: 80:91:89:05:32:1b:0d:35:b7:6b:f9:81:53:a0:92: e4:49:4e:76:29:e9:fa:92:7f:e4:8e:25:7c:41:10: ac:22:17:a9:df:f3:62:9b:87:88:78:fd:35:70:21: 61:ba:fb:68:6e:ee:f8:3a:a0:36:b7:0f:57:86:da: 6e:bb:07:0c:3b:b4:fc:46:8c:81:85:28:02:44:a8: 12:83:86:8d:a8:04:26:c6:95:c5:c4:a3:38:5f:f5: 6c:d8:c4:3f:96:4f:85:7f:c8:4b:e3:15:c2:42:bd: c0:99:6d:dd:92:ee:71:59:5a:fc:00:bc:d2:66:19: 14:99:c6:d3:a7:32:53:ce:fc:02:15:90:52:19:66: 2d:95:8d:a2:1a:23:b7:4f:2b:bf:5e:2e:e4:ba:b1: f4:7d:21:04:0e:b8:29:d6:22:b6:82:5a:e5:08:ff: 1d:9b:f0:66:a4:c7:ff:b9:ed:32:40:47:a8:e3:80: f5:70:a0:33:43:77:20:32:26:4a:61:46:28:2c:e4: ad:75:fe:86:b8:ad:2f:cf:75:62:4b:17:98:ab:93: f2:8a:e6:7f:2a:a7:00:bb:cb:29:a4:85:f3:27:c7: 2a:fb:ce:f7:b3:0b:13:57:a2:16:94:6a:04:20:0e: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:F3:E3:48:EE:3E:07:04:72:74:62:88:D7:79:66:47:E9:E4:4D X509v3 Authority Key Identifier: keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/rETz40juPgcEcnRiiNd5Zkfp5E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.252.0/24 Signature Algorithm: sha256WithRSAEncryption 18:1d:99:91:10:94:c4:5b:b9:b5:62:4f:4c:f6:43:21:ea:14: 85:1c:25:5a:5f:31:40:ce:5f:33:00:6c:c9:ab:c7:86:8f:2f: 66:03:92:6d:ce:21:58:a1:b2:64:16:8a:59:5d:7a:60:f7:a2: bf:ee:ef:e2:67:88:33:b4:24:59:fb:ac:48:31:86:be:33:b1: 37:4c:0a:c9:8e:66:85:a0:8d:ed:0a:1b:db:dd:ad:2f:d3:63: ec:35:c3:c5:bd:aa:bc:6f:a6:84:b8:78:ef:a4:57:4d:72:06: 32:b2:dd:05:af:d8:bc:cc:6b:32:99:b2:bb:6a:1d:63:d1:87: de:ac:4e:e7:6e:f8:1e:28:ad:14:5d:89:c2:f8:8b:ba:a6:cc: e5:ba:23:a3:50:1f:1b:51:cc:5f:6a:cb:c8:a3:c4:d1:de:41: 10:15:90:89:05:2a:71:e0:c1:dc:74:a4:94:13:0f:6a:df:30: 22:71:de:b2:5e:4b:e2:f0:26:f5:03:66:9f:ab:93:ac:1c:bf: 65:c8:c0:41:b4:9d:b0:a0:60:7b:84:5f:6b:a6:db:78:99:ab: b5:10:ef:a1:53:e1:5c:42:bc:fe:3b:aa:65:96:1d:c6:b4:bb: 12:0c:96:79:4b:7c:cc:1f:d4:16:b8:c4:62:96:09:c4:a3:5f: b0:a8:6c:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUgR34erjdnZYIjZgOjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm N2JmMmEwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQ0ZjNlMzQ4ZWUzZTA3MDQ3Mjc0NjI4OGQ3Nzk2NjQ3ZTllNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2LZVuq6fpixnv9Ag7GAkYkFMhsN Nbdr+YFToJLkSU52Ken6kn/kjiV8QRCsIhep3/Nim4eIeP01cCFhuvtobu74OqA2 tw9XhtpuuwcMO7T8RoyBhSgCRKgSg4aNqAQmxpXFxKM4X/Vs2MQ/lk+Ff8hL4xXC Qr3AmW3dku5xWVr8ALzSZhkUmcbTpzJTzvwCFZBSGWYtlY2iGiO3Tyu/Xi7kurH0 fSEEDrgp1iK2glrlCP8dm/BmpMf/ue0yQEeo44D1cKAzQ3cgMiZKYUYoLOStdf6G uK0vz3ViSxeYq5PyiuZ/KqcAu8sppIXzJ8cq+873swsTV6IWlGoEIA4kCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxE8+NI7j4HBHJ0YojXeWZH6eRNMB8GA1UdIwQY MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt YzY2MzJjYzAxNGIwLzEvckVUejQwanVQZ2NFY25SaWlOZDVaa2ZwNUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo78MA0G CSqGSIb3DQEBCwUAA4IBAQAYHZmREJTEW7m1Yk9M9kMh6hSFHCVaXzFAzl8zAGzJ q8eGjy9mA5JtziFYobJkFopZXXpg96K/7u/iZ4gztCRZ+6xIMYa+M7E3TArJjmaF oI3tChvb3a0v02PsNcPFvaq8b6aEuHjvpFdNcgYyst0Fr9i8zGsymbK7ah1j0Yfe rE7nbvgeKK0UXYnC+Iu6pszluiOjUB8bUcxfasvIo8TR3kEQFZCJBSpx4MHcdKSU Ew9q3zAicd6yXkvi8Cb1A2afq5OsHL9lyMBBtJ2woGB7hF9rptt4mau1EO+hU+Fc Qrz+O6pllh3GtLsSDJZ5S3zMH9QWuMRilgnEo1+wqGxd -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:39 2026 by rpki-client