This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa File: 1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa (raw, json) Hash identifier: zBTP7ZR26XJl8LaBef5EoQw5nxBQyUiQLy+rkLHHEk0= Subject key identifier: F9:78:BC:AA:C0:A3:67:F3:D0:A5:EE:8D:27:AF:93:D9:DC:D1:E0:63 Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Certificate serial: 019B7BA4C4442A7A43FDAD15508DA21C178D Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203778 IP address blocks: 194.33.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c4:44:2a:7a:43:fd:ad:15:50:8d:a2:1c:17:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f978bcaac0a367f3d0a5ee8d27af93d9dcd1e063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:74:bd:88:dc:f8:4f:22:44:fe:66:66:ae: 45:67:51:e2:37:79:bc:b3:18:5c:02:d1:1a:6a:15: 9c:59:67:3f:85:62:3d:97:96:f7:91:90:ae:f1:75: 2e:a7:53:be:62:51:da:aa:cf:53:7d:57:27:e6:d8: a3:fb:96:79:0e:c3:a0:12:d7:0e:1b:52:66:93:8d: de:75:dd:4f:f4:f8:bb:93:06:e2:c0:a8:92:52:13: 09:0f:85:cd:92:e0:ac:2f:2f:6a:48:3a:c0:7d:4a: 7b:bf:9d:4d:8c:8c:52:a3:65:99:05:c5:f8:ac:bb: 34:1d:76:5b:c6:cd:8c:44:68:7b:6f:b0:6b:53:87: 2c:66:5b:f2:78:d3:2a:57:45:90:14:d6:59:44:c0: 61:ae:0b:ee:be:b9:cf:63:e3:78:93:a0:a4:ff:fe: 7b:c4:38:f4:60:64:1d:00:2b:7b:d1:9f:ff:11:54: 1e:3c:cf:16:25:dd:f1:2b:6e:d1:b7:14:cb:61:01: 77:c6:3d:c1:ce:88:16:8e:b4:83:f5:b9:93:1a:e4: 9d:65:5e:bd:c5:a9:8a:00:00:b3:5d:fd:9d:8f:0e: ea:8a:ae:83:91:20:6b:83:97:6e:fc:77:8f:88:f3: 67:f1:a1:b9:90:12:74:a2:1a:35:42:1b:31:1f:a3: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:78:BC:AA:C0:A3:67:F3:D0:A5:EE:8D:27:AF:93:D9:DC:D1:E0:63 X509v3 Authority Key Identifier: keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/1-Xi8qsCjZ_PQpe6NJ6-T2dzR4GM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.76.0/23 Signature Algorithm: sha256WithRSAEncryption bc:c6:21:19:27:fc:94:0e:34:5d:57:c9:e4:4f:c2:dc:b6:73: 83:b9:1a:ff:1f:06:ca:ef:f2:a2:a9:b0:10:ac:eb:ad:5f:a6: 47:cd:0c:fd:1a:61:0d:91:d5:75:71:8e:f0:5f:35:18:8e:3f: de:df:2c:9c:63:d8:05:cd:d1:64:70:27:68:d9:30:2b:60:08: 99:4c:ae:7f:42:41:3e:fe:f9:bd:d0:df:ec:d7:7d:f8:5a:00: a7:55:42:be:22:1b:a1:e4:04:2e:bc:15:80:a8:b4:51:3b:fe: 40:ae:63:e4:1e:f1:9d:11:c5:9c:48:1c:33:b4:93:05:61:ca: a1:2e:74:e4:81:4a:cc:00:d1:cd:c9:f3:a5:3d:43:20:d0:c1: d9:35:41:c7:83:ea:57:fb:33:ca:da:a2:cc:19:44:4a:7c:81: c9:7d:2b:bf:12:1f:c3:51:52:58:7d:37:c7:0a:20:e1:8a:5a: ce:0d:0a:42:86:5d:82:fc:b0:a3:b0:de:fa:ac:05:f1:94:c9: 09:32:1e:d6:a3:d0:fa:3c:08:c1:8d:f2:6e:bc:94:b7:9b:02: 84:5d:72:bd:dc:19:a0:1d:29:7f:08:c9:37:86:f3:7f:5f:2c: 48:da:b7:8e:ec:29:da:5b:ae:ce:f1:c2:2a:6a:76:6e:0f:10: 4c:d6:ee:2f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7pMREKnpD/a0VUI2iHBeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTZlMGNiMzhjZDYxMjVjZWUxNGU0OTcyMjhiODQ5MGEx ZDQwZTkwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTc4YmNhYWMwYTM2N2YzZDBhNWVlOGQyN2FmOTNkOWRjZDFlMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjx0vYjc+E8iRP5mZq5FZ1HiN3m8 sxhcAtEaahWcWWc/hWI9l5b3kZCu8XUup1O+YlHaqs9TfVcn5tij+5Z5DsOgEtcO G1Jmk43edd1P9Pi7kwbiwKiSUhMJD4XNkuCsLy9qSDrAfUp7v51NjIxSo2WZBcX4 rLs0HXZbxs2MRGh7b7BrU4csZlvyeNMqV0WQFNZZRMBhrgvuvrnPY+N4k6Ck//57 xDj0YGQdACt70Z//EVQePM8WJd3xK27RtxTLYQF3xj3BzogWjrSD9bmTGuSdZV69 xamKAACzXf2djw7qiq6DkSBrg5du/HePiPNn8aG5kBJ0oho1QhsxH6OoEQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPl4vKrAo2fz0KXujSevk9nc0eBjMB8GA1UdIwQY MBaAFEJW4Ms4zWElzuFOSXIouEkKHUDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEt YTVlODUwYjZhMWJjLzEvMS1YaThxc0NqWl9QUXBlNk5KNi1UMmR6UjRHTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDcvYzMxNGY0LWIxYWMtNDI2Zi04ZjIxLWE1ZTg1MGI2YTFi Yy8xL1FsYmd5empOWVNYTzRVNUpjaWk0U1FvZFFPay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcIhTDAN BgkqhkiG9w0BAQsFAAOCAQEAvMYhGSf8lA40XVfJ5E/C3LZzg7ka/x8Gyu/yoqmw EKzrrV+mR80M/RphDZHVdXGO8F81GI4/3t8snGPYBc3RZHAnaNkwK2AImUyuf0JB Pv75vdDf7Nd9+FoAp1VCviIboeQELrwVgKi0UTv+QK5j5B7xnRHFnEgcM7STBWHK oS505IFKzADRzcnzpT1DINDB2TVBx4PqV/szytqizBlESnyByX0rvxIfw1FSWH03 xwog4Ypazg0KQoZdgvywo7De+qwF8ZTJCTIe1qPQ+jwIwY3ybryUt5sChF1yvdwZ oB0pfwjJN4bzf18sSNq3juwp2luuzvHCKmp2bg8QTNbuLw== -----END CERTIFICATE-----Generated at Sat Feb 7 04:04:21 2026 by rpki-client