This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/aCN3d1NV9uA0cA_h834IocLxWyc.roa File: aCN3d1NV9uA0cA_h834IocLxWyc.roa (raw, json) Hash identifier: PphK0aacViRJvDE7lv+wSFR/6/buv0klXljfUqi2boo= Subject key identifier: 68:23:77:77:53:55:F6:E0:34:70:0F:E1:F3:7E:08:A1:C2:F1:5B:27 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105627E07133D05816AD7FA4B16C26 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/aCN3d1NV9uA0cA_h834IocLxWyc.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199484 IP address blocks: 188.132.210.0/24 maxlen: 24 188.132.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:56:27:e0:71:33:d0:58:16:ad:7f:a4:b1:6c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=682377775355f6e034700fe1f37e08a1c2f15b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:89:a1:6e:0e:8d:5f:4a:a2:bf:f6:a2:34: 41:9a:4c:e8:95:0e:42:43:cc:f0:48:cb:f0:ee:25: 84:e4:df:87:1b:3c:fb:cb:45:f5:01:ec:e0:ef:bb: 67:1d:79:22:9c:8e:f0:0b:66:f4:57:e2:8d:e2:bb: 58:46:e5:55:43:d2:dd:9e:f8:d8:a6:a0:6c:08:ee: 57:00:40:14:d3:96:c6:01:81:57:79:7e:a4:e3:d4: 74:22:77:4d:ad:16:92:9c:13:6c:e0:67:12:d8:c6: 94:a9:cb:7e:25:0c:6b:71:96:47:da:78:3e:d0:d6: 1d:6d:22:04:52:bc:4f:73:dd:83:49:cb:35:88:75: 41:38:43:19:4f:ce:03:84:6a:d0:99:96:b4:6b:b8: e7:d7:53:04:d7:6f:0d:1b:d6:f4:4d:8f:2d:8f:b3: 68:48:d8:08:1f:7f:94:c4:6b:2e:f5:6c:dd:20:f6: 30:fc:c9:c7:4a:5d:26:48:73:31:22:89:17:59:bb: 56:da:11:c7:a3:f4:d2:66:02:ff:90:71:ca:a3:58: cb:bd:dd:4a:2b:7f:f7:a3:1c:27:3a:a1:5d:f5:40: bb:16:06:97:f1:d9:35:52:89:a5:f2:a3:ba:5d:f0: 09:4f:84:14:45:1f:d5:a6:bd:ff:25:63:89:f9:24: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:77:77:53:55:F6:E0:34:70:0F:E1:F3:7E:08:A1:C2:F1:5B:27 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/aCN3d1NV9uA0cA_h834IocLxWyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.210.0/23 Signature Algorithm: sha256WithRSAEncryption 32:50:61:7e:b9:f7:37:ed:6a:5c:49:93:33:fe:c3:fd:6b:14: 00:3f:23:6d:99:cb:95:46:fc:f1:50:57:5a:22:2c:4b:ed:c6: 41:de:02:03:b4:dc:a9:dd:cb:be:7f:aa:a9:90:f2:5a:09:8c: 5f:67:5f:27:26:17:d0:d6:4d:25:02:bf:c7:fc:4e:f2:e8:0c: af:4e:55:2b:03:bd:97:bc:e8:8e:b0:69:3a:3a:df:db:34:7c: a4:e0:45:c3:79:44:0a:e7:00:a0:5d:fc:af:10:cf:17:77:4e: c1:9a:7c:dc:47:a0:be:6c:cf:26:5d:e3:a3:31:99:79:04:7d: ca:61:47:2e:7b:ac:f0:7f:87:ee:c8:8d:60:74:57:b5:2f:2e: f6:ce:8e:48:a7:68:75:12:ce:23:6c:64:a8:f6:d6:8e:8a:5c: b9:b4:9b:4c:9b:60:11:10:66:a3:04:fb:fc:63:97:7f:c6:53: d2:f3:de:55:d0:50:7c:5d:3e:16:d4:9b:d7:af:65:fe:56:9e: e9:9f:02:a9:55:eb:18:cd:8d:2f:b3:9e:3c:41:8c:c0:53:18: 40:b1:12:04:8f:9e:bb:6a:4d:87:2d:4e:15:43:25:bd:e7:b8: 32:8d:63:fc:db:42:8e:0c:6b:bf:80:90:fe:18:f4:ad:e6:17: 7d:60:0c:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFYn4HEz0FgWrX+ksWwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODIzNzc3NzUzNTVmNmUwMzQ3MDBmZTFmMzdlMDhhMWMyZjE1YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM6JoW4OjV9Kor/2ojRBmkzolQ5C Q8zwSMvw7iWE5N+HGzz7y0X1Aezg77tnHXkinI7wC2b0V+KN4rtYRuVVQ9LdnvjY pqBsCO5XAEAU05bGAYFXeX6k49R0IndNrRaSnBNs4GcS2MaUqct+JQxrcZZH2ng+ 0NYdbSIEUrxPc92DScs1iHVBOEMZT84DhGrQmZa0a7jn11ME128NG9b0TY8tj7No SNgIH3+UxGsu9WzdIPYw/MnHSl0mSHMxIokXWbtW2hHHo/TSZgL/kHHKo1jLvd1K K3/3oxwnOqFd9UC7FgaX8dk1Uoml8qO6XfAJT4QURR/Vpr3/JWOJ+SQ9dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgjd3dTVfbgNHAP4fN+CKHC8VsnMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvYUNOM2QxTlY5dUEwY0FfaDgzNElvY0x4V3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvITSMA0G CSqGSIb3DQEBCwUAA4IBAQAyUGF+ufc37WpcSZMz/sP9axQAPyNtmcuVRvzxUFda IixL7cZB3gIDtNyp3cu+f6qpkPJaCYxfZ18nJhfQ1k0lAr/H/E7y6AyvTlUrA72X vOiOsGk6Ot/bNHyk4EXDeUQK5wCgXfyvEM8Xd07BmnzcR6C+bM8mXeOjMZl5BH3K YUcue6zwf4fuyI1gdFe1Ly72zo5Ip2h1Es4jbGSo9taOily5tJtMm2AREGajBPv8 Y5d/xlPS895V0FB8XT4W1JvXr2X+Vp7pnwKpVesYzY0vs548QYzAUxhAsRIEj567 ak2HLU4VQyW957gyjWP820KODGu/gJD+GPSt5hd9YAwp -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:13 2026 by rpki-client