This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/aPWLJM6IziuoIQ-9dg15aPOtRRI.roa File: aPWLJM6IziuoIQ-9dg15aPOtRRI.roa (raw, json) Hash identifier: nW9Lbvb0zK8UkUgMG6xc5L/WUYzGO8kQcti52apyWJQ= Subject key identifier: 68:F5:8B:24:CE:88:CE:2B:A8:21:0F:BD:76:0D:79:68:F3:AD:45:12 Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296 Certificate serial: 019B7CEE24A0E5F45941F82ECB367A11C5CC Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/aPWLJM6IziuoIQ-9dg15aPOtRRI.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208697 IP address blocks: 194.29.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:24:a0:e5:f4:59:41:f8:2e:cb:36:7a:11:c5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68f58b24ce88ce2ba8210fbd760d7968f3ad4512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0f:f6:e1:5f:1e:af:bc:27:7b:93:0d:b9:82: 1b:9d:9b:9d:97:79:de:56:57:27:5d:f7:9c:1c:4f: 51:c4:15:59:76:6d:47:63:93:75:65:1b:a9:8f:6c: 48:e0:87:41:64:67:67:71:97:ea:0a:04:46:50:9c: 16:d3:91:3a:eb:f3:69:cf:91:c2:46:22:93:f2:4a: 4f:e6:f2:eb:53:32:36:91:43:24:ee:b4:f5:6b:41: 81:69:34:9e:15:e7:7c:f1:1f:99:80:f4:36:81:22: 7a:64:db:63:23:e8:39:78:e9:6a:97:be:b5:0c:e6: 2e:53:a2:4c:39:be:92:62:8b:e7:c1:83:64:64:9e: 54:4a:53:20:01:6c:57:f1:94:92:b3:af:e7:a0:a4: c1:b6:12:77:bc:9c:01:e3:37:04:86:ac:6c:e5:8b: 41:15:35:8e:a2:6b:ee:50:93:79:92:0e:e1:ae:b0: da:03:77:dd:7b:67:d1:e4:39:a2:3a:c7:cd:2a:f6: e2:19:ec:54:dc:94:fe:cc:f0:64:ab:36:be:07:0b: a6:50:2a:5f:b3:c9:11:55:75:c1:9f:7d:a5:d0:39: cb:e1:cb:db:33:0f:fd:54:2d:d3:62:75:c5:cb:16: 71:58:04:2f:7b:62:82:1c:6b:db:2d:5e:5a:2c:2f: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:8B:24:CE:88:CE:2B:A8:21:0F:BD:76:0D:79:68:F3:AD:45:12 X509v3 Authority Key Identifier: keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/aPWLJM6IziuoIQ-9dg15aPOtRRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.29.71.0/24 Signature Algorithm: sha256WithRSAEncryption ab:0d:8a:6c:c1:04:64:df:cc:3d:8e:a3:62:c7:ec:11:d1:b4: 20:42:a4:ab:59:60:47:45:a8:bc:c1:7a:dc:52:90:de:02:35: db:aa:7d:3a:e6:47:2e:b0:bd:5a:3b:90:36:6e:71:4b:d7:69: 69:62:bb:67:19:14:ba:88:95:9a:5d:58:d1:53:c0:b3:d7:f8: b1:ea:3e:a3:5d:f2:90:90:e9:c0:2c:b7:c5:72:d5:3c:02:1c: eb:13:13:67:e5:f6:56:04:07:34:59:1f:7b:02:62:28:07:a8: 74:6d:1b:2b:50:4a:cd:c1:85:ab:05:19:ee:80:58:86:d6:64: 81:63:c9:97:99:7e:85:44:11:a9:1d:dd:dd:12:a0:98:e1:1a: 05:26:4d:79:c2:cb:c7:73:e0:ab:31:1b:1c:05:52:3e:9b:8c: 93:38:d3:59:9c:72:74:3f:8e:2f:ad:da:3d:5e:9c:18:f4:65: 97:c1:f8:8f:45:80:5e:85:35:47:a9:61:34:a2:60:f9:d8:6e: 4e:c0:ee:8c:7b:4b:e7:44:a2:dd:51:f7:f7:fc:86:eb:52:a6: a7:12:3d:bd:d0:46:b8:32:23:62:39:98:dd:95:f1:3a:bd:ac: 0e:d4:0e:ea:0d:0e:9f:a9:6a:09:11:7c:43:17:9c:b9:af:5f: 24:4f:2d:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iSg5fRZQfguyzZ6EcXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMTdkZDE1YjYyYmRkNzExMjU5OWI4MTQyMzM2MGVlZTdh MDEyOTYwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGY1OGIyNGNlODhjZTJiYTgyMTBmYmQ3NjBkNzk2OGYzYWQ0NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g/24V8er7wne5MNuYIbnZudl3ne VlcnXfecHE9RxBVZdm1HY5N1ZRupj2xI4IdBZGdncZfqCgRGUJwW05E66/Npz5HC RiKT8kpP5vLrUzI2kUMk7rT1a0GBaTSeFed88R+ZgPQ2gSJ6ZNtjI+g5eOlql761 DOYuU6JMOb6SYovnwYNkZJ5USlMgAWxX8ZSSs6/noKTBthJ3vJwB4zcEhqxs5YtB FTWOomvuUJN5kg7hrrDaA3fde2fR5DmiOsfNKvbiGexU3JT+zPBkqza+BwumUCpf s8kRVXXBn32l0DnL4cvbMw/9VC3TYnXFyxZxWAQve2KCHGvbLV5aLC81JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGj1iyTOiM4rqCEPvXYNeWjzrUUSMB8GA1UdIwQY MBaAFEMX3RW2K91xElmbgUIzYO7noBKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NTRiODktMzdjMS00MDYxLTkwYjMt NmI5NTUwMGRhMjNiLzEvYVBXTEpNNkl6aXVvSVEtOWRnMTVhUE90UlJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82NTRiODktMzdjMS00MDYxLTkwYjMtNmI5NTUwMGRhMjNi LzEvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh1HMA0G CSqGSIb3DQEBCwUAA4IBAQCrDYpswQRk38w9jqNix+wR0bQgQqSrWWBHRai8wXrc UpDeAjXbqn065kcusL1aO5A2bnFL12lpYrtnGRS6iJWaXVjRU8Cz1/ix6j6jXfKQ kOnALLfFctU8AhzrExNn5fZWBAc0WR97AmIoB6h0bRsrUErNwYWrBRnugFiG1mSB Y8mXmX6FRBGpHd3dEqCY4RoFJk15wsvHc+CrMRscBVI+m4yTONNZnHJ0P44vrdo9 XpwY9GWXwfiPRYBehTVHqWE0omD52G5OwO6Me0vnRKLdUff3/IbrUqanEj290Ea4 MiNiOZjdlfE6vawO1A7qDQ6fqWoJEXxDF5y5r18kTy3q -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:34 2026 by rpki-client