This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/RPnqpd4QiTnwCz1MgHARgUiKRfA.roa File: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (raw, json) Hash identifier: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw= Subject key identifier: 44:F9:EA:A5:DE:10:89:39:F0:0B:3D:4C:80:70:11:81:48:8A:45:F0 Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Certificate serial: 019B7C806FC0ABCCDE73829AB6624C8DE85E Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/RPnqpd4QiTnwCz1MgHARgUiKRfA.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202703 IP address blocks: 194.93.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:c0:ab:cc:de:73:82:9a:b6:62:4c:8d:e8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44f9eaa5de108939f00b3d4c80701181488a45f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:8e:9b:6b:6c:e7:9e:33:79:6e:d6:57:2c: d0:d0:50:cd:02:9b:a5:2f:84:47:0b:99:6b:cc:9f: c7:59:d9:fa:47:e0:0d:4e:00:43:c2:eb:79:ff:30: b4:52:58:5a:77:b9:70:09:f0:79:11:b1:fe:3c:70: 05:71:a3:33:82:ad:41:63:5e:af:84:19:60:79:08: 75:2f:4b:79:a7:5b:71:2a:03:95:54:b8:fe:37:75: 28:77:67:65:54:cd:be:91:25:70:7e:fb:dd:15:39: 8f:6b:bc:07:df:f5:75:88:1f:68:98:a4:1c:7d:21: b3:1e:b6:7a:d3:03:b0:11:20:a7:78:db:68:f3:1b: 9a:c3:cd:18:80:15:cd:4f:be:75:aa:db:97:b2:f7: 34:c3:46:12:5b:b2:0e:d8:67:7b:49:57:3a:86:7a: fa:bc:ae:f2:3a:e6:d7:ec:c9:3a:3f:14:a5:bd:23: 39:5d:b6:87:bc:1d:65:c6:07:0e:69:76:22:d2:e3: 6d:53:da:b1:3e:db:8d:35:c9:c5:d5:57:44:7d:af: 15:11:4d:0b:47:8f:22:13:1e:ac:3e:3c:48:e8:8a: c7:0c:32:cc:a6:e0:ed:e9:cd:f3:c8:28:d6:34:d4: 06:01:db:bc:a0:0e:77:6f:58:24:c5:3f:cb:4b:45: bb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F9:EA:A5:DE:10:89:39:F0:0B:3D:4C:80:70:11:81:48:8A:45:F0 X509v3 Authority Key Identifier: keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/RPnqpd4QiTnwCz1MgHARgUiKRfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.79.0/24 Signature Algorithm: sha256WithRSAEncryption 55:f6:e1:d9:f2:b3:40:07:54:2b:c4:72:11:82:00:06:61:8a: c8:fb:24:e5:27:d9:94:22:32:37:e8:de:77:02:0a:56:11:28: 6b:31:d8:31:06:47:aa:ff:c8:d0:cb:0b:2e:64:a6:35:d9:f6: d6:5f:c7:d6:d6:df:67:65:e8:9e:cc:d3:75:d8:75:f5:5d:66: ca:de:2a:c2:e8:12:e7:13:79:96:74:e9:ae:5c:be:9b:99:73: 1e:d5:de:2e:67:41:a2:20:13:76:23:c9:23:61:47:0e:50:d8: c6:08:25:38:4e:54:a4:d2:f5:ba:99:9c:82:a1:91:0c:c9:d2: f3:4e:db:57:0c:94:23:ac:2a:7f:80:b6:c1:d4:cf:80:1f:45: e6:24:2f:a9:c1:d2:d1:5a:29:84:8f:a6:db:da:84:7f:e4:27: 11:29:36:18:82:9f:cd:7e:71:ba:30:e7:de:71:86:90:2b:cd: 22:6a:4c:51:19:e6:fe:41:00:5b:8e:e1:11:1b:30:b5:97:7b: ae:85:61:b8:47:db:fb:45:eb:c7:a0:09:0a:72:f6:1b:76:af: 9f:cd:76:49:3d:84:a8:c4:11:2a:0c:b9:77:62:9c:16:43:a1: 2b:8e:20:71:06:89:26:29:a9:c2:c7:9d:8c:a0:31:47:e1:75: 6b:84:81:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gG/Aq8zec4KatmJMjeheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm YmIzMDIwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGY5ZWFhNWRlMTA4OTM5ZjAwYjNkNGM4MDcwMTE4MTQ4OGE0NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3yOm2ts554zeW7WVyzQ0FDNApul L4RHC5lrzJ/HWdn6R+ANTgBDwut5/zC0Ulhad7lwCfB5EbH+PHAFcaMzgq1BY16v hBlgeQh1L0t5p1txKgOVVLj+N3Uod2dlVM2+kSVwfvvdFTmPa7wH3/V1iB9omKQc fSGzHrZ60wOwESCneNto8xuaw80YgBXNT751qtuXsvc0w0YSW7IO2Gd7SVc6hnr6 vK7yOubX7Mk6PxSlvSM5XbaHvB1lxgcOaXYi0uNtU9qxPtuNNcnF1VdEfa8VEU0L R48iEx6sPjxI6IrHDDLMpuDt6c3zyCjWNNQGAdu8oA53b1gkxT/LS0W7GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFET56qXeEIk58As9TIBwEYFIikXwMB8GA1UdIwQY MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt NWIxZjQ4YjNlMjE0LzEvUlBucXBkNFFpVG53Q3oxTWdIQVJnVWlLUmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0 LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl1PMA0G CSqGSIb3DQEBCwUAA4IBAQBV9uHZ8rNAB1QrxHIRggAGYYrI+yTlJ9mUIjI36N53 AgpWEShrMdgxBkeq/8jQywsuZKY12fbWX8fW1t9nZeiezNN12HX1XWbK3irC6BLn E3mWdOmuXL6bmXMe1d4uZ0GiIBN2I8kjYUcOUNjGCCU4TlSk0vW6mZyCoZEMydLz TttXDJQjrCp/gLbB1M+AH0XmJC+pwdLRWimEj6bb2oR/5CcRKTYYgp/NfnG6MOfe cYaQK80iakxRGeb+QQBbjuERGzC1l3uuhWG4R9v7RevHoAkKcvYbdq+fzXZJPYSo xBEqDLl3YpwWQ6ErjiBxBokmKanCx52MoDFH4XVrhIHK -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:06 2026 by rpki-client