This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa File: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (raw, json) Hash identifier: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg= Subject key identifier: A4:6E:1A:44:D8:BF:B4:48:25:9C:72:38:0D:9B:EB:FC:78:F4:2A:32 Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019B7F82EB6A763D2A533A38A16EC9CF3263 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa Signing time: Fri 02 Jan 2026 16:20:44 +0000 ROA not before: Fri 02 Jan 2026 16:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5516 IP address blocks: 194.117.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:eb:6a:76:3d:2a:53:3a:38:a1:6e:c9:cf:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Jan 2 16:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46e1a44d8bfb448259c72380d9bebfc78f42a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:17:02:2d:06:9a:b0:27:d4:f4:24:b3:93: 69:c1:8c:c1:cc:5c:65:db:87:2e:d9:7d:c3:96:6b: 5a:ea:47:3c:47:68:76:f2:d0:a1:91:4f:1f:bc:00: e8:d4:e7:93:c0:02:f1:57:50:ec:35:fc:52:97:44: b1:cd:e0:d0:9d:9f:42:73:d5:52:ef:63:94:41:b2: 41:a4:27:01:72:7b:82:18:4f:92:e1:3d:53:be:b3: 8c:c3:a7:97:11:cd:36:0d:dc:22:82:d0:65:57:46: b7:e3:d6:4c:ad:5d:9e:72:9b:cd:67:19:0c:ee:df: 17:d4:96:26:53:81:da:dd:58:61:33:95:6d:e8:52: 57:d6:db:f6:56:5c:37:17:00:4a:00:cf:f6:42:33: d4:33:42:dd:94:a0:0e:20:ca:16:04:35:10:3a:7c: 97:89:a6:a1:83:6a:03:46:dd:44:ff:78:8b:41:a5: fd:a1:fb:df:8d:89:22:ac:7b:81:f2:06:dc:12:be: 70:f8:89:cd:16:12:23:64:07:1e:57:2a:44:68:52: c3:9d:f8:3c:51:af:11:7a:f8:9e:7c:6a:a4:a6:5e: 41:8f:ad:cc:bd:9f:36:70:72:b9:56:09:0d:08:1c: 8c:b3:5b:79:40:50:df:d8:70:c8:24:90:5e:42:59: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6E:1A:44:D8:BF:B4:48:25:9C:72:38:0D:9B:EB:FC:78:F4:2A:32 X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.32.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:c6:ee:15:3c:7f:5b:f5:8f:bd:32:b5:52:a2:b6:f4:89:f3: 24:2f:48:f9:53:52:0e:a8:33:9a:f6:a8:3f:35:20:1e:06:12: c2:8d:53:c4:5f:1e:6c:e9:c3:c3:71:7c:3d:d1:84:c0:3b:fb: 24:b9:cc:e2:52:84:bb:97:db:06:dd:7a:b6:6d:3c:b5:52:75: 71:46:49:cc:ce:64:42:90:b9:a5:59:86:d7:86:4d:2b:77:ed: 03:14:cb:51:22:17:5c:98:d2:38:e1:80:11:35:c0:fb:a9:dc: 48:32:e2:9e:ad:7a:47:1a:5b:ad:d6:be:41:20:36:67:4e:f2: 27:a3:a2:0f:35:52:d9:b4:87:9a:5e:05:be:b0:ac:04:9d:9c: 6b:60:d8:1d:53:c6:a3:86:16:30:92:1b:fa:a1:1e:be:50:0f: f3:3c:59:06:8c:34:6c:1c:f4:43:c1:cd:94:11:b0:07:61:49: ec:71:2d:90:07:09:9f:8a:62:d5:a3:4c:b1:83:b2:6e:6f:98: 72:57:72:18:c9:be:40:c2:6e:b4:d8:d2:b4:91:a6:55:de:e2: 5a:80:a2:98:10:f1:14:d6:30:4b:5b:43:3b:fa:8d:3e:c8:3d: 55:0d:45:7c:ce:61:bf:4b:62:85:79:ff:57:1e:0d:a7:15:51: 2f:39:68:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gutqdj0qUzo4oW7JzzJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjYwMTAyMTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZlMWE0NGQ4YmZiNDQ4MjU5YzcyMzgwZDliZWJmYzc4ZjQyYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0XAi0GmrAn1PQks5NpwYzBzFxl 24cu2X3Dlmta6kc8R2h28tChkU8fvADo1OeTwALxV1DsNfxSl0SxzeDQnZ9Cc9VS 72OUQbJBpCcBcnuCGE+S4T1TvrOMw6eXEc02DdwigtBlV0a349ZMrV2ecpvNZxkM 7t8X1JYmU4Ha3VhhM5Vt6FJX1tv2Vlw3FwBKAM/2QjPUM0LdlKAOIMoWBDUQOnyX iaahg2oDRt1E/3iLQaX9ofvfjYkirHuB8gbcEr5w+InNFhIjZAceVypEaFLDnfg8 Ua8ReviefGqkpl5Bj63MvZ82cHK5VgkNCByMs1t5QFDf2HDIJJBeQlkk/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRuGkTYv7RIJZxyOA2b6/x49CoyMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvcEc0YVJOaV90RWdsbkhJNERadnJfSGowS2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwnUgMA0G CSqGSIb3DQEBCwUAA4IBAQANxu4VPH9b9Y+9MrVSorb0ifMkL0j5U1IOqDOa9qg/ NSAeBhLCjVPEXx5s6cPDcXw90YTAO/skucziUoS7l9sG3Xq2bTy1UnVxRknMzmRC kLmlWYbXhk0rd+0DFMtRIhdcmNI44YARNcD7qdxIMuKerXpHGlut1r5BIDZnTvIn o6IPNVLZtIeaXgW+sKwEnZxrYNgdU8ajhhYwkhv6oR6+UA/zPFkGjDRsHPRDwc2U EbAHYUnscS2QBwmfimLVo0yxg7Jub5hyV3IYyb5Awm602NK0kaZV3uJagKKYEPEU 1jBLW0M7+o0+yD1VDUV8zmG/S2KFef9XHg2nFVEvOWhK -----END CERTIFICATE-----Generated at Tue Jan 27 01:52:33 2026 by rpki-client