This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/rM_jdXy84vXGo0-WUXb97B2X5Vc.roa File: rM_jdXy84vXGo0-WUXb97B2X5Vc.roa (raw, json) Hash identifier: GjuFk6jemR6ii4hI/oxG1vqpEf4r+3pyDc+nTJsViK0= Subject key identifier: AC:CF:E3:75:7C:BC:E2:F5:C6:A3:4F:96:51:76:FD:EC:1D:97:E5:57 Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Certificate serial: 019B7C11909C92A745F70C4E0E7CDA0736E4 Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/rM_jdXy84vXGo0-WUXb97B2X5Vc.roa Signing time: Fri 02 Jan 2026 00:18:04 +0000 ROA not before: Fri 02 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8298 IP address blocks: 194.126.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:90:9c:92:a7:45:f7:0c:4e:0e:7c:da:07:36:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Validity Not Before: Jan 2 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=accfe3757cbce2f5c6a34f965176fdec1d97e557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:64:b2:3b:d2:21:04:f0:a1:90:16:d4:73: 02:c8:bc:36:4e:a7:18:8e:dc:cd:ee:d8:7f:ee:70: 7a:eb:02:85:de:4c:3a:79:9c:7d:95:1d:77:40:12: 39:a3:b6:70:87:df:af:3a:63:00:e7:f0:b8:47:0f: 0d:fd:0d:5d:e3:c8:75:42:70:aa:4f:dc:30:7e:92: 82:1f:0f:d4:9d:df:0f:53:67:3f:48:09:3b:7e:44: db:fe:ba:d6:56:58:61:25:81:eb:1a:48:3e:70:e1: 87:72:8e:f6:68:2f:4f:42:43:2b:4c:c0:05:81:ab: 63:0e:b2:e5:79:bd:00:9c:11:17:0e:72:0d:31:af: 35:f2:c6:7a:1b:f4:cc:59:3a:a8:43:f0:39:4f:55: ba:2f:f6:ff:28:d9:04:7f:59:4c:4f:ef:3a:91:ea: 18:ca:10:ec:2d:c8:9a:44:b2:4f:fc:34:e8:f8:fe: 7a:51:de:9d:90:1d:52:42:b1:5a:60:49:b1:7e:44: 49:f2:84:2c:e6:4b:5c:8e:eb:9a:03:48:9c:95:30: c6:46:b5:93:78:d9:ab:fd:79:58:73:10:ad:88:1a: d1:30:97:ba:55:74:cd:97:78:81:7c:65:3b:ad:43: 95:8a:74:19:2d:bc:8c:a8:4f:02:78:0d:ca:24:50: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CF:E3:75:7C:BC:E2:F5:C6:A3:4F:96:51:76:FD:EC:1D:97:E5:57 X509v3 Authority Key Identifier: keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/rM_jdXy84vXGo0-WUXb97B2X5Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.235.0/24 Signature Algorithm: sha256WithRSAEncryption 71:27:d2:58:ff:45:0b:3d:08:d1:cc:29:66:7b:64:87:6b:53: 6f:6f:c2:49:75:31:6e:24:1b:46:46:5b:4e:9c:22:9b:a6:11: 66:aa:60:90:b1:2c:03:35:2b:81:c9:e6:12:58:f2:c4:89:77: 32:2b:6b:6e:39:d0:3b:f4:7b:22:d6:b1:dc:c6:43:c3:92:95: 74:b5:36:72:41:72:40:aa:91:26:56:89:ba:df:55:13:ec:8c: c6:8e:d8:9c:06:0b:16:31:0d:eb:29:35:fe:76:1f:e0:18:23: 42:5e:32:e2:60:69:0c:cc:a6:07:32:4e:19:38:17:14:47:72: 1c:5b:6c:a7:08:f1:cd:2d:6e:37:d6:e8:89:69:17:85:44:2a: 39:70:b2:62:14:b6:1c:34:75:22:4d:76:f4:01:fc:bd:5b:d3: 9a:d5:25:63:a5:2f:f6:08:35:69:96:df:c2:28:ad:3a:26:b4: 31:2a:c6:14:3a:51:08:9d:8b:67:35:1e:8a:ac:aa:ab:96:7e: cd:7d:01:b8:12:0f:f2:91:b7:be:e6:44:87:c1:b9:d5:75:7f: b6:19:bf:88:d3:1b:f4:0a:b8:bd:e0:fb:69:3c:7a:fc:ba:fd: 7f:34:06:18:ee:52:53:94:e3:e0:cd:03:9a:a9:5d:c4:03:3d: 7e:3e:46:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZCckqdF9wxODnzaBzbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTE0NWZlM2I3OWIyYmY2OGFhZGJlMDA3ZGVmNmQ3MmFl ZjJhYzMwHhcNMjYwMTAyMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2NmZTM3NTdjYmNlMmY1YzZhMzRmOTY1MTc2ZmRlYzFkOTdlNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6hksjvSIQTwoZAW1HMCyLw2TqcY jtzN7th/7nB66wKF3kw6eZx9lR13QBI5o7Zwh9+vOmMA5/C4Rw8N/Q1d48h1QnCq T9wwfpKCHw/Und8PU2c/SAk7fkTb/rrWVlhhJYHrGkg+cOGHco72aC9PQkMrTMAF gatjDrLleb0AnBEXDnINMa818sZ6G/TMWTqoQ/A5T1W6L/b/KNkEf1lMT+86keoY yhDsLciaRLJP/DTo+P56Ud6dkB1SQrFaYEmxfkRJ8oQs5ktcjuuaA0iclTDGRrWT eNmr/XlYcxCtiBrRMJe6VXTNl3iBfGU7rUOVinQZLbyMqE8CeA3KJFD1sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKzP43V8vOL1xqNPllF2/ewdl+VXMB8GA1UdIwQY MBaAFDrhRf47ebK/aKrb4Afe9tcq7yrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYt YjdiNTc0ZWVkYzMzLzEvck1famRYeTg0dlhHbzAtV1VYYjk3QjJYNVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYtYjdiNTc0ZWVkYzMz LzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7rMA0G CSqGSIb3DQEBCwUAA4IBAQBxJ9JY/0ULPQjRzClme2SHa1Nvb8JJdTFuJBtGRltO nCKbphFmqmCQsSwDNSuByeYSWPLEiXcyK2tuOdA79Hsi1rHcxkPDkpV0tTZyQXJA qpEmVom631UT7IzGjticBgsWMQ3rKTX+dh/gGCNCXjLiYGkMzKYHMk4ZOBcUR3Ic W2ynCPHNLW431uiJaReFRCo5cLJiFLYcNHUiTXb0Afy9W9Oa1SVjpS/2CDVplt/C KK06JrQxKsYUOlEInYtnNR6KrKqrln7NfQG4Eg/ykbe+5kSHwbnVdX+2Gb+I0xv0 Cri94PtpPHr8uv1/NAYY7lJTlOPgzQOaqV3EAz1+Pkar -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:10 2026 by rpki-client