This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/94oRvHR4-c0r1kRCm8xsO-Yf5VY.roa File: 94oRvHR4-c0r1kRCm8xsO-Yf5VY.roa (raw, json) Hash identifier: kqKGVJH1Gvw1RamZWsUayh/d6Ot9fGeinZ3ffhaZVzI= Subject key identifier: F7:8A:11:BC:74:78:F9:CD:2B:D6:44:42:9B:CC:6C:3B:E6:1F:E5:56 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C134BB2513851050A7626BF73481B8B Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/94oRvHR4-c0r1kRCm8xsO-Yf5VY.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273914 IP address blocks: 178.19.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4b:b2:51:38:51:05:0a:76:26:bf:73:48:1b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f78a11bc7478f9cd2bd644429bcc6c3be61fe556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:fb:32:32:5d:46:8b:08:23:ce:0a:69:9a: 3b:11:af:27:b2:60:e3:95:b7:28:69:f1:c1:ec:e7: 1d:9d:19:95:97:28:e8:13:92:f3:ea:05:bf:8e:cc: 2c:cb:a3:c9:b7:91:4c:01:35:e4:1d:a8:63:0c:f2: c7:3b:75:43:e7:3b:fb:92:f9:ab:a0:aa:8e:40:94: 27:02:91:23:9e:26:03:85:bb:18:f1:71:b9:42:1e: 4a:fc:48:52:98:72:cb:bf:2e:68:1f:ad:4c:b9:c0: 84:ff:a4:20:80:f2:26:3f:d0:7a:55:08:7d:a5:37: 92:4f:0c:3b:b9:dd:bd:58:34:9c:62:e8:ad:b8:8e: d8:57:b8:27:d5:22:ee:3d:10:3a:89:1d:cd:ec:21: 75:9e:09:bb:bb:c7:e6:e6:77:1b:cd:70:ae:6b:d5: 46:d1:8c:de:31:8b:37:d6:be:f0:06:cb:c4:2c:e1: 56:39:fc:45:5e:f6:b7:7c:9b:6e:cc:f2:c1:c9:49: e5:79:da:ab:56:e6:1c:85:c1:8f:ff:d2:86:c9:36: ce:45:cb:77:01:93:77:97:ea:81:84:d5:84:8c:e5: da:58:bd:b3:0c:51:c4:24:34:a4:30:30:77:a8:7e: f0:a6:42:0c:a8:10:bc:f1:3b:72:76:48:37:2a:cc: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8A:11:BC:74:78:F9:CD:2B:D6:44:42:9B:CC:6C:3B:E6:1F:E5:56 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/94oRvHR4-c0r1kRCm8xsO-Yf5VY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.19.40.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:da:05:7d:e6:a7:b3:39:d1:72:d6:2e:46:56:10:a0:28:40: b8:15:5f:01:53:f6:3b:65:12:09:15:e5:32:c9:6f:4a:1e:0d: b9:8a:33:26:1f:e4:2b:e7:ce:26:de:bd:9a:10:f5:41:d7:6b: ae:14:12:06:17:ce:59:f1:bd:85:0d:d8:f0:88:bb:84:9d:78: 5f:d9:7f:04:f0:06:72:6c:f8:58:c4:69:4c:b7:1c:88:14:c4: a0:5a:16:3c:e7:d6:03:ed:50:0e:de:e7:f1:cf:b4:47:f1:4e: 29:be:49:02:a0:14:74:0a:70:43:c6:f0:c1:ca:1e:0b:be:2d: 88:16:9a:4b:f4:d6:28:7d:71:3a:e3:28:e9:d5:ac:7a:fe:fb: 6f:6a:ce:7a:6b:8f:3b:5b:f7:1f:3c:16:0b:46:46:34:37:58: 27:97:cf:20:6b:6a:6c:56:99:d1:3f:43:de:c6:a9:fa:52:08: 7c:bd:e8:ba:ad:2d:15:d0:07:bd:a7:2c:ae:dc:51:f3:49:80: 34:c2:50:a2:77:09:74:b3:97:63:bf:85:dd:89:0e:26:de:44: cf:7f:bd:2e:c7:aa:3a:d4:b3:01:7d:a9:0d:76:a6:52:f5:8f: cc:f4:81:a0:77:5f:ea:8a:44:62:c5:ae:13:71:ad:f3:22:2d: dc:bd:4b:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0uyUThRBQp2Jr9zSBuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzhhMTFiYzc0NzhmOWNkMmJkNjQ0NDI5YmNjNmMzYmU2MWZlNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxv7MjJdRosII84KaZo7Ea8nsmDj lbcoafHB7OcdnRmVlyjoE5Lz6gW/jswsy6PJt5FMATXkHahjDPLHO3VD5zv7kvmr oKqOQJQnApEjniYDhbsY8XG5Qh5K/EhSmHLLvy5oH61MucCE/6QggPImP9B6VQh9 pTeSTww7ud29WDScYuituI7YV7gn1SLuPRA6iR3N7CF1ngm7u8fm5ncbzXCua9VG 0YzeMYs31r7wBsvELOFWOfxFXva3fJtuzPLByUnledqrVuYchcGP/9KGyTbORct3 AZN3l+qBhNWEjOXaWL2zDFHEJDSkMDB3qH7wpkIMqBC88Ttydkg3Ksz0XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPeKEbx0ePnNK9ZEQpvMbDvmH+VWMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvOTRvUnZIUjQtYzByMWtSQ204eHNPLVlmNVZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshMoMA0G CSqGSIb3DQEBCwUAA4IBAQAr2gV95qezOdFy1i5GVhCgKEC4FV8BU/Y7ZRIJFeUy yW9KHg25ijMmH+Qr584m3r2aEPVB12uuFBIGF85Z8b2FDdjwiLuEnXhf2X8E8AZy bPhYxGlMtxyIFMSgWhY859YD7VAO3ufxz7RH8U4pvkkCoBR0CnBDxvDByh4Lvi2I FppL9NYofXE64yjp1ax6/vtvas56a487W/cfPBYLRkY0N1gnl88ga2psVpnRP0Pe xqn6Ugh8vei6rS0V0Ae9pyyu3FHzSYA0wlCidwl0s5djv4XdiQ4m3kTPf70ux6o6 1LMBfakNdqZS9Y/M9IGgd1/qikRixa4Tca3zIi3cvUv2 -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:53 2026 by rpki-client