This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/RcBVtc8qZ-WY09LgrXE9UddKRjU.roa File: RcBVtc8qZ-WY09LgrXE9UddKRjU.roa (raw, json) Hash identifier: PrGLDOIIW6h+3jbP4QXwCv6loJxjMEdM94B7tYzfRzI= Subject key identifier: 45:C0:55:B5:CF:2A:67:E5:98:D3:D2:E0:AD:71:3D:51:D7:4A:46:35 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B7BA35955102CC67B853E13FB4098CAA1 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/RcBVtc8qZ-WY09LgrXE9UddKRjU.roa Signing time: Thu 01 Jan 2026 22:17:41 +0000 ROA not before: Thu 01 Jan 2026 22:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 194.34.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:59:55:10:2c:c6:7b:85:3e:13:fb:40:98:ca:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45c055b5cf2a67e598d3d2e0ad713d51d74a4635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:ca:a1:96:8d:46:89:ac:43:07:b7:dd:6d: 35:ed:29:44:47:ee:38:e1:13:a0:cc:bd:0d:93:20: 38:26:84:56:ea:53:de:29:f7:17:f7:94:0f:ba:8d: 0c:56:b4:c5:7e:4d:cc:32:82:86:4f:96:77:5f:7b: 46:8f:7c:fa:db:de:00:8f:fd:54:3f:fb:7a:90:fd: 8e:38:d0:a6:61:fc:de:5e:ee:b8:d2:01:21:db:9d: ce:3c:ba:4b:57:e1:40:cb:88:36:ca:3e:09:70:b0: 20:5e:01:68:c1:bb:2a:ee:cd:6d:c5:04:9e:4b:ac: 66:91:0e:5a:ba:4f:f0:93:d5:e1:96:a2:94:b2:bc: 98:d3:51:16:3d:9a:93:b4:dd:52:55:43:19:70:c1: e7:c6:b8:e4:a3:24:5c:e1:12:87:7e:d0:56:a7:08: bd:69:c4:6d:b4:30:62:61:74:b3:9e:78:e3:06:f6: 35:24:8b:67:e7:70:55:19:b0:f6:93:0f:61:48:58: 8e:83:a0:c0:96:5d:ca:ab:81:6e:31:ea:44:d0:fb: 17:44:87:b3:a0:30:ef:3e:59:d4:c6:15:53:8d:b4: 91:6a:04:c5:d4:7d:32:ab:86:2d:3d:b0:e0:a6:56: 96:fa:b1:a2:c5:28:4d:36:44:40:1f:e5:3d:f7:93: f2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C0:55:B5:CF:2A:67:E5:98:D3:D2:E0:AD:71:3D:51:D7:4A:46:35 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/RcBVtc8qZ-WY09LgrXE9UddKRjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.105.0/24 Signature Algorithm: sha256WithRSAEncryption 76:8e:eb:a0:ff:4b:de:59:70:89:2a:fb:80:36:87:b9:39:2c: 2b:2d:1b:1d:dd:89:01:7c:21:ce:ca:c6:37:7e:46:c0:72:ad: fd:e9:1b:b0:91:1b:ba:60:ff:41:b5:b3:24:6f:c1:e0:c3:aa: 3d:a0:27:17:12:03:c5:9f:f7:8f:fb:93:eb:88:c9:a6:34:b2: 1e:1d:88:20:54:f2:08:59:1b:50:52:5e:12:3b:a4:7a:89:0d: 62:3a:f3:40:b1:38:60:ca:14:2b:5b:fe:a9:b7:22:99:6b:1f: 4d:ea:94:56:04:f1:09:07:93:b6:ef:9b:2c:51:fa:6a:79:76: 32:a4:10:e8:26:df:e3:c2:72:b2:01:3d:ea:e6:bd:b5:f5:50: c4:c2:b5:0c:94:20:76:f6:3a:89:81:8d:ee:af:51:67:ed:f7: 93:91:8f:c3:40:83:bf:7f:2a:e2:45:f0:8d:d6:36:a9:1c:24: b8:ef:0d:6f:e7:b2:e0:95:b8:89:10:8a:2f:5d:83:66:3c:c3: 33:42:20:b2:76:a5:21:c0:87:4f:4f:f9:62:01:9d:6d:c2:1e: 81:69:2b:05:02:1a:72:28:54:9d:4c:0d:41:48:56:45:17:54: a2:6f:8d:e4:d4:d1:d2:5c:d3:63:98:76:83:8f:e0:1a:a9:c5: 33:96:d6:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1lVECzGe4U+E/tAmMqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWMwNTViNWNmMmE2N2U1OThkM2QyZTBhZDcxM2Q1MWQ3NGE0NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBLKoZaNRomsQwe33W017SlER+44 4ROgzL0NkyA4JoRW6lPeKfcX95QPuo0MVrTFfk3MMoKGT5Z3X3tGj3z6294Aj/1U P/t6kP2OONCmYfzeXu640gEh253OPLpLV+FAy4g2yj4JcLAgXgFowbsq7s1txQSe S6xmkQ5auk/wk9XhlqKUsryY01EWPZqTtN1SVUMZcMHnxrjkoyRc4RKHftBWpwi9 acRttDBiYXSznnjjBvY1JItn53BVGbD2kw9hSFiOg6DAll3Kq4FuMepE0PsXRIez oDDvPlnUxhVTjbSRagTF1H0yq4YtPbDgplaW+rGixShNNkRAH+U995PyDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXAVbXPKmflmNPS4K1xPVHXSkY1MB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvUmNCVnRjOHFaLVdZMDlMZ3JYRTlVZGRLUmpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiJpMA0G CSqGSIb3DQEBCwUAA4IBAQB2juug/0veWXCJKvuANoe5OSwrLRsd3YkBfCHOysY3 fkbAcq396RuwkRu6YP9BtbMkb8Hgw6o9oCcXEgPFn/eP+5PriMmmNLIeHYggVPII WRtQUl4SO6R6iQ1iOvNAsThgyhQrW/6ptyKZax9N6pRWBPEJB5O275ssUfpqeXYy pBDoJt/jwnKyAT3q5r219VDEwrUMlCB29jqJgY3ur1Fn7feTkY/DQIO/fyriRfCN 1japHCS47w1v57LglbiJEIovXYNmPMMzQiCydqUhwIdPT/liAZ1twh6BaSsFAhpy KFSdTA1BSFZFF1Sib43k1NHSXNNjmHaDj+AaqcUzltaN -----END CERTIFICATE-----Generated at Tue Jan 20 15:34:00 2026 by rpki-client