This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/pC6yrC521DUSFdHvnN6nZBgdl4c.roa File: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (raw, json) Hash identifier: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI= Subject key identifier: A4:2E:B2:AC:2E:76:D4:35:12:15:D1:EF:9C:DE:A7:64:18:1D:97:87 Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7 Certificate serial: 019B7BA38AEF044933C54A9168A5668DC941 Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/pC6yrC521DUSFdHvnN6nZBgdl4c.roa Signing time: Thu 01 Jan 2026 22:17:54 +0000 ROA not before: Thu 01 Jan 2026 22:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.15.16.0/24 maxlen: 24 194.15.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8a:ef:04:49:33:c5:4a:91:68:a5:66:8d:c9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7 Validity Not Before: Jan 1 22:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a42eb2ac2e76d4351215d1ef9cdea764181d9787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:de:99:a1:4e:1b:ea:43:ba:d5:ee:41:b5: 35:9d:90:5e:48:a2:9f:fa:c9:db:75:ee:52:bb:08: 62:af:ff:8d:f3:9c:b4:1a:14:24:6f:7f:64:66:18: 03:43:5a:ff:ce:25:34:29:db:cc:39:c7:58:f5:f3: b3:0c:08:8b:64:c8:8e:2b:37:30:e7:ec:f0:11:89: 98:8a:eb:c8:15:a8:90:cb:f4:6a:d8:29:81:04:7c: 09:b6:61:96:63:59:73:16:0f:c0:36:e8:70:3d:47: 83:e2:35:be:5a:ee:1e:63:73:09:ff:d2:a7:fa:39: 59:21:45:f8:b7:8e:a6:68:c5:57:f3:49:aa:89:d9: 7b:b6:9f:b4:08:98:e2:c1:68:a3:2c:bf:3f:dc:47: d5:5b:3b:62:9f:38:0f:c9:74:19:44:be:0c:0e:37: b8:54:73:35:f4:32:46:5a:3f:93:4e:66:fc:97:42: 2c:24:9e:4c:c7:9b:23:c6:2d:b4:6a:49:c0:93:6f: 69:96:71:fa:ed:f0:c9:e2:34:de:83:ea:14:cb:01: 70:05:1a:ed:3b:54:56:d9:17:42:c0:f6:3f:a7:78: 99:19:09:83:2c:bd:fb:60:57:21:eb:f0:22:4f:82: a8:55:52:a3:85:a9:d0:0f:9f:99:89:ed:b7:94:20: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:B2:AC:2E:76:D4:35:12:15:D1:EF:9C:DE:A7:64:18:1D:97:87 X509v3 Authority Key Identifier: keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/pC6yrC521DUSFdHvnN6nZBgdl4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.16.0/24 194.15.18.0/24 Signature Algorithm: sha256WithRSAEncryption 39:28:87:83:61:f3:74:c1:d8:be:23:a9:c7:29:d3:1e:51:0d: 68:fa:23:fa:26:48:82:75:c4:64:a7:1d:77:a4:dd:69:ee:ae: d7:c9:52:2b:a2:2b:83:7a:7e:ee:0d:03:12:5c:f9:41:ba:b4: b1:ec:90:01:9b:9c:f6:c3:09:6b:a4:66:30:db:17:a9:10:2e: 93:d5:d3:3a:5c:69:fc:b6:df:a7:59:ed:e9:bf:62:7c:a4:28: c0:0b:a7:0d:3a:1b:9a:33:ba:8d:44:61:40:0c:15:e5:d5:7f: 8b:54:5f:df:42:80:93:55:d1:85:42:57:4d:50:95:08:7e:d2: b3:13:0d:d7:f6:6e:0a:20:47:b5:e5:e7:53:e9:7f:3b:2a:f1: 7e:87:c6:95:45:db:7f:ae:c5:8e:17:4a:26:ff:79:5b:c4:20: 04:37:32:98:de:82:e9:72:0d:b7:42:93:d8:5c:45:ed:07:6a: 6c:6e:7b:c3:e4:21:e2:d5:32:36:54:d8:44:3b:6c:48:d1:61: c2:83:5d:d7:79:19:78:6b:32:b9:ed:19:fe:59:6a:a3:50:5e: 09:5d:aa:c8:8e:1f:fa:62:00:d1:ec:0f:c7:5c:e6:12:e8:d6: e2:a3:3b:86:4c:81:e7:e1:49:71:f4:75:a7:88:6e:d3:28:98: d2:f0:3c:82 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o4rvBEkzxUqRaKVmjclBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz YjgyYTcwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJlYjJhYzJlNzZkNDM1MTIxNWQxZWY5Y2RlYTc2NDE4MWQ5Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmbemaFOG+pDutXuQbU1nZBeSKKf +snbde5Suwhir/+N85y0GhQkb39kZhgDQ1r/ziU0KdvMOcdY9fOzDAiLZMiOKzcw 5+zwEYmYiuvIFaiQy/Rq2CmBBHwJtmGWY1lzFg/ANuhwPUeD4jW+Wu4eY3MJ/9Kn +jlZIUX4t46maMVX80mqidl7tp+0CJjiwWijLL8/3EfVWztinzgPyXQZRL4MDje4 VHM19DJGWj+TTmb8l0IsJJ5Mx5sjxi20aknAk29plnH67fDJ4jTeg+oUywFwBRrt O1RW2RdCwPY/p3iZGQmDLL37YFch6/AiT4KoVVKjhanQD5+Zie23lCBvVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKQusqwudtQ1EhXR75zep2QYHZeHMB8GA1UdIwQY MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt YWI0YmEzMzJmZTE1LzEvcEM2eXJDNTIxRFVTRmRIdm5ONm5aQmdkbDRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1 LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwg8QAwQA wg8SMA0GCSqGSIb3DQEBCwUAA4IBAQA5KIeDYfN0wdi+I6nHKdMeUQ1o+iP6JkiC dcRkpx13pN1p7q7XyVIroiuDen7uDQMSXPlBurSx7JABm5z2wwlrpGYw2xepEC6T 1dM6XGn8tt+nWe3pv2J8pCjAC6cNOhuaM7qNRGFADBXl1X+LVF/fQoCTVdGFQldN UJUIftKzEw3X9m4KIEe15edT6X87KvF+h8aVRdt/rsWOF0om/3lbxCAENzKY3oLp cg23QpPYXEXtB2psbnvD5CHi1TI2VNhEO2xI0WHCg13XeRl4azK57Rn+WWqjUF4J XarIjh/6YgDR7A/HXOYS6NbiozuGTIHn4Ulx9HWniG7TKJjS8DyC -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:55 2026 by rpki-client