This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/RkAA10vCg6MkKKDZVdqR-tBX7bM.roa File: RkAA10vCg6MkKKDZVdqR-tBX7bM.roa (raw, json) Hash identifier: 3GXYAmGoE5ebf+ZEUr6uNtnsEAbhBs1D4PtYm72f7Lc= Subject key identifier: 46:40:00:D7:4B:C2:83:A3:24:28:A0:D9:55:DA:91:FA:D0:57:ED:B3 Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Certificate serial: 019B7835398184E419D7920F9AE1D4870B7F Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/RkAA10vCg6MkKKDZVdqR-tBX7bM.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25241 IP address blocks: 195.234.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:39:81:84:e4:19:d7:92:0f:9a:e1:d4:87:0b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=464000d74bc283a32428a0d955da91fad057edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:87:26:f9:34:02:c5:1c:83:f7:ff:ff:07: 0a:84:b2:8e:fe:fb:ea:a3:3c:f6:c0:12:02:d0:cf: 0c:07:a2:85:8b:c8:89:6a:d9:60:07:db:15:30:0a: 5c:7b:6e:53:f1:7a:8e:ec:a8:06:f7:bc:38:69:f9: ca:08:5b:f5:9a:89:35:f4:ee:b2:6a:a2:25:17:c7: 3a:6c:38:12:53:25:f2:7f:32:85:fc:65:ac:cd:21: d0:03:05:4d:50:37:b5:bb:1e:97:0c:74:78:44:34: f4:f9:74:8f:e8:e6:7a:77:01:06:64:be:9f:12:b4: ae:84:46:72:c6:9f:37:40:7e:3d:28:46:c5:2b:ca: 9c:62:67:a1:89:d8:e7:8a:1a:ff:91:ee:cf:02:96: a2:ba:5d:9e:77:23:23:7b:ec:31:9a:e4:b3:9a:4f: bf:6d:31:a5:40:37:c9:5a:c9:03:41:f8:88:6d:68: f0:f9:95:f8:73:50:a9:89:41:d2:96:b6:28:f6:ad: e2:78:ba:13:fa:65:3d:92:0e:23:13:49:29:7c:d5: ec:0d:bf:7c:b5:af:b5:cd:28:7d:f6:78:31:31:6b: 44:ab:b3:01:34:28:7c:5f:b8:59:33:b6:70:6c:a3: 70:4a:29:ab:8b:ae:e6:8e:79:25:26:69:99:18:98: c3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:40:00:D7:4B:C2:83:A3:24:28:A0:D9:55:DA:91:FA:D0:57:ED:B3 X509v3 Authority Key Identifier: keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/RkAA10vCg6MkKKDZVdqR-tBX7bM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.144.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f9:f4:cd:f6:4e:40:c6:c7:fc:bb:36:d7:d6:b9:fb:eb:78: d5:07:37:56:8b:09:a5:3f:66:19:6e:ed:9b:02:d3:e2:28:45: a4:68:db:0b:bf:19:ee:40:99:73:4e:54:31:2d:7f:78:c2:f9: 66:79:87:3b:a6:24:fe:98:55:cd:d5:c8:9f:e2:2d:21:d0:ac: 7d:fc:b1:94:1d:09:3e:1b:e4:47:4c:b8:c3:61:f4:d3:42:83: 71:0b:b2:2c:1f:79:be:92:0e:59:5a:a8:8a:fb:79:54:70:63: 14:bf:66:f6:30:30:d7:5a:43:d4:3b:78:7c:e1:92:82:40:00: a2:8d:a4:0e:d0:2e:88:62:d8:1f:18:b8:e2:4b:d3:cd:f3:0b: 7b:76:d1:d4:8b:15:7b:c2:88:f0:27:10:34:5e:fc:bc:a2:de: e3:4e:4f:73:82:22:29:09:65:26:2d:55:44:1c:35:39:0c:99: 66:8f:3c:06:85:8f:88:ec:b1:49:f2:26:02:1b:bc:8a:89:3f: 5d:45:f7:51:a3:c8:2e:58:1b:10:98:e5:cf:d1:0b:18:19:2b: 49:cc:0e:8c:0a:96:90:4f:ee:24:2c:63:3f:70:67:32:a4:7b: 70:53:2a:25:22:43:b2:63:f5:65:39:ec:bf:db:4c:bb:24:c2: 88:93:67:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTmBhOQZ15IPmuHUhwt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5 OTE2Y2UwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQwMDBkNzRiYzI4M2EzMjQyOGEwZDk1NWRhOTFmYWQwNTdlZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLKHJvk0AsUcg/f//wcKhLKO/vvq ozz2wBIC0M8MB6KFi8iJatlgB9sVMApce25T8XqO7KgG97w4afnKCFv1mok19O6y aqIlF8c6bDgSUyXyfzKF/GWszSHQAwVNUDe1ux6XDHR4RDT0+XSP6OZ6dwEGZL6f ErSuhEZyxp83QH49KEbFK8qcYmehidjnihr/ke7PApaiul2edyMje+wxmuSzmk+/ bTGlQDfJWskDQfiIbWjw+ZX4c1CpiUHSlrYo9q3ieLoT+mU9kg4jE0kpfNXsDb98 ta+1zSh99ngxMWtEq7MBNCh8X7hZM7ZwbKNwSimri67mjnklJmmZGJjDkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZAANdLwoOjJCig2VXakfrQV+2zMB8GA1UdIwQY MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct NzUyNmM5ZjA1Y2Q4LzEvUmtBQTEwdkNnNk1rS0tEWlZkcVItdEJYN2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4 LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qQMA0G CSqGSIb3DQEBCwUAA4IBAQAC+fTN9k5Axsf8uzbX1rn763jVBzdWiwmlP2YZbu2b AtPiKEWkaNsLvxnuQJlzTlQxLX94wvlmeYc7piT+mFXN1cif4i0h0Kx9/LGUHQk+ G+RHTLjDYfTTQoNxC7IsH3m+kg5ZWqiK+3lUcGMUv2b2MDDXWkPUO3h84ZKCQACi jaQO0C6IYtgfGLjiS9PN8wt7dtHUixV7wojwJxA0Xvy8ot7jTk9zgiIpCWUmLVVE HDU5DJlmjzwGhY+I7LFJ8iYCG7yKiT9dRfdRo8guWBsQmOXP0QsYGStJzA6MCpaQ T+4kLGM/cGcypHtwUyolIkOyY/VlOey/20y7JMKIk2eo -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:39 2026 by rpki-client