This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/asV4ldvfYTXPG0PavovSIEQlXiA.roa File: asV4ldvfYTXPG0PavovSIEQlXiA.roa (raw, json) Hash identifier: IyM7pBpdDUA0K3w3aqxO7lWxJ8nogAU13AIowYVtg+Y= Subject key identifier: 6A:C5:78:95:DB:DF:61:35:CF:1B:43:DA:BE:8B:D2:20:44:25:5E:20 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6958BBA34537451AD400AC15C436C Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/asV4ldvfYTXPG0PavovSIEQlXiA.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5505 IP address blocks: 188.130.247.0/24 maxlen: 24 188.130.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:8b:ba:34:53:74:51:ad:40:0a:c1:5c:43:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac57895dbdf6135cf1b43dabe8bd22044255e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:14:f9:57:ab:17:20:b8:0d:65:da:c4:a9: 01:17:8e:cd:70:ce:ec:ce:86:a5:04:08:59:e1:26: e8:77:e5:c9:db:94:55:f4:05:8c:12:b1:98:d5:e3: 07:e6:3d:33:c8:21:39:7d:cd:90:f9:12:ad:51:d2: 39:b8:5a:12:c1:89:1a:3f:23:b0:73:75:92:bd:45: f9:29:65:c8:05:ba:2b:ad:4c:bb:03:3c:11:4d:f0: c8:09:3d:2e:5f:d2:0f:cf:b5:da:1e:64:7b:99:92: 70:03:90:ee:83:bd:cc:1e:a7:0b:10:e3:6b:a0:25: 1a:2a:17:0c:ad:dd:ff:e9:5e:56:1e:fd:b9:e8:a4: b1:11:e8:97:46:da:54:8c:4d:3d:8e:11:60:c9:dd: fd:37:ca:70:f9:0b:db:37:b7:8e:71:e8:f6:1a:1d: 86:49:df:ca:85:34:a1:1b:da:28:99:53:2a:ee:69: d6:2a:fe:f8:68:de:a1:3b:9b:85:1f:45:1e:6c:47: 20:c5:52:75:47:7b:dc:a9:00:d0:f6:2e:5e:45:56: ee:d2:a1:2b:06:e6:2b:01:4a:0b:59:4d:cf:cc:50: 78:28:22:a7:29:79:62:7a:e5:9e:13:9b:f3:a0:34: 90:0c:73:6f:df:ea:e2:46:a5:e9:13:8a:27:ea:c4: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C5:78:95:DB:DF:61:35:CF:1B:43:DA:BE:8B:D2:20:44:25:5E:20 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/asV4ldvfYTXPG0PavovSIEQlXiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.247.0/24 188.130.254.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:bc:da:a1:72:d9:6e:d2:85:f0:01:51:e5:57:08:c1:90:66: 2a:c3:44:15:f4:34:7e:01:83:6c:25:16:51:59:be:c7:42:32: bd:fd:a7:e9:99:1b:4b:25:c3:d0:07:8a:ec:15:28:b6:b3:5a: 31:3f:a8:34:27:7a:31:77:28:6c:95:35:4c:a6:60:a9:71:9b: e4:97:07:6f:15:62:75:f2:23:87:8a:bf:00:42:92:42:68:8e: fa:32:93:2d:a1:93:34:b1:91:f8:52:aa:a2:cc:3d:30:47:f2: c3:cc:ac:b2:fc:26:a2:01:c3:02:ec:59:dd:7c:5f:99:be:eb: 76:d7:f1:79:52:70:37:6d:8a:cb:87:d3:92:73:02:69:d5:08: 20:d7:d8:ed:89:91:72:fb:50:01:38:db:dc:f3:5e:88:e9:64: 8e:68:8c:2b:c0:18:31:2a:cf:90:e9:aa:dc:30:94:46:85:2a: 40:7c:8e:23:ee:b6:7b:0f:ba:75:36:06:dc:0c:1a:18:41:5f: 02:ec:11:3c:71:f4:9b:4b:51:16:c5:2d:bb:09:2b:f6:f0:8a: 17:bd:b7:54:28:a7:d4:6c:b1:4f:e1:d0:43:83:72:75:60:6a: c0:2b:93:ca:fd:39:0f:a7:0c:45:8c:75:4c:47:28:6c:c9:40: 94:ad:51:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpWLujRTdFGtQArBXENsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWM1Nzg5NWRiZGY2MTM1Y2YxYjQzZGFiZThiZDIyMDQ0MjU1ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjIU+VerFyC4DWXaxKkBF47NcM7s zoalBAhZ4Sbod+XJ25RV9AWMErGY1eMH5j0zyCE5fc2Q+RKtUdI5uFoSwYkaPyOw c3WSvUX5KWXIBborrUy7AzwRTfDICT0uX9IPz7XaHmR7mZJwA5Dug73MHqcLEONr oCUaKhcMrd3/6V5WHv256KSxEeiXRtpUjE09jhFgyd39N8pw+QvbN7eOcej2Gh2G Sd/KhTShG9oomVMq7mnWKv74aN6hO5uFH0UebEcgxVJ1R3vcqQDQ9i5eRVbu0qEr BuYrAUoLWU3PzFB4KCKnKXlieuWeE5vzoDSQDHNv3+riRqXpE4on6sT/zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGrFeJXb32E1zxtD2r6L0iBEJV4gMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvYXNWNGxkdmZZVFhQRzBQYXZvdlNJRVFsWGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvIL3AwQA vIL+MA0GCSqGSIb3DQEBCwUAA4IBAQAOvNqhctlu0oXwAVHlVwjBkGYqw0QV9DR+ AYNsJRZRWb7HQjK9/afpmRtLJcPQB4rsFSi2s1oxP6g0J3oxdyhslTVMpmCpcZvk lwdvFWJ18iOHir8AQpJCaI76MpMtoZM0sZH4UqqizD0wR/LDzKyy/CaiAcMC7Fnd fF+Zvut21/F5UnA3bYrLh9OScwJp1Qgg19jtiZFy+1ABONvc816I6WSOaIwrwBgx Ks+Q6arcMJRGhSpAfI4j7rZ7D7p1NgbcDBoYQV8C7BE8cfSbS1EWxS27CSv28IoX vbdUKKfUbLFP4dBDg3J1YGrAK5PK/TkPpwxFjHVMRyhsyUCUrVFH -----END CERTIFICATE-----Generated at Sun Jan 25 22:46:59 2026 by rpki-client