This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/_Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa File: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (raw, json) Hash identifier: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo= Subject key identifier: FD:4C:37:3F:05:B7:CE:E8:57:FF:DA:9D:35:51:CC:F7:12:D2:87:F6 Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0 Certificate serial: 019B78A220207B909DDCB0873B028ABFE83B Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/_Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa Signing time: Thu 01 Jan 2026 08:17:29 +0000 ROA not before: Thu 01 Jan 2026 08:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211699 IP address blocks: 194.113.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:20:20:7b:90:9d:dc:b0:87:3b:02:8a:bf:e8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0 Validity Not Before: Jan 1 08:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4c373f05b7cee857ffda9d3551ccf712d287f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:fd:59:d0:af:14:fb:62:dc:12:c2:e1:76: bb:06:e8:48:c8:c3:09:a3:70:d7:e5:99:f0:da:08: 3d:b5:c8:f7:a8:27:8d:ee:44:69:08:bd:a7:a9:97: e0:16:43:cc:c2:d2:d3:42:ee:43:e0:e8:11:48:ee: ca:f8:a2:02:6b:b6:d4:99:31:51:86:17:79:d0:b4: 1f:59:04:06:37:08:23:2f:46:71:eb:9e:00:3b:a3: bd:d7:01:10:57:39:6a:71:a6:2a:d6:35:53:f2:fb: a5:ae:52:18:91:51:43:0a:40:80:e5:e6:cb:fa:97: 1a:12:bc:bb:d2:aa:5c:66:c2:c9:f7:44:df:fe:51: 67:2f:a3:67:c9:b1:71:50:86:b9:6d:cb:14:50:1f: cc:e0:49:f2:d1:5d:6e:f5:24:79:f5:45:4b:f1:c1: 21:33:39:d3:90:58:26:b3:ba:07:33:6b:cb:7b:10: 84:9d:98:3a:5f:c8:c0:d1:03:e7:3b:d4:70:d2:bc: 6c:5c:50:29:df:6f:40:ba:0d:ce:71:9f:06:96:88: 1f:f4:0b:f4:fc:b2:49:25:b1:4c:7c:ac:45:9b:9b: 55:7c:31:1d:98:66:ea:0b:c6:00:a3:3b:2f:3b:ac: c3:18:fa:65:e2:23:5f:65:71:c2:ba:94:41:f8:1f: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4C:37:3F:05:B7:CE:E8:57:FF:DA:9D:35:51:CC:F7:12:D2:87:F6 X509v3 Authority Key Identifier: keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/_Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.156.0/22 Signature Algorithm: sha256WithRSAEncryption 98:5c:b8:5b:e8:31:3a:a1:7b:60:79:8b:ca:bb:b4:db:02:ad: 44:37:9c:6b:3a:65:87:af:51:a9:89:bb:af:e6:fa:7b:c6:46: db:55:d9:2f:a6:da:13:f1:5c:bc:c1:a3:7e:ed:0d:a5:cb:b6: d9:ee:b4:22:ba:09:3e:58:36:5d:52:3b:de:3a:6d:a3:96:d8: a3:51:a8:af:7a:2b:14:02:b2:5a:3f:5e:96:3d:d8:49:45:eb: 62:ed:82:bb:f0:11:a2:9e:61:34:79:12:54:e3:15:74:b0:b9: d6:ac:7a:b8:1f:26:e5:48:98:ac:ac:bb:2b:0f:2b:fd:36:6f: 65:9f:14:b1:57:71:1e:f9:b5:70:16:01:37:41:3d:54:2a:4a: 01:5f:a8:6b:7b:9d:2a:16:08:4f:54:2d:4e:4b:26:7a:0a:e8: 0b:ec:5f:78:60:4b:41:6c:93:d9:0c:d4:cb:04:8e:8a:1f:a6: 35:66:e0:50:10:e2:bd:3a:1e:c9:36:5c:71:24:01:9e:57:7c: 08:ba:b4:08:94:92:45:20:dc:a3:e0:99:79:f6:e3:d8:fe:d7: 83:df:79:0b:32:56:10:5a:fb:dc:45:c1:8d:ba:40:fd:f6:6f: 44:d7:12:bb:01:ec:be:9c:3e:22:11:70:aa:1e:db:62:3e:8f: 11:12:5c:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiAge5Cd3LCHOwKKv+g7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz N2I0ZDAwHhcNMjYwMTAxMDgxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDRjMzczZjA1YjdjZWU4NTdmZmRhOWQzNTUxY2NmNzEyZDI4N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bz9WdCvFPti3BLC4Xa7BuhIyMMJ o3DX5Znw2gg9tcj3qCeN7kRpCL2nqZfgFkPMwtLTQu5D4OgRSO7K+KICa7bUmTFR hhd50LQfWQQGNwgjL0Zx654AO6O91wEQVzlqcaYq1jVT8vulrlIYkVFDCkCA5ebL +pcaEry70qpcZsLJ90Tf/lFnL6NnybFxUIa5bcsUUB/M4Eny0V1u9SR59UVL8cEh MznTkFgms7oHM2vLexCEnZg6X8jA0QPnO9Rw0rxsXFAp329Aug3OcZ8Glogf9Av0 /LJJJbFMfKxFm5tVfDEdmGbqC8YAozsvO6zDGPpl4iNfZXHCupRB+B+4gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1MNz8Ft87oV//anTVRzPcS0of2MB8GA1UdIwQY MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt MDI4ZmU1MjU1YmJlLzEvX1V3M1B3VzN6dWhYXzlxZE5WSE05eExTaF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwnGcMA0G CSqGSIb3DQEBCwUAA4IBAQCYXLhb6DE6oXtgeYvKu7TbAq1EN5xrOmWHr1Gpibuv 5vp7xkbbVdkvptoT8Vy8waN+7Q2ly7bZ7rQiugk+WDZdUjveOm2jltijUaiveisU ArJaP16WPdhJReti7YK78BGinmE0eRJU4xV0sLnWrHq4HyblSJisrLsrDyv9Nm9l nxSxV3Ee+bVwFgE3QT1UKkoBX6hre50qFghPVC1OSyZ6CugL7F94YEtBbJPZDNTL BI6KH6Y1ZuBQEOK9Oh7JNlxxJAGeV3wIurQIlJJFINyj4Jl59uPY/teD33kLMlYQ WvvcRcGNukD99m9E1xK7Aey+nD4iEXCqHttiPo8RElwK -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:38 2026 by rpki-client