This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/rcLAbqWbscU0-zedseFFQJGt_wI.roa File: rcLAbqWbscU0-zedseFFQJGt_wI.roa (raw, json) Hash identifier: ksy9iE6IRNGp1O9iSJlmzmpx+QDptXJv7zwnwiulq0Q= Subject key identifier: AD:C2:C0:6E:A5:9B:B1:C5:34:FB:37:9D:B1:E1:45:40:91:AD:FF:02 Certificate issuer: /CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Certificate serial: 019B7D5D25E75CF477AC746F32368EE8E248 Authority key identifier: 4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/rcLAbqWbscU0-zedseFFQJGt_wI.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201864 IP address blocks: 146.19.138.0/24 maxlen: 24 176.10.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.mft rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:25:e7:5c:f4:77:ac:74:6f:32:36:8e:e8:e2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9004b3bf8a1e17bd6066e051896d3bebd66973 Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adc2c06ea59bb1c534fb379db1e1454091adff02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:56:5f:2d:23:78:25:e6:f3:94:10:2f:1b: 85:11:18:f8:d2:61:11:22:7f:a3:39:ab:b5:37:e7: 8f:9e:9a:2e:f6:4f:51:dc:ea:32:11:93:2f:95:80: d8:89:a5:17:1f:82:61:21:b3:4b:a2:08:fe:f1:12: ae:b4:ce:a5:ba:4d:cb:76:02:23:09:2e:fe:45:33: a4:5a:a6:fa:9b:ea:0e:3b:ac:74:d2:3c:c9:0c:e3: 9a:8f:db:6a:e1:f5:17:06:57:1a:d7:6b:ce:5d:1d: 51:82:6a:35:51:04:36:6f:79:92:42:b7:24:e4:27: cc:8b:d9:ef:8f:96:ac:19:8d:73:5d:a2:2a:7a:9a: 99:f9:4e:33:87:aa:6f:59:ea:99:49:58:7e:91:d8: fa:56:7a:34:1d:f0:68:5e:32:ea:40:b4:b4:67:53: 92:14:65:d2:3b:13:82:ac:02:6a:e8:40:c6:7d:60: 7f:36:3d:c3:99:c7:4b:29:e1:ef:8e:e8:76:16:ba: 12:4a:09:0d:dc:51:ee:3f:1a:52:57:bb:50:37:83: ca:57:67:cf:f7:ed:e0:c5:a1:d5:51:8e:ed:43:90: 6d:67:34:d5:1d:70:38:f4:39:0b:5b:5b:14:18:dd: 46:07:1b:1d:91:1a:3f:a7:ab:9b:f6:79:e3:f3:91: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C2:C0:6E:A5:9B:B1:C5:34:FB:37:9D:B1:E1:45:40:91:AD:FF:02 X509v3 Authority Key Identifier: keyid:4F:90:04:B3:BF:8A:1E:17:BD:60:66:E0:51:89:6D:3B:EB:D6:69:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5AEs7-KHhe9YGbgUYltO-vWaXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/rcLAbqWbscU0-zedseFFQJGt_wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/eb3e00-e2aa-447f-91f3-8a545cb35a9a/1/T5AEs7-KHhe9YGbgUYltO-vWaXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.138.0/24 176.10.92.0/24 Signature Algorithm: sha256WithRSAEncryption 69:51:16:2b:18:f1:e1:8a:b4:01:2a:ca:9e:c4:ba:18:8e:37: a4:57:a8:19:9c:51:cb:d3:7e:de:92:ce:f7:03:2a:78:cf:36: 18:50:57:f8:71:a7:93:3f:fe:e4:9b:29:d9:ff:68:8e:7b:d6: ed:76:d4:9a:31:61:c8:a5:5a:ce:09:3e:b9:6b:4e:8d:f3:14: 95:94:bc:cf:91:a2:65:33:32:4f:e2:49:af:8a:0c:b6:4a:ac: a7:07:9d:eb:d5:1d:f3:17:7c:06:32:7c:4e:04:41:8b:ac:c2: dc:50:b8:6b:a5:fa:d8:69:94:74:34:fd:c8:ab:6b:05:58:71: 33:f0:b2:4d:8a:1b:ff:8c:e8:5f:86:48:96:0a:fc:2d:50:11: f8:a1:4b:19:49:2e:47:1d:a9:0e:e4:f3:89:df:99:c1:71:17: 3c:d7:dd:3b:f5:e2:6c:fb:c8:2f:30:b7:fe:d3:93:59:a0:5b: 4e:8a:f5:91:73:0f:d8:5a:e3:5e:b3:90:83:99:4b:cc:20:09: 17:c5:60:50:1a:52:af:d7:6f:7e:ec:c7:1a:9f:2d:92:7e:cf: 98:b4:18:e8:70:e3:39:ac:68:00:a6:19:74:6e:0a:5f:41:af: 68:4d:36:19:2c:2c:a6:9f:8f:55:30:15:74:80:b9:bd:ba:81: 6d:f0:d1:27 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XSXnXPR3rHRvMjaO6OJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOTAwNGIzYmY4YTFlMTdiZDYwNjZlMDUxODk2ZDNiZWJk NjY5NzMwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGMyYzA2ZWE1OWJiMWM1MzRmYjM3OWRiMWUxNDU0MDkxYWRmZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1WXy0jeCXm85QQLxuFERj40mER In+jOau1N+ePnpou9k9R3OoyEZMvlYDYiaUXH4JhIbNLogj+8RKutM6luk3LdgIj CS7+RTOkWqb6m+oOO6x00jzJDOOaj9tq4fUXBlca12vOXR1Rgmo1UQQ2b3mSQrck 5CfMi9nvj5asGY1zXaIqepqZ+U4zh6pvWeqZSVh+kdj6Vno0HfBoXjLqQLS0Z1OS FGXSOxOCrAJq6EDGfWB/Nj3DmcdLKeHvjuh2FroSSgkN3FHuPxpSV7tQN4PKV2fP 9+3gxaHVUY7tQ5BtZzTVHXA49DkLW1sUGN1GBxsdkRo/p6ub9nnj85HoiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK3CwG6lm7HFNPs3nbHhRUCRrf8CMB8GA1UdIwQY MBaAFE+QBLO/ih4XvWBm4FGJbTvr1mlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMt OGE1NDVjYjM1YTlhLzEvcmNMQWJxV2JzY1UwLXplZHNlRkZRSkd0X3dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lYjNlMDAtZTJhYS00NDdmLTkxZjMtOGE1NDVjYjM1YTlh LzEvVDVBRXM3LUtIaGU5WUdiZ1VZbHRPLXZXYVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhOKAwQA sApcMA0GCSqGSIb3DQEBCwUAA4IBAQBpURYrGPHhirQBKsqexLoYjjekV6gZnFHL 037eks73Ayp4zzYYUFf4caeTP/7kmynZ/2iOe9btdtSaMWHIpVrOCT65a06N8xSV lLzPkaJlMzJP4kmvigy2SqynB53r1R3zF3wGMnxOBEGLrMLcULhrpfrYaZR0NP3I q2sFWHEz8LJNihv/jOhfhkiWCvwtUBH4oUsZSS5HHakO5POJ35nBcRc819079eJs +8gvMLf+05NZoFtOivWRcw/YWuNes5CDmUvMIAkXxWBQGlKv129+7Mcany2Sfs+Y tBjocOM5rGgAphl0bgpfQa9oTTYZLCymn49VMBV0gLm9uoFt8NEn -----END CERTIFICATE-----Generated at Wed Jan 21 22:39:04 2026 by rpki-client