This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/My3qNmHJ5QGSZzzVARsae6-0pQM.roa File: My3qNmHJ5QGSZzzVARsae6-0pQM.roa (raw, json) Hash identifier: fExmv/CwHxkIE5BA8KN6D8iXXqOSJs1/4rMdSdpJlEU= Subject key identifier: 33:2D:EA:36:61:C9:E5:01:92:67:3C:D5:01:1B:1A:7B:AF:B4:A5:03 Certificate issuer: /CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45 Certificate serial: 019B7A5AC4619BC55ACE8DCEF2611CBAE5A3 Authority key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/My3qNmHJ5QGSZzzVARsae6-0pQM.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207932 IP address blocks: 194.127.200.0/24 maxlen: 24 194.127.201.0/24 maxlen: 24 194.127.212.0/24 maxlen: 24 194.127.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c4:61:9b:c5:5a:ce:8d:ce:f2:61:1c:ba:e5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=332dea3661c9e50192673cd5011b1a7bafb4a503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:7c:ae:9a:cd:51:da:62:88:9a:1c:3c:d8: b9:76:54:73:16:68:69:af:c6:30:a2:05:c4:30:25: 08:33:fb:b9:c8:bd:70:db:a2:8c:9c:0c:40:95:27: 38:b8:f7:5c:7b:86:66:03:9b:47:92:bd:a3:75:94: 40:a0:33:86:13:c9:46:54:50:1c:39:4a:bf:45:fb: 98:b5:63:ea:48:a8:b2:b7:80:ee:4e:d9:4a:29:78: d9:8f:61:aa:91:9d:67:2c:3c:47:c6:06:96:2d:d3: 6d:23:42:08:d0:10:59:f6:21:64:75:6e:1b:f5:c5: c8:4e:5b:70:97:47:16:cf:df:23:f0:9a:43:13:63: 66:7c:57:80:8a:cf:7d:8c:42:16:33:47:00:78:e7: 18:e7:b5:77:64:98:3b:0f:2c:8a:14:d4:b2:43:ad: 25:0d:51:ac:21:04:91:fa:28:1c:97:62:49:73:0c: c7:f8:22:b8:70:46:8c:ed:58:68:de:6a:5b:5b:5a: 37:d9:f1:a8:b0:87:3d:4d:5d:db:79:10:9b:61:a8: 8b:d1:4f:e2:64:35:8b:46:08:5f:90:1a:9f:47:09: 63:b2:32:19:c7:bf:04:8b:34:88:c9:47:41:52:d8: a5:e5:84:3e:1c:de:0b:ce:6c:6a:b6:01:82:90:72: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:EA:36:61:C9:E5:01:92:67:3C:D5:01:1B:1A:7B:AF:B4:A5:03 X509v3 Authority Key Identifier: keyid:A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/My3qNmHJ5QGSZzzVARsae6-0pQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.200.0/23 194.127.212.0/23 Signature Algorithm: sha256WithRSAEncryption 97:d1:5d:e7:8e:d2:29:5c:2a:f4:c2:8c:fe:e0:b7:54:2c:ca: 3a:96:34:d7:10:19:cc:df:4e:ed:7a:d5:6b:8e:bf:16:9a:d1: e8:08:3f:3e:2b:5e:68:80:33:3d:36:ef:bf:7d:12:88:c9:93: 08:d6:2d:72:17:88:84:8c:4c:0d:fb:96:fa:19:2c:d0:97:70: 68:4b:23:a2:59:4f:7e:7a:ef:13:6e:1b:1e:1a:af:2d:1b:68: 04:3a:dd:8e:06:c3:ac:49:14:87:ba:73:c0:7b:45:66:90:83: a6:21:ff:7a:2d:57:1e:ef:aa:ea:54:17:e5:a0:27:8b:98:29: 79:90:4e:92:0a:2b:84:b9:72:65:ec:2f:6a:a1:9e:c2:3d:d6: 3d:65:fb:86:1d:36:66:8b:3d:8f:36:b5:eb:51:b3:3f:ab:fa: 26:7c:87:fc:8d:aa:b2:5a:3d:42:0a:30:c4:3c:a8:4a:a9:0a: 50:2f:b9:48:4d:91:3d:df:a6:ae:70:f2:2b:da:c7:a6:94:f0: e9:7c:94:9e:c1:01:c1:6d:24:ac:3d:5a:d9:19:f2:d4:aa:1c: 23:63:90:92:db:18:93:da:da:a2:4e:d2:fb:a7:5c:e1:e8:7f: 5c:1d:c3:cc:77:cd:e5:7f:de:d9:6f:e4:1e:4c:09:52:3f:82: 1c:74:35:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WsRhm8Vazo3O8mEcuuWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZTY5YmQ4MmQ1ZWMwYzdiZDNkNWRjOWY5MjkwMmYzNWUz NTdhNDUwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzJkZWEzNjYxYzllNTAxOTI2NzNjZDUwMTFiMWE3YmFmYjRhNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BV8rprNUdpiiJocPNi5dlRzFmhp r8YwogXEMCUIM/u5yL1w26KMnAxAlSc4uPdce4ZmA5tHkr2jdZRAoDOGE8lGVFAc OUq/RfuYtWPqSKiyt4DuTtlKKXjZj2GqkZ1nLDxHxgaWLdNtI0II0BBZ9iFkdW4b 9cXITltwl0cWz98j8JpDE2NmfFeAis99jEIWM0cAeOcY57V3ZJg7DyyKFNSyQ60l DVGsIQSR+igcl2JJcwzH+CK4cEaM7Vho3mpbW1o32fGosIc9TV3beRCbYaiL0U/i ZDWLRghfkBqfRwljsjIZx78EizSIyUdBUtil5YQ+HN4LzmxqtgGCkHJDqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDMt6jZhyeUBkmc81QEbGnuvtKUDMB8GA1UdIwQY MBaAFKXmm9gtXsDHvT1dyfkpAvNeNXpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGVhYjJDMWV3TWU5UFYzSi1Ta0M4MTQxZWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ODE0OWEtYjk5Ni00NWRjLThmY2Mt NTNlNmMxNGZjYzBjLzEvTXkzcU5tSEo1UUdTWnp6VkFSc2FlNi0wcFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85ODE0OWEtYjk5Ni00NWRjLThmY2MtNTNlNmMxNGZjYzBj LzEvcGVhYjJDMWV3TWU5UFYzSi1Ta0M4MTQxZWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwn/IAwQB wn/UMA0GCSqGSIb3DQEBCwUAA4IBAQCX0V3njtIpXCr0woz+4LdULMo6ljTXEBnM 307tetVrjr8WmtHoCD8+K15ogDM9Nu+/fRKIyZMI1i1yF4iEjEwN+5b6GSzQl3Bo SyOiWU9+eu8TbhseGq8tG2gEOt2OBsOsSRSHunPAe0VmkIOmIf96LVce76rqVBfl oCeLmCl5kE6SCiuEuXJl7C9qoZ7CPdY9ZfuGHTZmiz2PNrXrUbM/q/omfIf8jaqy Wj1CCjDEPKhKqQpQL7lITZE936aucPIr2semlPDpfJSewQHBbSSsPVrZGfLUqhwj Y5CS2xiT2tqiTtL7p1zh6H9cHcPMd83lf97Zb+QeTAlSP4IcdDUE -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:54 2026 by rpki-client