This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/srIV1AuGFcZV-KVIqPeVy-EHaLM.roa File: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (raw, json) Hash identifier: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ= Subject key identifier: B2:B2:15:D4:0B:86:15:C6:55:F8:A5:48:A8:F7:95:CB:E1:07:68:B3 Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2 Certificate serial: 019B7B36F558907D8FF0E3CA328C27C2CB25 Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/srIV1AuGFcZV-KVIqPeVy-EHaLM.roa Signing time: Thu 01 Jan 2026 20:19:17 +0000 ROA not before: Thu 01 Jan 2026 20:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.153.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f5:58:90:7d:8f:f0:e3:ca:32:8c:27:c2:cb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2 Validity Not Before: Jan 1 20:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2b215d40b8615c655f8a548a8f795cbe10768b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:9f:9f:02:2f:27:12:da:5c:ac:d1:89:59: 8e:cf:32:c0:d0:51:22:b5:33:85:c0:76:60:5e:49: bf:59:ff:54:ec:ab:64:3d:ef:96:d6:0e:ae:2c:f7: 4b:84:ef:08:6d:2b:b6:80:96:68:02:b0:0b:6b:45: 9c:d4:55:49:59:f3:3a:3f:70:f3:fc:22:d5:25:c3: b2:ee:56:96:28:e0:69:c4:a5:51:99:64:54:4b:b7: c2:8c:7e:b5:4b:d8:df:17:97:7c:73:3b:fa:59:54: a9:2f:53:3b:6a:90:73:af:07:9e:cd:69:93:cc:c8: 3b:e8:0e:b6:d0:1f:f3:8c:5c:81:64:02:b0:34:01: b9:0c:f4:1e:ab:90:47:63:af:26:5f:0e:05:d1:4d: b6:89:b9:22:8c:ba:87:2c:22:cf:4e:84:e5:fc:26: e0:9c:e9:a0:0c:ad:ac:6b:29:8c:5d:85:0e:52:7f: ef:ce:bd:77:6b:a3:c8:06:67:98:ae:8a:a2:8e:2f: 3b:0e:9c:f3:c2:ac:a2:05:1a:d8:09:81:da:6e:bf: 26:ae:48:f0:28:38:88:e6:f2:1c:d5:8a:ab:db:1a: 8a:21:bc:a5:7a:b8:41:e4:76:e6:ef:c7:8a:b7:d0: 55:69:54:8c:81:f4:24:aa:10:36:de:61:1b:20:08: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B2:15:D4:0B:86:15:C6:55:F8:A5:48:A8:F7:95:CB:E1:07:68:B3 X509v3 Authority Key Identifier: keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/srIV1AuGFcZV-KVIqPeVy-EHaLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.168.0/24 Signature Algorithm: sha256WithRSAEncryption 00:36:e1:4d:c0:0e:cf:bf:d2:76:65:90:48:75:c8:fc:fd:b6: 16:b0:e9:af:d1:22:94:13:79:de:8d:92:15:04:37:a2:a7:e8: d9:f0:b8:37:ab:20:2c:d6:1f:6a:00:78:fc:9e:17:3c:12:ee: bc:ce:ed:92:ea:df:8d:d6:ae:2c:25:d9:b3:2c:1a:d5:d6:f8: 59:8a:b8:94:04:dd:08:2c:b3:4f:67:11:27:ea:1c:b6:50:5b: b0:87:58:a9:b2:ca:34:12:8b:fd:24:af:24:6b:2a:d5:df:6d: 7c:05:6f:14:25:e5:2b:76:fe:9a:c6:68:b0:02:ac:fe:c5:0c: 54:2c:ee:90:cc:c5:4c:3a:3b:0a:fe:25:af:7b:07:e1:72:d6: a1:23:68:6c:15:41:c0:cb:50:9f:ff:19:8c:2a:dd:ee:c1:fe: eb:19:a2:0c:bc:f7:b7:67:5c:fe:97:0d:90:30:72:6c:3a:e6: c5:52:b9:b3:3c:3e:21:13:3a:ba:90:21:ba:e7:a9:1f:f5:37: 01:68:96:53:84:33:f1:ca:1e:c9:06:9b:ff:e7:e6:69:60:1b: 05:f0:2e:b0:4e:9b:2a:6f:20:e5:7d:59:22:ef:f8:7c:7e:49: 04:53:75:33:55:f1:96:2e:20:7e:61:41:7f:25:2a:c5:83:87: 5d:e0:63:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NvVYkH2P8OPKMownwsslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh MGFmZjIwHhcNMjYwMTAxMjAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmIyMTVkNDBiODYxNWM2NTVmOGE1NDhhOGY3OTVjYmUxMDc2OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUKfnwIvJxLaXKzRiVmOzzLA0FEi tTOFwHZgXkm/Wf9U7KtkPe+W1g6uLPdLhO8IbSu2gJZoArALa0Wc1FVJWfM6P3Dz /CLVJcOy7laWKOBpxKVRmWRUS7fCjH61S9jfF5d8czv6WVSpL1M7apBzrweezWmT zMg76A620B/zjFyBZAKwNAG5DPQeq5BHY68mXw4F0U22ibkijLqHLCLPToTl/Cbg nOmgDK2saymMXYUOUn/vzr13a6PIBmeYroqiji87DpzzwqyiBRrYCYHabr8mrkjw KDiI5vIc1Yqr2xqKIbylerhB5Hbm78eKt9BVaVSMgfQkqhA23mEbIAgwLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLKyFdQLhhXGVfilSKj3lcvhB2izMB8GA1UdIwQY MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt NWMwMTdiZDQzNjYzLzEvc3JJVjFBdUdGY1pWLUtWSXFQZVZ5LUVIYUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpmoMA0G CSqGSIb3DQEBCwUAA4IBAQAANuFNwA7Pv9J2ZZBIdcj8/bYWsOmv0SKUE3nejZIV BDeip+jZ8Lg3qyAs1h9qAHj8nhc8Eu68zu2S6t+N1q4sJdmzLBrV1vhZiriUBN0I LLNPZxEn6hy2UFuwh1ipsso0Eov9JK8kayrV3218BW8UJeUrdv6axmiwAqz+xQxU LO6QzMVMOjsK/iWvewfhctahI2hsFUHAy1Cf/xmMKt3uwf7rGaIMvPe3Z1z+lw2Q MHJsOubFUrmzPD4hEzq6kCG656kf9TcBaJZThDPxyh7JBpv/5+ZpYBsF8C6wTpsq byDlfVki7/h8fkkEU3UzVfGWLiB+YUF/JSrFg4dd4GPx -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:01 2026 by rpki-client