This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/IxS3kvRzUMr-NtO3nifzXWWmSJk.roa File: IxS3kvRzUMr-NtO3nifzXWWmSJk.roa (raw, json) Hash identifier: qpDGvej7zkl86WzGIYhDDPadX2GYJjhi3gTeMhgBZQc= Subject key identifier: 23:14:B7:92:F4:73:50:CA:FE:36:D3:B7:9E:27:F3:5D:65:A6:48:99 Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf Certificate serial: 019B76EB3F5F42CE7810AE405DCEC8A0EA30 Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/IxS3kvRzUMr-NtO3nifzXWWmSJk.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39666 IP address blocks: 194.50.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3f:5f:42:ce:78:10:ae:40:5d:ce:c8:a0:ea:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2314b792f47350cafe36d3b79e27f35d65a64899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:26:f1:3c:24:32:7e:8d:73:17:2e:d5:f0: 51:f3:8e:cc:3b:05:b8:5d:90:c1:fe:82:4c:ee:2b: 4e:72:f0:f8:6b:e8:69:04:b0:76:74:04:95:0b:c1: 0b:03:0c:21:23:60:a2:cc:2e:43:c1:59:bc:13:bd: b3:ba:9f:80:fa:78:03:ae:96:1b:62:06:82:04:53: 19:c9:05:41:52:27:fa:02:a5:6e:9a:75:d9:3e:c1: c1:89:77:9e:d0:3f:c9:95:dc:97:59:65:f6:25:d3: 2c:c5:d9:32:99:b6:11:83:df:eb:4d:70:5b:2f:d7: ae:b6:7a:8b:89:a6:1c:dc:75:34:e9:a1:a0:9a:a8: 09:1c:8e:19:79:84:64:5a:ed:41:9e:be:dd:9c:de: d5:61:80:cd:d0:39:71:f4:86:05:e9:84:c5:f0:3c: 65:4d:f6:2d:2d:32:6f:c8:20:13:40:50:91:7e:6b: d3:77:19:c1:58:dc:26:9a:1f:fe:33:f7:d0:02:7e: 27:ef:7c:06:8b:73:f2:36:c4:5f:05:e1:48:bd:c5: 36:8c:e7:8e:30:b8:35:43:46:4e:b8:2c:fc:e2:05: 73:5f:5e:a4:ad:ed:e4:8e:96:d5:58:70:70:bf:48: 5b:a5:28:75:52:dd:44:2c:0c:52:e4:f9:e7:83:ab: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:14:B7:92:F4:73:50:CA:FE:36:D3:B7:9E:27:F3:5D:65:A6:48:99 X509v3 Authority Key Identifier: keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/IxS3kvRzUMr-NtO3nifzXWWmSJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.114.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:5a:4d:e0:aa:0d:73:21:11:c3:e1:b5:40:7c:05:62:f5:e1: 11:43:38:01:98:5a:2c:bf:ac:8e:15:76:c3:cf:bb:89:8e:cf: d1:16:c2:f6:ea:dc:03:49:17:1e:32:fe:19:99:97:f4:69:91: b2:a3:7c:30:fe:9f:bf:79:1f:06:30:bf:b8:09:1f:44:df:16: bd:b8:ea:1e:5c:e4:57:94:07:a4:f4:68:ae:4f:e4:0a:b7:85: ee:84:78:ad:ac:6b:e9:36:06:c5:20:a5:f3:ed:31:a5:67:f8: 16:6a:f2:28:3d:2d:a0:cd:e4:c9:bc:53:87:2e:90:49:87:c4: f8:84:13:52:f9:7a:63:a2:02:cc:c9:f6:38:95:0f:83:49:9f: 3a:52:70:0a:82:a5:30:d8:be:87:c5:b8:36:2f:82:54:f0:42: 38:7b:39:8d:f0:aa:42:81:c5:b2:48:2d:32:2f:66:a9:7f:d3: 3e:54:a0:50:cd:3e:a6:18:05:9f:3e:02:1d:43:06:da:9e:0c: 95:68:22:be:ea:4f:b8:ab:de:8b:f2:58:05:08:ae:7e:89:7e: 2e:b7:c4:4a:aa:2e:20:69:7a:80:ea:2f:42:d6:10:cf:57:82: f8:e3:dc:d8:ef:ef:4f:cd:98:0b:f5:2b:8e:ff:96:81:2d:5d: c3:d7:de:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26z9fQs54EK5AXc7IoOowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMmIxYjY4ZWExMDkzYmNlZTc4ZDA3MTkyZTZkOGMzZjcw MzAyY2YwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzE0Yjc5MmY0NzM1MGNhZmUzNmQzYjc5ZTI3ZjM1ZDY1YTY0ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ4m8TwkMn6Ncxcu1fBR847MOwW4 XZDB/oJM7itOcvD4a+hpBLB2dASVC8ELAwwhI2CizC5DwVm8E72zup+A+ngDrpYb YgaCBFMZyQVBUif6AqVumnXZPsHBiXee0D/JldyXWWX2JdMsxdkymbYRg9/rTXBb L9eutnqLiaYc3HU06aGgmqgJHI4ZeYRkWu1Bnr7dnN7VYYDN0Dlx9IYF6YTF8Dxl TfYtLTJvyCATQFCRfmvTdxnBWNwmmh/+M/fQAn4n73wGi3PyNsRfBeFIvcU2jOeO MLg1Q0ZOuCz84gVzX16kre3kjpbVWHBwv0hbpSh1Ut1ELAxS5Pnng6sLWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMUt5L0c1DK/jbTt54n811lpkiZMB8GA1UdIwQY MBaAFPErG2jqEJO87njQcZLm2MP3AwLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNDg3NWMtZjE1OS00NjRmLWE4YTct MTExOWI3ZmVkZmVjLzEvSXhTM2t2UnpVTXItTnRPM25pZnpYV1dtU0prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yNDg3NWMtZjE1OS00NjRmLWE4YTctMTExOWI3ZmVkZmVj LzEvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJyMA0G CSqGSIb3DQEBCwUAA4IBAQCbWk3gqg1zIRHD4bVAfAVi9eERQzgBmFosv6yOFXbD z7uJjs/RFsL26twDSRceMv4ZmZf0aZGyo3ww/p+/eR8GML+4CR9E3xa9uOoeXORX lAek9GiuT+QKt4XuhHitrGvpNgbFIKXz7TGlZ/gWavIoPS2gzeTJvFOHLpBJh8T4 hBNS+XpjogLMyfY4lQ+DSZ86UnAKgqUw2L6Hxbg2L4JU8EI4ezmN8KpCgcWySC0y L2apf9M+VKBQzT6mGAWfPgIdQwbangyVaCK+6k+4q96L8lgFCK5+iX4ut8RKqi4g aXqA6i9C1hDPV4L449zY7+9PzZgL9SuO/5aBLV3D195r -----END CERTIFICATE-----Generated at Tue Jan 27 02:51:27 2026 by rpki-client