This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/70uwjS23ojWYkHOJF-QA_XGJ95c.roa File: 70uwjS23ojWYkHOJF-QA_XGJ95c.roa (raw, json) Hash identifier: CvnO7mT1jduzqhCIW8qOqSz+l6S7AQzxDDVic7aHm4s= Subject key identifier: EF:4B:B0:8D:2D:B7:A2:35:98:90:73:89:17:E4:00:FD:71:89:F7:97 Certificate issuer: /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45 Certificate serial: 019B797ED8CB14D0F37B2D772A51889743FB Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/70uwjS23ojWYkHOJF-QA_XGJ95c.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210172 IP address blocks: 194.53.176.0/22 maxlen: 22 194.53.176.0/24 maxlen: 24 194.53.177.0/24 maxlen: 24 194.53.178.0/24 maxlen: 24 194.53.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d8:cb:14:d0:f3:7b:2d:77:2a:51:88:97:43:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef4bb08d2db7a2359890738917e400fd7189f797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:41:81:31:b9:98:e1:9c:30:ed:1b:80:f2: 2c:17:46:3d:04:6f:f3:03:5b:05:57:84:83:33:3a: 7c:8e:b1:a2:64:46:61:e1:4f:88:b5:41:3f:8c:a9: 66:aa:42:5a:4d:cd:98:75:c4:3f:7e:9a:f6:70:da: 9c:22:ce:48:d7:d5:f3:d6:79:3c:38:ae:7c:66:19: 4e:3b:d4:2c:c1:7f:8f:de:19:23:3e:17:d7:ed:ab: 79:85:0c:9e:42:63:05:a5:a2:9f:f3:9d:f4:1e:0b: 41:e0:cc:d2:eb:64:4b:be:b0:c9:bf:4d:b2:17:21: 8f:7b:2c:88:f3:44:be:61:8c:29:f5:e4:19:77:28: 84:19:b0:17:dc:ce:1f:e6:c1:44:64:ab:bc:1d:eb: 32:f1:9c:bb:12:b4:58:2b:02:d4:e9:3c:54:07:b8: 43:d5:ba:a0:08:8d:b6:03:f7:81:a4:ab:b4:e9:0e: 2a:0e:7b:66:51:90:62:e6:c1:bf:76:d3:ae:45:66: fc:ef:f3:25:0e:7f:a9:25:ad:b1:8f:e8:59:12:a6: 06:aa:7b:21:4b:78:ed:13:1d:84:52:8f:0a:0b:25: 20:af:86:ef:96:bd:6e:e9:6e:11:da:74:0a:b3:29: d9:9c:e1:f2:3e:06:53:d6:e4:4b:9f:2c:10:55:02: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4B:B0:8D:2D:B7:A2:35:98:90:73:89:17:E4:00:FD:71:89:F7:97 X509v3 Authority Key Identifier: keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/70uwjS23ojWYkHOJF-QA_XGJ95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.176.0/22 Signature Algorithm: sha256WithRSAEncryption b3:96:d2:36:03:ac:26:9d:ba:60:38:6a:21:97:8d:2f:89:22: b0:72:e2:ec:e3:0b:1b:c1:19:02:a8:9f:72:22:c0:ef:6c:3c: 2d:7d:06:df:c3:34:04:b7:7d:1f:e3:95:75:8b:e6:e4:11:45: 6f:28:ab:9c:9d:b1:84:b0:3b:56:ee:6a:d1:13:64:96:af:48: 84:d3:bc:af:14:f6:03:01:44:4c:bb:59:47:7d:1c:a3:b8:da: b6:16:73:65:c9:4a:e4:dc:cb:6b:8f:ec:4e:b5:0a:de:88:91: 41:9c:aa:98:9e:c0:17:fc:e3:49:f9:2b:c4:75:ae:13:40:28: b5:81:b6:c4:17:a9:a6:fb:96:61:3b:dd:9d:56:46:aa:ac:48: 29:4a:6c:06:d1:fc:22:59:fc:ba:81:5d:1f:e8:56:ca:e9:d1: 39:d0:8e:6c:87:30:04:47:ad:12:c8:dd:fa:b2:e5:61:ba:71: 16:ca:47:ab:89:1f:a4:dd:cf:18:25:a5:3d:92:00:7e:e0:36: 1f:62:a2:b9:73:87:22:ec:ac:18:7b:c6:b8:07:db:c0:13:72: 73:8f:d3:6f:62:e1:6c:5d:24:a5:b2:77:66:a7:42:10:15:1d: bd:8a:f5:de:46:c3:a8:79:2f:f4:e6:ff:a9:9c:1f:13:9d:67: e4:04:7a:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftjLFNDzey13KlGIl0P7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjEzZmU5ODQ0YTYzNDM5ZWFlOGExYWEwYzNjYThjNjBi NDVkNDUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjRiYjA4ZDJkYjdhMjM1OTg5MDczODkxN2U0MDBmZDcxODlmNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KBBgTG5mOGcMO0bgPIsF0Y9BG/z A1sFV4SDMzp8jrGiZEZh4U+ItUE/jKlmqkJaTc2YdcQ/fpr2cNqcIs5I19Xz1nk8 OK58ZhlOO9QswX+P3hkjPhfX7at5hQyeQmMFpaKf8530HgtB4MzS62RLvrDJv02y FyGPeyyI80S+YYwp9eQZdyiEGbAX3M4f5sFEZKu8Hesy8Zy7ErRYKwLU6TxUB7hD 1bqgCI22A/eBpKu06Q4qDntmUZBi5sG/dtOuRWb87/MlDn+pJa2xj+hZEqYGqnsh S3jtEx2EUo8KCyUgr4bvlr1u6W4R2nQKsynZnOHyPgZT1uRLnywQVQIAUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9LsI0tt6I1mJBziRfkAP1xifeXMB8GA1UdIwQY MBaAFA1hP+mESmNDnq6KGqDDyoxgtF1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODIt NGQ3ZjRjYmE3ODY3LzEvNzB1d2pTMjNvaldZa0hPSkYtUUFfWEdKOTVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODItNGQ3ZjRjYmE3ODY3 LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjWwMA0G CSqGSIb3DQEBCwUAA4IBAQCzltI2A6wmnbpgOGohl40viSKwcuLs4wsbwRkCqJ9y IsDvbDwtfQbfwzQEt30f45V1i+bkEUVvKKucnbGEsDtW7mrRE2SWr0iE07yvFPYD AURMu1lHfRyjuNq2FnNlyUrk3Mtrj+xOtQreiJFBnKqYnsAX/ONJ+SvEda4TQCi1 gbbEF6mm+5ZhO92dVkaqrEgpSmwG0fwiWfy6gV0f6FbK6dE50I5shzAER60SyN36 suVhunEWykeriR+k3c8YJaU9kgB+4DYfYqK5c4ci7KwYe8a4B9vAE3Jzj9NvYuFs XSSlsndmp0IQFR29ivXeRsOoeS/05v+pnB8TnWfkBHqP -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:41 2026 by rpki-client