This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/aTDLH8OzshREg-8mq0j-dLNvoVA.roa File: aTDLH8OzshREg-8mq0j-dLNvoVA.roa (raw, json) Hash identifier: bWxd+gcoFiIXVBKwuiK0uKoGEVScpNqYAsExPghzTho= Subject key identifier: 69:30:CB:1F:C3:B3:B2:14:44:83:EF:26:AB:48:FE:74:B3:6F:A1:50 Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56 Certificate serial: 019B78A2286274CF9574D0EE6519163597F2 Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/aTDLH8OzshREg-8mq0j-dLNvoVA.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209256 IP address blocks: 194.6.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:28:62:74:cf:95:74:d0:ee:65:19:16:35:97:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6930cb1fc3b3b2144483ef26ab48fe74b36fa150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:20:5b:d1:ed:e2:49:f3:de:0b:23:83:ef: 82:5c:16:cd:2e:ff:b8:ce:0f:17:70:13:fa:71:c1: da:78:98:86:82:74:73:93:66:ef:e2:dd:b4:13:51: cf:15:b1:76:8e:6a:2d:08:df:cd:9f:42:0d:21:c4: 4d:6e:7a:e8:bd:13:67:69:7b:68:eb:32:44:0e:37: 4a:5e:82:70:de:de:ab:5a:14:b9:f4:cb:46:10:ec: 1d:92:c7:3a:40:63:e5:47:47:08:8d:cc:12:4a:32: 5e:ba:67:0a:5d:b4:6c:ae:35:98:38:7f:0b:86:22: 64:c6:b4:43:06:cf:04:1d:42:71:22:85:81:8e:fe: 2e:ad:b3:8d:e5:09:07:f4:18:5a:98:c1:a2:3e:1b: 52:93:7d:72:b9:ab:9c:90:77:53:63:e1:a5:91:b6: c2:6d:f3:47:93:92:71:72:8f:2f:d8:a8:bd:9c:20: 4c:f2:9c:3e:cf:92:d6:1f:02:16:96:ab:1b:74:ef: dc:24:db:fa:c6:48:15:1c:65:e0:c3:c4:a6:bf:2e: aa:5c:e8:c3:1b:db:91:15:f4:e7:3b:77:60:78:49: 7e:58:bf:7b:09:49:09:df:89:ae:25:2d:ff:f3:f2: c8:15:1e:d0:42:70:da:4b:cb:a5:8f:53:ed:25:ed: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:30:CB:1F:C3:B3:B2:14:44:83:EF:26:AB:48:FE:74:B3:6F:A1:50 X509v3 Authority Key Identifier: keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/aTDLH8OzshREg-8mq0j-dLNvoVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.6.243.0/24 Signature Algorithm: sha256WithRSAEncryption 52:8c:aa:a8:c7:5c:fd:91:56:c5:3a:24:d5:a2:91:42:5c:20: 6e:8f:3d:e9:9d:63:c6:39:f1:7c:c1:5e:0d:21:4e:f4:19:80: ca:18:72:0c:39:10:7a:93:46:af:7f:bb:18:5c:8e:9e:f2:13: ef:85:3f:23:8b:32:26:04:23:b5:d7:45:7e:57:02:c3:77:c5: 12:de:77:e6:f1:ca:5d:e3:3a:05:82:c9:2f:18:c8:1a:9b:ba: 4c:a4:25:07:b8:57:9c:e8:3b:f3:1b:c1:e1:90:71:73:43:e4: 63:f5:a3:4c:43:a8:fc:ba:8d:65:20:12:97:39:55:3c:c3:9a: e1:43:dd:e3:13:49:d8:21:a2:7e:e6:42:db:7e:9f:d7:9e:51: 91:ae:86:a7:bd:3b:b4:0c:73:b0:a7:31:c9:6f:4f:f4:d1:cd: 17:f2:9a:ff:6f:23:42:a1:c4:cc:14:f0:93:05:df:19:c1:2f: 05:2a:d2:83:8b:ca:8e:6a:4f:32:83:4e:ca:28:21:30:d6:23: 36:65:41:5a:0b:74:44:64:d1:44:cd:88:e5:37:d7:c5:89:1a: e6:74:fb:f9:2d:01:99:94:ee:60:b6:ee:c1:f3:32:fa:ca:d5: 00:bd:0a:12:00:96:46:87:60:53:f0:62:90:60:ba:4e:6e:c0: ba:3f:49:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oihidM+VdNDuZRkWNZfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZTFmYzZhMTU5NjU5MzRjNTMzOTNkNmVkMTg5ODRjNmJh NTZmNTYwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTMwY2IxZmMzYjNiMjE0NDQ4M2VmMjZhYjQ4ZmU3NGIzNmZhMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9AgW9Ht4knz3gsjg++CXBbNLv+4 zg8XcBP6ccHaeJiGgnRzk2bv4t20E1HPFbF2jmotCN/Nn0INIcRNbnrovRNnaXto 6zJEDjdKXoJw3t6rWhS59MtGEOwdksc6QGPlR0cIjcwSSjJeumcKXbRsrjWYOH8L hiJkxrRDBs8EHUJxIoWBjv4urbON5QkH9BhamMGiPhtSk31yuauckHdTY+GlkbbC bfNHk5Jxco8v2Ki9nCBM8pw+z5LWHwIWlqsbdO/cJNv6xkgVHGXgw8Smvy6qXOjD G9uRFfTnO3dgeEl+WL97CUkJ34muJS3/8/LIFR7QQnDaS8ulj1PtJe0eywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGkwyx/Ds7IURIPvJqtI/nSzb6FQMB8GA1UdIwQY MBaAFO/h/GoVllk0xTOT1u0YmExrpW9WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82M2I1ZWMtYzJjOS00ZjY4LThkNDct NGQxOTkzN2UyZjIwLzEvYVRETEg4T3pzaFJFZy04bXEwai1kTE52b1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82M2I1ZWMtYzJjOS00ZjY4LThkNDctNGQxOTkzN2UyZjIw LzEvNy1IOGFoV1dXVFRGTTVQVzdSaVlUR3VsYjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgbzMA0G CSqGSIb3DQEBCwUAA4IBAQBSjKqox1z9kVbFOiTVopFCXCBujz3pnWPGOfF8wV4N IU70GYDKGHIMORB6k0avf7sYXI6e8hPvhT8jizImBCO110V+VwLDd8US3nfm8cpd 4zoFgskvGMgam7pMpCUHuFec6DvzG8HhkHFzQ+Rj9aNMQ6j8uo1lIBKXOVU8w5rh Q93jE0nYIaJ+5kLbfp/XnlGRroanvTu0DHOwpzHJb0/00c0X8pr/byNCocTMFPCT Bd8ZwS8FKtKDi8qOak8yg07KKCEw1iM2ZUFaC3REZNFEzYjlN9fFiRrmdPv5LQGZ lO5gtu7B8zL6ytUAvQoSAJZGh2BT8GKQYLpObsC6P0kB -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:59 2026 by rpki-client