This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_K7d5dKJiT9KgSkJsO5Wnl01COQ.roa File: _K7d5dKJiT9KgSkJsO5Wnl01COQ.roa (raw, json) Hash identifier: LW6zYiMWfGdsMAL6tfmdPVjRVaasbLFy+PBezZP5SN8= Subject key identifier: FC:AE:DD:E5:D2:89:89:3F:4A:81:29:09:B0:EE:56:9E:5D:35:08:E4 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F8491736069435237519097DED8B6D0 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_K7d5dKJiT9KgSkJsO5Wnl01COQ.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201194 IP address blocks: 94.183.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:91:73:60:69:43:52:37:51:90:97:de:d8:b6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcaedde5d289893f4a812909b0ee569e5d3508e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0b:d0:cd:e1:fe:75:0d:89:fe:d7:5d:ad:c3: 8a:49:ea:fc:9a:2a:f5:03:f6:31:58:91:c5:19:b2: ea:13:07:4a:74:26:76:16:a2:f0:ba:19:0b:53:4d: 96:2d:be:62:06:65:e5:f2:2d:0f:42:65:99:7c:30: 43:9f:58:c7:9b:e9:be:ce:f5:8c:46:4c:5a:a8:2b: a7:21:d1:74:e5:b2:8c:1c:84:01:87:0b:4f:cd:a2: 9f:b9:71:34:2d:91:7f:24:78:38:75:98:e5:d8:3d: 27:ef:a1:ab:98:b7:0b:45:33:9e:15:e8:2f:c5:d9: 61:53:58:c4:3a:36:c4:78:e4:72:73:0d:af:8c:41: 0a:30:07:a1:db:32:4a:53:bf:83:74:01:70:93:74: 3e:b1:fb:c9:d7:89:46:94:69:ce:40:13:68:2e:4b: eb:1b:84:c3:f8:61:97:40:cf:61:0e:e3:8f:c1:31: 22:13:49:7a:b7:6d:c5:2a:65:5b:63:f5:43:2a:4f: d8:a3:53:46:a3:a4:8b:f5:e9:14:b8:24:b8:80:73: e8:f4:89:67:ee:00:aa:d9:3b:32:c9:a7:6a:e5:76: 13:45:56:13:35:fa:15:21:93:bb:81:d7:a6:08:dc: 94:5f:06:1c:e5:f6:03:d4:d5:42:aa:a2:a2:85:9b: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AE:DD:E5:D2:89:89:3F:4A:81:29:09:B0:EE:56:9E:5D:35:08:E4 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_K7d5dKJiT9KgSkJsO5Wnl01COQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.173.0/24 Signature Algorithm: sha256WithRSAEncryption 99:27:83:84:d2:40:ec:ac:e4:a3:17:6c:a8:b6:75:dc:9d:0e: 51:f7:5f:28:f8:77:8a:e6:45:5f:26:51:7f:40:e1:57:d6:2a: 01:3e:88:28:3c:8c:35:27:0c:c7:cb:8c:28:c2:50:30:bf:dc: c1:76:9e:a1:55:c2:45:2f:50:ed:04:5e:28:d7:aa:c3:19:a8: 61:ea:da:dc:e4:8d:60:44:0d:6d:96:e4:6a:36:bf:6f:c9:4f: 52:65:1b:7f:f2:eb:d0:fd:4a:0e:63:d7:b2:32:2c:91:45:df: 06:73:d1:74:cf:33:7c:ba:1c:16:2d:fd:16:f9:16:e8:85:25: 65:54:67:f5:20:5f:94:32:d2:25:1b:ca:d2:50:b0:5f:12:f6: 22:09:29:6c:51:50:90:b8:40:25:7a:31:f6:18:41:dd:a1:cf: 8c:98:6e:ee:ad:c1:e6:bc:14:5b:9e:2e:e0:da:7e:cb:c1:ad: 1f:6d:a9:0a:c4:45:c0:79:4c:fe:a2:91:83:88:05:7a:83:9d: 7d:bf:cf:c9:aa:7a:b1:64:24:98:c5:5d:4b:c7:32:52:6f:ac: ef:13:47:81:1e:1c:d5:52:3c:46:f4:22:0f:5c:f3:00:30:63: 67:9a:fb:cb:6b:24:66:c5:23:37:b7:86:0c:e0:b9:8e:b7:28: 9a:94:1c:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJFzYGlDUjdRkJfe2LbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2FlZGRlNWQyODk4OTNmNGE4MTI5MDliMGVlNTY5ZTVkMzUwOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAvQzeH+dQ2J/tddrcOKSer8mir1 A/YxWJHFGbLqEwdKdCZ2FqLwuhkLU02WLb5iBmXl8i0PQmWZfDBDn1jHm+m+zvWM RkxaqCunIdF05bKMHIQBhwtPzaKfuXE0LZF/JHg4dZjl2D0n76GrmLcLRTOeFegv xdlhU1jEOjbEeORycw2vjEEKMAeh2zJKU7+DdAFwk3Q+sfvJ14lGlGnOQBNoLkvr G4TD+GGXQM9hDuOPwTEiE0l6t23FKmVbY/VDKk/Yo1NGo6SL9ekUuCS4gHPo9Iln 7gCq2Tsyyadq5XYTRVYTNfoVIZO7gdemCNyUXwYc5fYD1NVCqqKihZs4QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyu3eXSiYk/SoEpCbDuVp5dNQjkMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvX0s3ZDVkS0ppVDlLZ1NrSnNPNVdubDAxQ09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXretMA0G CSqGSIb3DQEBCwUAA4IBAQCZJ4OE0kDsrOSjF2yotnXcnQ5R918o+HeK5kVfJlF/ QOFX1ioBPogoPIw1JwzHy4wowlAwv9zBdp6hVcJFL1DtBF4o16rDGahh6trc5I1g RA1tluRqNr9vyU9SZRt/8uvQ/UoOY9eyMiyRRd8Gc9F0zzN8uhwWLf0W+RbohSVl VGf1IF+UMtIlG8rSULBfEvYiCSlsUVCQuEAlejH2GEHdoc+MmG7urcHmvBRbni7g 2n7Lwa0fbakKxEXAeUz+opGDiAV6g519v8/JqnqxZCSYxV1LxzJSb6zvE0eBHhzV UjxG9CIPXPMAMGNnmvvLayRmxSM3t4YM4LmOtyialBxz -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:43 2026 by rpki-client