This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/RcXnPJndMciok1w2I3-8vRdWh9c.roa File: RcXnPJndMciok1w2I3-8vRdWh9c.roa (raw, json) Hash identifier: DxRxi9FOTvBbPdrhFeHE2Ut2B0bUD9VLANe5uULioc8= Subject key identifier: 45:C5:E7:3C:99:DD:31:C8:A8:93:5C:36:23:7F:BC:BD:17:56:87:D7 Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Certificate serial: 019B9921E5F016CDB51F16322E0936672B22 Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/RcXnPJndMciok1w2I3-8vRdWh9c.roa Signing time: Wed 07 Jan 2026 15:44:54 +0000 ROA not before: Wed 07 Jan 2026 15:44:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24947 IP address blocks: 194.88.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:21:e5:f0:16:cd:b5:1f:16:32:2e:09:36:67:2b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Validity Not Before: Jan 7 15:44:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45c5e73c99dd31c8a8935c36237fbcbd175687d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:1a:07:d0:05:2e:74:d3:3e:c8:b6:ca:a9: 82:5a:4a:0c:e8:77:32:ee:89:6a:84:33:f3:a5:c4: 36:b5:2e:a9:be:1e:10:db:cb:62:a5:40:66:2b:0d: 6a:14:56:e6:a9:44:66:05:e7:06:18:ec:f5:08:83: 2f:49:8c:82:3a:22:76:9e:6c:1b:83:b7:e7:97:f4: 0e:9f:56:1e:16:b7:fc:aa:01:21:cd:77:8b:9c:fe: 40:96:1b:0a:d8:8b:c4:87:f1:3c:ed:24:d9:a9:c4: 4c:8c:88:39:f2:bd:53:d0:2c:4f:04:6d:19:53:08: 4a:75:a8:e9:b6:79:4d:1a:13:23:58:bc:a3:5e:c3: 91:95:27:6c:53:5a:fa:eb:8c:22:a2:35:ce:3f:ba: fd:f2:3e:bc:e5:20:d8:bc:00:a5:ef:fc:68:fc:2a: 98:09:b0:48:2e:be:c5:78:c3:cc:86:a0:ff:03:4e: 42:e3:f4:23:dc:ad:b7:aa:31:6f:65:a1:fc:ba:26: 9b:52:d8:3f:01:d6:84:9c:5c:20:49:d3:8a:cc:9f: d7:52:52:42:c8:9f:72:cf:09:2a:53:ea:d1:23:9a: 92:f0:e9:d8:04:1e:39:96:ba:cd:85:78:87:e6:da: aa:83:b9:07:a2:df:e9:1b:45:1c:63:07:55:48:04: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C5:E7:3C:99:DD:31:C8:A8:93:5C:36:23:7F:BC:BD:17:56:87:D7 X509v3 Authority Key Identifier: keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/RcXnPJndMciok1w2I3-8vRdWh9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.232.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:03:22:3a:30:57:20:d6:6f:14:29:93:c4:08:2a:90:92:fd: b6:de:13:a8:ae:ef:d7:a5:d1:ea:b0:05:60:a0:f5:f3:3c:82: a9:b7:12:00:e3:56:ad:dd:b2:bc:f5:45:a9:1c:61:50:f5:bb: 29:d7:44:dc:3c:2e:a9:3d:0f:f2:68:05:44:89:45:a4:95:84: 88:19:0a:94:38:5e:cb:d1:97:88:5a:61:84:f2:bc:7b:3c:ea: 14:bd:75:c3:06:ad:39:63:f2:f1:43:96:35:56:ff:a0:63:c6: 47:3e:43:66:9a:2a:c2:71:b9:4e:8a:33:59:46:eb:e2:30:10: 28:3e:06:69:b5:01:fd:7e:89:36:9d:7b:50:0c:a8:6a:c5:64: f4:47:48:47:dc:a3:0f:d2:ee:c2:65:4d:3a:0a:cf:22:5f:21: bc:02:2e:90:bf:a0:39:01:0c:68:e0:ec:e2:a0:14:cb:62:2e: f9:d3:ea:0f:29:25:a7:d2:86:41:42:30:ba:32:6a:e9:83:2d: 08:ac:60:21:ef:eb:f9:88:1f:c6:cc:e4:70:9b:13:76:29:55: c6:bf:30:3d:74:fe:41:bf:e9:eb:10:2d:06:d2:1f:e4:17:7d: cc:0a:f5:75:da:c4:35:63:4d:a3:ae:ff:38:35:0e:2f:b6:da: 58:e5:b1:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuZIeXwFs21HxYyLgk2ZysiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5 ZDI5MTYwHhcNMjYwMTA3MTU0NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWM1ZTczYzk5ZGQzMWM4YTg5MzVjMzYyMzdmYmNiZDE3NTY4N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8icaB9AFLnTTPsi2yqmCWkoM6Hcy 7olqhDPzpcQ2tS6pvh4Q28tipUBmKw1qFFbmqURmBecGGOz1CIMvSYyCOiJ2nmwb g7fnl/QOn1YeFrf8qgEhzXeLnP5AlhsK2IvEh/E87STZqcRMjIg58r1T0CxPBG0Z UwhKdajptnlNGhMjWLyjXsORlSdsU1r664wiojXOP7r98j685SDYvACl7/xo/CqY CbBILr7FeMPMhqD/A05C4/Qj3K23qjFvZaH8uiabUtg/AdaEnFwgSdOKzJ/XUlJC yJ9yzwkqU+rRI5qS8OnYBB45lrrNhXiH5tqqg7kHot/pG0UcYwdVSATxTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXF5zyZ3THIqJNcNiN/vL0XVofXMB8GA1UdIwQY MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt MWE0MmY2MzJjMzA3LzEvUmNYblBKbmRNY2lvazF3MkkzLTh2UmRXaDljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3 LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljoMA0G CSqGSIb3DQEBCwUAA4IBAQArAyI6MFcg1m8UKZPECCqQkv223hOoru/XpdHqsAVg oPXzPIKptxIA41at3bK89UWpHGFQ9bsp10TcPC6pPQ/yaAVEiUWklYSIGQqUOF7L 0ZeIWmGE8rx7POoUvXXDBq05Y/LxQ5Y1Vv+gY8ZHPkNmmirCcblOijNZRuviMBAo PgZptQH9fok2nXtQDKhqxWT0R0hH3KMP0u7CZU06Cs8iXyG8Ai6Qv6A5AQxo4Ozi oBTLYi750+oPKSWn0oZBQjC6Mmrpgy0IrGAh7+v5iB/GzORwmxN2KVXGvzA9dP5B v+nrEC0G0h/kF33MCvV12sQ1Y02jrv84NQ4vttpY5bE3 -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:44 2026 by rpki-client