This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/992ueHAMwJapVg3_GmGNX2NMidk.roa File: 992ueHAMwJapVg3_GmGNX2NMidk.roa (raw, json) Hash identifier: Sz2VdX1lXBUkLwnFivqLQpnj70LlExAPX1th350BNR8= Subject key identifier: F7:DD:AE:78:70:0C:C0:96:A9:56:0D:FF:1A:61:8D:5F:63:4C:89:D9 Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e Certificate serial: 019B77C672F1D33C20546C890CEDDF42103F Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/992ueHAMwJapVg3_GmGNX2NMidk.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6798 IP address blocks: 94.136.96.0/20 maxlen: 20 194.177.128.0/19 maxlen: 19 2a00:12e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:f1:d3:3c:20:54:6c:89:0c:ed:df:42:10:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7ddae78700cc096a9560dff1a618d5f634c89d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:9e:72:de:32:46:8d:95:21:3f:cf:c3:0d: 0b:c0:f3:a5:12:b6:4e:8d:36:9b:b1:30:ca:e6:fb: d5:ea:9f:d0:c8:38:a1:0a:29:8c:ab:a4:17:ab:23: 81:05:16:90:e3:e7:38:da:63:e0:5c:00:78:c2:fd: a6:c0:be:89:7e:a4:c0:3e:2a:84:a7:fb:ce:72:64: de:e5:86:5d:08:dd:12:59:a7:d7:15:52:f0:5e:cf: 45:da:b8:c9:8e:7d:dc:80:b4:e5:72:e1:a9:9c:cd: 9f:6f:9e:40:1e:57:9c:8b:fb:a5:1f:09:f0:13:8b: bb:99:44:2b:77:07:cc:fb:e6:5f:37:4a:1f:f1:68: fa:e9:7e:bb:05:1a:2b:1f:dc:56:a0:b0:ba:3a:e2: 2b:e9:51:10:ec:42:e9:04:3c:7c:d1:e4:0d:d7:c1: ff:f4:63:d8:05:8e:65:6d:87:20:39:38:b3:b2:d5: 33:49:73:6e:dc:68:1f:15:d4:4b:dd:3d:94:01:53: 03:cf:08:0c:d2:ce:62:ce:bd:2e:bc:21:dd:aa:f4: 01:a5:50:f8:f4:b4:f2:8d:37:a4:f4:6e:93:ae:23: 66:e0:1c:19:a3:7e:68:b7:0e:8b:67:2b:a0:09:06: 12:a8:5c:0e:3e:f0:c7:f2:1e:34:a3:39:12:2f:8f: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:AE:78:70:0C:C0:96:A9:56:0D:FF:1A:61:8D:5F:63:4C:89:D9 X509v3 Authority Key Identifier: keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/992ueHAMwJapVg3_GmGNX2NMidk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.96.0/20 194.177.128.0/19 IPv6: 2a00:12e0::/32 Signature Algorithm: sha256WithRSAEncryption 20:10:61:85:17:1f:3c:d6:7f:71:3a:7d:83:ec:d1:d8:50:ba: 1c:cb:38:a7:31:49:b9:a4:b3:c8:08:dc:1f:ee:5b:6e:33:12: bf:7d:ca:b2:85:c5:5f:5a:67:8a:a3:e6:e4:46:0d:b3:d1:24: 36:2b:86:3b:99:05:bc:a6:78:2b:64:73:8e:e8:06:b3:9c:2b: 4e:4b:fd:d1:db:cb:40:5f:78:9a:35:d7:a1:3d:b7:38:43:ca: 4f:f6:16:03:47:fd:ad:ce:58:39:a5:3d:e5:38:cb:64:d6:76: f3:f1:c9:cf:e1:2d:05:8f:f3:f2:44:03:ef:ae:01:19:b5:c2: ce:28:ca:3a:73:c5:74:d7:bc:2b:18:23:2c:a2:aa:a2:04:4f: 26:0f:ab:8a:26:f6:b1:80:f7:48:e5:d3:9e:d6:07:51:cc:89: e5:0c:99:2f:45:65:ea:fc:35:8f:b4:0d:e7:e3:89:8b:57:1e: f1:c0:f2:cf:de:50:cb:22:16:b2:78:07:64:cf:8b:1b:ad:63: 93:5d:83:3f:40:f1:2c:0d:21:20:97:6f:d2:ad:58:02:3d:a2: ab:50:3a:72:b4:c2:aa:31:cd:2f:67:fa:79:da:67:31:2b:95: e6:20:03:52:c8:6f:66:38:59:05:c7:93:51:79:a4:8e:f6:7c: 24:5e:32:d3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xnLx0zwgVGyJDO3fQhA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NTZmMzA4NGQ5MzEwZWZhMWJjMDdlZjMxZjkzNGIyOTQx ZjEwM2UwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2RkYWU3ODcwMGNjMDk2YTk1NjBkZmYxYTYxOGQ1ZjYzNGM4OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdCect4yRo2VIT/Pww0LwPOlErZO jTabsTDK5vvV6p/QyDihCimMq6QXqyOBBRaQ4+c42mPgXAB4wv2mwL6JfqTAPiqE p/vOcmTe5YZdCN0SWafXFVLwXs9F2rjJjn3cgLTlcuGpnM2fb55AHleci/ulHwnw E4u7mUQrdwfM++ZfN0of8Wj66X67BRorH9xWoLC6OuIr6VEQ7ELpBDx80eQN18H/ 9GPYBY5lbYcgOTizstUzSXNu3GgfFdRL3T2UAVMDzwgM0s5izr0uvCHdqvQBpVD4 9LTyjTek9G6TriNm4BwZo35otw6LZyugCQYSqFwOPvDH8h40ozkSL4/UwwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPfdrnhwDMCWqVYN/xphjV9jTInZMB8GA1UdIwQY MBaAFElW8whNkxDvobwH7zH5NLKUHxA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80YWY4OTgtMjFjYi00ZDhkLWE2M2Yt MWRjOTY3ZDU2NDA5LzEvOTkydWVIQU13SmFwVmczX0dtR05YMk5NaWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80YWY4OTgtMjFjYi00ZDhkLWE2M2YtMWRjOTY3ZDU2NDA5 LzEvU1ZiekNFMlRFTy1odkFmdk1mazBzcFFmRUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXohgAwQF wrGAMA0EAgACMAcDBQAqABLgMA0GCSqGSIb3DQEBCwUAA4IBAQAgEGGFFx881n9x On2D7NHYULocyzinMUm5pLPICNwf7ltuMxK/fcqyhcVfWmeKo+bkRg2z0SQ2K4Y7 mQW8pngrZHOO6AaznCtOS/3R28tAX3iaNdehPbc4Q8pP9hYDR/2tzlg5pT3lOMtk 1nbz8cnP4S0Fj/PyRAPvrgEZtcLOKMo6c8V017wrGCMsoqqiBE8mD6uKJvaxgPdI 5dOe1gdRzInlDJkvRWXq/DWPtA3n44mLVx7xwPLP3lDLIhayeAdkz4sbrWOTXYM/ QPEsDSEgl2/SrVgCPaKrUDpytMKqMc0vZ/p52mcxK5XmIANSyG9mOFkFx5NReaSO 9nwkXjLT -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:01 2026 by rpki-client