This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/CLRfdFwGXrsUftlYsSIj25QgAXE.roa File: CLRfdFwGXrsUftlYsSIj25QgAXE.roa (raw, json) Hash identifier: byZOksqWUuMZ5cMKQfW55TQg12R4LvA92IUAqRtFhHk= Subject key identifier: 08:B4:5F:74:5C:06:5E:BB:14:7E:D9:58:B1:22:23:DB:94:20:01:71 Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e Certificate serial: 019B7F840044F9D72352D7A20102E371F8AF Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/CLRfdFwGXrsUftlYsSIj25QgAXE.roa Signing time: Fri 02 Jan 2026 16:21:55 +0000 ROA not before: Fri 02 Jan 2026 16:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42700 IP address blocks: 194.110.199.0/24 maxlen: 24 2001:678:1ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:00:44:f9:d7:23:52:d7:a2:01:02:e3:71:f8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e Validity Not Before: Jan 2 16:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b45f745c065ebb147ed958b12223db94200171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:16:26:a6:d0:3c:3c:73:13:96:2b:c1:72: 23:86:ac:f4:ad:5e:91:ac:78:66:59:28:ed:47:76: 1b:20:1f:04:dd:56:0f:63:23:dd:2c:f8:de:ff:67: 25:d4:8b:5c:71:e3:19:ba:ac:b7:e4:33:3e:03:9e: bf:e3:b5:f1:93:43:d1:9c:14:d0:d7:83:7b:fd:c5: 23:d2:54:b0:5e:14:68:b9:bf:81:fe:f1:9f:71:50: a5:05:d2:f1:77:55:7e:99:ae:7a:fb:6f:01:f1:15: 64:64:b9:b0:82:77:a0:f1:a3:c1:dc:dd:5f:9a:83: 94:68:a0:9e:16:95:c8:6d:b4:ab:3c:1a:a6:60:b4: c6:a9:7f:48:94:87:2e:b8:5d:20:7a:10:a5:40:cb: 3d:29:be:62:d1:39:f6:2d:20:45:67:3f:48:b9:35: f6:ee:a1:03:81:b7:61:f7:cc:0b:f1:da:aa:8a:65: 4e:0f:56:15:d6:95:c6:b0:95:af:f9:cc:dc:01:7b: 4f:2d:0d:80:b9:77:5c:44:4b:7b:32:2f:d4:db:45: 63:de:7b:5f:cd:e0:54:42:b4:f6:86:92:39:60:fe: 6d:0a:0b:65:ac:ba:fd:37:5f:0f:f6:61:e3:e1:ea: 70:85:e7:69:82:b3:4d:f0:84:6a:f6:08:c0:c4:2f: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B4:5F:74:5C:06:5E:BB:14:7E:D9:58:B1:22:23:DB:94:20:01:71 X509v3 Authority Key Identifier: keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/CLRfdFwGXrsUftlYsSIj25QgAXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.199.0/24 IPv6: 2001:678:1ec::/48 Signature Algorithm: sha256WithRSAEncryption 01:5a:31:a3:38:b3:c7:50:51:14:e0:df:cc:93:08:bc:4b:cf: e2:f7:1b:95:e6:7c:89:18:f3:80:1d:7f:c8:36:45:bb:e4:94: 95:b8:55:37:ab:ad:8a:1c:b2:09:df:25:86:7e:47:92:ab:0c: 17:f9:ae:63:1a:5a:aa:f5:1a:1c:bd:de:2e:7a:1b:ac:05:dd: 29:d3:93:c2:f1:14:a7:b6:91:be:ef:a9:66:c1:34:e2:af:90: 78:e5:be:94:9f:7e:26:c5:14:a7:f0:a1:0d:2c:4d:a4:de:67: b8:87:97:80:b3:64:d4:c9:e6:61:67:2d:0a:7b:e6:b9:45:09: 0e:db:20:bb:b5:ce:e5:fc:9a:1c:a8:da:e7:53:3e:12:5b:6f: 55:ce:17:ba:c9:80:1b:9f:26:d7:4e:4c:9d:58:06:23:17:6b: bc:50:95:e9:7d:b6:ab:ba:75:12:52:55:f9:bd:e2:30:b6:37: bb:21:a5:a6:40:ae:ce:94:0b:b2:bc:79:0a:6c:39:83:0d:02: f6:34:1f:f6:9d:b4:4a:b1:60:f8:1a:a3:39:05:24:01:5e:5f: bf:4a:df:9f:1b:d5:33:b9:f1:e0:73:61:5e:88:4b:37:5b:55: 25:1e:ec:1b:7f:8e:79:08:37:28:bf:17:ec:e5:43:37:b6:b4: f4:ed:4a:d9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hABE+dcjUteiAQLjcfivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTEwMjc5YmUxMzhjNDJjZGVmNjI3MThmMGY2YWZhY2Fl MTgxOWUwHhcNMjYwMTAyMTYyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGI0NWY3NDVjMDY1ZWJiMTQ3ZWQ5NThiMTIyMjNkYjk0MjAwMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNwWJqbQPDxzE5YrwXIjhqz0rV6R rHhmWSjtR3YbIB8E3VYPYyPdLPje/2cl1ItcceMZuqy35DM+A56/47Xxk0PRnBTQ 14N7/cUj0lSwXhRoub+B/vGfcVClBdLxd1V+ma56+28B8RVkZLmwgneg8aPB3N1f moOUaKCeFpXIbbSrPBqmYLTGqX9IlIcuuF0gehClQMs9Kb5i0Tn2LSBFZz9IuTX2 7qEDgbdh98wL8dqqimVOD1YV1pXGsJWv+czcAXtPLQ2AuXdcREt7Mi/U20Vj3ntf zeBUQrT2hpI5YP5tCgtlrLr9N18P9mHj4epwhedpgrNN8IRq9gjAxC/Y8QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAi0X3RcBl67FH7ZWLEiI9uUIAFxMB8GA1UdIwQY MBaAFKJRAnm+E4xCze9icY8PavrK4YGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUt ODZhZjUyZmI0ZWViLzEvQ0xSZmRGd0dYcnNVZnRsWXNTSWoyNVFnQVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUtODZhZjUyZmI0ZWVi LzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwm7HMA8E AgACMAkDBwAgAQZ4AewwDQYJKoZIhvcNAQELBQADggEBAAFaMaM4s8dQURTg38yT CLxLz+L3G5XmfIkY84Adf8g2RbvklJW4VTerrYocsgnfJYZ+R5KrDBf5rmMaWqr1 Ghy93i56G6wF3SnTk8LxFKe2kb7vqWbBNOKvkHjlvpSffibFFKfwoQ0sTaTeZ7iH l4CzZNTJ5mFnLQp75rlFCQ7bILu1zuX8mhyo2udTPhJbb1XOF7rJgBufJtdOTJ1Y BiMXa7xQlel9tqu6dRJSVfm94jC2N7shpaZArs6UC7K8eQpsOYMNAvY0H/adtEqx YPgaozkFJAFeX79K358b1TO58eBzYV6ISzdbVSUe7Bt/jnkINyi/F+zlQze2tPTt Stk= -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:57 2026 by rpki-client