This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/rARCZBQx81Clx2YkjkNrgwNwwGw.roa File: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (raw, json) Hash identifier: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s= Subject key identifier: AC:04:42:64:14:31:F3:50:A5:C7:66:24:8E:43:6B:83:03:70:C0:6C Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24 Certificate serial: 019B7A5B25147C11FA431A1BF67DD2BA6C02 Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/rARCZBQx81Clx2YkjkNrgwNwwGw.roa Signing time: Thu 01 Jan 2026 16:19:12 +0000 ROA not before: Thu 01 Jan 2026 16:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41897 IP address blocks: 94.154.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:25:14:7c:11:fa:43:1a:1b:f6:7d:d2:ba:6c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4176719912989979e086125a2a41a133fffdc24 Validity Not Before: Jan 1 16:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac0442641431f350a5c766248e436b830370c06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:70:b2:12:61:18:b3:b9:a1:a0:b3:0e:7f: 27:b0:7a:ba:ed:a2:d8:f2:5e:95:e8:a4:de:1a:23: ca:3e:1e:7e:d2:72:4f:27:91:b2:7b:8b:65:d3:4b: 63:a6:74:95:6b:ed:d1:e9:a2:11:01:05:57:8c:e2: 13:c8:c6:e6:f4:85:2e:3a:ae:8a:e8:cd:61:c9:8f: 2c:86:e3:f0:ae:e9:16:c7:4e:bb:b3:c9:19:36:22: 7d:63:0f:0a:cc:d6:a5:bf:5e:32:c4:a7:f7:48:04: 21:b3:d4:8f:88:cd:be:a2:ee:7b:37:08:cd:b1:dc: c3:ef:6e:f9:f1:b3:b1:9c:cb:ff:76:4b:bd:7f:3c: 41:6d:8b:26:a3:a7:70:a8:4f:64:0b:9f:de:43:8a: 32:b2:21:59:04:a0:74:b1:1d:ba:84:10:49:b9:e8: cc:fe:7b:e0:0e:95:32:69:78:85:1b:0e:2e:c8:0f: 19:f9:d0:be:fd:6c:1a:05:bf:b2:70:5d:5b:19:d0: 95:e1:c1:71:62:3e:11:d1:62:0f:7a:18:b0:88:57: 9e:53:c2:d4:10:2e:e2:e2:ad:64:46:d8:98:a4:f3: 9c:05:6b:9c:9b:e2:c8:d4:b1:ba:ea:9d:59:99:5d: f3:8e:b1:b4:cc:8c:c8:70:0a:95:87:96:c2:c4:e9: 63:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:42:64:14:31:F3:50:A5:C7:66:24:8E:43:6B:83:03:70:C0:6C X509v3 Authority Key Identifier: keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/rARCZBQx81Clx2YkjkNrgwNwwGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.108.0/22 Signature Algorithm: sha256WithRSAEncryption 92:88:bd:06:ed:65:a0:41:d8:f8:41:7b:02:4d:00:0c:ec:22: 44:2b:3b:8b:91:12:e4:e9:47:ff:b7:bb:68:6e:86:d8:7c:d6: 22:dd:84:08:eb:3b:3f:25:eb:3e:1d:25:65:c5:5d:e3:c2:7c: 52:21:b7:a5:44:1e:91:ed:d8:cd:4e:c3:c3:10:51:fc:af:c6: 9e:01:9d:e1:c9:a7:32:5a:a8:83:53:1a:35:5a:82:cd:8d:4c: ae:2d:3f:32:f1:44:7d:3d:16:37:09:59:d6:10:bd:88:13:38: 98:26:0c:d9:98:9b:f5:27:6b:d3:f3:e9:03:9b:f0:da:ae:3d: 94:41:b7:6d:1e:89:09:17:2c:07:56:14:b7:21:60:44:5b:a4: ef:72:3f:4c:b2:68:d5:89:86:db:fd:dc:1a:3d:99:4d:54:b6: fe:3b:e2:ee:b9:d8:89:dd:21:20:fb:7d:be:76:d8:c3:63:24: c3:6b:3e:b9:bc:6b:e6:3e:15:f1:57:d8:f3:ab:16:75:c9:9a: a7:ad:bb:d1:52:f5:57:a0:95:d3:1d:9b:bb:57:25:bc:a3:0c: e3:de:80:b0:ac:7c:9f:91:ae:80:0c:16:37:fe:e1:20:49:19: 26:6e:4c:09:20:16:73:26:b7:a4:06:65:f6:4c:37:25:ae:26: 43:23:ac:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyUUfBH6Qxob9n3SumwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MTc2NzE5OTEyOTg5OTc5ZTA4NjEyNWEyYTQxYTEzM2Zm ZmRjMjQwHhcNMjYwMTAxMTYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzA0NDI2NDE0MzFmMzUwYTVjNzY2MjQ4ZTQzNmI4MzAzNzBjMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lxwshJhGLO5oaCzDn8nsHq67aLY 8l6V6KTeGiPKPh5+0nJPJ5Gye4tl00tjpnSVa+3R6aIRAQVXjOITyMbm9IUuOq6K 6M1hyY8shuPwrukWx067s8kZNiJ9Yw8KzNalv14yxKf3SAQhs9SPiM2+ou57NwjN sdzD72758bOxnMv/dku9fzxBbYsmo6dwqE9kC5/eQ4oysiFZBKB0sR26hBBJuejM /nvgDpUyaXiFGw4uyA8Z+dC+/WwaBb+ycF1bGdCV4cFxYj4R0WIPehiwiFeeU8LU EC7i4q1kRtiYpPOcBWucm+LI1LG66p1ZmV3zjrG0zIzIcAqVh5bCxOlj8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwEQmQUMfNQpcdmJI5Da4MDcMBsMB8GA1UdIwQY MBaAFKQXZxmRKYmXnghhJaKkGhM//9wkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYt ZWYwNDBhZWJlYTYwLzEvckFSQ1pCUXg4MUNseDJZa2prTnJnd053d0d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYTQwZjUtYjljOS00ODU2LTgzYzYtZWYwNDBhZWJlYTYw LzEvcEJkbkdaRXBpWmVlQ0dFbG9xUWFFel9fM0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXppsMA0G CSqGSIb3DQEBCwUAA4IBAQCSiL0G7WWgQdj4QXsCTQAM7CJEKzuLkRLk6Uf/t7to bobYfNYi3YQI6zs/Jes+HSVlxV3jwnxSIbelRB6R7djNTsPDEFH8r8aeAZ3hyacy WqiDUxo1WoLNjUyuLT8y8UR9PRY3CVnWEL2IEziYJgzZmJv1J2vT8+kDm/Darj2U QbdtHokJFywHVhS3IWBEW6Tvcj9MsmjViYbb/dwaPZlNVLb+O+LuudiJ3SEg+32+ dtjDYyTDaz65vGvmPhXxV9jzqxZ1yZqnrbvRUvVXoJXTHZu7VyW8owzj3oCwrHyf ka6ADBY3/uEgSRkmbkwJIBZzJrekBmX2TDclriZDI6w5 -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:37 2026 by rpki-client