This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/34oLJ4Lov7Wf-cgurfEB4ApxQL8.roa File: 34oLJ4Lov7Wf-cgurfEB4ApxQL8.roa (raw, json) Hash identifier: UMa/+Z7jBzitDcBQN0nLNmhVtoKXLtpXamxn8QiiIS4= Subject key identifier: DF:8A:0B:27:82:E8:BF:B5:9F:F9:C8:2E:AD:F1:01:E0:0A:71:40:BF Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a Certificate serial: 019B7CEE386ECD4FDAF41618D81FC2B78407 Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/34oLJ4Lov7Wf-cgurfEB4ApxQL8.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47160 IP address blocks: 45.147.208.0/22 maxlen: 24 176.124.40.0/22 maxlen: 24 2a0f:3400::/29 maxlen: 48 2a0f:3400::/40 maxlen: 40 2a0f:3400:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:6e:cd:4f:da:f4:16:18:d8:1f:c2:b7:84:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df8a0b2782e8bfb59ff9c82eadf101e00a7140bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:f8:f9:d9:d5:6b:bc:e5:15:ab:6d:d1:8e: 5d:c1:a1:4e:17:05:71:d7:57:38:66:11:75:71:58: a4:5a:ff:17:27:64:01:a5:27:4b:c5:a1:18:29:c8: e7:be:29:ee:8d:05:f7:43:13:ff:31:01:50:4b:4c: ad:da:4a:0b:d3:b0:f2:eb:65:55:a0:77:6c:de:d6: 35:9e:6e:70:2c:5c:45:23:03:3f:bf:b2:b6:34:82: c7:f3:a9:25:37:c8:ea:b7:06:0c:73:3c:04:5e:1f: 86:fe:65:e9:12:64:71:b7:01:3c:7f:64:8d:7a:21: 78:78:20:e3:93:fa:4d:fe:24:e8:0b:4d:cb:fa:30: 7a:58:b8:0e:a0:1e:9e:17:e2:1c:25:2a:8d:6a:65: 5b:07:b5:73:e2:89:6a:f2:16:ea:ff:10:83:d7:cc: d5:ee:6c:60:fd:95:03:14:80:8d:b6:af:a2:43:0b: 41:9a:0f:69:01:ca:02:19:04:c2:b4:a3:c6:26:38: d8:66:16:e2:93:72:2d:cb:3f:c0:41:4c:91:b3:cb: 1e:19:5d:e5:0c:fb:e5:a4:03:32:a7:9b:2d:68:dd: 73:f9:ca:ac:eb:83:c4:14:87:1c:81:dc:f5:1b:8b: b4:20:e9:23:a9:3e:5b:dd:61:f6:f6:79:3f:0d:02: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8A:0B:27:82:E8:BF:B5:9F:F9:C8:2E:AD:F1:01:E0:0A:71:40:BF X509v3 Authority Key Identifier: keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/34oLJ4Lov7Wf-cgurfEB4ApxQL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.208.0/22 176.124.40.0/22 IPv6: 2a0f:3400::/29 Signature Algorithm: sha256WithRSAEncryption 11:e6:1e:09:20:dc:53:09:5d:ef:1d:90:90:19:0a:f4:65:1f: 0b:31:82:be:f6:08:e6:fd:d8:97:47:d8:b0:83:4b:17:da:28: 7d:85:42:e5:30:12:47:d6:6d:e4:25:e0:3f:17:e5:9a:ed:f6: 3c:ea:90:48:e8:1a:9a:f8:93:93:33:63:07:87:11:c3:ea:da: 63:b4:38:ef:96:25:8a:e0:81:6a:ff:4d:a4:64:b5:f7:00:01: 5f:4d:13:5f:d4:f6:7c:74:8b:3f:b8:cd:c1:cf:04:7e:c2:06: 90:92:8c:51:40:9d:56:f7:de:38:6c:64:90:5b:08:85:8a:8a: 17:67:74:15:7f:69:dd:ae:ee:cc:82:39:6f:b7:e1:c2:69:0e: 55:54:0f:67:22:43:d0:e5:c9:9a:2d:53:c5:ae:7c:ce:05:18: a8:2e:70:5d:31:9e:c4:8d:fb:55:5a:8b:e8:f7:75:04:62:5e: 12:26:75:82:22:67:40:72:14:52:62:29:fc:43:a8:0c:61:7a: 97:b3:e0:58:a9:5c:ee:aa:d9:17:c8:81:4d:c0:d7:e3:ed:2a: a4:60:ff:b9:eb:b4:60:fa:0b:2a:a4:52:70:7b:af:f4:45:26: 00:8d:c9:69:1c:1e:ad:10:a7:08:ff:7b:82:45:14:b7:ce:85: 7a:6c:9e:74 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87jhuzU/a9BYY2B/Ct4QHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNTk1NWM0YWYzZWIxYThkMzQwMGE4NjYyNWUzNjVjMjYy OThkNmEwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjhhMGIyNzgyZThiZmI1OWZmOWM4MmVhZGYxMDFlMDBhNzE0MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e74+dnVa7zlFatt0Y5dwaFOFwVx 11c4ZhF1cVikWv8XJ2QBpSdLxaEYKcjnvinujQX3QxP/MQFQS0yt2koL07Dy62VV oHds3tY1nm5wLFxFIwM/v7K2NILH86klN8jqtwYMczwEXh+G/mXpEmRxtwE8f2SN eiF4eCDjk/pN/iToC03L+jB6WLgOoB6eF+IcJSqNamVbB7Vz4olq8hbq/xCD18zV 7mxg/ZUDFICNtq+iQwtBmg9pAcoCGQTCtKPGJjjYZhbik3Ityz/AQUyRs8seGV3l DPvlpAMyp5staN1z+cqs64PEFIccgdz1G4u0IOkjqT5b3WH29nk/DQLabwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN+KCyeC6L+1n/nILq3xAeAKcUC/MB8GA1UdIwQY MBaAFDFZVcSvPrGo00AKhmJeNlwmKY1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODIt OTczNDgzMzZmMzNhLzEvMzRvTEo0TG92N1dmLWNndXJmRUI0QXB4UUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yMWM2MWEtZDZiMS00YWNhLTk3ODItOTczNDgzMzZmMzNh LzEvTVZsVnhLOC1zYWpUUUFxR1lsNDJYQ1lwaldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZPQAwQC sHwoMA0EAgACMAcDBQMqDzQAMA0GCSqGSIb3DQEBCwUAA4IBAQAR5h4JINxTCV3v HZCQGQr0ZR8LMYK+9gjm/diXR9iwg0sX2ih9hULlMBJH1m3kJeA/F+Wa7fY86pBI 6Bqa+JOTM2MHhxHD6tpjtDjvliWK4IFq/02kZLX3AAFfTRNf1PZ8dIs/uM3BzwR+ wgaQkoxRQJ1W9944bGSQWwiFiooXZ3QVf2ndru7Mgjlvt+HCaQ5VVA9nIkPQ5cma LVPFrnzOBRioLnBdMZ7EjftVWovo93UEYl4SJnWCImdAchRSYin8Q6gMYXqXs+BY qVzuqtkXyIFNwNfj7SqkYP+567Rg+gsqpFJwe6/0RSYAjclpHB6tEKcI/3uCRRS3 zoV6bJ50 -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:12 2026 by rpki-client