This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/wFgOguyGf2k_urlg3TTD49UB-Bc.roa File: wFgOguyGf2k_urlg3TTD49UB-Bc.roa (raw, json) Hash identifier: mmkwLxl45AUjDJ9WsNq5QpGXB2gTpDmmeU8A9ngZEvg= Subject key identifier: C0:58:0E:82:EC:86:7F:69:3F:BA:B9:60:DD:34:C3:E3:D5:01:F8:17 Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8 Certificate serial: 019B7A5B360BDB3244AC8EE4AF6D743F0719 Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/wFgOguyGf2k_urlg3TTD49UB-Bc.roa Signing time: Thu 01 Jan 2026 16:19:16 +0000 ROA not before: Thu 01 Jan 2026 16:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 194.156.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:36:0b:db:32:44:ac:8e:e4:af:6d:74:3f:07:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8 Validity Not Before: Jan 1 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0580e82ec867f693fbab960dd34c3e3d501f817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:75:44:e1:96:e3:b8:69:04:9b:19:18:b9: 57:23:1f:6d:25:59:1b:a0:26:88:a3:d3:1f:44:f2: a0:2a:c4:18:64:18:2f:c3:25:90:44:66:08:5e:37: 70:d8:c0:06:e5:dc:ac:f0:f9:e2:65:5a:c8:fe:0c: 66:8b:90:f0:6a:a6:d4:56:96:3b:7d:fe:cc:e0:cc: 41:ec:01:fd:17:69:99:88:50:29:7b:99:34:8e:46: 6c:26:79:38:d3:29:b0:ea:07:b8:9d:0f:e7:55:d9: 4f:4f:c5:36:c7:6f:84:42:aa:fc:31:1d:fd:4e:e2: d1:0d:dd:9e:51:6c:da:d4:f2:b4:3b:28:44:3e:71: 7e:84:a6:fd:b8:43:f3:af:a2:a5:4a:0d:f3:e4:e6: 64:b5:ee:e7:8d:e6:8b:38:81:49:51:1d:30:a1:af: 42:cc:d8:b3:43:2a:b5:27:74:fc:78:53:df:95:7f: d1:13:60:41:4e:04:d6:78:96:c0:2c:86:e6:df:06: 22:3c:8a:12:82:1d:d7:88:ea:a6:bd:b7:2a:c9:20: 5e:73:02:ef:bf:f5:3b:1d:35:dd:9b:95:ec:3f:fe: ab:9a:fb:59:a9:99:03:9a:b3:f2:36:8f:1a:e8:ba: 35:ce:72:e6:a1:f0:47:dd:22:d3:15:ef:6e:42:dc: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:58:0E:82:EC:86:7F:69:3F:BA:B9:60:DD:34:C3:E3:D5:01:F8:17 X509v3 Authority Key Identifier: keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/wFgOguyGf2k_urlg3TTD49UB-Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.234.0/24 Signature Algorithm: sha256WithRSAEncryption 57:85:46:12:3f:a7:6e:4e:30:88:b0:be:02:46:ce:77:c3:96: dd:e4:59:f4:f8:40:ee:93:33:aa:21:56:a6:a3:a4:fb:f3:5e: d6:0b:8b:95:52:10:67:c8:44:e9:8e:87:48:6f:10:ae:eb:6b: cd:0c:05:3e:81:a8:05:c4:ef:8e:e4:3c:b6:e0:3f:f1:33:3e: c2:e3:1f:a1:52:77:6a:a8:3c:a9:37:ac:a5:36:02:f0:97:a3: e0:28:8a:40:5b:ff:40:b0:03:b6:74:b5:08:11:2d:c9:12:51: 60:2f:ed:5e:84:fa:68:7d:72:d9:f6:13:68:54:74:02:2a:f7: cd:67:50:b7:b1:de:12:42:d6:0a:24:e7:5d:47:57:25:13:39: e0:f7:1e:3c:2c:6b:ff:c3:fa:8e:a2:ff:95:a7:69:ac:6e:0c: 5d:df:c2:32:66:47:d8:d7:1f:f9:57:42:08:d4:59:28:35:8c: be:da:af:76:96:01:56:2e:6e:ae:b3:a8:75:0d:56:6a:73:fa: 28:3a:16:cd:50:6c:61:0a:7f:86:d7:1b:82:02:9f:71:fd:8b: ff:e0:13:20:2b:90:92:a4:db:c7:dc:18:f1:3c:24:4d:74:1d: e7:0b:3a:b8:7b:67:5e:09:d5:95:ca:41:9e:c2:12:1f:f4:cd: 4b:db:df:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzYL2zJErI7kr210PwcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OTQzNzU0ZTkyMzQ1YThiYmFiM2RiMmJjMzZkNjE4ZTVl Y2MwZTgwHhcNMjYwMTAxMTYxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU4MGU4MmVjODY3ZjY5M2ZiYWI5NjBkZDM0YzNlM2Q1MDFmODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspB1ROGW47hpBJsZGLlXIx9tJVkb oCaIo9MfRPKgKsQYZBgvwyWQRGYIXjdw2MAG5dys8PniZVrI/gxmi5DwaqbUVpY7 ff7M4MxB7AH9F2mZiFApe5k0jkZsJnk40ymw6ge4nQ/nVdlPT8U2x2+EQqr8MR39 TuLRDd2eUWza1PK0OyhEPnF+hKb9uEPzr6KlSg3z5OZkte7njeaLOIFJUR0woa9C zNizQyq1J3T8eFPflX/RE2BBTgTWeJbALIbm3wYiPIoSgh3XiOqmvbcqySBecwLv v/U7HTXdm5XsP/6rmvtZqZkDmrPyNo8a6Lo1znLmofBH3SLTFe9uQtyFKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBYDoLshn9pP7q5YN00w+PVAfgXMB8GA1UdIwQY MBaAFLiUN1TpI0Wou6s9srw21hjl7MDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMt M2U2YTE0ZGUyYzQ3LzEvd0ZnT2d1eUdmMmtfdXJsZzNUVEQ0OVVCLUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMtM2U2YTE0ZGUyYzQ3 LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpzqMA0G CSqGSIb3DQEBCwUAA4IBAQBXhUYSP6duTjCIsL4CRs53w5bd5Fn0+EDukzOqIVam o6T7817WC4uVUhBnyETpjodIbxCu62vNDAU+gagFxO+O5Dy24D/xMz7C4x+hUndq qDypN6ylNgLwl6PgKIpAW/9AsAO2dLUIES3JElFgL+1ehPpofXLZ9hNoVHQCKvfN Z1C3sd4SQtYKJOddR1clEzng9x48LGv/w/qOov+Vp2msbgxd38IyZkfY1x/5V0II 1FkoNYy+2q92lgFWLm6us6h1DVZqc/ooOhbNUGxhCn+G1xuCAp9x/Yv/4BMgK5CS pNvH3BjxPCRNdB3nCzq4e2deCdWVykGewhIf9M1L299/ -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:32 2026 by rpki-client