This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/j4qiTlmyE2UTELOd_dWPpgYgT7g.roa File: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (raw, json) Hash identifier: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU= Subject key identifier: 8F:8A:A2:4E:59:B2:13:65:13:10:B3:9D:FD:D5:8F:A6:06:20:4F:B8 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC3F9BD8AC769CCEA736446F21340 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/j4qiTlmyE2UTELOd_dWPpgYgT7g.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 194.79.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c3:f9:bd:8a:c7:69:cc:ea:73:64:46:f2:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f8aa24e59b213651310b39dfdd58fa606204fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:00:94:39:36:b5:ed:db:db:5d:a4:ab:80: 72:68:b3:a0:e0:41:36:6c:29:d7:49:71:51:e5:24: 76:10:8a:95:22:a4:ee:bd:78:11:b9:d0:a5:a6:a7: b7:8f:bc:a9:9b:d3:c5:0d:0d:f0:2a:ae:d6:0e:c4: 5a:65:34:80:8c:3a:c9:68:f6:7f:b5:fe:66:bc:3e: 70:1e:da:08:b0:c4:b7:ce:39:8f:99:3e:f7:e2:ca: e0:8e:0b:72:5a:04:25:52:7e:71:93:65:e9:39:23: 27:72:55:f8:0f:7f:eb:64:42:fb:1a:99:77:e3:c4: fd:1c:12:a4:ea:e1:35:49:2a:73:51:36:3f:c7:ca: 83:80:97:88:25:2e:76:27:4e:94:a1:45:f9:3b:3f: d8:5b:82:a1:ed:c3:ac:41:a8:ac:57:b3:38:a0:d0: 61:47:a8:6e:f9:3f:5b:4d:67:94:55:c6:10:84:f6: 96:07:84:68:97:9e:94:6f:6d:fd:b3:7b:70:a8:ac: 40:50:bd:81:cd:d3:a5:10:b5:f0:34:1f:2b:2b:9d: 5a:df:ac:d4:1e:d7:5b:25:22:61:63:43:1f:fe:c6: c9:f5:b2:5f:cb:f3:af:1b:39:b3:8b:71:ee:09:40: de:e3:7e:78:4b:e7:48:b3:d6:91:13:02:a4:f3:cd: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8A:A2:4E:59:B2:13:65:13:10:B3:9D:FD:D5:8F:A6:06:20:4F:B8 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/j4qiTlmyE2UTELOd_dWPpgYgT7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.79.14.0/24 Signature Algorithm: sha256WithRSAEncryption 82:3c:d7:8b:e6:87:dc:42:9d:a7:01:1b:03:c0:65:0f:f5:33: 14:92:77:25:71:38:1e:34:93:a4:cb:62:9f:43:6f:7b:35:7b: 7f:fa:50:4f:1d:b6:12:90:68:96:67:58:bd:b9:90:f1:7c:7f: 0c:00:5a:92:3f:34:fd:a5:cb:ca:9f:52:0a:2f:d9:be:2b:77: c2:4a:91:f1:d5:8b:56:1f:dd:c1:a6:f9:b2:5e:b3:7c:b3:45: d4:ae:59:85:64:3c:40:68:46:44:a1:04:47:96:1a:36:b3:05: ea:ad:ba:f1:79:21:26:76:b0:af:51:01:5c:76:cb:17:29:87: 4b:21:f8:d1:8d:65:0d:97:d9:c4:96:aa:26:17:9b:70:36:57: c8:b3:b1:59:a8:91:29:1b:2f:09:78:1f:d5:02:a5:da:8e:d6: 8f:bf:c8:62:e8:18:42:e9:fa:9d:4c:8d:2b:70:9c:c2:2d:52: 1f:80:4c:4a:a8:11:ab:8f:e8:d7:5a:9b:4f:1e:3c:b5:91:9f: 67:9e:3a:60:81:cd:27:fd:8b:b4:09:05:1b:e2:82:b1:4a:a1: 88:18:ac:f9:e3:85:7a:49:61:b8:c0:86:e4:0d:35:d8:db:35: 9a:20:54:a3:42:89:a1:a8:33:f5:fe:26:53:b8:98:63:3f:30: 39:63:a2:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cP5vYrHaczqc2RG8hNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjhhYTI0ZTU5YjIxMzY1MTMxMGIzOWRmZGQ1OGZhNjA2MjA0ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuwAlDk2te3b212kq4ByaLOg4EE2 bCnXSXFR5SR2EIqVIqTuvXgRudClpqe3j7ypm9PFDQ3wKq7WDsRaZTSAjDrJaPZ/ tf5mvD5wHtoIsMS3zjmPmT734srgjgtyWgQlUn5xk2XpOSMnclX4D3/rZEL7Gpl3 48T9HBKk6uE1SSpzUTY/x8qDgJeIJS52J06UoUX5Oz/YW4Kh7cOsQaisV7M4oNBh R6hu+T9bTWeUVcYQhPaWB4Rol56Ub239s3twqKxAUL2BzdOlELXwNB8rK51a36zU HtdbJSJhY0Mf/sbJ9bJfy/OvGzmzi3HuCUDe4354S+dIs9aREwKk880zdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI+Kok5ZshNlExCznf3Vj6YGIE+4MB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvajRxaVRsbXlFMlVURUxPZF9kV1BwZ1lnVDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwk8OMA0G CSqGSIb3DQEBCwUAA4IBAQCCPNeL5ofcQp2nARsDwGUP9TMUknclcTgeNJOky2Kf Q297NXt/+lBPHbYSkGiWZ1i9uZDxfH8MAFqSPzT9pcvKn1IKL9m+K3fCSpHx1YtW H93BpvmyXrN8s0XUrlmFZDxAaEZEoQRHlho2swXqrbrxeSEmdrCvUQFcdssXKYdL IfjRjWUNl9nElqomF5twNlfIs7FZqJEpGy8JeB/VAqXajtaPv8hi6BhC6fqdTI0r cJzCLVIfgExKqBGrj+jXWptPHjy1kZ9nnjpggc0n/Yu0CQUb4oKxSqGIGKz544V6 SWG4wIbkDTXY2zWaIFSjQomhqDP1/iZTuJhjPzA5Y6Lm -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:40 2026 by rpki-client