This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/rTWNDX2sh64JmJF94YkHDQivF1w.roa File: rTWNDX2sh64JmJF94YkHDQivF1w.roa (raw, json) Hash identifier: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ= Subject key identifier: AD:35:8D:0D:7D:AC:87:AE:09:98:91:7D:E1:89:07:0D:08:AF:17:5C Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Certificate serial: 019B77C6C32B5491E33FC34F4A4B0C8E6A50 Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/rTWNDX2sh64JmJF94YkHDQivF1w.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 194.127.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c3:2b:54:91:e3:3f:c3:4f:4a:4b:0c:8e:6a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad358d0d7dac87ae0998917de189070d08af175c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:f1:d5:9d:22:e6:34:ed:c1:8c:00:3c:f3: 61:8d:4c:4a:25:45:d8:66:d5:37:b5:1c:95:7c:9d: 93:71:b9:ea:34:f3:e7:58:a1:7d:5b:5e:b8:44:bb: 05:72:63:81:dd:e3:22:c4:20:27:50:bb:8e:c9:b0: c5:1d:b1:e6:76:c7:6e:14:f1:9c:07:26:df:20:89: 5c:48:52:c0:39:e5:36:4d:9d:bd:8c:1f:2b:7d:5f: b3:c8:ab:04:0d:15:c9:47:97:3c:5d:39:5d:59:ae: 39:a5:f4:52:82:19:d8:39:4d:37:ac:93:ee:46:14: e4:03:cc:23:49:62:34:fe:09:56:96:f7:24:46:83: b5:ee:08:53:f4:fb:34:d5:9e:f4:4c:c9:57:17:a0: 28:a2:62:b0:4a:a1:88:8e:a4:5d:fc:45:2d:89:1d: 5f:6d:9b:ca:45:c8:92:3c:2c:eb:9c:01:78:b0:32: 17:af:b5:67:32:a9:c2:76:fb:57:a5:cd:0b:63:74: ee:71:85:23:94:52:6e:05:9b:9f:85:72:23:aa:18: 34:68:63:e1:32:00:54:97:2e:0c:33:c9:bd:20:d2: ba:53:0a:91:98:31:23:23:fe:5c:63:61:24:ff:60: a8:c0:30:89:f7:94:d6:4e:4c:a8:f8:ab:73:9b:54: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:8D:0D:7D:AC:87:AE:09:98:91:7D:E1:89:07:0D:08:AF:17:5C X509v3 Authority Key Identifier: keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/rTWNDX2sh64JmJF94YkHDQivF1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.103.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:80:11:35:aa:5c:a5:8e:3b:38:0c:36:6a:a0:eb:e7:91:00: 65:44:0f:58:5f:e5:52:4c:e8:aa:04:2a:c3:45:a8:ce:d9:56: e3:13:33:43:a8:72:bc:cb:f7:cc:b7:21:e2:a3:bc:49:36:9a: 54:b3:4e:92:8a:3c:ed:21:10:a4:90:84:54:0f:4b:09:25:cd: 3e:93:de:ed:16:1f:8c:f6:0f:27:44:e6:37:0c:1a:b9:05:1f: 15:27:87:38:e9:52:3d:23:9d:a3:25:97:f2:08:e7:5f:03:a6: 1f:c1:72:43:90:75:cd:3b:cd:34:6c:f9:82:e2:48:c5:03:38: 54:24:72:86:6a:bb:c2:e4:21:9b:ca:3e:28:df:90:d3:52:47: ae:6a:f5:61:bc:74:98:4d:8c:19:61:6a:20:4d:41:95:6d:95: 8d:c9:4d:00:be:73:88:6f:1d:39:dc:90:b6:f4:e9:24:dc:8f: 20:de:e4:6e:d4:20:a8:d8:5e:2f:e8:84:17:22:ac:75:05:64: 08:9a:83:8d:21:39:95:3f:99:44:8e:27:e6:f5:b7:96:aa:41: ec:aa:12:2e:a1:94:18:d2:a7:6a:e1:a2:8f:96:4c:9d:88:cf: 8d:3a:df:ab:97:40:a0:84:fb:3d:42:25:a7:93:94:f0:27:e7: 17:ab:28:40 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xsMrVJHjP8NPSksMjmpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm YTBjZWIwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDM1OGQwZDdkYWM4N2FlMDk5ODkxN2RlMTg5MDcwZDA4YWYxNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn3x1Z0i5jTtwYwAPPNhjUxKJUXY ZtU3tRyVfJ2TcbnqNPPnWKF9W164RLsFcmOB3eMixCAnULuOybDFHbHmdsduFPGc BybfIIlcSFLAOeU2TZ29jB8rfV+zyKsEDRXJR5c8XTldWa45pfRSghnYOU03rJPu RhTkA8wjSWI0/glWlvckRoO17ghT9Ps01Z70TMlXF6AoomKwSqGIjqRd/EUtiR1f bZvKRciSPCzrnAF4sDIXr7VnMqnCdvtXpc0LY3TucYUjlFJuBZufhXIjqhg0aGPh MgBUly4MM8m9INK6UwqRmDEjI/5cY2Ek/2CowDCJ95TWTkyo+Ktzm1Qn7wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFK01jQ19rIeuCZiRfeGJBw0IrxdcMB8GA1UdIwQY MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj LTE5ZGJkNmI0MmZiNS8xL3JUV05EWDJzaDY0Sm1KRjk0WWtIRFFpdkYxdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZjLTE5ZGJkNmI0MmZi NS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCf2cw DQYJKoZIhvcNAQELBQADggEBABuAETWqXKWOOzgMNmqg6+eRAGVED1hf5VJM6KoE KsNFqM7ZVuMTM0OocrzL98y3IeKjvEk2mlSzTpKKPO0hEKSQhFQPSwklzT6T3u0W H4z2DydE5jcMGrkFHxUnhzjpUj0jnaMll/II518Dph/BckOQdc07zTRs+YLiSMUD OFQkcoZqu8LkIZvKPijfkNNSR65q9WG8dJhNjBlhaiBNQZVtlY3JTQC+c4hvHTnc kLb06STcjyDe5G7UIKjYXi/ohBcirHUFZAiag40hOZU/mUSOJ+b1t5aqQeyqEi6h lBjSp2rhoo+WTJ2Iz40636uXQKCE+z1CJaeTlPAn5xerKEA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:10 2026 by rpki-client