This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/p99sKQd64TY87IGdtOWr6iPqp8Y.roa File: p99sKQd64TY87IGdtOWr6iPqp8Y.roa (raw, json) Hash identifier: TOjdieep1rBeaY3tAvDOKKLMjGOfaC+22A+UcO2sOVg= Subject key identifier: A7:DF:6C:29:07:7A:E1:36:3C:EC:81:9D:B4:E5:AB:EA:23:EA:A7:C6 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B78A3111F53F997C963C1445052BCA108 Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/p99sKQd64TY87IGdtOWr6iPqp8Y.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214113 IP address blocks: 192.140.228.0/22 maxlen: 22 192.140.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:11:1f:53:f9:97:c9:63:c1:44:50:52:bc:a1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7df6c29077ae1363cec819db4e5abea23eaa7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:6d:55:20:1c:d5:30:a2:46:8d:8c:f1:2b: 09:31:ce:fc:01:ec:ec:b2:00:d3:d7:96:9a:c8:07: 82:9f:5b:09:59:38:26:e2:58:9e:84:81:9d:c5:83: 4b:6f:bf:c3:91:9f:82:43:62:8a:cb:fd:9b:9f:8d: ef:c4:31:f9:4b:79:a3:89:79:14:99:d1:23:64:a2: 98:50:5b:f9:1e:4f:ef:fc:c1:87:c4:42:9b:9c:4d: 9a:5d:ac:6b:b5:59:74:cc:0d:6f:2f:86:22:3f:50: 04:03:09:1a:f2:7e:f9:20:b9:cc:8f:0a:20:e8:ab: 7c:20:b3:1e:a5:90:96:a4:59:77:35:89:64:69:0b: 4c:f1:16:fe:08:7d:6d:56:30:3b:cb:8e:eb:d9:ce: 0c:e0:73:51:88:bc:4a:7d:65:9e:83:02:88:9b:aa: 88:5c:be:aa:0d:aa:38:5f:e8:9a:fd:ed:5b:d8:f0: 57:76:e0:16:d4:09:5a:94:b7:47:27:e0:eb:94:8b: 66:32:0b:de:e3:ba:f2:4e:de:00:ef:2e:48:5a:a4: 78:6f:76:ea:d9:3b:e9:b7:47:51:40:dc:6d:1a:bd: 48:0e:eb:17:e7:15:c3:9c:7d:00:2f:38:d2:80:55: 0f:38:55:38:41:7b:9e:e8:5a:fb:9d:00:18:73:f8: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:6C:29:07:7A:E1:36:3C:EC:81:9D:B4:E5:AB:EA:23:EA:A7:C6 X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/p99sKQd64TY87IGdtOWr6iPqp8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.228.0/22 Signature Algorithm: sha256WithRSAEncryption 15:59:b0:ee:1d:07:05:a3:4d:6d:d9:ff:ee:49:7c:2d:48:3f: 4b:85:d0:d5:fc:2e:ec:9d:9f:a5:f6:b6:b7:0d:91:9b:a0:00: d1:bd:89:e0:e2:af:eb:15:39:4f:52:93:1f:ef:fa:a6:6d:10: 50:17:08:2c:b3:62:8a:41:65:a4:34:49:e7:7f:02:bc:10:d2: df:de:ca:eb:54:e9:e2:e2:cb:08:b4:fb:17:f1:f5:40:8c:dd: 7d:7b:07:7f:27:d6:7b:cd:b7:22:cd:6d:17:46:76:3a:a4:31: c2:b3:e0:e6:08:45:a7:9c:51:0c:f2:3c:fc:ff:09:05:6f:df: db:d9:db:80:a4:e3:67:12:f1:7c:fd:31:be:5c:ba:65:35:5e: c3:c4:34:5c:a4:b0:a0:b6:18:4e:c7:52:ca:54:e5:cf:0f:c4: 3e:b7:ad:ef:ad:01:5f:27:d8:4c:63:34:b0:5f:e3:d4:c6:39: 97:6b:05:12:0e:8b:24:6e:77:05:43:e3:d3:32:31:c3:b5:8d: b9:b6:37:9d:44:83:d6:c3:0d:e5:16:0f:b0:96:4c:a8:70:90: 27:ab:de:24:55:64:5f:f6:24:45:6d:b7:28:5e:01:57:f6:c5: 13:83:e7:66:5c:59:24:fa:31:47:da:dd:81:c8:ed:d9:3c:18: 74:d2:6d:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxEfU/mXyWPBRFBSvKEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2RmNmMyOTA3N2FlMTM2M2NlYzgxOWRiNGU1YWJlYTIzZWFhN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukVtVSAc1TCiRo2M8SsJMc78Aezs sgDT15aayAeCn1sJWTgm4liehIGdxYNLb7/DkZ+CQ2KKy/2bn43vxDH5S3mjiXkU mdEjZKKYUFv5Hk/v/MGHxEKbnE2aXaxrtVl0zA1vL4YiP1AEAwka8n75ILnMjwog 6Kt8ILMepZCWpFl3NYlkaQtM8Rb+CH1tVjA7y47r2c4M4HNRiLxKfWWegwKIm6qI XL6qDao4X+ia/e1b2PBXduAW1AlalLdHJ+DrlItmMgve47ryTt4A7y5IWqR4b3bq 2Tvpt0dRQNxtGr1IDusX5xXDnH0ALzjSgFUPOFU4QXue6Fr7nQAYc/iXhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKffbCkHeuE2POyBnbTlq+oj6qfGMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvcDk5c0tRZDY0VFk4N0lHZHRPV3I2aVBxcDhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwIzkMA0G CSqGSIb3DQEBCwUAA4IBAQAVWbDuHQcFo01t2f/uSXwtSD9LhdDV/C7snZ+l9ra3 DZGboADRvYng4q/rFTlPUpMf7/qmbRBQFwgss2KKQWWkNEnnfwK8ENLf3srrVOni 4ssItPsX8fVAjN19ewd/J9Z7zbcizW0XRnY6pDHCs+DmCEWnnFEM8jz8/wkFb9/b 2duApONnEvF8/TG+XLplNV7DxDRcpLCgthhOx1LKVOXPD8Q+t63vrQFfJ9hMYzSw X+PUxjmXawUSDoskbncFQ+PTMjHDtY25tjedRIPWww3lFg+wlkyocJAnq94kVWRf 9iRFbbcoXgFX9sUTg+dmXFkk+jFH2t2ByO3ZPBh00m0c -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:45 2026 by rpki-client