This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/raV-nGfCRH7nb4cH2VBHwr8bFdQ.roa File: raV-nGfCRH7nb4cH2VBHwr8bFdQ.roa (raw, json) Hash identifier: emSlxFHfN6IxHEyPyRdKwviBvDuHbEBLYDJSglAnOps= Subject key identifier: AD:A5:7E:9C:67:C2:44:7E:E7:6F:87:07:D9:50:47:C2:BF:1B:15:D4 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C751130B40E21C71BCED706573BBF4 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/raV-nGfCRH7nb4cH2VBHwr8bFdQ.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216138 IP address blocks: 192.200.192.0/19 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:51:13:0b:40:e2:1c:71:bc:ed:70:65:73:bb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada57e9c67c2447ee76f8707d95047c2bf1b15d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:08:14:7d:35:f8:35:24:61:ad:f2:00:ee: 25:7b:09:73:dd:f5:ea:99:e4:25:70:62:3e:db:a9: f2:d9:12:cd:e5:3c:05:0d:ec:d5:93:f8:32:63:89: e9:47:f1:eb:c3:07:3d:90:9c:e9:c5:9e:35:f9:fa: d8:ae:ba:43:be:92:6b:27:f9:ae:9e:b2:dd:21:f4: 9d:08:9f:a4:0a:15:74:70:14:28:2f:fd:76:a8:06: 87:b1:3b:0e:d6:ef:44:83:35:a7:97:a2:33:c8:25: 76:be:47:26:1c:f2:9f:ec:38:aa:e7:db:4b:b0:c8: e1:76:6b:26:79:8e:81:b3:f5:f6:53:84:ae:81:9b: 6b:3d:d1:43:34:db:0c:f9:06:5e:a8:e9:51:81:2f: 3f:0d:8d:f2:7a:a6:f4:42:86:a6:5c:af:d8:96:f5: 20:0e:05:a9:c6:44:a3:de:88:04:4a:bd:bb:b3:30: 1f:84:fd:a7:f0:2a:dc:ae:a1:fa:8b:66:36:1d:bc: df:a8:b6:a1:7b:e3:32:95:30:7e:15:54:d2:e8:35: 6d:03:40:f6:bd:16:78:f1:83:16:d5:2a:14:f0:dc: b1:8a:17:17:ae:d2:8f:7c:78:46:08:22:a4:a5:a7: 7d:18:3c:f3:80:4c:05:6c:22:50:a1:0f:01:87:42: a4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:7E:9C:67:C2:44:7E:E7:6F:87:07:D9:50:47:C2:BF:1B:15:D4 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/raV-nGfCRH7nb4cH2VBHwr8bFdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.200.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:82:44:6f:53:e2:2d:7f:6f:b6:01:33:11:98:b7:9d:5c:57: 09:92:2f:38:6c:49:a5:de:da:ab:bf:33:bd:41:ef:28:1e:17: 21:7b:8b:4e:86:0a:1b:db:eb:cc:23:f2:fd:09:ad:65:c3:69: c9:6e:bc:6b:eb:79:ec:00:97:58:9b:d4:a7:75:e8:b5:e8:2b: a3:e6:71:cd:98:bf:d3:39:c8:e7:28:57:a9:ab:2e:2d:eb:f3: 60:aa:84:a0:ab:9e:7c:d0:ba:6e:2d:d1:df:a2:f9:56:82:ee: 44:cd:c9:72:b2:ed:74:71:cc:a9:37:d4:c6:1c:95:81:e8:37: b7:63:b3:d4:0b:11:34:45:38:69:12:e4:00:7e:20:90:c9:ec: 40:01:63:cf:75:04:60:50:ba:b1:d1:1f:3e:3c:23:76:d4:f9: f5:e0:3d:1b:be:a3:20:2f:ed:67:7f:94:6c:3f:14:62:b4:f4: 7e:3c:46:10:31:d7:6f:63:72:13:e8:93:5d:3f:fc:28:f5:d2: 3a:cb:1b:80:1b:75:b9:ff:c9:03:1b:5c:af:27:e1:36:47:14: b9:7d:ea:fd:e9:c4:00:ed:4b:d8:7e:c4:8b:be:59:6e:9f:a0: cd:dd:5c:54:99:89:f3:4e:6f:79:11:76:ce:a1:3f:34:96:6d: ed:3e:05:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1ETC0DiHHG87XBlc7v0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGE1N2U5YzY3YzI0NDdlZTc2Zjg3MDdkOTUwNDdjMmJmMWIxNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlacIFH01+DUkYa3yAO4lewlz3fXq meQlcGI+26ny2RLN5TwFDezVk/gyY4npR/Hrwwc9kJzpxZ41+frYrrpDvpJrJ/mu nrLdIfSdCJ+kChV0cBQoL/12qAaHsTsO1u9EgzWnl6IzyCV2vkcmHPKf7Diq59tL sMjhdmsmeY6Bs/X2U4SugZtrPdFDNNsM+QZeqOlRgS8/DY3yeqb0QoamXK/YlvUg DgWpxkSj3ogESr27szAfhP2n8CrcrqH6i2Y2HbzfqLahe+MylTB+FVTS6DVtA0D2 vRZ48YMW1SoU8NyxihcXrtKPfHhGCCKkpad9GDzzgEwFbCJQoQ8Bh0KkVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2lfpxnwkR+52+HB9lQR8K/GxXUMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvcmFWLW5HZkNSSDduYjRjSDJWQkh3cjhiRmRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwMjAMA0G CSqGSIb3DQEBCwUAA4IBAQBKgkRvU+Itf2+2ATMRmLedXFcJki84bEml3tqrvzO9 Qe8oHhche4tOhgob2+vMI/L9Ca1lw2nJbrxr63nsAJdYm9Sndei16Cuj5nHNmL/T OcjnKFepqy4t6/NgqoSgq5580LpuLdHfovlWgu5Ezclysu10ccypN9TGHJWB6De3 Y7PUCxE0RThpEuQAfiCQyexAAWPPdQRgULqx0R8+PCN21Pn14D0bvqMgL+1nf5Rs PxRitPR+PEYQMddvY3IT6JNdP/wo9dI6yxuAG3W5/8kDG1yvJ+E2RxS5fer96cQA 7UvYfsSLvllun6DN3VxUmYnzTm95EXbOoT80lm3tPgXe -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:26 2026 by rpki-client