This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa File: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (raw, json) Hash identifier: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0= Subject key identifier: AE:64:43:EE:C6:5A:21:0A:3A:34:A9:89:94:52:5D:79:CC:59:D0:96 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA83E55C78244E9AE0C136B507E47E Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 194.59.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:83:e5:5c:78:24:4e:9a:e0:c1:36:b5:07:e4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae6443eec65a210a3a34a98994525d79cc59d096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:6a:58:13:89:d9:28:54:13:7c:14:0e:66: e1:20:9c:0e:f7:80:89:39:00:75:b2:42:0c:fa:f4: c4:d5:52:28:67:47:ba:17:37:1e:73:24:50:30:ab: 60:30:fd:1f:fc:89:7c:87:7b:79:dd:ff:65:b8:1b: 4b:40:5c:f7:88:ae:e4:5e:3b:60:5f:53:e3:6b:e1: a3:26:05:6f:91:8f:a3:56:1d:14:e3:29:1b:bd:28: f3:5a:e9:c8:2e:be:56:27:b2:57:0d:a0:d6:ff:a1: 45:b1:c9:ba:cc:8f:2a:fb:33:a0:a3:dc:c1:bc:80: 72:71:f5:e9:56:35:56:e6:02:bf:ef:3b:02:92:4c: fc:16:48:04:e3:cf:99:71:1c:d5:6b:9f:70:a9:06: a6:45:df:08:68:64:ed:1f:c8:f2:17:ed:82:62:8f: 4d:c6:39:f4:e6:59:26:1e:1c:ad:4d:67:da:f5:bf: d6:8a:51:ed:0d:ec:8e:00:63:8c:6f:8b:52:95:d7: 1b:49:40:2a:35:f9:8e:7c:ba:57:c0:9b:dc:50:ab: 62:08:47:5f:f5:80:e1:66:1c:b2:e3:ca:14:fe:22: ad:33:94:15:2e:91:0a:d5:4e:c6:34:fb:63:e9:a6: cf:2d:4e:53:92:2d:69:91:2b:44:75:a5:59:0b:46: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:64:43:EE:C6:5A:21:0A:3A:34:A9:89:94:52:5D:79:CC:59:D0:96 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.8.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9e:84:b6:f9:ff:1c:7d:27:97:fa:49:be:2b:6e:cd:98:6f: 6b:01:ba:1b:87:7b:51:e6:bb:18:4e:8b:fd:95:73:cb:77:8f: 9e:69:8c:e3:04:cd:bd:40:58:d7:64:45:6d:5d:68:8e:c8:ba: 13:ea:4f:51:2d:79:42:aa:a5:b4:65:ac:d6:72:f4:4a:52:8f: a2:78:bd:f0:92:ae:9d:7e:af:43:33:b1:9c:b2:3e:ee:9e:30: 3f:61:6d:b0:38:58:0f:74:3c:6c:e5:ad:ea:2e:ce:d7:eb:69: 0b:93:a3:27:48:d3:40:21:9c:63:82:61:28:94:da:31:aa:e9: 2d:fb:10:2c:75:d3:7c:3e:b6:68:c2:ea:1a:68:c0:f2:17:d5: 32:fb:fd:62:1b:52:37:c4:4e:fe:ff:f9:5e:2d:cd:57:0b:e9: 5a:e8:0e:f9:64:15:93:fb:a1:e0:5f:72:2e:9d:67:7f:e2:78: 37:10:de:d6:4b:75:c8:e4:00:74:f1:e2:c7:b7:18:87:f5:0d: 3d:a5:46:0f:9e:55:51:fa:11:b6:a0:ee:4c:93:0a:ac:b0:aa: 3c:d9:b4:24:37:34:ed:a9:6d:6f:f6:12:d3:9f:c2:9d:6a:d9: e8:0b:55:0b:93:1c:3e:41:56:11:88:cf:92:79:10:3b:de:18: a4:dd:a9:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoPlXHgkTprgwTa1B+R+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTY0NDNlZWM2NWEyMTBhM2EzNGE5ODk5NDUyNWQ3OWNjNTlkMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmlqWBOJ2ShUE3wUDmbhIJwO94CJ OQB1skIM+vTE1VIoZ0e6FzcecyRQMKtgMP0f/Il8h3t53f9luBtLQFz3iK7kXjtg X1Pja+GjJgVvkY+jVh0U4ykbvSjzWunILr5WJ7JXDaDW/6FFscm6zI8q+zOgo9zB vIBycfXpVjVW5gK/7zsCkkz8FkgE48+ZcRzVa59wqQamRd8IaGTtH8jyF+2CYo9N xjn05lkmHhytTWfa9b/WilHtDeyOAGOMb4tSldcbSUAqNfmOfLpXwJvcUKtiCEdf 9YDhZhyy48oU/iKtM5QVLpEK1U7GNPtj6abPLU5Tki1pkStEdaVZC0aTAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5kQ+7GWiEKOjSpiZRSXXnMWdCWMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvcm1SRDdzWmFJUW82TkttSmxGSmRlY3haMEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsIMA0G CSqGSIb3DQEBCwUAA4IBAQBEnoS2+f8cfSeX+km+K27NmG9rAbobh3tR5rsYTov9 lXPLd4+eaYzjBM29QFjXZEVtXWiOyLoT6k9RLXlCqqW0ZazWcvRKUo+ieL3wkq6d fq9DM7Gcsj7unjA/YW2wOFgPdDxs5a3qLs7X62kLk6MnSNNAIZxjgmEolNoxqukt +xAsddN8PrZowuoaaMDyF9Uy+/1iG1I3xE7+//leLc1XC+la6A75ZBWT+6HgX3Iu nWd/4ng3EN7WS3XI5AB08eLHtxiH9Q09pUYPnlVR+hG2oO5MkwqssKo82bQkNzTt qW1v9hLTn8KdatnoC1ULkxw+QVYRiM+SeRA73hik3aka -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:20 2026 by rpki-client