This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SeqyHKL9EhPxBTRyyzerYzVAINs.roa File: SeqyHKL9EhPxBTRyyzerYzVAINs.roa (raw, json) Hash identifier: dFx48PoE7RK/JS36a28Kh53C21MOG+gLrtl+8fz43Rc= Subject key identifier: 49:EA:B2:1C:A2:FD:12:13:F1:05:34:72:CB:37:AB:63:35:40:20:DB Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D477A28EA4F9B785FBBBB5DE47C70 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SeqyHKL9EhPxBTRyyzerYzVAINs.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61272 IP address blocks: 194.32.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:47:7a:28:ea:4f:9b:78:5f:bb:bb:5d:e4:7c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49eab21ca2fd1213f1053472cb37ab63354020db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:bd:47:42:16:0d:41:2a:64:79:13:2e:ad: e0:70:30:c9:fc:9f:2d:fe:de:b8:6e:90:bb:a0:0e: 76:69:19:49:d4:02:08:7f:fa:34:0e:af:be:0c:d9: a4:cc:ee:9b:7e:e4:71:9c:5e:08:8a:86:50:00:e2: 7d:e1:33:4d:f6:f6:51:4b:2b:7b:32:8e:e0:5d:a4: 35:9c:82:64:61:fd:f9:09:b8:3e:e0:ff:7e:6f:4d: 61:2a:c7:04:04:a9:52:53:86:18:8c:31:72:bf:de: ca:54:29:e7:10:e9:12:e6:a4:3a:c1:d6:85:65:0f: e4:b1:91:3b:19:98:2c:6b:a9:d4:f2:05:a7:ac:ac: 75:b2:b2:8f:8d:04:ac:98:ca:97:82:ab:67:08:d3: fb:64:63:43:6a:1c:20:87:4b:db:f1:2b:20:a0:f7: 73:5b:c8:2d:6f:c8:d7:f5:f4:76:18:e6:a8:8a:dd: 96:93:2f:e7:54:d7:46:99:ad:84:3b:33:fe:7e:2b: fd:fc:1d:bd:2b:04:56:9d:ab:bd:e9:ac:97:ac:fa: 08:4e:40:9a:a8:7b:05:6e:a9:b3:dc:d4:98:5d:9d: 18:7e:35:09:ca:3a:e2:96:22:75:eb:51:31:0b:1e: d7:2c:6b:5b:77:ba:44:3c:c8:30:54:32:54:95:e7: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:B2:1C:A2:FD:12:13:F1:05:34:72:CB:37:AB:63:35:40:20:DB X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/SeqyHKL9EhPxBTRyyzerYzVAINs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.122.0/24 Signature Algorithm: sha256WithRSAEncryption 95:9c:3c:ba:4b:cc:45:12:9a:f1:9f:59:22:00:4c:d0:9b:f1: c4:a0:57:8b:6f:bc:c8:81:a8:8a:6e:03:e5:79:1e:79:06:9e: 71:c8:64:0f:7e:52:e1:83:bf:37:0a:96:54:ec:af:40:55:e8: 4d:08:2f:ae:24:72:0e:b2:0e:31:06:6d:97:c6:14:ec:4f:3b: 96:1b:d9:2a:5c:25:56:be:92:0e:cf:6e:f9:f3:79:f9:08:d1: 7d:2f:e1:92:bc:35:76:b4:3e:8a:ca:1d:26:1f:41:96:2d:01: 7e:61:15:69:d7:f3:41:5c:3f:12:8c:49:bd:0c:26:cb:cf:68: 89:85:db:1e:e1:15:b7:43:63:19:7c:50:d3:dc:8f:7b:19:7e: cb:39:eb:ee:8a:11:14:8b:ea:45:2a:e5:21:05:0f:80:d8:8c: 6a:b1:24:0a:12:6d:b0:b6:8a:d0:81:27:14:e0:26:87:dc:eb: 9f:6e:4f:d6:cf:4a:3d:f0:ea:20:3c:82:c6:21:37:04:77:2a: bf:2d:2c:be:6a:1f:62:3e:d8:a0:fe:00:09:f3:5c:0f:5c:13: cd:f2:49:25:0d:e1:08:57:75:a3:fd:e6:73:e7:49:c0:bb:70: a9:67:81:10:10:d2:66:6d:c8:5b:eb:3c:00:56:c4:9e:71:8b: 1a:dc:c3:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XUd6KOpPm3hfu7td5HxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWVhYjIxY2EyZmQxMjEzZjEwNTM0NzJjYjM3YWI2MzM1NDAyMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61+9R0IWDUEqZHkTLq3gcDDJ/J8t /t64bpC7oA52aRlJ1AIIf/o0Dq++DNmkzO6bfuRxnF4IioZQAOJ94TNN9vZRSyt7 Mo7gXaQ1nIJkYf35Cbg+4P9+b01hKscEBKlSU4YYjDFyv97KVCnnEOkS5qQ6wdaF ZQ/ksZE7GZgsa6nU8gWnrKx1srKPjQSsmMqXgqtnCNP7ZGNDahwgh0vb8SsgoPdz W8gtb8jX9fR2GOaoit2Wky/nVNdGma2EOzP+fiv9/B29KwRWnau96ayXrPoITkCa qHsFbqmz3NSYXZ0YfjUJyjriliJ161ExCx7XLGtbd7pEPMgwVDJUledbRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEnqshyi/RIT8QU0css3q2M1QCDbMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvU2VxeUhLTDlFaFB4QlRSeXl6ZXJZelZBSU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiB6MA0G CSqGSIb3DQEBCwUAA4IBAQCVnDy6S8xFEprxn1kiAEzQm/HEoFeLb7zIgaiKbgPl eR55Bp5xyGQPflLhg783CpZU7K9AVehNCC+uJHIOsg4xBm2XxhTsTzuWG9kqXCVW vpIOz27583n5CNF9L+GSvDV2tD6Kyh0mH0GWLQF+YRVp1/NBXD8SjEm9DCbLz2iJ hdse4RW3Q2MZfFDT3I97GX7LOevuihEUi+pFKuUhBQ+A2IxqsSQKEm2wtorQgScU 4CaH3Oufbk/Wz0o98OogPILGITcEdyq/LSy+ah9iPtig/gAJ81wPXBPN8kklDeEI V3Wj/eZz50nAu3CpZ4EQENJmbchb6zwAVsSecYsa3MNZ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:20 2026 by rpki-client