This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa File: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (raw, json) Hash identifier: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo= Subject key identifier: 21:00:E0:F1:75:2E:9D:1C:18:2B:E0:BA:1A:F6:E7:25:0E:C4:1C:CD Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873 Certificate serial: 019B7BA52269C28535E2F64F082B6EC78573 Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198028 IP address blocks: 194.12.51.0/24 maxlen: 24 194.12.52.0/24 maxlen: 24 194.12.53.0/24 maxlen: 24 194.12.54.0/24 maxlen: 24 194.12.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:69:c2:85:35:e2:f6:4f:08:2b:6e:c7:85:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2100e0f1752e9d1c182be0ba1af6e7250ec41ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:8d:6b:0c:4f:66:3c:1a:92:6f:e8:4c:25: 31:b5:b0:b4:5a:c0:1b:d5:43:21:87:79:c0:de:65: 65:a1:16:69:29:55:7d:10:a6:ef:6d:80:b1:32:0f: 06:7a:3e:2c:78:f1:b8:16:9d:cb:2f:59:c1:0d:f1: 20:c0:87:fe:3f:14:c2:af:5a:25:b0:57:c8:03:29: 9b:03:b8:a5:c4:ae:c0:98:2f:6c:87:d9:10:b2:97: f3:38:9a:ff:e6:65:4b:d8:a8:63:00:cb:eb:1d:5d: 61:63:0b:b6:ac:eb:73:9c:9f:ad:bc:cb:e9:d1:1e: 17:05:77:2f:28:83:46:7e:a7:45:54:49:14:16:28: 8e:2a:06:e2:63:80:a3:19:a8:df:0a:18:1d:43:ac: 32:e5:ce:47:2e:17:7f:1a:35:bc:ee:f5:e4:71:79: de:8e:28:16:69:a6:b3:56:99:8f:a0:da:ef:67:6b: 97:b1:34:e4:33:fe:04:d8:b6:6b:92:26:72:44:95: 84:6a:22:f3:38:d5:e6:3a:93:67:e9:ea:94:72:46: 58:1e:80:33:5b:3d:e4:39:a0:e7:e3:fa:6c:9f:64: 23:ff:c0:1f:b6:cf:cc:1a:ff:8a:35:d9:25:11:7f: e6:e4:53:2e:6b:8e:81:50:4c:c8:47:2d:a2:66:11: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:00:E0:F1:75:2E:9D:1C:18:2B:E0:BA:1A:F6:E7:25:0E:C4:1C:CD X509v3 Authority Key Identifier: keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.12.51.0-194.12.55.255 Signature Algorithm: sha256WithRSAEncryption 43:d0:f7:5d:f3:68:be:ff:b9:b1:42:7c:5e:cf:b4:c1:5d:72: 12:05:d9:c9:e7:e4:38:c6:ca:07:f8:b3:c9:96:a1:40:9d:ef: 43:00:dc:3f:98:a1:74:fa:bc:ab:d8:c9:53:31:0c:13:bd:37: 32:1d:c1:c1:28:54:4d:0c:46:ae:83:46:8d:f1:b8:41:72:ba: fb:63:0b:45:58:61:ca:c9:dc:a8:c2:74:c5:a4:99:c1:9d:c4: 3c:b9:f0:c0:3d:6d:93:ba:d1:ef:3a:ba:2d:4d:5b:44:0c:96: d9:61:6f:0d:43:41:bc:b3:4a:d3:42:65:2f:b2:c2:03:87:38: db:bb:61:db:dc:f8:30:81:3d:8c:2f:b4:58:b0:bf:d8:11:a4: 6c:6d:34:47:b8:bd:1b:9f:60:76:c7:4a:fb:77:ec:dd:88:04: b7:04:03:44:d1:b3:13:f7:5d:83:e2:b7:db:f8:86:33:a2:df: 13:47:f6:b3:24:a6:7b:f6:7b:79:82:80:d8:82:c1:ac:04:8e: d3:5e:93:05:47:49:47:09:8a:d5:42:ce:86:8e:06:81:60:6f: 17:7b:15:ba:61:61:a9:6a:a3:b8:48:6d:b4:b3:e5:50:07:3e: 9b:b1:ed:71:1e:ae:c6:8b:76:2e:4b:d4:77:7c:33:2e:04:0d: 2d:53:d4:a1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pSJpwoU14vZPCCtux4VzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz MjQ4NzMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTAwZTBmMTc1MmU5ZDFjMTgyYmUwYmExYWY2ZTcyNTBlYzQxY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcqNawxPZjwakm/oTCUxtbC0WsAb 1UMhh3nA3mVloRZpKVV9EKbvbYCxMg8Gej4sePG4Fp3LL1nBDfEgwIf+PxTCr1ol sFfIAymbA7ilxK7AmC9sh9kQspfzOJr/5mVL2KhjAMvrHV1hYwu2rOtznJ+tvMvp 0R4XBXcvKINGfqdFVEkUFiiOKgbiY4CjGajfChgdQ6wy5c5HLhd/GjW87vXkcXne jigWaaazVpmPoNrvZ2uXsTTkM/4E2LZrkiZyRJWEaiLzONXmOpNn6eqUckZYHoAz Wz3kOaDn4/psn2Qj/8Afts/MGv+KNdklEX/m5FMua46BUEzIRy2iZhGhOwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCEA4PF1Lp0cGCvguhr25yUOxBzNMB8GA1UdIwQY MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt MWNhZjA2MTEzNzRkLzEvSVFEZzhYVXVuUndZSy1DNkd2Ym5KUTdFSE0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCDDMD BAPCDDAwDQYJKoZIhvcNAQELBQADggEBAEPQ913zaL7/ubFCfF7PtMFdchIF2cnn 5DjGygf4s8mWoUCd70MA3D+YoXT6vKvYyVMxDBO9NzIdwcEoVE0MRq6DRo3xuEFy uvtjC0VYYcrJ3KjCdMWkmcGdxDy58MA9bZO60e86ui1NW0QMltlhbw1DQbyzStNC ZS+ywgOHONu7Ydvc+DCBPYwvtFiwv9gRpGxtNEe4vRufYHbHSvt37N2IBLcEA0TR sxP3XYPit9v4hjOi3xNH9rMkpnv2e3mCgNiCwawEjtNekwVHSUcJitVCzoaOBoFg bxd7FbphYalqo7hIbbSz5VAHPpux7XEersaLdi5L1Hd8My4EDS1T1KE= -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:37 2026 by rpki-client