This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/CkhFs2oaXERgiKm5EsjVmKmZHl0.roa File: CkhFs2oaXERgiKm5EsjVmKmZHl0.roa (raw, json) Hash identifier: JGuoViBxI/12PTCACPAKHlRx+hjsouZ2YE9Rz11/VDI= Subject key identifier: 0A:48:45:B3:6A:1A:5C:44:60:88:A9:B9:12:C8:D5:98:A9:99:1E:5D Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Certificate serial: 019B2D4362E3338440F6FA05B2CAE9A357B8 Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/CkhFs2oaXERgiKm5EsjVmKmZHl0.roa Signing time: Wed 17 Dec 2025 17:02:29 +0000 ROA not before: Wed 17 Dec 2025 17:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 194.26.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:43:62:e3:33:84:40:f6:fa:05:b2:ca:e9:a3:57:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380 Validity Not Before: Dec 17 17:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a4845b36a1a5c446088a9b912c8d598a9991e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:8f:4f:da:0c:3f:cc:47:12:2f:95:9b:f7: d2:44:be:03:6e:da:4b:11:4d:52:e3:23:d1:e3:cb: cf:3b:94:16:1f:5f:cd:bc:65:10:e9:36:3c:a0:f2: 2a:24:3f:6a:90:1e:e3:c4:ec:1f:82:4d:93:7e:20: 28:e9:3a:ef:fb:33:1f:c1:be:f7:8b:39:ac:eb:33: f8:77:40:b3:49:ad:ba:38:52:1f:45:08:b3:7a:ef: 0a:20:e1:fb:2e:f5:cc:0d:1f:03:94:59:af:32:72: 39:03:d7:ab:57:4a:a4:ac:b3:fe:43:f0:a0:f4:a6: f6:47:de:36:bb:be:3e:af:7c:b3:9b:16:11:b1:99: 3c:a9:30:c5:06:50:4a:7a:0a:e6:93:df:f9:4a:cf: 6f:6a:c3:50:58:ff:12:5b:54:b6:0f:c3:69:c6:4f: 97:e3:f3:92:1e:4a:80:0e:d4:c5:e7:4d:f4:20:57: b8:c8:16:aa:9c:da:55:fe:6d:53:35:58:f2:31:6c: dc:e0:2c:45:d6:0c:32:a8:ee:fa:f6:e0:4d:62:d0: 6c:db:bf:97:75:31:5c:d6:9b:0d:d2:4e:ed:79:82: 3f:d3:c4:e6:10:16:c8:0e:34:d7:61:47:86:4a:c1: 8c:04:fa:8d:ad:71:42:d4:26:62:25:cf:f1:68:e2: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:45:B3:6A:1A:5C:44:60:88:A9:B9:12:C8:D5:98:A9:99:1E:5D X509v3 Authority Key Identifier: keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/CkhFs2oaXERgiKm5EsjVmKmZHl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.66.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a6:65:f5:83:32:db:45:f6:e8:1a:b0:1d:aa:cc:2c:74:11: 49:22:9d:60:d1:94:00:6d:e7:c1:ae:35:55:08:3d:6d:28:9c: c6:7d:0d:e5:a0:ec:61:7c:29:42:82:ff:f3:0c:bd:b1:1b:db: d1:5c:2c:cc:70:50:aa:8b:01:a6:5e:15:22:e2:60:0e:1e:54: 81:d0:09:80:9d:46:3c:95:76:5f:ce:c5:b1:c9:80:a6:2c:38: 0f:cc:94:d2:e1:76:2d:a1:52:4b:2a:f2:e9:8d:d2:84:44:01: 29:06:5d:f9:83:73:d5:f2:08:81:f4:14:23:be:e3:c2:f4:3b: 63:b4:fe:62:2c:c4:d0:5f:68:d7:cd:6a:57:2a:fa:dc:e2:e4: 69:72:34:8d:a5:b2:bb:8e:82:17:19:2a:dc:f5:0e:d5:39:cc: 21:b8:68:6d:ee:3e:68:c0:b9:b8:e0:13:ea:cb:55:be:d6:7c: fc:57:f5:a3:69:a7:ce:19:3c:43:70:d5:09:ad:03:a1:bb:25: 2f:dd:b1:d7:c1:1a:a1:f7:a4:cc:f1:9f:18:4b:c8:f2:a0:4b: 16:47:68:71:da:37:84:70:93:a1:9b:f8:cc:7a:4c:e5:48:8c: 50:34:11:5c:a4:2d:35:93:eb:1a:4a:e7:7b:1d:d0:c5:08:ec: 47:c8:47:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZstQ2LjM4RA9voFssrpo1e4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZTQxZTczMjdjMmMzMTBjZTA2NmFmYWY4NzE5ODg2ZDcx ZmIzODAwHhcNMjUxMjE3MTcwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTQ4NDViMzZhMWE1YzQ0NjA4OGE5YjkxMmM4ZDU5OGE5OTkxZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh6PT9oMP8xHEi+Vm/fSRL4DbtpL EU1S4yPR48vPO5QWH1/NvGUQ6TY8oPIqJD9qkB7jxOwfgk2TfiAo6Trv+zMfwb73 izms6zP4d0CzSa26OFIfRQizeu8KIOH7LvXMDR8DlFmvMnI5A9erV0qkrLP+Q/Cg 9Kb2R942u74+r3yzmxYRsZk8qTDFBlBKegrmk9/5Ss9vasNQWP8SW1S2D8Npxk+X 4/OSHkqADtTF5030IFe4yBaqnNpV/m1TNVjyMWzc4CxF1gwyqO769uBNYtBs27+X dTFc1psN0k7teYI/08TmEBbIDjTXYUeGSsGMBPqNrXFC1CZiJc/xaOLQ+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApIRbNqGlxEYIipuRLI1ZipmR5dMB8GA1UdIwQY MBaAFPXkHnMnwsMQzgZq+vhxmIbXH7OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQt MTNiNzQ2YmJhMjYyLzEvQ2toRnMyb2FYRVJnaUttNUVzalZtS21aSGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lZWMyZTktY2JhZS00NjU5LTkzODQtMTNiNzQ2YmJhMjYy LzEvOWVRZWN5ZkN3eERPQm1yNi1IR1lodGNmczRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhpCMA0G CSqGSIb3DQEBCwUAA4IBAQBXpmX1gzLbRfboGrAdqswsdBFJIp1g0ZQAbefBrjVV CD1tKJzGfQ3loOxhfClCgv/zDL2xG9vRXCzMcFCqiwGmXhUi4mAOHlSB0AmAnUY8 lXZfzsWxyYCmLDgPzJTS4XYtoVJLKvLpjdKERAEpBl35g3PV8giB9BQjvuPC9Dtj tP5iLMTQX2jXzWpXKvrc4uRpcjSNpbK7joIXGSrc9Q7VOcwhuGht7j5owLm44BPq y1W+1nz8V/WjaafOGTxDcNUJrQOhuyUv3bHXwRqh96TM8Z8YS8jyoEsWR2hx2jeE cJOhm/jMekzlSIxQNBFcpC01k+saSud7HdDFCOxHyEfr -----END CERTIFICATE-----Generated at Thu Dec 18 18:49:55 2025 by rpki-client