This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/d4grg2tvuefsoHmD0ZdaVonf75c.roa File: d4grg2tvuefsoHmD0ZdaVonf75c.roa (raw, json) Hash identifier: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ= Subject key identifier: 77:88:2B:83:6B:6F:B9:E7:EC:A0:79:83:D1:97:5A:56:89:DF:EF:97 Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5 Certificate serial: 019B7AC80A17400504F1DA1BFB0401AD7F3D Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/d4grg2tvuefsoHmD0ZdaVonf75c.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199802 IP address blocks: 193.8.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0a:17:40:05:04:f1:da:1b:fb:04:01:ad:7f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77882b836b6fb9e7eca07983d1975a5689dfef97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:37:0a:61:91:80:70:91:67:3d:ea:1e:71: bb:d3:6e:01:cd:1c:49:d8:0b:b3:73:26:19:87:3f: b6:33:10:ca:f0:ff:9c:9f:e3:22:37:25:44:9b:2d: 94:4a:51:dc:70:22:c6:dd:9d:8e:5f:e1:16:d3:c7: a6:38:34:cf:cf:dc:ee:5d:b9:9e:e5:b5:9a:48:74: e6:fd:fe:c8:36:98:80:12:3f:0b:d1:38:65:12:68: 94:e2:fd:93:f6:74:43:34:34:9a:82:5d:a9:46:9f: 23:2f:e5:11:73:f3:d3:d0:e1:04:c8:bf:be:4e:6a: 9e:e9:84:77:38:9b:97:2c:1d:a5:8c:4e:d1:6c:14: bc:26:21:8f:35:ab:5e:ff:5c:7e:06:81:a6:4e:31: dc:ef:17:8c:6b:31:32:e8:92:22:55:12:db:d2:62: 24:c5:e0:0c:5b:11:d8:dd:92:9d:45:62:04:08:07: 10:ee:73:bf:8a:b0:d7:32:4c:58:51:3a:c8:79:71: 41:da:8c:2d:9f:4e:8f:6b:73:94:f1:83:7e:b8:80: f7:f2:95:c0:ff:52:8b:ac:24:9f:a6:f6:78:ef:b4: 17:b5:bd:6e:7e:6c:fd:3b:c1:30:51:8b:bf:45:15: b1:cf:84:bb:df:e1:89:3a:90:6c:a3:6e:d0:d2:b3: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:88:2B:83:6B:6F:B9:E7:EC:A0:79:83:D1:97:5A:56:89:DF:EF:97 X509v3 Authority Key Identifier: keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/d4grg2tvuefsoHmD0ZdaVonf75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.174.0/24 Signature Algorithm: sha256WithRSAEncryption 82:ba:f0:c7:0b:54:12:22:f7:17:0f:82:33:16:70:fb:4f:42: 3b:15:4b:ba:06:3a:69:81:67:7a:47:d7:2f:f2:bc:ae:e1:14: 20:bd:62:12:8c:bc:27:a8:04:56:e7:72:ab:83:52:94:5e:e0: 7f:91:f4:ee:90:85:0d:5f:42:3c:ce:2c:e9:1d:7b:a6:5e:52: fa:7f:2f:e5:01:5e:11:0d:92:cf:c7:3c:dd:84:ee:cd:63:23: 6a:50:04:c3:58:c8:de:66:6d:f7:61:f1:2e:c9:64:8f:50:b2: 68:00:d7:0a:d6:3c:6b:ea:fa:05:09:1b:ed:a0:03:30:e2:38: 17:9e:5b:8b:8c:50:1f:79:d7:80:63:b2:3d:51:a2:38:90:d2: 12:3c:28:95:1a:27:ba:c3:d3:5a:69:fb:af:f6:c0:b3:7f:01: 51:61:f9:cf:ef:94:8c:a7:cd:b3:0e:fa:02:09:1a:4c:b1:26: a7:c0:88:64:2c:62:16:a1:42:f5:ed:bb:af:a5:32:ef:80:9e: fd:0e:ed:07:1b:a1:2f:86:ae:c2:11:0e:17:15:24:0e:47:90: ee:07:f3:51:a3:6f:40:8a:d5:3f:48:9f:f7:4c:b4:0b:1b:2f: 89:26:75:0f:3c:e5:14:2b:e0:a4:b2:64:48:02:f3:5d:8d:58: b8:62:bf:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAoXQAUE8dob+wQBrX89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni MDY5ZTUwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Nzg4MmI4MzZiNmZiOWU3ZWNhMDc5ODNkMTk3NWE1Njg5ZGZlZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE43CmGRgHCRZz3qHnG7024BzRxJ 2AuzcyYZhz+2MxDK8P+cn+MiNyVEmy2USlHccCLG3Z2OX+EW08emODTPz9zuXbme 5bWaSHTm/f7INpiAEj8L0ThlEmiU4v2T9nRDNDSagl2pRp8jL+URc/PT0OEEyL++ Tmqe6YR3OJuXLB2ljE7RbBS8JiGPNate/1x+BoGmTjHc7xeMazEy6JIiVRLb0mIk xeAMWxHY3ZKdRWIECAcQ7nO/irDXMkxYUTrIeXFB2owtn06Pa3OU8YN+uID38pXA /1KLrCSfpvZ477QXtb1ufmz9O8EwUYu/RRWxz4S73+GJOpBso27Q0rN1LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeIK4Nrb7nn7KB5g9GXWlaJ3++XMB8GA1UdIwQY MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt NWU0N2NmMTk5ZGZmLzEvZDRncmcydHZ1ZWZzb0htRDBaZGFWb25mNzVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQiuMA0G CSqGSIb3DQEBCwUAA4IBAQCCuvDHC1QSIvcXD4IzFnD7T0I7FUu6BjppgWd6R9cv 8ryu4RQgvWISjLwnqARW53Krg1KUXuB/kfTukIUNX0I8zizpHXumXlL6fy/lAV4R DZLPxzzdhO7NYyNqUATDWMjeZm33YfEuyWSPULJoANcK1jxr6voFCRvtoAMw4jgX nluLjFAfedeAY7I9UaI4kNISPCiVGie6w9Naafuv9sCzfwFRYfnP75SMp82zDvoC CRpMsSanwIhkLGIWoUL17buvpTLvgJ79Du0HG6Evhq7CEQ4XFSQOR5DuB/NRo29A itU/SJ/3TLQLGy+JJnUPPOUUK+CksmRIAvNdjVi4Yr80 -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:26 2026 by rpki-client