This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rv34OGDmGdCIJpKcuX5KrzZJnJQ.roa File: rv34OGDmGdCIJpKcuX5KrzZJnJQ.roa (raw, json) Hash identifier: SlX8x30XX8ZG/aqCFXwCwu6L4EpUo0dBgPX/IBcGV/0= Subject key identifier: AE:FD:F8:38:60:E6:19:D0:88:26:92:9C:B9:7E:4A:AF:36:49:9C:94 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC78F42394AD698865055B6DCAD1FD Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rv34OGDmGdCIJpKcuX5KrzZJnJQ.roa Signing time: Thu 01 Jan 2026 14:18:18 +0000 ROA not before: Thu 01 Jan 2026 14:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214309 IP address blocks: 185.176.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:78:f4:23:94:ad:69:88:65:05:5b:6d:ca:d1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aefdf83860e619d08826929cb97e4aaf36499c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:10:a5:6b:88:52:cc:65:ba:31:bb:a6:36: 89:5c:a0:f0:d5:11:22:86:97:25:fe:1e:fb:8b:4d: 28:87:8b:12:dc:a5:5d:e5:d8:6a:33:24:e1:74:fa: 16:f5:fc:da:ed:17:46:aa:94:77:d1:3d:67:be:f1: f2:8b:7f:9a:70:cc:1d:c4:c9:d5:2b:0e:5b:16:54: 34:5d:72:95:1a:5d:b4:a5:22:0e:a5:5a:1e:71:76: 64:04:e3:37:91:9c:19:ba:24:c6:90:5e:79:84:02: f7:13:72:af:fe:a5:12:e4:47:63:94:de:07:b3:9e: f1:f3:60:90:89:b8:54:c4:1c:b6:ae:92:2f:10:28: 06:8c:88:02:46:a7:2d:0b:72:af:3e:3b:e7:c4:ab: e2:21:8d:48:f8:e8:03:18:d6:52:29:a6:b5:16:5b: 93:6b:c3:fa:af:ec:c2:43:92:77:94:30:7c:4c:d8: f6:69:e7:74:b6:6b:f9:d2:08:ed:ef:90:44:73:21: e1:e4:cb:31:94:70:a8:3a:86:ea:46:67:bd:02:f8: 05:ee:f1:45:9f:da:81:b5:47:ef:1d:89:31:3a:5d: 2a:1d:31:e5:57:86:14:d3:c1:90:29:a5:35:40:28: 9f:f3:b2:63:be:fa:eb:df:10:f1:0b:dc:ec:00:9d: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FD:F8:38:60:E6:19:D0:88:26:92:9C:B9:7E:4A:AF:36:49:9C:94 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rv34OGDmGdCIJpKcuX5KrzZJnJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.94.0/24 Signature Algorithm: sha256WithRSAEncryption 71:37:20:b7:cb:d2:c4:70:93:68:53:f9:68:05:24:4e:c3:5a: fa:eb:f8:9f:82:a6:df:33:78:99:3e:49:a3:1a:fb:06:fc:a1: c0:bc:3c:58:40:e3:ae:e3:f4:fa:2d:58:57:a0:a5:c6:d5:b7: 92:6e:68:d1:bd:34:5a:3c:58:b2:a7:70:2f:14:d7:31:f5:80: 77:0c:58:cf:f5:9a:1b:67:06:97:a3:e2:13:e2:df:ac:b6:20: b4:8c:26:e4:b2:0b:f4:6e:0d:67:b8:ea:6a:68:ec:8a:06:1b: 74:0e:7f:01:61:c5:c2:d3:7e:38:22:e6:85:23:a0:eb:95:7c: 1f:2d:82:a9:9e:fa:47:c6:1b:fe:c3:48:98:e4:00:67:70:b2: 97:2f:c8:44:ed:8f:c8:eb:cd:fb:5f:8d:12:38:17:cb:ee:25: 0e:90:56:21:34:11:73:72:54:01:32:5e:87:36:ed:ab:4b:1d: 60:81:3b:70:dd:46:bf:34:f5:ee:b9:ef:87:c7:64:c6:a2:77: 13:c2:69:4a:0d:1b:f2:15:97:9d:16:bd:67:1e:19:53:a4:24: 4b:ec:f4:05:40:03:9f:fd:4f:ea:80:25:97:52:91:e5:c9:33: 23:6e:0c:1e:31:79:1d:df:97:b4:05:55:68:3e:b4:a4:92:ed: 6d:27:f9:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Hj0I5StaYhlBVttytH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWZkZjgzODYwZTYxOWQwODgyNjkyOWNiOTdlNGFhZjM2NDk5Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA4QpWuIUsxlujG7pjaJXKDw1REi hpcl/h77i00oh4sS3KVd5dhqMyThdPoW9fza7RdGqpR30T1nvvHyi3+acMwdxMnV Kw5bFlQ0XXKVGl20pSIOpVoecXZkBOM3kZwZuiTGkF55hAL3E3Kv/qUS5EdjlN4H s57x82CQibhUxBy2rpIvECgGjIgCRqctC3KvPjvnxKviIY1I+OgDGNZSKaa1FluT a8P6r+zCQ5J3lDB8TNj2aed0tmv50gjt75BEcyHh5MsxlHCoOobqRme9AvgF7vFF n9qBtUfvHYkxOl0qHTHlV4YU08GQKaU1QCif87Jjvvrr3xDxC9zsAJ0f7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK79+Dhg5hnQiCaSnLl+Sq82SZyUMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvcnYzNE9HRG1HZENJSnBLY3VYNUtyelpKbkpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubBeMA0G CSqGSIb3DQEBCwUAA4IBAQBxNyC3y9LEcJNoU/loBSROw1r66/ifgqbfM3iZPkmj GvsG/KHAvDxYQOOu4/T6LVhXoKXG1beSbmjRvTRaPFiyp3AvFNcx9YB3DFjP9Zob ZwaXo+IT4t+stiC0jCbksgv0bg1nuOpqaOyKBht0Dn8BYcXC0344IuaFI6DrlXwf LYKpnvpHxhv+w0iY5ABncLKXL8hE7Y/I6837X40SOBfL7iUOkFYhNBFzclQBMl6H Nu2rSx1ggTtw3Ua/NPXuue+Hx2TGoncTwmlKDRvyFZedFr1nHhlTpCRL7PQFQAOf /U/qgCWXUpHlyTMjbgweMXkd35e0BVVoPrSkku1tJ/mD -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:54 2026 by rpki-client