This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/_innNg-W71__tEWxWqoYCVwYPLc.roa File: _innNg-W71__tEWxWqoYCVwYPLc.roa (raw, json) Hash identifier: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o= Subject key identifier: FE:29:E7:36:0F:96:EF:5F:FF:B4:45:B1:5A:AA:18:09:5C:18:3C:B7 Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e Certificate serial: 019B7C80064B3857E89AB739CE4DA69BD689 Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/_innNg-W71__tEWxWqoYCVwYPLc.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.42.96.0/23 maxlen: 24 194.42.104.0/23 maxlen: 24 2a0f:340::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:06:4b:38:57:e8:9a:b7:39:ce:4d:a6:9b:d6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe29e7360f96ef5fffb445b15aaa18095c183cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:2f:7d:2b:3c:2d:0f:85:b0:07:e9:5a:a5: 77:dd:f9:d6:0a:2b:bf:ee:7b:86:5b:c4:11:59:d5: 26:18:bd:82:59:20:90:50:0d:de:1e:b1:fd:81:3f: 60:85:7b:15:91:db:21:0b:4e:33:38:d3:bd:9c:9f: 15:b5:2d:4e:fe:66:e5:08:0d:24:35:69:c4:49:ef: a2:28:d8:d9:65:2d:09:46:c4:fd:d6:78:04:6c:b2: e5:98:85:91:75:2d:62:65:41:a5:10:5a:44:26:f1: ff:a5:1d:53:2e:ed:3c:6e:aa:9f:df:fa:16:14:13: 4a:c7:47:7c:26:b5:1a:50:1e:5b:83:49:d1:88:ea: 5b:bf:a5:82:7b:07:4d:ab:f7:46:dd:c6:43:a5:6d: b0:eb:3b:a9:2d:3b:36:d0:7d:4c:aa:51:74:fb:79: a5:45:91:ad:c6:da:8a:21:d7:15:92:56:10:d7:b9: 1f:ca:8b:a1:7e:d3:4f:28:df:e5:35:57:b2:70:64: c7:66:b2:28:aa:35:39:a0:cf:e4:8d:51:59:db:23: 78:66:6f:9d:eb:48:46:b9:da:ba:01:5b:aa:dd:36: 5f:01:b7:ea:47:3a:6d:12:13:3e:dc:33:04:40:35: f7:7f:00:b5:16:a9:4f:83:67:06:08:7b:0e:4e:5d: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:E7:36:0F:96:EF:5F:FF:B4:45:B1:5A:AA:18:09:5C:18:3C:B7 X509v3 Authority Key Identifier: keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/_innNg-W71__tEWxWqoYCVwYPLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.96.0/23 194.42.104.0/23 IPv6: 2a0f:340::/29 Signature Algorithm: sha256WithRSAEncryption 51:82:79:93:81:8f:6a:be:ce:7f:49:62:d0:ff:05:f9:fa:58: fa:57:7e:18:ea:df:9a:93:77:08:b6:1a:05:6e:ed:55:8d:d2: 10:da:08:03:99:02:3a:bf:a8:50:75:46:ea:f2:8d:c5:8a:ce: 16:e7:be:16:80:d2:60:e1:89:3c:93:25:ca:dd:aa:31:4f:b3: 11:4a:e0:12:8f:b5:de:ba:04:9f:b2:29:6a:12:ec:3e:11:53: da:91:0b:be:9c:90:40:3c:8b:2d:a6:1d:04:d1:d9:e4:91:77: fd:73:ab:38:21:17:3d:df:f9:bd:72:76:70:d2:72:5f:cd:92: 32:ae:a7:f6:1b:4a:7b:b8:b2:30:a2:23:f3:d9:57:ef:ea:8b: 03:e2:74:de:ca:18:6b:b7:3b:a1:9d:ea:66:52:a9:d9:c4:49: 23:3f:75:45:e1:70:2f:47:49:ca:85:7e:a6:99:a0:dc:3e:3d: e5:b4:ea:5b:5e:2e:ad:ce:1d:45:75:eb:fd:fd:4c:e3:c3:cd: fc:f2:26:1e:19:9c:6c:17:9a:bf:2d:44:14:1e:d3:ad:15:03: 38:a7:3f:fe:43:13:72:bf:d7:3e:12:ff:9f:a6:4a:ae:1a:98: a6:b0:14:3b:2d:09:04:21:28:cd:ec:c2:db:35:10:a3:bd:27: a0:69:6d:2e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gAZLOFfomrc5zk2mm9aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTQwZjAwMDk5NmViZmQyZGFiNzFjNDY5Y2M1MWVlODgx YjNmNWUwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTI5ZTczNjBmOTZlZjVmZmZiNDQ1YjE1YWFhMTgwOTVjMTgzY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+QvfSs8LQ+FsAfpWqV33fnWCiu/ 7nuGW8QRWdUmGL2CWSCQUA3eHrH9gT9ghXsVkdshC04zONO9nJ8VtS1O/mblCA0k NWnESe+iKNjZZS0JRsT91ngEbLLlmIWRdS1iZUGlEFpEJvH/pR1TLu08bqqf3/oW FBNKx0d8JrUaUB5bg0nRiOpbv6WCewdNq/dG3cZDpW2w6zupLTs20H1MqlF0+3ml RZGtxtqKIdcVklYQ17kfyouhftNPKN/lNVeycGTHZrIoqjU5oM/kjVFZ2yN4Zm+d 60hGudq6AVuq3TZfAbfqRzptEhM+3DMEQDX3fwC1FqlPg2cGCHsOTl0j2wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFP4p5zYPlu9f/7RFsVqqGAlcGDy3MB8GA1UdIwQY MBaAFLGUDwAJluv9LatxxGnMUe6IGz9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEt YTVhYmIyMGQyNDYyLzEvX2lubk5nLVc3MV9fdEVXeFdxb1lDVndZUExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEtYTVhYmIyMGQyNDYy LzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwipgAwQB wipoMA0EAgACMAcDBQMqDwNAMA0GCSqGSIb3DQEBCwUAA4IBAQBRgnmTgY9qvs5/ SWLQ/wX5+lj6V34Y6t+ak3cIthoFbu1VjdIQ2ggDmQI6v6hQdUbq8o3Fis4W574W gNJg4Yk8kyXK3aoxT7MRSuASj7XeugSfsilqEuw+EVPakQu+nJBAPIstph0E0dnk kXf9c6s4IRc93/m9cnZw0nJfzZIyrqf2G0p7uLIwoiPz2Vfv6osD4nTeyhhrtzuh nepmUqnZxEkjP3VF4XAvR0nKhX6mmaDcPj3ltOpbXi6tzh1Fdev9/Uzjw8388iYe GZxsF5q/LUQUHtOtFQM4pz/+QxNyv9c+Ev+fpkquGpimsBQ7LQkEISjN7MLbNRCj vSegaW0u -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:53 2026 by rpki-client