This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/AZhIdfQe8WwT9TZ_N6T1lS4NxsE.roa File: AZhIdfQe8WwT9TZ_N6T1lS4NxsE.roa (raw, json) Hash identifier: xpA4Tx1xSz6uA3Q1dMsrfkLMQuhB5qhwmJuQPXJmqYU= Subject key identifier: 01:98:48:75:F4:1E:F1:6C:13:F5:36:7F:37:A4:F5:95:2E:0D:C6:C1 Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6 Certificate serial: 019B7E380DDA5F94F8DF1CF27848CD0485EB Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/AZhIdfQe8WwT9TZ_N6T1lS4NxsE.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35162 IP address blocks: 194.165.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0d:da:5f:94:f8:df:1c:f2:78:48:cd:04:85:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01984875f41ef16c13f5367f37a4f5952e0dc6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:a8:68:73:51:5f:74:68:2e:cb:13:4e:d6: fb:a2:e1:1f:ff:d8:91:5b:8d:8d:3b:27:4b:08:c8: c1:61:3a:73:e5:71:7f:e8:71:1c:5c:f1:0d:58:b2: fc:66:c1:a1:00:b0:c2:cd:b4:e2:21:96:4a:63:c0: a9:cf:35:d8:d9:d5:d3:a1:35:6d:b4:af:75:19:97: 84:69:ee:2e:80:44:a2:9d:8b:ee:ca:37:01:89:c2: 5c:6b:a7:42:81:c0:fd:3a:a3:45:b2:0a:e0:76:05: 55:7d:09:d5:76:fe:f3:79:87:a5:f7:5f:30:c7:13: 54:d6:f9:de:7a:bb:46:17:bd:98:1f:48:7e:5c:0c: cd:dc:c6:98:02:30:b3:37:39:15:64:37:1e:b6:7a: d6:e5:51:13:ec:71:c6:fa:2d:19:5e:22:b6:9d:d4: 01:c2:cd:3f:cb:25:bb:21:69:2c:44:88:65:64:fb: be:da:3b:b2:ed:bb:5a:b7:af:ae:0b:ee:04:93:76: 7e:79:eb:52:68:8c:34:ac:e9:54:b7:80:4d:a3:8a: 46:e4:24:a9:34:d6:b5:72:e2:68:65:3b:bf:c9:18: 39:fa:2b:db:fb:64:b0:86:63:80:c6:9e:93:a3:c2: 9c:cc:6d:8b:31:c2:65:25:49:07:83:d4:ba:b5:8d: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:48:75:F4:1E:F1:6C:13:F5:36:7F:37:A4:F5:95:2E:0D:C6:C1 X509v3 Authority Key Identifier: keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/AZhIdfQe8WwT9TZ_N6T1lS4NxsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.165.30.0/23 Signature Algorithm: sha256WithRSAEncryption 07:ad:7f:c3:b9:00:d9:d2:cb:53:c3:06:d1:b3:b9:b3:d1:cc: e5:64:f7:7d:9f:1f:e8:f6:5a:d3:45:77:9a:be:1a:38:0e:e0: 92:a7:7e:ea:a8:e0:c8:68:56:59:da:be:6f:b0:39:f2:72:0d: 39:0a:36:f8:ad:ff:7e:49:81:80:14:9d:69:93:ba:ad:cb:7a: 88:24:d7:7f:eb:99:5a:ee:7c:3d:4c:8a:38:55:0d:de:66:95: 47:a4:b2:3b:74:c9:95:21:0b:32:cc:87:9c:3d:b8:7c:72:c5: 31:5b:6b:ac:a5:76:f2:06:1b:10:ff:ab:ee:88:da:35:f1:bd: 3e:6d:ee:ea:ff:20:73:c5:53:39:50:1a:fc:3c:7a:a8:ad:c6: 72:9a:51:2a:3b:5b:54:02:80:52:28:ad:71:39:17:c6:09:4c: 84:ad:13:80:1d:57:f4:42:b9:39:a8:65:67:6a:03:d2:39:0d: 3a:d5:df:03:26:4c:03:7b:17:7d:3c:de:b2:be:76:14:be:8c: 51:53:32:40:82:76:05:a0:e5:67:39:f3:ac:57:a2:1a:8a:79: ab:d2:00:21:68:6e:b0:ea:5a:a8:4f:b3:b3:40:53:c7:84:da: 0d:d3:1f:1a:29:1f:72:e3:68:ee:94:7a:d7:30:75:f9:23:ad: 18:ae:ab:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OA3aX5T43xzyeEjNBIXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZmE2YzQyOTkzMjFkYzVmYzkxZmM3OTYzYWE1MTQ4N2U0 YWY1ZTYwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTk4NDg3NWY0MWVmMTZjMTNmNTM2N2YzN2E0ZjU5NTJlMGRjNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnqoaHNRX3RoLssTTtb7ouEf/9iR W42NOydLCMjBYTpz5XF/6HEcXPENWLL8ZsGhALDCzbTiIZZKY8CpzzXY2dXToTVt tK91GZeEae4ugESinYvuyjcBicJca6dCgcD9OqNFsgrgdgVVfQnVdv7zeYel918w xxNU1vneertGF72YH0h+XAzN3MaYAjCzNzkVZDcetnrW5VET7HHG+i0ZXiK2ndQB ws0/yyW7IWksRIhlZPu+2juy7btat6+uC+4Ek3Z+eetSaIw0rOlUt4BNo4pG5CSp NNa1cuJoZTu/yRg5+ivb+2SwhmOAxp6To8KczG2LMcJlJUkHg9S6tY36iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAGYSHX0HvFsE/U2fzek9ZUuDcbBMB8GA1UdIwQY MBaAFJT6bEKZMh3F/JH8eWOqUUh+SvXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80M2QyNTUtMjg0YS00NjhmLThiNmUt ZmIxZTlkYjBjMzg4LzEvQVpoSWRmUWU4V3dUOVRaX042VDFsUzROeHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80M2QyNTUtMjg0YS00NjhmLThiNmUtZmIxZTlkYjBjMzg4 LzEvbFBwc1Fwa3lIY1g4a2Z4NVk2cFJTSDVLOWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwqUeMA0G CSqGSIb3DQEBCwUAA4IBAQAHrX/DuQDZ0stTwwbRs7mz0czlZPd9nx/o9lrTRXea vho4DuCSp37qqODIaFZZ2r5vsDnycg05Cjb4rf9+SYGAFJ1pk7qty3qIJNd/65la 7nw9TIo4VQ3eZpVHpLI7dMmVIQsyzIecPbh8csUxW2uspXbyBhsQ/6vuiNo18b0+ be7q/yBzxVM5UBr8PHqorcZymlEqO1tUAoBSKK1xORfGCUyErROAHVf0Qrk5qGVn agPSOQ061d8DJkwDexd9PN6yvnYUvoxRUzJAgnYFoOVnOfOsV6Iainmr0gAhaG6w 6lqoT7OzQFPHhNoN0x8aKR9y42julHrXMHX5I60Yrqut -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:32 2026 by rpki-client