This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/TS0Wx61i9egA7pWaq3HkRECgLz0.roa File: TS0Wx61i9egA7pWaq3HkRECgLz0.roa (raw, json) Hash identifier: SjyYcyNIdnSwcs1YAu60PSJAfsxesQPRHQI14Gzp5n0= Subject key identifier: 4D:2D:16:C7:AD:62:F5:E8:00:EE:95:9A:AB:71:E4:44:40:A0:2F:3D Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019BD239C16A52F8214B55751A7AAB1395CA Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/TS0Wx61i9egA7pWaq3HkRECgLz0.roa Signing time: Sun 18 Jan 2026 17:49:18 +0000 ROA not before: Sun 18 Jan 2026 17:49:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 194.31.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:39:c1:6a:52:f8:21:4b:55:75:1a:7a:ab:13:95:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Jan 18 17:49:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d2d16c7ad62f5e800ee959aab71e44440a02f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:3e:65:c2:01:a1:5f:cb:92:c6:b0:57:f5: 10:79:da:62:3d:0d:a2:df:14:05:8c:84:06:7d:7a: 13:f4:0d:c8:c3:7f:14:a5:db:0e:b9:5e:90:b5:ec: b0:0a:de:b3:6d:84:74:1c:88:8b:76:fb:9c:dc:72: ce:66:d0:39:4c:5b:b6:12:83:1f:36:aa:5c:4d:db: 60:df:f2:f7:6c:b9:d3:7d:1b:98:4e:e5:eb:dc:6f: 6e:76:24:bf:51:1b:92:64:b7:2c:6a:8c:5f:45:29: f5:6d:78:5b:c8:c6:5c:80:f2:91:23:00:14:8e:64: 24:df:c1:4e:4b:a6:06:c2:5d:cf:f0:ca:34:ed:85: 13:63:e7:ca:dd:1b:8c:64:fc:14:4a:87:24:17:7f: df:ca:7f:f2:45:44:8c:ea:c3:9b:dd:8e:c8:a8:56: 4b:37:9a:be:d3:f2:fa:3b:fd:2a:0d:a3:37:7b:20: b9:bd:0a:73:38:95:45:64:d3:fb:96:bd:c7:d5:e5: a3:47:64:a4:f2:71:55:95:d5:98:e6:6b:1c:27:b3: 63:6c:0a:45:0c:4a:8f:41:f9:62:aa:92:2b:ed:a7: 46:1c:f8:f2:58:f7:79:21:57:dd:08:83:59:cb:f5: 44:44:82:0b:cc:35:92:1d:1a:ac:ac:f8:bc:85:b8: 32:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2D:16:C7:AD:62:F5:E8:00:EE:95:9A:AB:71:E4:44:40:A0:2F:3D X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/TS0Wx61i9egA7pWaq3HkRECgLz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.165.0/24 Signature Algorithm: sha256WithRSAEncryption b9:df:0e:c3:61:c8:23:df:d2:e8:32:df:08:21:9c:30:43:de: b2:89:e4:7d:8a:85:91:9b:1d:62:3e:ad:46:e3:23:37:c2:35: 3d:f9:b7:76:13:28:2b:04:f8:18:54:ea:e0:9e:ea:df:ac:f7: 1a:d9:d5:5b:f8:2c:05:90:d0:91:bf:f4:5e:b1:7e:70:8d:9b: ba:af:89:f8:bc:19:32:ff:ce:e7:e6:be:4f:f1:b2:10:3c:99: a7:67:c2:f9:89:3e:f4:84:c2:b0:62:c0:19:c3:43:4f:c6:b4: 4e:1b:46:8b:d7:ab:5f:ff:54:af:bc:f0:74:44:57:ba:3c:aa: 2e:fe:68:68:e1:44:8c:5a:e3:fb:41:a8:3d:5a:09:ab:14:43: 5f:0f:57:c9:0a:21:99:53:4b:30:06:46:f7:3b:31:42:bd:26: 66:2b:76:c8:5e:ac:41:fa:5d:ab:be:4b:1e:8e:89:5d:23:59: 95:e4:39:f2:bf:b7:e4:d9:c3:87:fd:d6:d9:b9:ef:39:c1:57: 50:ea:35:2f:83:5b:f5:3f:3d:cc:10:14:6b:8a:4c:be:71:a8: c3:a8:0a:f3:c3:3e:1a:db:db:e5:b7:0f:32:91:70:48:71:8f: 6e:90:7e:24:ff:8d:07:c4:89:20:f4:9e:89:0f:3d:a1:ca:c8: c6:6f:72:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvSOcFqUvghS1V1GnqrE5XKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjYwMTE4MTc0OTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDJkMTZjN2FkNjJmNWU4MDBlZTk1OWFhYjcxZTQ0NDQwYTAyZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9E+ZcIBoV/LksawV/UQedpiPQ2i 3xQFjIQGfXoT9A3Iw38UpdsOuV6QteywCt6zbYR0HIiLdvuc3HLOZtA5TFu2EoMf NqpcTdtg3/L3bLnTfRuYTuXr3G9udiS/URuSZLcsaoxfRSn1bXhbyMZcgPKRIwAU jmQk38FOS6YGwl3P8Mo07YUTY+fK3RuMZPwUSockF3/fyn/yRUSM6sOb3Y7IqFZL N5q+0/L6O/0qDaM3eyC5vQpzOJVFZNP7lr3H1eWjR2Sk8nFVldWY5mscJ7NjbApF DEqPQfliqpIr7adGHPjyWPd5IVfdCINZy/VERIILzDWSHRqsrPi8hbgy7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE0tFsetYvXoAO6Vmqtx5ERAoC89MB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvVFMwV3g2MWk5ZWdBN3BXYXEzSGtSRUNnTHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+lMA0G CSqGSIb3DQEBCwUAA4IBAQC53w7DYcgj39LoMt8IIZwwQ96yieR9ioWRmx1iPq1G 4yM3wjU9+bd2EygrBPgYVOrgnurfrPca2dVb+CwFkNCRv/ResX5wjZu6r4n4vBky /87n5r5P8bIQPJmnZ8L5iT70hMKwYsAZw0NPxrROG0aL16tf/1SvvPB0RFe6PKou /mho4USMWuP7Qag9WgmrFENfD1fJCiGZU0swBkb3OzFCvSZmK3bIXqxB+l2rvkse joldI1mV5Dnyv7fk2cOH/dbZue85wVdQ6jUvg1v1Pz3MEBRriky+cajDqArzwz4a 29vltw8ykXBIcY9ukH4k/40HxIkg9J6JDz2hysjGb3KY -----END CERTIFICATE-----Generated at Mon Jan 19 05:24:22 2026 by rpki-client