This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa File: roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa (raw, json) Hash identifier: Nvdv7sBW68P4ZeVIAVuG7dWEQPAEIM4InjtltzOfZ3M= Subject key identifier: AE:80:F7:14:82:7F:42:CE:45:B7:18:CF:D0:99:B5:85:49:EC:D4:29 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B7910857C280E08189B38E84749DE41F1 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211376 IP address blocks: 194.116.228.174/32 maxlen: 32 2a0f:b700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:7c:28:0e:08:18:9b:38:e8:47:49:de:41:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae80f714827f42ce45b718cfd099b58549ecd429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:8e:a8:a7:e3:0c:e4:5b:78:0b:5b:03:b0: 11:74:b7:39:9d:80:78:9e:9f:01:de:6e:08:7c:be: 15:09:68:d2:54:10:c1:89:da:b4:8e:7e:9c:79:4d: 96:bf:91:d8:a0:9f:fa:bd:f7:c5:fe:7e:b0:4f:de: 74:cc:32:02:03:a3:c9:9a:67:f0:70:21:8a:2a:7e: e3:4f:d0:c5:23:f1:9f:60:a1:25:e0:41:93:96:32: 06:12:54:1b:97:51:59:a0:4b:f7:e4:7b:fe:8d:b4: 45:6b:0a:6b:4f:b3:0a:ce:cf:21:14:6a:0d:21:ee: 29:17:3b:10:8c:c5:0c:04:1e:e5:5f:8e:ab:fa:ea: d8:54:cd:36:11:56:e1:8f:2c:d5:1d:06:e3:b6:d5: 04:ea:f7:59:d2:53:2f:df:20:72:bf:c8:7a:10:ce: 1d:b5:bd:84:71:38:85:55:f5:84:56:70:bb:d2:c7: 4d:cd:c1:d8:51:3a:c2:a2:a0:5d:34:79:4d:18:03: 0f:ce:83:da:51:de:d3:bc:88:d2:dc:7c:b6:bc:3b: 34:3f:de:90:26:8b:c9:9a:24:da:44:6e:a8:54:84: 55:9e:46:a6:63:f1:b0:7b:44:b2:92:51:0a:03:92: 86:b4:26:73:41:3e:19:6b:47:5a:ff:70:1d:b2:1c: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:F7:14:82:7F:42:CE:45:B7:18:CF:D0:99:B5:85:49:EC:D4:29 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/roD3FIJ_Qs5FtxjP0Jm1hUns1Ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.228.174/32 IPv6: 2a0f:b700::/29 Signature Algorithm: sha256WithRSAEncryption 7c:48:23:1e:76:92:ef:20:13:7a:11:07:fb:67:c7:f5:5b:6a: c5:ef:6c:e4:98:9e:a6:3a:af:32:5b:bd:ad:3d:01:11:b0:4d: 49:7e:a2:b4:83:98:39:3a:00:47:46:ad:4e:51:48:2d:44:ce: c1:8b:2b:c0:00:e2:4f:dc:a3:a0:ef:03:c6:c5:29:4b:98:e8: 43:29:2c:1f:d1:0c:2c:09:4f:b8:65:57:f4:b4:27:27:f6:a9: 2d:3c:39:fb:86:f4:d0:47:19:0a:24:1f:98:73:a4:3a:20:ec: eb:08:5b:28:4f:13:1f:9f:ab:ee:27:bb:e7:7f:76:5e:a0:7c: 02:1d:46:c6:b1:4c:f5:81:48:bf:d2:f2:6a:dc:37:be:c7:ec: 47:4a:db:4d:d4:24:1b:a3:71:a0:1b:d5:f0:5a:11:cd:87:ec: eb:53:4e:33:c6:1a:f8:fa:d1:17:ee:dd:61:13:62:ce:4d:ab: c6:f4:58:1d:ed:8c:93:25:33:81:b6:6b:90:cf:26:82:10:09: 58:ae:c6:49:89:ac:eb:ee:c8:bc:9c:06:76:d3:47:79:5b:bd: 6b:2b:52:d6:b8:43:92:23:d3:59:9c:19:d6:29:19:a4:20:11: ef:e2:31:e0:06:69:85:20:6a:48:6b:30:3a:7e:ed:8b:2a:70: 53:8b:9d:ae -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5EIV8KA4IGJs46EdJ3kHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgwZjcxNDgyN2Y0MmNlNDViNzE4Y2ZkMDk5YjU4NTQ5ZWNkNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ2OqKfjDORbeAtbA7ARdLc5nYB4 np8B3m4IfL4VCWjSVBDBidq0jn6ceU2Wv5HYoJ/6vffF/n6wT950zDICA6PJmmfw cCGKKn7jT9DFI/GfYKEl4EGTljIGElQbl1FZoEv35Hv+jbRFawprT7MKzs8hFGoN Ie4pFzsQjMUMBB7lX46r+urYVM02EVbhjyzVHQbjttUE6vdZ0lMv3yByv8h6EM4d tb2EcTiFVfWEVnC70sdNzcHYUTrCoqBdNHlNGAMPzoPaUd7TvIjS3Hy2vDs0P96Q JovJmiTaRG6oVIRVnkamY/Gwe0SyklEKA5KGtCZzQT4Za0da/3AdshyWzQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFK6A9xSCf0LORbcYz9CZtYVJ7NQpMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvcm9EM0ZJSl9RczVGdHhqUDBKbTFoVW5zMUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjANBAIAATAHAwUAwnTkrjAN BAIAAjAHAwUDKg+3ADANBgkqhkiG9w0BAQsFAAOCAQEAfEgjHnaS7yATehEH+2fH 9Vtqxe9s5JiepjqvMlu9rT0BEbBNSX6itIOYOToAR0atTlFILUTOwYsrwADiT9yj oO8DxsUpS5joQyksH9EMLAlPuGVX9LQnJ/apLTw5+4b00EcZCiQfmHOkOiDs6whb KE8TH5+r7ie75392XqB8Ah1GxrFM9YFIv9Lyatw3vsfsR0rbTdQkG6NxoBvV8FoR zYfs61NOM8Ya+PrRF+7dYRNizk2rxvRYHe2MkyUzgbZrkM8mghAJWK7GSYms6+7I vJwGdtNHeVu9aytS1rhDkiPTWZwZ1ikZpCAR7+Ix4AZphSBqSGswOn7tiypwU4ud rg== -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:25 2026 by rpki-client