This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/kSRDcXV5BduSfvL7CkkTWshA1dU.roa File: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (raw, json) Hash identifier: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ= Subject key identifier: 91:24:43:71:75:79:05:DB:92:7E:F2:FB:0A:49:13:5A:C8:40:D5:D5 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15D39E800F58E7B68137266B4009A8 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/kSRDcXV5BduSfvL7CkkTWshA1dU.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399471 IP address blocks: 194.156.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d3:9e:80:0f:58:e7:b6:81:37:26:6b:40:09:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91244371757905db927ef2fb0a49135ac840d5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:e1:77:ad:56:26:50:7b:a8:95:95:5d:2f: 37:76:4c:bf:31:55:a1:88:00:a7:4f:7d:04:2b:e0: 87:a3:a3:5b:91:df:0d:bb:4f:b1:09:91:3d:41:64: d0:b3:c4:c8:0f:a5:19:32:e6:a6:83:9a:fc:55:01: 3e:5e:8c:54:fb:5a:88:44:0d:af:51:a0:ef:c7:da: af:b9:a3:33:58:e1:ef:ec:33:ec:40:b8:10:71:9f: 84:3e:84:9a:46:e3:dc:ff:02:08:c5:fa:1a:a9:e7: 3e:6e:1f:d7:1b:ff:61:7c:25:75:79:98:50:93:d4: 16:b2:f4:8b:b8:c2:82:42:16:35:af:c8:b3:01:8e: 02:eb:17:d6:91:69:f5:5f:06:70:cf:28:72:27:49: e1:96:93:83:58:3b:5e:92:cd:f8:e1:72:e1:d5:0f: e5:69:bc:b1:52:b4:dd:8c:8e:0e:6e:76:fb:2c:75: 27:32:18:53:9a:91:f3:96:d3:fc:d3:bf:d7:56:a3: ae:30:f1:d4:d9:31:dc:ee:ab:ad:3e:16:d4:9c:3f: 35:56:48:3f:45:91:21:01:fd:3e:2c:84:8f:7e:53: b6:65:2c:9f:d6:31:ed:88:23:16:1a:0f:39:1f:aa: 79:80:b3:ad:fd:37:53:d5:a8:db:12:12:b0:b4:d6: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:24:43:71:75:79:05:DB:92:7E:F2:FB:0A:49:13:5A:C8:40:D5:D5 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/kSRDcXV5BduSfvL7CkkTWshA1dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.79.0/24 Signature Algorithm: sha256WithRSAEncryption 57:28:b7:02:c2:41:45:b8:35:b4:88:7b:c6:8b:b4:dc:35:46: dd:b4:c1:78:c8:35:65:e1:fa:f9:94:8a:15:ec:63:54:53:77: 98:a7:84:f6:81:5f:74:19:b9:b2:1a:5c:1b:9d:76:6a:0b:73: 69:97:35:3b:8f:94:c9:d1:aa:e1:e0:11:1b:62:4e:a9:03:f8: cb:0d:c0:5e:6e:22:2e:57:18:f6:4a:75:b7:04:53:06:e0:28: 86:d2:ad:23:da:3c:27:dd:19:21:9e:95:e5:89:84:bf:f7:ba: 0e:76:c9:94:b7:0e:ba:18:58:4c:7c:67:17:54:d4:e7:2c:e5: b7:67:e5:5d:92:10:f5:73:27:d3:6f:fb:54:ab:50:6d:12:e6: f3:6f:19:80:4b:24:74:bb:ec:3b:43:28:88:07:da:6c:79:42: 58:4c:9f:36:b4:d2:d3:82:f5:59:c6:d4:f0:7b:67:34:39:57: 48:78:2a:13:90:f0:ff:37:62:3b:d6:1f:63:b2:4f:f5:e2:c7: 1f:77:4e:72:b0:82:98:e0:17:e8:b1:17:55:3b:61:ac:50:22: e4:0c:9a:6b:cf:70:0b:fc:8e:77:6e:d9:4d:11:88:cf:52:b5: 28:f1:cf:28:90:a8:eb:15:78:57:2b:a7:71:d8:bd:85:e4:f7: b3:7f:fd:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdOegA9Y57aBNyZrQAmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTI0NDM3MTc1NzkwNWRiOTI3ZWYyZmIwYTQ5MTM1YWM4NDBkNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh/hd61WJlB7qJWVXS83dky/MVWh iACnT30EK+CHo6Nbkd8Nu0+xCZE9QWTQs8TID6UZMuamg5r8VQE+XoxU+1qIRA2v UaDvx9qvuaMzWOHv7DPsQLgQcZ+EPoSaRuPc/wIIxfoaqec+bh/XG/9hfCV1eZhQ k9QWsvSLuMKCQhY1r8izAY4C6xfWkWn1XwZwzyhyJ0nhlpODWDteks344XLh1Q/l abyxUrTdjI4Obnb7LHUnMhhTmpHzltP807/XVqOuMPHU2THc7qutPhbUnD81Vkg/ RZEhAf0+LISPflO2ZSyf1jHtiCMWGg85H6p5gLOt/TdT1ajbEhKwtNazNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJEkQ3F1eQXbkn7y+wpJE1rIQNXVMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEva1NSRGNYVjVCZHVTZnZMN0Nra1RXc2hBMWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpxPMA0G CSqGSIb3DQEBCwUAA4IBAQBXKLcCwkFFuDW0iHvGi7TcNUbdtMF4yDVl4fr5lIoV 7GNUU3eYp4T2gV90GbmyGlwbnXZqC3NplzU7j5TJ0arh4BEbYk6pA/jLDcBebiIu Vxj2SnW3BFMG4CiG0q0j2jwn3RkhnpXliYS/97oOdsmUtw66GFhMfGcXVNTnLOW3 Z+VdkhD1cyfTb/tUq1BtEubzbxmASyR0u+w7QyiIB9pseUJYTJ82tNLTgvVZxtTw e2c0OVdIeCoTkPD/N2I71h9jsk/14scfd05ysIKY4BfosRdVO2GsUCLkDJprz3AL /I53btlNEYjPUrUo8c8okKjrFXhXK6dx2L2F5Pezf/27 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:48 2026 by rpki-client