This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa File: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (raw, json) Hash identifier: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0= Subject key identifier: B1:94:03:D1:37:C9:F0:70:BF:DA:A1:94:61:12:32:81:EB:8D:1E:AD Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CD9400276209AFCCB30AE2BB5772 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63018 IP address blocks: 194.110.173.0/24 maxlen: 24 2a09:ff00:101::/48 maxlen: 48 2a09:ff00:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cd:94:00:27:62:09:af:cc:b3:0a:e2:bb:57:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19403d137c9f070bfdaa19461123281eb8d1ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:7f:19:50:0b:93:73:b6:0c:32:f7:fd:3e: 9a:53:0c:36:28:39:e6:36:df:0d:0f:47:cd:65:0f: 64:fe:11:80:57:e5:31:1c:b4:b3:37:6c:14:ee:96: 5d:d4:a6:dc:d8:df:9f:95:b5:4d:8b:0e:1c:9e:ce: 65:70:b8:4b:ee:89:7a:11:91:30:2a:0e:03:6e:c0: 90:24:d3:6a:80:ca:8b:5d:4f:49:c6:e9:fb:53:83: dc:d8:34:e8:1c:40:90:38:40:5b:c3:9b:1e:97:0f: 77:e9:29:11:0c:84:51:dd:a2:1c:c6:cc:bb:82:49: ec:96:d8:24:1c:ba:42:de:b9:e4:a2:78:56:23:76: 15:5c:b4:1c:fb:33:36:07:e5:34:90:50:de:8a:25: e6:d7:6e:50:58:76:55:33:b8:b9:c1:44:81:39:48: 71:af:3d:95:d9:be:11:ea:de:a8:d7:54:96:32:49: 83:82:78:c6:0f:7a:a2:ce:12:4b:67:05:d1:1d:5a: eb:6a:f6:13:09:74:18:f4:64:97:5b:97:12:eb:01: 00:62:90:cd:62:17:fe:19:85:a9:dd:26:db:35:0a: ac:11:9e:b4:3b:56:8e:85:f4:1b:8d:4f:28:49:bf: 9b:12:2f:00:7c:58:8a:70:8b:cc:fb:6e:66:6a:76: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:03:D1:37:C9:F0:70:BF:DA:A1:94:61:12:32:81:EB:8D:1E:AD X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.173.0/24 IPv6: 2a09:ff00:101::-2a09:ff00:102:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6a:f6:d5:d5:14:e1:53:79:0d:f1:59:c6:66:b6:31:0e:03:13: 0b:00:52:b6:82:2d:42:30:50:24:14:12:25:06:68:04:f1:4c: 9b:6f:01:74:b5:6f:6c:dd:2c:cc:ce:f2:27:c1:e7:b2:8b:a5: 4c:dc:98:15:67:a8:71:37:e7:a9:c0:65:70:08:7d:76:64:06: db:f5:6d:db:1c:36:83:72:2d:43:98:0b:19:12:a0:7a:94:59: 25:72:b5:a1:ef:7c:1a:cf:ff:e3:28:be:1c:a7:36:01:ac:49: 02:e1:e5:84:75:fe:82:96:16:31:d1:df:e7:8f:fa:d4:45:ea: 42:11:f1:27:03:54:7d:79:d8:05:65:e8:4d:e6:6f:db:9b:84: 15:40:0b:cd:ed:ca:91:0e:1d:7c:bb:f4:42:e5:1a:d4:f2:75: 94:c2:1c:17:21:e7:fc:41:4a:6b:6f:03:c8:33:7e:a6:0e:a4: f7:c5:29:26:7d:1f:3c:83:c4:1a:9b:5e:72:3d:f6:89:49:8f: fa:4c:d3:1c:e2:b8:16:7a:8d:72:92:12:f8:96:de:93:1b:c8: b9:ce:5b:32:1b:b2:e2:73:f8:8a:21:5b:82:79:c4:2e:10:bd: 93:90:63:2e:71:2f:2b:7e:fb:f3:8e:41:35:73:6b:6f:36:fd: 01:be:ac:93 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/Fc2UACdiCa/Mswriu1dyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTk0MDNkMTM3YzlmMDcwYmZkYWExOTQ2MTEyMzI4MWViOGQxZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBp/GVALk3O2DDL3/T6aUww2KDnm Nt8ND0fNZQ9k/hGAV+UxHLSzN2wU7pZd1Kbc2N+flbVNiw4cns5lcLhL7ol6EZEw Kg4DbsCQJNNqgMqLXU9Jxun7U4Pc2DToHECQOEBbw5selw936SkRDIRR3aIcxsy7 gknsltgkHLpC3rnkonhWI3YVXLQc+zM2B+U0kFDeiiXm125QWHZVM7i5wUSBOUhx rz2V2b4R6t6o11SWMkmDgnjGD3qizhJLZwXRHVrravYTCXQY9GSXW5cS6wEAYpDN Yhf+GYWp3SbbNQqsEZ60O1aOhfQbjU8oSb+bEi8AfFiKcIvM+25manaJpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLGUA9E3yfBwv9qhlGESMoHrjR6tMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvc1pRRDBUZko4SENfMnFHVVlSSXlnZXVOSHEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAwm6tMBoE AgACMBQwEgMHACoJ/wABAQMHACoJ/wABAjANBgkqhkiG9w0BAQsFAAOCAQEAavbV 1RThU3kN8VnGZrYxDgMTCwBStoItQjBQJBQSJQZoBPFMm28BdLVvbN0szM7yJ8Hn soulTNyYFWeocTfnqcBlcAh9dmQG2/Vt2xw2g3ItQ5gLGRKgepRZJXK1oe98Gs// 4yi+HKc2AaxJAuHlhHX+gpYWMdHf54/61EXqQhHxJwNUfXnYBWXoTeZv25uEFUAL ze3KkQ4dfLv0QuUa1PJ1lMIcFyHn/EFKa28DyDN+pg6k98UpJn0fPIPEGptecj32 iUmP+kzTHOK4FnqNcpIS+JbekxvIuc5bMhuy4nP4iiFbgnnELhC9k5BjLnEvK377 845BNXNrbzb9Ab6skw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:41 2026 by rpki-client