This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/o82wJADBHFkJX5vOdfLDcdz7SfI.roa File: o82wJADBHFkJX5vOdfLDcdz7SfI.roa (raw, json) Hash identifier: u+qyev6ZaFOmLJt2UGgP85ay/0TbQc+SxI2fnx4Zyc4= Subject key identifier: A3:CD:B0:24:00:C1:1C:59:09:5F:9B:CE:75:F2:C3:71:DC:FB:49:F2 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B7E389EE210714158B4DBDDAEBD69D00E Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/o82wJADBHFkJX5vOdfLDcdz7SfI.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64160 IP address blocks: 194.143.203.0/24 maxlen: 24 194.143.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9e:e2:10:71:41:58:b4:db:dd:ae:bd:69:d0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3cdb02400c11c59095f9bce75f2c371dcfb49f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:40:5d:05:e6:97:bb:a0:a3:12:e6:bc:b4: f4:38:a8:e9:27:af:49:79:52:04:37:66:53:e3:dd: fc:77:fc:47:da:ef:af:a0:93:1d:a5:d8:cc:4e:f0: 53:67:d4:26:77:84:a5:34:63:ac:49:83:bf:f4:df: 8c:66:b5:1c:a8:09:b7:c6:53:8c:16:44:20:5c:b1: 1e:04:a6:9f:b2:cf:03:f8:47:1f:3c:2e:5d:5f:e5: 71:bf:62:8f:be:a1:79:53:c5:b3:3f:a6:7f:91:51: e9:95:fc:96:1c:9f:87:33:65:a4:3e:02:27:44:a3: 7d:27:c4:75:51:62:76:39:fc:7c:ad:f2:9a:4e:9e: 1d:60:40:a5:73:2e:61:90:b1:5c:d6:dc:af:d7:fd: 11:c9:09:48:02:f4:57:12:58:84:2f:61:41:2a:2e: bf:3a:e9:f6:19:fc:04:13:15:f1:8f:88:f8:05:20: 0c:39:a0:82:4d:43:ed:45:f9:ca:bc:04:88:38:91: f9:ab:ac:00:a7:fb:8a:fa:e6:a8:5f:8f:7f:ef:29: b7:ab:17:4e:18:4c:b3:d0:b5:0b:c5:3c:bb:95:62: fe:83:b2:dd:0a:c4:cc:c5:12:05:a2:30:40:a1:fd: 9f:56:9c:4b:ff:87:c4:94:3e:98:9c:13:37:10:1f: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:B0:24:00:C1:1C:59:09:5F:9B:CE:75:F2:C3:71:DC:FB:49:F2 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/o82wJADBHFkJX5vOdfLDcdz7SfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.143.203.0/24 194.143.209.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:3f:d8:e7:b8:50:e8:c2:f1:23:e6:1d:d4:49:ac:07:7b:06: 1e:c9:d5:50:45:7c:22:25:d0:50:8f:06:1e:d9:03:60:17:77: 73:9d:84:1a:7a:56:c5:5c:8f:1d:57:63:44:4c:dc:24:f8:39: d9:a1:ff:ca:cf:9f:15:f4:23:91:02:d4:22:3f:9d:81:93:12: 20:57:bf:bf:67:81:b4:48:e6:4f:6c:35:ed:f5:7a:74:ec:0d: 8f:3b:e2:db:a7:e1:4d:f7:1a:b3:81:4a:99:2c:40:6d:f4:54: b8:ce:10:eb:4a:76:e0:9f:27:e7:9a:ad:9f:8e:45:38:d8:b8: 54:60:37:16:53:33:c7:18:1c:03:b3:26:25:0d:2c:8a:49:28: 20:0f:e9:f6:6a:d2:e6:a9:17:b5:dd:8f:7c:ec:8c:bc:60:0c: e8:a4:70:68:ad:2a:ec:92:2d:75:dd:1f:d4:4d:15:78:d6:ed: 7e:c1:28:21:16:1f:80:21:3f:42:37:4a:cb:a0:b4:45:d8:12: 85:eb:f9:df:9e:3a:90:2d:c3:a5:85:ef:5e:3c:8d:ae:62:1c: c0:18:8b:9b:a3:84:64:fa:02:c2:2d:01:35:a5:38:bf:7d:d3: 4b:03:72:dc:fd:a6:5c:b6:d2:ed:3a:89:8e:db:e2:73:cf:33: 80:97:f6:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OJ7iEHFBWLTb3a69adAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NkYjAyNDAwYzExYzU5MDk1ZjliY2U3NWYyYzM3MWRjZmI0OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzBAXQXml7ugoxLmvLT0OKjpJ69J eVIEN2ZT4938d/xH2u+voJMdpdjMTvBTZ9Qmd4SlNGOsSYO/9N+MZrUcqAm3xlOM FkQgXLEeBKafss8D+EcfPC5dX+Vxv2KPvqF5U8WzP6Z/kVHplfyWHJ+HM2WkPgIn RKN9J8R1UWJ2Ofx8rfKaTp4dYEClcy5hkLFc1tyv1/0RyQlIAvRXEliEL2FBKi6/ Oun2GfwEExXxj4j4BSAMOaCCTUPtRfnKvASIOJH5q6wAp/uK+uaoX49/7ym3qxdO GEyz0LULxTy7lWL+g7LdCsTMxRIFojBAof2fVpxL/4fElD6YnBM3EB+jwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKPNsCQAwRxZCV+bznXyw3Hc+0nyMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvbzgyd0pBREJIRmtKWDV2T2RmTERjZHo3U2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwo/LAwQA wo/RMA0GCSqGSIb3DQEBCwUAA4IBAQAcP9jnuFDowvEj5h3USawHewYeydVQRXwi JdBQjwYe2QNgF3dznYQaelbFXI8dV2NETNwk+DnZof/Kz58V9CORAtQiP52BkxIg V7+/Z4G0SOZPbDXt9Xp07A2PO+Lbp+FN9xqzgUqZLEBt9FS4zhDrSnbgnyfnmq2f jkU42LhUYDcWUzPHGBwDsyYlDSyKSSggD+n2atLmqRe13Y987Iy8YAzopHBorSrs ki113R/UTRV41u1+wSghFh+AIT9CN0rLoLRF2BKF6/nfnjqQLcOlhe9ePI2uYhzA GIubo4Rk+gLCLQE1pTi/fdNLA3Lc/aZcttLtOomO2+JzzzOAl/bJ -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client