This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa File: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (raw, json) Hash identifier: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q= Subject key identifier: 7B:23:C2:09:FD:99:AC:D8:6C:7C:79:46:77:08:30:75:04:70:92:66 Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Certificate serial: 019B7C80ABFCA8A8DE00B1F7D37D0EE853FC Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.98.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ab:fc:a8:a8:de:00:b1:f7:d3:7d:0e:e8:53:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b23c209fd99acd86c7c79467708307504709266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:91:3f:48:38:38:3e:d8:8b:42:5d:00:9d: 8a:26:82:43:f9:54:55:05:8b:51:e7:d9:50:c3:1b: 57:80:f1:ac:36:3e:22:ef:c4:c1:78:d6:97:ec:1f: 12:3e:05:84:50:c6:4c:72:aa:03:d8:ad:07:2b:85: a4:9d:a1:01:c2:19:aa:39:c3:8f:6e:77:46:92:4f: 62:45:09:cc:8a:c6:e9:68:a8:5d:2a:16:82:cf:e1: 0a:d2:72:4e:7c:35:88:47:68:1a:50:bc:57:d1:2d: 4f:cd:fd:ed:a3:a5:e2:b3:11:ef:e7:56:c1:61:49: 07:57:17:8e:51:c4:b2:b4:69:57:88:2b:a9:3a:5f: ea:1e:4c:25:d3:77:7d:28:8f:37:e4:3f:3e:0b:33: 99:26:5f:9a:2e:15:91:a1:e0:72:c0:a5:9e:49:44: 1e:2e:01:73:d5:16:ad:96:65:ea:d5:f9:10:f3:36: 48:68:26:70:da:ad:c1:93:3f:91:9d:6b:c3:19:38: ef:32:39:eb:5f:1a:2e:a1:82:e9:51:10:0c:94:d0: 19:bd:0c:5a:9e:a3:22:6f:88:d9:20:06:24:bd:e2: 81:4d:5d:30:b0:03:1a:f8:ba:c3:80:82:b7:e2:fc: 08:8f:36:50:c1:fb:f4:94:0f:46:c4:d7:7d:95:22: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:23:C2:09:FD:99:AC:D8:6C:7C:79:46:77:08:30:75:04:70:92:66 X509v3 Authority Key Identifier: keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.98.20.0/24 Signature Algorithm: sha256WithRSAEncryption b0:8f:b7:14:71:0a:f8:b1:92:e4:bd:5b:f1:95:30:f1:48:03: 20:39:82:c8:8f:b5:94:2a:53:14:63:ed:fe:f3:bd:9d:cd:44: 10:e3:94:f4:f3:cc:da:6f:4d:11:5b:f0:da:c0:ff:e0:25:e2: b2:ce:11:9f:2d:af:25:1f:29:04:32:49:26:22:8e:b8:a0:8e: 99:e4:9e:b4:61:80:b1:a7:70:df:e8:73:b7:d0:2a:d2:52:07: dc:d6:d5:68:af:ce:82:87:45:d7:a1:b0:57:79:0d:08:6a:66: 34:ea:e5:2d:e0:2a:b0:60:f9:02:13:56:58:9d:45:38:e1:a5: 95:d8:3c:63:c6:de:6f:c3:14:bc:be:09:31:1a:2f:2b:77:c1: 03:37:7e:7a:1f:55:a5:c3:cb:36:ff:1a:ac:6b:ee:a4:d7:93: b2:73:45:c7:76:0f:da:82:50:53:6c:9b:2b:56:f9:1d:6b:47: 87:a7:6f:d0:b8:b3:82:95:a9:86:43:cd:52:8d:de:ac:b1:12: b0:12:f3:48:39:2e:c1:cf:ef:a2:09:92:69:c7:69:fc:23:4c: 76:23:e1:48:a3:f9:8f:68:94:2d:f3:22:6c:c2:f9:29:d0:fa: ea:56:19:be:d6:31:05:84:8b:ca:cc:50:c2:88:d5:77:3e:8c: 72:d3:11:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKv8qKjeALH3030O6FP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3 ZmJhYzQwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjIzYzIwOWZkOTlhY2Q4NmM3Yzc5NDY3NzA4MzA3NTA0NzA5MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30+RP0g4OD7Yi0JdAJ2KJoJD+VRV BYtR59lQwxtXgPGsNj4i78TBeNaX7B8SPgWEUMZMcqoD2K0HK4WknaEBwhmqOcOP bndGkk9iRQnMisbpaKhdKhaCz+EK0nJOfDWIR2gaULxX0S1Pzf3to6XisxHv51bB YUkHVxeOUcSytGlXiCupOl/qHkwl03d9KI835D8+CzOZJl+aLhWRoeBywKWeSUQe LgFz1RatlmXq1fkQ8zZIaCZw2q3Bkz+RnWvDGTjvMjnrXxouoYLpURAMlNAZvQxa nqMib4jZIAYkveKBTV0wsAMa+LrDgIK34vwIjzZQwfv0lA9GxNd9lSLRLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHsjwgn9mazYbHx5RncIMHUEcJJmMB8GA1UdIwQY MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It Y2U5YzlmM2FhODU1LzEvZXlQQ0NmMlpyTmhzZkhsR2R3Z3dkUVJ3a21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1 LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmIUMA0G CSqGSIb3DQEBCwUAA4IBAQCwj7cUcQr4sZLkvVvxlTDxSAMgOYLIj7WUKlMUY+3+ 872dzUQQ45T088zab00RW/DawP/gJeKyzhGfLa8lHykEMkkmIo64oI6Z5J60YYCx p3Df6HO30CrSUgfc1tVor86Ch0XXobBXeQ0IamY06uUt4CqwYPkCE1ZYnUU44aWV 2Dxjxt5vwxS8vgkxGi8rd8EDN356H1Wlw8s2/xqsa+6k15Oyc0XHdg/aglBTbJsr Vvkda0eHp2/QuLOClamGQ81Sjd6ssRKwEvNIOS7Bz++iCZJpx2n8I0x2I+FIo/mP aJQt8yJswvkp0PrqVhm+1jEFhIvKzFDCiNV3Poxy0xH9 -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:55 2026 by rpki-client