This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa File: ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa (raw, json) Hash identifier: GNXHKw8JOl4x62WkohXxkLR6V3oFi4zgRDQxr+0jQ1k= Subject key identifier: 71:C3:4A:68:96:87:AD:FD:F0:ED:64:60:5E:69:4B:19:21:A5:87:78 Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897 Certificate serial: 019B7CECBB3590B30023CE5A9F66E69253CB Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 146.133.124.0/24 maxlen: 24 146.133.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bb:35:90:b3:00:23:ce:5a:9f:66:e6:92:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897 Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71c34a689687adfdf0ed64605e694b1921a58778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:56:b7:5b:97:aa:17:e9:4c:1b:69:88:e7: 1a:fc:e1:4f:6e:3c:1a:16:94:e2:6b:ab:ba:4c:03: ae:d1:b0:75:6b:7a:87:12:5f:57:2e:69:ce:8c:f8: 1f:92:25:8e:f5:c8:b1:9a:c4:b7:10:81:81:19:ce: 35:e3:f9:9b:1f:d4:98:7c:fb:47:ac:cc:48:60:65: 44:c4:52:12:ec:cc:87:cd:fb:0e:df:bc:8d:b8:67: 99:cf:42:be:dd:45:34:7b:ad:fb:e7:ff:f6:cd:3f: 6f:30:d5:4e:81:62:0d:80:66:ef:0f:f7:70:cc:1b: 8d:57:6a:99:b4:c6:32:13:e6:ba:0e:b8:ed:1c:e5: 3b:8c:48:13:cd:c3:eb:c8:b2:2b:df:e7:e0:6e:ea: 02:d1:c4:d9:2c:9a:ac:a3:3f:c8:b1:c0:98:6e:38: 5b:20:94:4c:43:f5:fe:52:c0:c5:a0:fd:25:f6:e7: 76:ae:ee:c6:dc:62:2d:29:ca:6e:33:4b:2a:9b:7c: 71:70:c9:26:78:d8:f3:78:98:52:aa:78:f6:37:31: 5b:31:07:ea:83:74:7e:da:4d:f9:72:c9:7b:47:75: 7d:38:14:7e:ff:9e:69:c1:93:f4:c8:32:9d:7d:e5: f6:d4:21:0e:3e:ab:6b:5e:a7:e6:a0:11:8f:05:f4: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:4A:68:96:87:AD:FD:F0:ED:64:60:5E:69:4B:19:21:A5:87:78 X509v3 Authority Key Identifier: keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.133.124.0/24 146.133.127.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:93:19:36:66:b7:4c:7a:20:4b:97:bb:1f:fe:54:ab:66:e0: e5:87:69:41:19:46:58:40:45:60:bf:63:53:6b:8f:22:f3:55: c7:2a:02:58:e1:cf:0b:4d:e8:dc:84:79:4e:ed:cb:d4:14:61: 10:55:40:ca:3f:cd:fb:de:f3:6f:8e:29:da:bb:07:c4:41:ab: 2d:30:49:37:aa:3a:57:55:54:ae:b1:45:58:a5:be:32:a4:84: b8:e4:82:de:b6:c8:e5:bb:82:a3:c6:71:c7:17:ff:7f:ad:69: 9c:2a:d4:96:ea:ba:76:ae:ef:0b:b5:5c:26:4f:ee:bd:5a:17: ba:f2:da:67:86:35:e5:9f:98:92:de:05:c3:6e:07:5e:02:20: 82:59:cb:5b:ea:1c:4e:1a:cb:96:f5:d6:03:3a:ce:6a:33:61: ea:19:42:2e:9a:3c:81:c2:24:71:70:da:be:00:51:01:2b:8e: cf:b8:47:6d:32:e0:7a:15:d4:2e:66:7c:81:c6:e9:97:15:91: 36:b2:95:45:01:92:9a:2a:a9:25:5b:17:e7:9c:c6:0f:ce:42: 9d:75:97:7b:ab:e8:63:7c:8c:8a:61:c3:2f:88:37:ce:32:34: 2c:aa:9b:e3:4c:7d:c5:4d:35:a8:c2:72:fa:ff:a8:e7:a6:88: d8:44:73:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Ls1kLMAI85an2bmklPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3 ZTU4OTcwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWMzNGE2ODk2ODdhZGZkZjBlZDY0NjA1ZTY5NGIxOTIxYTU4Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv1Wt1uXqhfpTBtpiOca/OFPbjwa FpTia6u6TAOu0bB1a3qHEl9XLmnOjPgfkiWO9cixmsS3EIGBGc414/mbH9SYfPtH rMxIYGVExFIS7MyHzfsO37yNuGeZz0K+3UU0e6375//2zT9vMNVOgWINgGbvD/dw zBuNV2qZtMYyE+a6DrjtHOU7jEgTzcPryLIr3+fgbuoC0cTZLJqsoz/IscCYbjhb IJRMQ/X+UsDFoP0l9ud2ru7G3GItKcpuM0sqm3xxcMkmeNjzeJhSqnj2NzFbMQfq g3R+2k35csl7R3V9OBR+/55pwZP0yDKdfeX21CEOPqtrXqfmoBGPBfQIDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHHDSmiWh6398O1kYF5pSxkhpYd4MB8GA1UdIwQY MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt ODYyZTk5OTczZmMzLzEvY2NOS2FKYUhyZjN3N1dSZ1htbExHU0dsaDNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkoV8AwQA koV/MA0GCSqGSIb3DQEBCwUAA4IBAQA9kxk2ZrdMeiBLl7sf/lSrZuDlh2lBGUZY QEVgv2NTa48i81XHKgJY4c8LTejchHlO7cvUFGEQVUDKP8373vNvjinauwfEQast MEk3qjpXVVSusUVYpb4ypIS45ILetsjlu4KjxnHHF/9/rWmcKtSW6rp2ru8LtVwm T+69Whe68tpnhjXln5iS3gXDbgdeAiCCWctb6hxOGsuW9dYDOs5qM2HqGUIumjyB wiRxcNq+AFEBK47PuEdtMuB6FdQuZnyBxumXFZE2spVFAZKaKqklWxfnnMYPzkKd dZd7q+hjfIyKYcMviDfOMjQsqpvjTH3FTTWownL6/6jnpojYRHMk -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client