This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/f4oZ944cKaclf3H6nV0hXsulctQ.roa File: f4oZ944cKaclf3H6nV0hXsulctQ.roa (raw, json) Hash identifier: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8= Subject key identifier: 7F:8A:19:F7:8E:1C:29:A7:25:7F:71:FA:9D:5D:21:5E:CB:A5:72:D4 Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c Certificate serial: 019B7EA7112865C285D7EF6450E88C8773F8 Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/f4oZ944cKaclf3H6nV0hXsulctQ.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 140.150.96.0/19 maxlen: 24 176.116.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:11:28:65:c2:85:d7:ef:64:50:e8:8c:87:73:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f8a19f78e1c29a7257f71fa9d5d215ecba572d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ac:e0:ee:50:86:17:ca:41:4c:ba:b0:b1:7b: ce:de:85:35:e0:94:79:3e:31:33:58:bd:46:f2:44: d1:78:58:02:e5:3f:36:4f:86:43:54:53:f7:9e:54: 3d:19:83:a4:5b:be:17:d9:4f:41:83:0b:37:8c:64: 47:1b:59:07:f1:7c:b0:ac:7f:77:7f:33:3a:27:4f: 3d:c4:76:33:72:37:86:54:9b:24:f4:59:5b:b8:32: 7e:fa:1a:b2:6e:b9:e7:60:19:0e:2a:f1:6f:70:d8: 9e:91:be:9d:1f:6a:cf:05:62:0e:c9:e1:cb:e2:f9: d9:1b:bf:4f:06:cd:14:28:13:0e:5a:ae:80:9c:8a: 8e:44:a8:9d:0e:85:1e:8f:21:12:1e:67:96:76:56: ff:94:e7:df:33:89:8d:56:12:e1:e9:e8:45:5c:13: c2:5b:67:04:6f:a6:22:e7:d8:d3:f4:a7:06:aa:db: f4:51:ad:3c:29:71:b3:eb:f3:e3:de:c1:0b:ee:fc: b3:23:ea:be:a1:46:26:58:7b:51:6a:5d:f7:8c:a5: ec:cb:13:3e:35:da:52:98:ab:3f:90:ff:fc:2e:2e: 02:ee:07:c8:e0:44:28:67:90:8a:e0:f8:72:c3:04: 04:82:19:7f:de:cf:bc:1e:a0:47:66:a3:83:77:41: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8A:19:F7:8E:1C:29:A7:25:7F:71:FA:9D:5D:21:5E:CB:A5:72:D4 X509v3 Authority Key Identifier: keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/f4oZ944cKaclf3H6nV0hXsulctQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.96.0/19 176.116.21.0/24 Signature Algorithm: sha256WithRSAEncryption 66:c2:66:50:0b:08:02:c1:39:ab:55:8f:a6:a9:81:18:ab:b5: 3e:ea:c7:89:31:8e:27:c5:f1:af:61:a1:d8:0d:83:ae:e4:70: 82:87:53:cd:12:59:7a:89:88:6f:76:aa:50:fe:cc:42:f0:12: 30:55:3b:9d:72:e0:bd:2c:8e:cd:00:fe:be:ba:f7:e9:2e:6f: e7:0a:63:2a:41:09:4b:6e:4f:f4:8a:fc:fe:fa:6a:88:37:8b: e8:3e:30:2f:2a:74:84:e6:7d:06:a8:16:da:fe:1d:12:43:86: b4:f0:4f:6c:79:8f:7a:03:aa:c5:dd:4d:e0:86:0c:59:23:de: 5b:91:ec:52:1c:0c:db:1a:cb:7d:08:45:a4:25:c7:81:5e:d9: 70:bc:40:2e:f7:d7:0e:33:04:50:2f:e8:55:0c:74:94:ac:14: f1:3f:b1:70:b7:7a:54:64:b0:23:e5:c5:89:8e:91:44:c3:c8: e8:f9:93:d4:39:c5:77:78:37:4c:2b:aa:9f:68:29:6c:d3:1a: 11:d8:65:1a:22:83:8c:24:8b:b2:aa:86:a7:86:36:c5:47:41: eb:34:4f:89:05:83:19:95:05:e2:47:be:46:69:d0:14:29:ef: 4a:cc:86:42:c4:c4:19:40:2b:8e:e1:39:4f:6b:d0:15:9f:28: 68:f2:4b:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pxEoZcKF1+9kUOiMh3P4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3 YTg3MmMwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjhhMTlmNzhlMWMyOWE3MjU3ZjcxZmE5ZDVkMjE1ZWNiYTU3MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26zg7lCGF8pBTLqwsXvO3oU14JR5 PjEzWL1G8kTReFgC5T82T4ZDVFP3nlQ9GYOkW74X2U9Bgws3jGRHG1kH8XywrH93 fzM6J089xHYzcjeGVJsk9FlbuDJ++hqybrnnYBkOKvFvcNiekb6dH2rPBWIOyeHL 4vnZG79PBs0UKBMOWq6AnIqORKidDoUejyESHmeWdlb/lOffM4mNVhLh6ehFXBPC W2cEb6Yi59jT9KcGqtv0Ua08KXGz6/Pj3sEL7vyzI+q+oUYmWHtRal33jKXsyxM+ NdpSmKs/kP/8Li4C7gfI4EQoZ5CK4PhywwQEghl/3s+8HqBHZqODd0H2zQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH+KGfeOHCmnJX9x+p1dIV7LpXLUMB8GA1UdIwQY MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It NWNhNWJmNjdlNjlkLzEvZjRvWjk0NGNLYWNsZjNINm5WMGhYc3VsY3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFjJZgAwQA sHQVMA0GCSqGSIb3DQEBCwUAA4IBAQBmwmZQCwgCwTmrVY+mqYEYq7U+6seJMY4n xfGvYaHYDYOu5HCCh1PNEll6iYhvdqpQ/sxC8BIwVTudcuC9LI7NAP6+uvfpLm/n CmMqQQlLbk/0ivz++mqIN4voPjAvKnSE5n0GqBba/h0SQ4a08E9seY96A6rF3U3g hgxZI95bkexSHAzbGst9CEWkJceBXtlwvEAu99cOMwRQL+hVDHSUrBTxP7Fwt3pU ZLAj5cWJjpFEw8jo+ZPUOcV3eDdMK6qfaCls0xoR2GUaIoOMJIuyqoanhjbFR0Hr NE+JBYMZlQXiR75GadAUKe9KzIZCxMQZQCuO4TlPa9AVnyho8kvP -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:44 2026 by rpki-client