This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/znDve5CjV618M32KGB6DWBGicnw.roa File: znDve5CjV618M32KGB6DWBGicnw.roa (raw, json) Hash identifier: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw= Subject key identifier: CE:70:EF:7B:90:A3:57:AD:7C:33:7D:8A:18:1E:83:58:11:A2:72:7C Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b Certificate serial: 019B7758896F1C2834B167B98B8DF32BA2DB Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/znDve5CjV618M32KGB6DWBGicnw.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 194.13.8.0/22 maxlen: 24 194.13.12.0/23 maxlen: 24 194.13.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:89:6f:1c:28:34:b1:67:b9:8b:8d:f3:2b:a2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3802c7987004ae78190e691e370de509ff59127b Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce70ef7b90a357ad7c337d8a181e835811a2727c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:4a:10:a0:a5:3f:2e:c2:23:4b:3b:16:84: cf:fe:e4:a2:cd:c1:72:3d:5d:a5:36:eb:e2:1c:2a: 59:83:12:cf:a6:a2:85:99:b8:63:66:c6:75:b1:f7: d5:2c:19:d5:28:3e:50:0d:70:6f:11:b8:cf:9c:98: 87:7e:dc:12:3d:77:a2:29:7d:2f:43:9b:61:2c:dd: 89:10:a7:1d:8d:29:52:fa:90:17:72:1e:cb:58:1c: 86:cf:98:06:93:42:4d:b0:87:10:06:53:c3:6b:c9: d0:f9:d4:39:f6:d2:83:48:90:52:fc:42:55:44:59: a9:87:05:a2:7f:8f:b5:5e:86:1c:e8:ea:8c:3c:62: 80:a9:7a:bb:de:9b:f4:4d:5d:3d:45:c7:ec:23:5d: df:83:df:7e:2b:0c:95:a3:c9:20:f5:e5:65:89:e3: aa:4c:72:3a:49:0e:da:58:94:7c:98:d4:f3:a5:75: 95:9c:0b:1c:cf:2f:5e:a7:73:94:f9:68:97:1a:5f: 28:5c:ac:6e:6d:62:57:e3:1b:08:6d:61:50:ab:0b: f8:4c:97:7e:98:5f:af:da:37:4b:16:4a:31:04:ac: fd:4e:09:cb:0a:13:c7:32:10:41:03:4a:f1:65:1f: 62:23:6a:14:f1:fe:55:ef:0d:f5:22:e7:e7:6b:3f: a2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:EF:7B:90:A3:57:AD:7C:33:7D:8A:18:1E:83:58:11:A2:72:7C X509v3 Authority Key Identifier: keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/znDve5CjV618M32KGB6DWBGicnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.13.8.0-194.13.14.255 Signature Algorithm: sha256WithRSAEncryption 78:c0:1e:90:d6:77:0b:70:95:9c:2f:da:6c:78:3f:ae:88:ab: eb:12:ab:de:66:40:2f:0f:8b:b7:88:84:59:13:b3:52:a6:f8: 7c:87:50:ca:86:bb:0f:d3:e5:a3:5f:f6:e3:39:c1:e8:77:41: f6:30:07:38:82:2a:cb:a4:9c:50:3d:4f:c4:51:20:d0:9f:ae: a1:04:35:d1:72:66:72:54:ae:67:53:20:83:a3:aa:89:af:c8: f0:a1:d4:03:8d:40:c8:fc:bc:9e:e3:23:2c:11:be:d8:47:51: 22:64:ef:a1:f9:82:37:92:84:2f:45:20:94:d6:75:fc:8e:82: 7b:b2:6d:ab:16:d3:c2:1c:d1:fa:91:8b:15:c3:4b:4d:dd:bc: 07:15:48:cf:d4:5f:2d:bd:af:df:88:04:de:49:29:1d:d5:69: 15:ff:e8:53:15:ef:1d:d0:8d:f1:56:60:4b:16:aa:fb:48:98: d2:e8:04:b6:74:cc:eb:57:71:52:22:8c:83:dd:92:e8:99:c1: d4:2a:4d:bf:72:1f:d5:e8:d9:21:35:84:51:75:da:f6:6d:8a: d1:77:68:7a:c7:64:07:2f:3f:8d:20:55:65:e6:81:e6:4f:0a: fb:9d:3b:e5:9b:9e:83:28:31:7e:78:81:45:2d:5c:4c:7a:07: 15:b8:6f:dd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WIlvHCg0sWe5i43zK6LbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1 OTEyN2IwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTcwZWY3YjkwYTM1N2FkN2MzMzdkOGExODFlODM1ODExYTI3MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl9KEKClPy7CI0s7FoTP/uSizcFy PV2lNuviHCpZgxLPpqKFmbhjZsZ1sffVLBnVKD5QDXBvEbjPnJiHftwSPXeiKX0v Q5thLN2JEKcdjSlS+pAXch7LWByGz5gGk0JNsIcQBlPDa8nQ+dQ59tKDSJBS/EJV RFmphwWif4+1XoYc6OqMPGKAqXq73pv0TV09RcfsI13fg99+KwyVo8kg9eVlieOq THI6SQ7aWJR8mNTzpXWVnAsczy9ep3OU+WiXGl8oXKxubWJX4xsIbWFQqwv4TJd+ mF+v2jdLFkoxBKz9TgnLChPHMhBBA0rxZR9iI2oU8f5V7w31Iufnaz+iLQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM5w73uQo1etfDN9ihgeg1gRonJ8MB8GA1UdIwQY MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt YmYyNWNlMGY4MzkzLzEvem5EdmU1Q2pWNjE4TTMyS0dCNkRXQkdpY253LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPCDQgD BADCDQ4wDQYJKoZIhvcNAQELBQADggEBAHjAHpDWdwtwlZwv2mx4P66Iq+sSq95m QC8Pi7eIhFkTs1Km+HyHUMqGuw/T5aNf9uM5weh3QfYwBziCKsuknFA9T8RRINCf rqEENdFyZnJUrmdTIIOjqomvyPCh1AONQMj8vJ7jIywRvthHUSJk76H5gjeShC9F IJTWdfyOgnuybasW08Ic0fqRixXDS03dvAcVSM/UXy29r9+IBN5JKR3VaRX/6FMV 7x3QjfFWYEsWqvtImNLoBLZ0zOtXcVIijIPdkuiZwdQqTb9yH9Xo2SE1hFF12vZt itF3aHrHZAcvP40gVWXmgeZPCvudO+WbnoMoMX54gUUtXEx6BxW4b90= -----END CERTIFICATE-----Generated at Wed Feb 4 09:28:18 2026 by rpki-client