This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/dltfgErKAVJhiBmKINA17o0-QCo.roa File: dltfgErKAVJhiBmKINA17o0-QCo.roa (raw, json) Hash identifier: h63lR9XrHkLU6v+ibOR56TO6e1KLvDhOUG9IZ5RNy9k= Subject key identifier: 76:5B:5F:80:4A:CA:01:52:61:88:19:8A:20:D0:35:EE:8D:3E:40:2A Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Certificate serial: 019B7CEDCD29202A73FADC6094C70B7D9B2F Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/dltfgErKAVJhiBmKINA17o0-QCo.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 194.33.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cd:29:20:2a:73:fa:dc:60:94:c7:0b:7d:9b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=765b5f804aca01526188198a20d035ee8d3e402a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:dc:9c:64:a9:e9:d7:fc:9c:82:50:74:3e: ad:ba:c0:35:39:c7:b8:e9:ac:36:2e:d5:a8:13:59: 07:c4:54:44:fb:af:1e:91:10:9e:a2:2c:28:8b:ee: 07:a3:dd:1e:1a:34:89:7f:26:03:67:e1:7c:11:d3: 9a:21:4a:37:28:c5:fa:32:6d:2e:2d:e9:19:3e:16: 81:8f:7c:35:d5:7e:ec:d2:dd:50:1c:ec:dc:45:6a: d8:c3:7d:b2:ec:ea:65:89:3d:25:8f:7d:21:88:29: d4:26:f7:31:7f:7a:6e:aa:c5:38:e7:93:b0:66:83: 58:62:a9:5c:cd:2d:23:be:8a:fb:fa:d0:5f:b3:40: 2e:ed:ec:c4:4e:21:6d:2a:09:ae:dd:96:e9:b3:57: 74:4a:4b:f6:98:ea:46:0c:d3:e5:0e:63:60:0d:fb: 6e:ae:32:7a:94:69:be:40:2e:98:10:e1:f5:49:60: 41:df:84:f6:93:dc:f8:57:98:3a:4a:06:7f:50:68: b4:3b:09:0c:2f:40:92:e1:5d:ff:2e:e7:14:91:32: 86:c9:a6:70:22:9a:98:76:03:82:f7:00:36:8d:3a: 18:db:b7:36:a1:f5:b0:69:49:00:0e:6b:75:10:df: 0e:9f:e2:c4:20:ba:ea:28:3f:7b:3a:3f:b8:76:b5: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5B:5F:80:4A:CA:01:52:61:88:19:8A:20:D0:35:EE:8D:3E:40:2A X509v3 Authority Key Identifier: keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/dltfgErKAVJhiBmKINA17o0-QCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.106.0/24 Signature Algorithm: sha256WithRSAEncryption 43:a5:3e:e2:fc:83:68:9d:03:af:0d:fe:78:b7:38:12:80:13: a4:06:49:b8:bd:1b:96:62:c0:35:a1:f6:80:16:52:92:71:e8: ac:0e:8b:da:ef:fb:03:cf:48:a0:72:e7:e5:f5:ff:a2:23:b9: 69:6a:5b:0a:02:98:e3:94:5a:e5:e3:9c:8c:e1:6e:f6:ed:70: 3c:eb:df:86:50:08:69:88:99:06:38:81:09:a3:bb:ad:a4:e2: b5:ca:38:9a:31:8d:c8:cb:5f:3d:91:bf:4e:0d:fc:6d:98:3b: c5:ce:6c:1d:fb:7d:3d:83:20:94:9b:fc:12:00:fd:46:9d:07: dd:75:e0:75:29:59:fb:9e:b0:1c:17:56:f4:93:a5:75:03:95: 8c:73:d4:8c:e5:64:10:1b:52:24:d8:8a:39:71:df:f2:bb:dc: f0:5b:c9:6f:63:2a:71:49:c9:36:bb:00:5c:88:ee:bc:d3:1e: 00:c2:50:ec:1c:c2:ce:4f:22:74:bf:7e:2b:22:d0:8b:e5:0a: 95:0c:08:d1:56:9a:1e:ad:a8:3c:05:37:42:8c:f0:25:6c:3f: a1:cb:37:c8:ec:3d:78:19:93:d7:5b:96:8d:85:41:5c:82:54: 9d:0f:66:64:8d:88:9e:76:cb:60:bc:67:56:7e:58:6b:60:8d: d8:9d:1f:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c0pICpz+txglMcLfZsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl MGQxM2IwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjViNWY4MDRhY2EwMTUyNjE4ODE5OGEyMGQwMzVlZThkM2U0MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YzcnGSp6df8nIJQdD6tusA1Oce4 6aw2LtWoE1kHxFRE+68ekRCeoiwoi+4Ho90eGjSJfyYDZ+F8EdOaIUo3KMX6Mm0u LekZPhaBj3w11X7s0t1QHOzcRWrYw32y7OpliT0lj30hiCnUJvcxf3puqsU455Ow ZoNYYqlczS0jvor7+tBfs0Au7ezETiFtKgmu3Zbps1d0Skv2mOpGDNPlDmNgDftu rjJ6lGm+QC6YEOH1SWBB34T2k9z4V5g6SgZ/UGi0OwkML0CS4V3/LucUkTKGyaZw IpqYdgOC9wA2jToY27c2ofWwaUkADmt1EN8On+LEILrqKD97Oj+4drXUkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZbX4BKygFSYYgZiiDQNe6NPkAqMB8GA1UdIwQY MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et ZjNjMWE5YTExZDczLzEvZGx0ZmdFcktBVkpoaUJtS0lOQTE3bzAtUUNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFqMA0G CSqGSIb3DQEBCwUAA4IBAQBDpT7i/INonQOvDf54tzgSgBOkBkm4vRuWYsA1ofaA FlKSceisDova7/sDz0igcufl9f+iI7lpalsKApjjlFrl45yM4W727XA869+GUAhp iJkGOIEJo7utpOK1yjiaMY3Iy189kb9ODfxtmDvFzmwd+309gyCUm/wSAP1GnQfd deB1KVn7nrAcF1b0k6V1A5WMc9SM5WQQG1Ik2Io5cd/yu9zwW8lvYypxSck2uwBc iO680x4AwlDsHMLOTyJ0v34rItCL5QqVDAjRVpoerag8BTdCjPAlbD+hyzfI7D14 GZPXW5aNhUFcglSdD2ZkjYiedstgvGdWflhrYI3YnR+R -----END CERTIFICATE-----Generated at Mon Jan 26 08:43:10 2026 by rpki-client