This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/R_tuRGNyH8maQImtyJX8ka61Rts.roa File: R_tuRGNyH8maQImtyJX8ka61Rts.roa (raw, json) Hash identifier: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU= Subject key identifier: 47:FB:6E:44:63:72:1F:C9:9A:40:89:AD:C8:95:FC:91:AE:B5:46:DB Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019B7C80BB4CB46D0467175C7E582DD5E979 Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/R_tuRGNyH8maQImtyJX8ka61Rts.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 194.0.169.0/24 maxlen: 24 195.110.28.0/24 maxlen: 24 195.110.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bb:4c:b4:6d:04:67:17:5c:7e:58:2d:d5:e9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47fb6e4463721fc99a4089adc895fc91aeb546db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:5a:bb:2d:63:27:55:f9:4a:f0:0e:b4:e4: af:f0:b9:bc:24:60:b3:02:22:5a:78:a3:42:45:2f: f5:0f:bd:15:f2:0e:4b:cf:a3:33:a7:fb:94:1e:75: 99:fa:71:ce:eb:50:cf:56:51:93:a1:44:26:63:e3: 8a:ae:30:9f:77:84:71:10:0b:39:91:60:a1:ff:b3: c9:79:08:7c:50:ea:83:3e:61:b3:cf:9e:82:87:23: ee:03:5a:20:a7:67:55:b3:cc:05:34:9b:99:27:bb: 84:7e:ac:05:93:cf:6a:c3:10:62:a1:11:ae:36:a3: fb:55:f0:c5:4c:52:1c:fe:69:4a:70:0f:9e:32:85: 61:23:8c:03:02:21:e6:05:c3:f3:e7:f7:49:c5:ad: 45:44:d5:a3:d9:39:75:64:8e:56:57:d4:ac:22:9f: f8:da:50:f7:41:c8:00:88:29:7a:47:57:bb:26:3d: 3d:b6:fe:31:1f:db:aa:28:3e:4f:ea:e0:f2:eb:e1: c4:43:e2:b8:e4:a3:25:99:84:e6:11:eb:8c:6c:4a: 6e:c8:90:07:49:52:e4:a6:6d:a3:1c:e8:af:f1:ee: 98:89:83:0f:77:b9:7a:3a:3c:22:ec:29:6d:2f:24: 87:1f:f3:68:68:46:2c:67:86:26:7a:64:43:40:a5: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FB:6E:44:63:72:1F:C9:9A:40:89:AD:C8:95:FC:91:AE:B5:46:DB X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/R_tuRGNyH8maQImtyJX8ka61Rts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.169.0/24 195.110.28.0/23 Signature Algorithm: sha256WithRSAEncryption 82:bc:f0:34:51:63:b7:8b:72:b3:39:32:de:ac:72:e3:0c:81: 48:ab:53:97:ae:17:bd:10:de:db:c5:ba:a2:97:28:20:62:83: 94:58:03:67:d0:c5:0e:00:a8:01:0c:10:f6:7f:c2:7b:9c:9d: 54:55:66:c1:7d:a8:4a:1d:d9:c6:86:ec:fe:ff:69:26:58:2e: 99:f9:13:13:36:18:af:89:21:83:89:2e:78:6f:7b:38:92:61: e4:44:94:f8:18:e0:85:47:1f:00:19:13:3c:2a:6b:a6:3b:87: de:ef:0a:c7:95:51:26:9e:ab:8d:cb:ef:e9:0b:c9:aa:1a:df: 36:24:39:8d:24:f7:5a:65:70:42:c8:8c:d5:40:35:d7:72:61: 60:9b:b4:0f:09:ed:50:de:64:47:aa:83:1b:da:87:3c:9a:71: 23:a3:85:3f:fd:ba:d9:e6:57:4f:b3:96:cd:2b:df:ca:97:92: 61:51:ce:be:54:c2:9f:f5:bc:e4:2c:be:f9:5e:6b:fa:b5:f6: 4f:36:a9:55:9b:df:9d:82:4b:05:99:a4:d6:56:0d:80:ad:13: 1f:92:36:c3:b5:93:3d:3f:6a:d5:dc:82:d4:c1:da:b0:06:2a: 56:e6:8e:56:08:90:8e:3c:25:ff:84:42:1d:88:27:82:3d:1a: b1:4d:16:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gLtMtG0EZxdcflgt1el5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2ZiNmU0NDYzNzIxZmM5OWE0MDg5YWRjODk1ZmM5MWFlYjU0NmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaBauy1jJ1X5SvAOtOSv8Lm8JGCz AiJaeKNCRS/1D70V8g5Lz6Mzp/uUHnWZ+nHO61DPVlGToUQmY+OKrjCfd4RxEAs5 kWCh/7PJeQh8UOqDPmGzz56ChyPuA1ogp2dVs8wFNJuZJ7uEfqwFk89qwxBioRGu NqP7VfDFTFIc/mlKcA+eMoVhI4wDAiHmBcPz5/dJxa1FRNWj2Tl1ZI5WV9SsIp/4 2lD3QcgAiCl6R1e7Jj09tv4xH9uqKD5P6uDy6+HEQ+K45KMlmYTmEeuMbEpuyJAH SVLkpm2jHOiv8e6YiYMPd7l6Ojwi7CltLySHH/NoaEYsZ4YmemRDQKWHaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEf7bkRjch/JmkCJrciV/JGutUbbMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvUl90dVJHTnlIOG1hUUltdHlKWDhrYTYxUnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgCpAwQB w24cMA0GCSqGSIb3DQEBCwUAA4IBAQCCvPA0UWO3i3KzOTLerHLjDIFIq1OXrhe9 EN7bxbqilyggYoOUWANn0MUOAKgBDBD2f8J7nJ1UVWbBfahKHdnGhuz+/2kmWC6Z +RMTNhiviSGDiS54b3s4kmHkRJT4GOCFRx8AGRM8KmumO4fe7wrHlVEmnquNy+/p C8mqGt82JDmNJPdaZXBCyIzVQDXXcmFgm7QPCe1Q3mRHqoMb2oc8mnEjo4U//brZ 5ldPs5bNK9/Kl5JhUc6+VMKf9bzkLL75Xmv6tfZPNqlVm9+dgksFmaTWVg2ArRMf kjbDtZM9P2rV3ILUwdqwBipW5o5WCJCOPCX/hEIdiCeCPRqxTRZQ -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:07 2026 by rpki-client