This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/p239cBbOLA6sibvWSilUs4XV_LU.roa File: p239cBbOLA6sibvWSilUs4XV_LU.roa (raw, json) Hash identifier: 2wD/G4UoqtbRToicOl2l4uFB7WjdllylTPbWqZtpZ5c= Subject key identifier: A7:6D:FD:70:16:CE:2C:0E:AC:89:BB:D6:4A:29:54:B3:85:D5:FC:B5 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED213CF17E5E4EA69AB56FEED6D123 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/p239cBbOLA6sibvWSilUs4XV_LU.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201448 IP address blocks: 194.181.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:21:3c:f1:7e:5e:4e:a6:9a:b5:6f:ee:d6:d1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a76dfd7016ce2c0eac89bbd64a2954b385d5fcb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:9c:1d:9d:61:b7:11:78:c2:b8:47:14:aa: 3d:0f:a5:23:d5:cf:f2:c9:59:07:54:a4:4d:df:bf: b9:11:77:ab:94:d5:67:95:b0:da:d4:0e:84:c5:c4: 42:71:16:3c:ce:44:d4:79:2d:b8:a1:98:ab:5e:95: 8a:b5:da:9c:08:e1:6d:8c:1c:82:d4:0b:45:a6:be: 15:6a:8c:fb:36:61:d1:87:f1:21:f8:55:9f:7d:c8: 7a:1c:ff:c5:87:60:e6:3d:23:c0:2a:b9:ea:75:d8: 53:28:82:8e:c2:b5:31:d8:d8:ce:b8:a4:e9:78:4d: de:8e:58:9a:e7:d9:e5:30:6c:f8:13:ff:bc:c2:cf: 61:2c:6d:66:35:ca:ce:87:f6:3c:72:0f:9d:87:9b: aa:cc:9f:99:c9:78:6a:52:15:66:2a:d6:47:3d:63: 98:53:fe:65:54:2a:c8:c8:71:60:b5:dc:4a:96:f9: e5:d0:a1:6a:d7:48:91:f6:76:b8:c0:74:0e:06:46: e7:a9:c7:8c:7d:33:47:d9:38:9e:7d:dd:87:ae:46: b3:b3:9a:e2:5c:51:b4:9a:d1:81:ed:8b:c8:74:6c: 6d:88:66:f8:44:c2:f0:cc:96:c4:ed:ad:ef:ce:84: ee:c1:9d:e5:79:4d:3c:44:ec:24:f5:5a:df:25:2a: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6D:FD:70:16:CE:2C:0E:AC:89:BB:D6:4A:29:54:B3:85:D5:FC:B5 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/p239cBbOLA6sibvWSilUs4XV_LU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.181.38.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c7:cd:47:80:6a:7d:fe:b6:1f:18:fb:32:93:24:87:92:82: f4:81:6f:04:4e:a8:89:d0:e8:54:1a:e7:14:5f:b1:38:47:20: 0a:52:ba:81:42:43:d4:92:d5:10:a0:4a:b4:be:02:70:c5:e0: c4:93:36:29:27:05:41:19:fb:f1:3e:dc:24:f7:cb:67:50:40: af:f5:79:fb:64:66:16:57:a9:ff:ae:96:2d:3f:85:77:d3:5c: 13:a7:9e:9b:36:96:87:94:52:1e:e6:68:6b:db:ed:a8:48:5c: 1e:ca:19:16:9e:12:7a:a0:38:4c:18:41:29:7b:3b:83:a1:28: 5a:20:21:7a:e8:92:e8:17:0b:61:23:99:ac:24:a4:4f:46:2a: 61:1b:bd:eb:1c:1c:ff:9b:47:88:8c:fe:7a:15:ee:c6:c4:5d: 86:68:b3:1a:50:30:95:df:ff:bd:1b:67:c4:9d:e3:c2:2a:eb: ea:3b:ce:35:f6:92:36:35:c5:4e:4d:a0:ef:38:af:5f:f5:2f: fd:71:a3:c0:9c:c8:14:e8:10:5d:d0:84:d4:08:55:7c:f9:15: 66:db:f8:a6:98:a6:a3:8e:38:65:0a:2d:f5:5a:46:8c:db:19: ed:de:52:0a:ac:49:4c:f4:e8:7e:a3:e7:bb:27:c9:1b:57:4d: 97:fe:91:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SE88X5eTqaatW/u1tEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzZkZmQ3MDE2Y2UyYzBlYWM4OWJiZDY0YTI5NTRiMzg1ZDVmY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxamcHZ1htxF4wrhHFKo9D6Uj1c/y yVkHVKRN37+5EXerlNVnlbDa1A6ExcRCcRY8zkTUeS24oZirXpWKtdqcCOFtjByC 1AtFpr4Vaoz7NmHRh/Eh+FWffch6HP/Fh2DmPSPAKrnqddhTKIKOwrUx2NjOuKTp eE3ejlia59nlMGz4E/+8ws9hLG1mNcrOh/Y8cg+dh5uqzJ+ZyXhqUhVmKtZHPWOY U/5lVCrIyHFgtdxKlvnl0KFq10iR9na4wHQOBkbnqceMfTNH2Tiefd2Hrkazs5ri XFG0mtGB7YvIdGxtiGb4RMLwzJbE7a3vzoTuwZ3leU08ROwk9VrfJSq9OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdt/XAWziwOrIm71kopVLOF1fy1MB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvcDIzOWNCYk9MQTZzaWJ2V1NpbFVzNFhWX0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrUmMA0G CSqGSIb3DQEBCwUAA4IBAQCLx81HgGp9/rYfGPsykySHkoL0gW8ETqiJ0OhUGucU X7E4RyAKUrqBQkPUktUQoEq0vgJwxeDEkzYpJwVBGfvxPtwk98tnUECv9Xn7ZGYW V6n/rpYtP4V301wTp56bNpaHlFIe5mhr2+2oSFweyhkWnhJ6oDhMGEEpezuDoSha ICF66JLoFwthI5msJKRPRiphG73rHBz/m0eIjP56Fe7GxF2GaLMaUDCV3/+9G2fE nePCKuvqO8419pI2NcVOTaDvOK9f9S/9caPAnMgU6BBd0ITUCFV8+RVm2/immKaj jjhlCi31WkaM2xnt3lIKrElM9Oh+o+e7J8kbV02X/pHv -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:46 2026 by rpki-client