This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/G85Xi6LQh9YeTjxANf7Y_P92uAU.roa File: G85Xi6LQh9YeTjxANf7Y_P92uAU.roa (raw, json) Hash identifier: nfrcxJEREXgjydTZq0oYL3+pGSmL4O7eo8LJD41jFaA= Subject key identifier: 1B:CE:57:8B:A2:D0:87:D6:1E:4E:3C:40:35:FE:D8:FC:FF:76:B8:05 Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Certificate serial: 019B7BA52BCC915844F89951B184959B2F52 Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/G85Xi6LQh9YeTjxANf7Y_P92uAU.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42 IP address blocks: 194.0.27.0/24 maxlen: 24 2001:678:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2b:cc:91:58:44:f8:99:51:b1:84:95:9b:2f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bce578ba2d087d61e4e3c4035fed8fcff76b805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:21:20:2a:c7:82:0f:90:b2:36:0e:e6:59: 39:f3:9b:8f:56:c9:17:67:0c:17:38:84:25:6c:97: 67:16:2e:52:04:d3:ab:92:5c:e8:83:30:c5:9b:65: 66:66:d5:6e:27:95:56:68:f0:39:fc:fe:2e:e7:37: e7:cc:a9:34:46:df:17:90:d6:c4:f6:4f:4c:3e:fa: c6:78:f3:12:5e:49:90:3b:30:e4:4f:6a:0b:48:c2: 02:32:04:37:27:ea:b9:96:9e:10:30:72:e1:33:6f: ac:88:53:96:fb:90:93:d6:cd:b3:e2:bf:73:be:16: 96:79:38:fe:93:c7:74:48:2b:d0:03:3c:ec:09:3a: b0:71:50:c0:38:be:af:b0:c9:7a:6a:a4:39:36:e6: 00:e7:b3:39:ec:27:b5:7f:cd:47:09:eb:31:88:22: 4c:5f:72:d5:6c:df:6a:82:cd:a0:6c:1b:ae:99:ee: 06:cb:f1:78:5e:d4:03:e6:4e:0c:7c:90:ee:21:79: 2f:77:bd:8f:41:65:01:82:7a:2f:6b:30:d9:32:85: 7d:57:bd:ca:8d:37:22:3a:38:06:ed:cc:22:f8:ca: 21:be:36:24:40:12:bb:cd:32:7c:1d:2a:8c:bd:21: a9:9e:2b:ab:77:d5:26:8a:b6:54:36:cc:57:39:12: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:57:8B:A2:D0:87:D6:1E:4E:3C:40:35:FE:D8:FC:FF:76:B8:05 X509v3 Authority Key Identifier: keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/G85Xi6LQh9YeTjxANf7Y_P92uAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.27.0/24 IPv6: 2001:678:28::/48 Signature Algorithm: sha256WithRSAEncryption 7d:88:06:43:bc:39:b4:f2:41:73:39:1d:17:6a:ae:b8:d6:76: fb:af:e0:b4:d5:89:91:55:0a:23:e6:5c:74:2a:d8:e7:d0:df: 36:52:4d:01:7d:fe:7f:c4:9a:69:2b:b4:45:7f:78:f9:a4:c0: 5e:c6:c8:19:ee:2b:82:f1:4b:e0:95:81:85:00:5d:8a:ec:29: e8:e0:3e:c1:5d:c2:28:18:53:50:dd:75:68:d7:88:89:c5:48: a1:48:ba:cb:47:79:27:f0:19:c9:1f:e8:cc:87:93:72:58:49: 63:cc:a5:53:dd:01:4d:19:29:cc:48:49:4f:4b:9f:a8:e1:91: 5d:ca:31:1a:5b:6d:cd:17:a9:18:cd:7a:25:ab:f0:1e:80:96: a9:47:48:63:64:09:14:d5:41:f5:1c:45:39:30:4b:ad:bc:26: 5f:a5:d6:ea:1b:3a:fc:cb:b8:ae:80:93:31:b2:27:d5:d5:24: ee:18:02:05:22:79:1b:6e:4a:df:4c:2f:21:52:57:1c:46:4f: cc:e2:02:29:91:fa:4b:10:27:20:6f:77:47:71:89:8e:e9:3a: 82:f4:9b:68:91:15:1b:27:0b:c3:c4:47:88:e4:5e:e7:a5:43: 69:a1:47:b1:61:d9:da:cb:43:b1:5c:d2:d6:7b:d8:68:01:76: 68:69:3b:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pSvMkVhE+JlRsYSVmy9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw NWZmNmIwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmNlNTc4YmEyZDA4N2Q2MWU0ZTNjNDAzNWZlZDhmY2ZmNzZiODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLQhICrHgg+QsjYO5lk585uPVskX ZwwXOIQlbJdnFi5SBNOrklzogzDFm2VmZtVuJ5VWaPA5/P4u5zfnzKk0Rt8XkNbE 9k9MPvrGePMSXkmQOzDkT2oLSMICMgQ3J+q5lp4QMHLhM2+siFOW+5CT1s2z4r9z vhaWeTj+k8d0SCvQAzzsCTqwcVDAOL6vsMl6aqQ5NuYA57M57Ce1f81HCesxiCJM X3LVbN9qgs2gbBuume4Gy/F4XtQD5k4MfJDuIXkvd72PQWUBgnovazDZMoV9V73K jTciOjgG7cwi+MohvjYkQBK7zTJ8HSqMvSGpniurd9UmirZUNsxXORJI9wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBvOV4ui0IfWHk48QDX+2Pz/drgFMB8GA1UdIwQY MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt MDRkMTI0N2U1ZDBhLzEvRzg1WGk2TFFoOVllVGp4QU5mN1lfUDkydUFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAbMA8E AgACMAkDBwAgAQZ4ACgwDQYJKoZIhvcNAQELBQADggEBAH2IBkO8ObTyQXM5HRdq rrjWdvuv4LTViZFVCiPmXHQq2OfQ3zZSTQF9/n/EmmkrtEV/ePmkwF7GyBnuK4Lx S+CVgYUAXYrsKejgPsFdwigYU1DddWjXiInFSKFIustHeSfwGckf6MyHk3JYSWPM pVPdAU0ZKcxISU9Ln6jhkV3KMRpbbc0XqRjNeiWr8B6AlqlHSGNkCRTVQfUcRTkw S628Jl+l1uobOvzLuK6AkzGyJ9XVJO4YAgUieRtuSt9MLyFSVxxGT8ziAimR+ksQ JyBvd0dxiY7pOoL0m2iRFRsnC8PER4jkXuelQ2mhR7Fh2drLQ7Fc0tZ72GgBdmhp O8k= -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:34 2026 by rpki-client