This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/pKI4g_UulEtk7cfmzQ18zms5D04.roa File: pKI4g_UulEtk7cfmzQ18zms5D04.roa (raw, json) Hash identifier: poU6hqYVRLelpfednzUEXAJLgClT3KhTfO3GUJbm3vg= Subject key identifier: A4:A2:38:83:F5:2E:94:4B:64:ED:C7:E6:CD:0D:7C:CE:6B:39:0F:4E Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Certificate serial: 019B7C125CE3332D715444B71C8207E67C48 Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/pKI4g_UulEtk7cfmzQ18zms5D04.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198504 IP address blocks: 185.19.80.0/23 maxlen: 23 185.19.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5c:e3:33:2d:71:54:44:b7:1c:82:07:e6:7c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4a23883f52e944b64edc7e6cd0d7cce6b390f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:00:a9:1a:33:0e:ca:77:f1:9f:9a:2f:6d: 21:b5:d3:1e:d4:49:c2:fb:b6:dc:80:d0:7d:6d:70: 8a:23:a9:11:86:7e:59:f8:24:91:e5:1b:97:35:51: 6d:c7:05:21:42:f2:13:dd:aa:89:49:b8:2d:72:60: d8:48:e6:74:ec:74:ee:32:b9:75:48:f2:2e:98:26: 12:f7:69:0e:0a:f3:11:2f:67:3e:46:a3:a3:b9:a8: b5:81:7f:c0:46:f6:1e:d2:61:7e:6a:cc:d6:b4:d3: 42:87:02:d3:4a:ed:e3:ba:68:fc:f2:8d:0b:bb:60: c5:c8:4e:96:5e:a3:20:be:f7:eb:70:5a:d0:1c:1c: b1:21:8a:51:e4:f0:b2:3e:8d:48:81:23:bc:ba:2b: 21:7e:79:9c:40:a0:2c:18:ea:22:01:9b:24:61:85: 69:fa:42:65:8b:97:f0:2f:8d:03:8f:00:c0:73:47: 70:97:17:55:33:d2:56:3d:ab:13:f5:bc:32:48:b0: de:fa:af:83:f9:3f:9a:38:16:ee:ad:2c:71:49:43: 26:f7:1d:b5:e1:a0:5a:0d:d7:ee:63:16:de:4f:2c: e9:ea:d3:25:2f:b1:f8:1f:fd:c7:2d:17:b1:7e:33: 36:2b:55:2f:9e:d1:00:80:eb:a8:80:b3:e3:0f:73: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A2:38:83:F5:2E:94:4B:64:ED:C7:E6:CD:0D:7C:CE:6B:39:0F:4E X509v3 Authority Key Identifier: keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/pKI4g_UulEtk7cfmzQ18zms5D04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.80.0/23 185.19.83.0/24 Signature Algorithm: sha256WithRSAEncryption 57:fa:48:ec:5e:a1:9a:89:6e:16:8e:bd:88:a6:26:aa:10:80: 90:bd:9c:b7:e2:9f:48:69:04:74:35:ec:cc:14:0a:16:db:40: 35:2b:76:72:48:16:78:fb:83:8e:5c:18:c6:88:50:67:f5:c9: 1d:75:e3:6c:60:be:00:2d:a0:7a:d4:f2:af:7f:69:54:47:e1: df:d2:0f:2e:41:fb:23:9b:e5:cd:a6:f3:b1:01:f3:21:e9:56: 56:0a:e8:e8:16:52:97:55:07:f7:84:b1:b7:96:1c:90:e7:4f: 9b:f0:83:af:08:e7:0c:72:79:7b:16:30:74:48:47:d2:31:8e: b7:6a:15:00:55:59:ae:5b:be:7d:7a:52:9f:89:94:09:a0:3a: 6d:d6:95:23:17:9c:d2:28:10:7a:e6:7b:e0:33:0b:4c:65:f1: fd:85:e2:3e:4b:30:09:2f:ad:8c:70:f9:b7:9e:6c:4d:d1:c1: 95:71:d5:9d:07:8e:a0:a1:27:af:61:62:ba:7e:c4:47:b2:ff: e0:6e:bb:f0:b5:e7:f2:a0:9e:11:40:d1:12:8c:6e:d3:c6:ff: 53:7d:78:8e:22:24:77:45:cb:21:f7:6f:68:fa:2e:3d:7e:b2: 74:79:3d:82:45:76:f5:24:15:82:a2:c1:09:a4:95:e3:5c:08: ff:b9:0f:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ElzjMy1xVES3HIIH5nxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4 ZjUxNTIwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGEyMzg4M2Y1MmU5NDRiNjRlZGM3ZTZjZDBkN2NjZTZiMzkwZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcwAqRozDsp38Z+aL20htdMe1EnC +7bcgNB9bXCKI6kRhn5Z+CSR5RuXNVFtxwUhQvIT3aqJSbgtcmDYSOZ07HTuMrl1 SPIumCYS92kOCvMRL2c+RqOjuai1gX/ARvYe0mF+aszWtNNChwLTSu3jumj88o0L u2DFyE6WXqMgvvfrcFrQHByxIYpR5PCyPo1IgSO8uishfnmcQKAsGOoiAZskYYVp +kJli5fwL40DjwDAc0dwlxdVM9JWPasT9bwySLDe+q+D+T+aOBburSxxSUMm9x21 4aBaDdfuYxbeTyzp6tMlL7H4H/3HLRexfjM2K1UvntEAgOuogLPjD3NcAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKSiOIP1LpRLZO3H5s0NfM5rOQ9OMB8GA1UdIwQY MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt NTk1OTEzODllMjQyLzEvcEtJNGdfVXVsRXRrN2NmbXpRMTh6bXM1RDA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuRNQAwQA uRNTMA0GCSqGSIb3DQEBCwUAA4IBAQBX+kjsXqGaiW4Wjr2IpiaqEICQvZy34p9I aQR0NezMFAoW20A1K3ZySBZ4+4OOXBjGiFBn9ckddeNsYL4ALaB61PKvf2lUR+Hf 0g8uQfsjm+XNpvOxAfMh6VZWCujoFlKXVQf3hLG3lhyQ50+b8IOvCOcMcnl7FjB0 SEfSMY63ahUAVVmuW759elKfiZQJoDpt1pUjF5zSKBB65nvgMwtMZfH9heI+SzAJ L62McPm3nmxN0cGVcdWdB46goSevYWK6fsRHsv/gbrvwtefyoJ4RQNESjG7Txv9T fXiOIiR3Rcsh929o+i49frJ0eT2CRXb1JBWCosEJpJXjXAj/uQ+k -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:38 2026 by rpki-client