This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/Exw1Qk2SWzacP5BYuop4G0zGR9w.roa File: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (raw, json) Hash identifier: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c= Subject key identifier: 13:1C:35:42:4D:92:5B:36:9C:3F:90:58:BA:8A:78:1B:4C:C6:47:DC Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d Certificate serial: 019B7A5A28C0D3B92E74F672BB29FBE1FAEB Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/Exw1Qk2SWzacP5BYuop4G0zGR9w.roa Signing time: Thu 01 Jan 2026 16:18:07 +0000 ROA not before: Thu 01 Jan 2026 16:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21263 IP address blocks: 194.0.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:28:c0:d3:b9:2e:74:f6:72:bb:29:fb:e1:fa:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d Validity Not Before: Jan 1 16:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=131c35424d925b369c3f9058ba8a781b4cc647dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:f7:d4:8d:35:6c:5b:45:29:b2:75:92:74: 09:2b:f0:8d:02:74:54:f0:95:0e:78:43:ad:8e:42: 3c:ee:38:51:4f:f5:13:71:f7:bc:13:df:7f:db:de: 62:8d:64:09:73:46:68:4e:15:24:de:1a:8b:86:5b: 32:f1:a7:a9:bf:45:51:ac:ef:bb:a2:fb:26:65:ad: 69:f9:29:e0:fa:2e:85:f2:e4:61:c1:3f:cd:05:1e: 3c:27:4d:c6:66:3c:b2:bb:b9:03:08:d2:32:ce:3b: 64:01:8c:87:54:36:7c:3a:eb:d8:92:1d:4a:70:85: 20:6f:62:ff:0d:26:69:e3:21:a0:38:38:24:fd:e8: 91:4f:14:e8:12:4c:21:92:3d:78:ae:8b:66:db:d9: 14:6d:23:17:3d:72:eb:5f:a9:d5:94:35:4e:89:1d: 16:10:99:05:58:2b:43:3f:22:d7:c6:e6:dc:63:ab: 1d:7e:63:03:37:71:8f:30:19:7a:ea:80:d4:f0:2f: 89:37:59:f8:41:d9:da:28:c6:45:a8:55:e0:d4:86: a8:37:0b:3d:5b:dc:17:1d:46:64:f2:5d:c9:b0:e9: 17:7e:29:f6:3d:83:2d:c5:a0:5a:d2:61:23:d4:1b: 69:9f:78:1f:52:ec:42:16:73:a2:a4:36:f9:a2:dc: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:35:42:4D:92:5B:36:9C:3F:90:58:BA:8A:78:1B:4C:C6:47:DC X509v3 Authority Key Identifier: keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/Exw1Qk2SWzacP5BYuop4G0zGR9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.220.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a4:83:c4:17:9a:ff:2b:29:35:f8:7b:9c:08:04:54:ec:8f: 6c:ff:74:9a:72:52:30:45:8a:b2:a3:a4:8e:73:7d:dc:23:50: 22:6d:7a:5d:0e:98:ef:25:b1:50:b1:1e:7f:83:f2:11:cd:e9: 18:f7:6c:3f:e7:09:89:b0:6e:84:06:27:c8:86:26:8c:18:71: 28:0f:94:fe:12:46:92:d9:c8:70:40:9d:b0:36:5d:c5:91:81: fe:c3:d4:54:19:30:1f:88:a6:45:54:96:b3:9b:d8:f1:75:97: ef:70:3a:28:d7:9d:3d:5a:a8:1b:ff:45:e3:16:e5:c3:a2:10: cc:15:7a:9a:07:61:da:ef:8e:e2:5a:f0:0b:22:e6:45:5f:ad: 8c:2e:da:7c:e1:94:b5:00:66:1f:2d:7b:40:d8:3a:11:d2:74: 61:cb:d8:b2:ae:66:45:57:0f:23:9b:1b:24:fa:ba:67:f6:75: 11:22:21:96:fd:0a:f3:3c:96:53:2f:d9:ab:0c:cf:c4:dd:8d: 1c:e9:08:37:a6:cc:ff:34:28:0e:b9:cd:0f:29:c1:59:97:7d: 73:87:5b:6a:f6:16:66:d5:05:68:0a:6c:53:d7:f6:fa:12:50: 7e:96:47:36:69:e5:3e:b0:27:eb:64:e0:09:cc:99:1e:8a:b1: 1d:63:bc:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WijA07kudPZyuyn74frrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5 Y2VlMWQwHhcNMjYwMTAxMTYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzFjMzU0MjRkOTI1YjM2OWMzZjkwNThiYThhNzgxYjRjYzY0N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39r31I01bFtFKbJ1knQJK/CNAnRU 8JUOeEOtjkI87jhRT/UTcfe8E99/295ijWQJc0ZoThUk3hqLhlsy8aepv0VRrO+7 ovsmZa1p+Sng+i6F8uRhwT/NBR48J03GZjyyu7kDCNIyzjtkAYyHVDZ8OuvYkh1K cIUgb2L/DSZp4yGgODgk/eiRTxToEkwhkj14rotm29kUbSMXPXLrX6nVlDVOiR0W EJkFWCtDPyLXxubcY6sdfmMDN3GPMBl66oDU8C+JN1n4QdnaKMZFqFXg1IaoNws9 W9wXHUZk8l3JsOkXfin2PYMtxaBa0mEj1Btpn3gfUuxCFnOipDb5otx3vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMcNUJNkls2nD+QWLqKeBtMxkfcMB8GA1UdIwQY MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt NjVkNmNhM2Y0OWQ4LzEvRXh3MVFrMlNXemFjUDVCWXVvcDRHMHpHUjl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4 LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDcMA0G CSqGSIb3DQEBCwUAA4IBAQCGpIPEF5r/Kyk1+HucCARU7I9s/3SaclIwRYqyo6SO c33cI1AibXpdDpjvJbFQsR5/g/IRzekY92w/5wmJsG6EBifIhiaMGHEoD5T+EkaS 2chwQJ2wNl3FkYH+w9RUGTAfiKZFVJazm9jxdZfvcDoo1509Wqgb/0XjFuXDohDM FXqaB2Ha747iWvALIuZFX62MLtp84ZS1AGYfLXtA2DoR0nRhy9iyrmZFVw8jmxsk +rpn9nURIiGW/QrzPJZTL9mrDM/E3Y0c6Qg3psz/NCgOuc0PKcFZl31zh1tq9hZm 1QVoCmxT1/b6ElB+lkc2aeU+sCfrZOAJzJkeirEdY7xB -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:48 2026 by rpki-client