This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0IAm4iPuhSm7Uga-Cjw4A32v7ig.roa File: 0IAm4iPuhSm7Uga-Cjw4A32v7ig.roa (raw, json) Hash identifier: W7PfYw3hrqNcLg8J2pV6VYmMPOzXr6nd1UV1KUBbzq0= Subject key identifier: D0:80:26:E2:23:EE:85:29:BB:52:06:BE:0A:3C:38:03:7D:AF:EE:28 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B9D44A5FDA1231D0643D2C9D5353CB68F Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0IAm4iPuhSm7Uga-Cjw4A32v7ig.roa Signing time: Thu 08 Jan 2026 11:01:20 +0000 ROA not before: Thu 08 Jan 2026 11:01:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 194.231.204.0/24 maxlen: 24 194.231.205.0/24 maxlen: 24 194.231.206.0/24 maxlen: 24 194.231.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:44:a5:fd:a1:23:1d:06:43:d2:c9:d5:35:3c:b6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 8 11:01:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d08026e223ee8529bb5206be0a3c38037dafee28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:a7:45:34:af:63:e0:ea:ec:20:78:b2:d3: f2:80:02:6c:88:b7:cd:d5:6a:26:9d:6c:00:09:9d: b3:09:ce:dd:94:f4:7d:88:91:d8:3d:16:f0:4a:ee: 55:12:9e:e4:76:34:75:b4:f4:94:04:f3:4c:c2:95: cb:05:49:2f:86:bd:a2:29:cc:34:09:1e:75:91:08: b8:55:a3:79:23:55:37:1b:93:56:f4:0b:53:e6:a6: e5:4a:c8:f8:13:97:0c:a8:19:6f:7a:71:10:82:02: d1:7c:00:b0:80:79:b9:11:79:8d:c0:ef:75:a1:d3: 8a:9d:1e:9d:91:d5:57:3a:0d:89:11:8a:89:7b:34: 61:b8:f8:c2:17:ea:a4:18:f4:58:19:c3:cf:41:21: 3e:3a:16:bb:91:ce:f1:11:4a:85:fb:bc:ba:a7:c1: 0c:b1:72:9c:62:28:a5:88:11:25:78:cf:2e:25:b6: d7:5c:59:fb:32:f4:c8:b9:89:12:84:3f:e2:b6:5f: 3c:be:ea:bc:86:4c:62:ac:fe:65:53:22:63:75:0a: 76:6b:4b:59:f9:2c:0c:94:70:ca:44:f6:dd:21:dd: bb:17:63:2e:bc:0c:1c:c8:13:ac:52:53:db:5d:6a: 7e:1f:20:ce:91:8c:2e:47:fe:3b:b4:87:1c:ce:00: 24:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:80:26:E2:23:EE:85:29:BB:52:06:BE:0A:3C:38:03:7D:AF:EE:28 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/0IAm4iPuhSm7Uga-Cjw4A32v7ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.204.0/22 Signature Algorithm: sha256WithRSAEncryption 50:5d:63:ed:13:be:4f:b9:77:1d:cf:77:87:c8:63:e0:a2:7a: fb:3e:d7:86:ee:50:69:50:f5:a5:85:10:0e:d9:42:2b:56:25: ec:b2:a0:a8:56:7f:df:7e:40:6b:02:fe:3b:55:28:20:8d:e4: 3e:f8:77:84:32:70:ca:a4:db:54:f6:9d:62:2c:b5:56:6d:cd: 91:fe:d1:79:57:c6:2f:9d:8f:cc:a1:a9:d8:29:3e:9b:0e:ed: 79:86:d5:99:04:69:9e:bb:85:c1:0f:72:1a:34:cc:38:df:73: 9b:50:01:0c:08:a2:42:a3:27:b5:24:74:f1:8a:df:aa:ee:5a: 6c:38:14:1f:3d:fa:ce:1c:79:29:82:59:6a:be:51:06:88:4b: 53:b3:95:7b:d8:0e:03:9d:8b:98:cb:21:9f:ac:f6:6b:64:16: f0:50:71:0b:22:4d:96:09:72:90:00:54:eb:3c:0e:c3:18:e7: b8:bc:77:2d:5b:83:f3:41:ad:eb:ec:86:4e:98:73:cb:3b:69: eb:88:11:4e:40:0a:29:a8:df:7f:2f:a2:4b:e7:9a:07:18:1c: fc:48:3a:5a:46:8b:4d:08:03:84:af:a5:3b:65:5e:55:df:4d: 8a:42:14:c2:e6:55:05:b7:e6:20:0b:29:14:76:01:b7:71:29: e1:ec:45:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZudRKX9oSMdBkPSydU1PLaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTA4MTEwMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDgwMjZlMjIzZWU4NTI5YmI1MjA2YmUwYTNjMzgwMzdkYWZlZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdCnRTSvY+Dq7CB4stPygAJsiLfN 1WomnWwACZ2zCc7dlPR9iJHYPRbwSu5VEp7kdjR1tPSUBPNMwpXLBUkvhr2iKcw0 CR51kQi4VaN5I1U3G5NW9AtT5qblSsj4E5cMqBlvenEQggLRfACwgHm5EXmNwO91 odOKnR6dkdVXOg2JEYqJezRhuPjCF+qkGPRYGcPPQSE+Oha7kc7xEUqF+7y6p8EM sXKcYiiliBEleM8uJbbXXFn7MvTIuYkShD/itl88vuq8hkxirP5lUyJjdQp2a0tZ +SwMlHDKRPbdId27F2MuvAwcyBOsUlPbXWp+HyDOkYwuR/47tIcczgAkmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCAJuIj7oUpu1IGvgo8OAN9r+4oMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvMElBbTRpUHVoU203VWdhLUNqdzRBMzJ2N2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwufMMA0G CSqGSIb3DQEBCwUAA4IBAQBQXWPtE75PuXcdz3eHyGPgonr7PteG7lBpUPWlhRAO 2UIrViXssqCoVn/ffkBrAv47VSggjeQ++HeEMnDKpNtU9p1iLLVWbc2R/tF5V8Yv nY/MoanYKT6bDu15htWZBGmeu4XBD3IaNMw433ObUAEMCKJCoye1JHTxit+q7lps OBQfPfrOHHkpgllqvlEGiEtTs5V72A4DnYuYyyGfrPZrZBbwUHELIk2WCXKQAFTr PA7DGOe4vHctW4PzQa3r7IZOmHPLO2nriBFOQAopqN9/L6JL55oHGBz8SDpaRotN CAOEr6U7ZV5V302KQhTC5lUFt+YgCykUdgG3cSnh7EUu -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:32 2026 by rpki-client