This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/j20-Qg6Dllv24CgeMRfK9YqUFsA.roa File: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (raw, json) Hash identifier: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q= Subject key identifier: 8F:6D:3E:42:0E:83:96:5B:F6:E0:28:1E:31:17:CA:F5:8A:94:16:C0 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C5E7D4B9F418EFC42597A06E0B10 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/j20-Qg6Dllv24CgeMRfK9YqUFsA.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 194.146.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c5:e7:d4:b9:f4:18:ef:c4:25:97:a0:6e:0b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f6d3e420e83965bf6e0281e3117caf58a9416c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:b3:2e:a0:7b:1c:06:3d:ed:ba:82:6a:ac: c8:79:42:27:5b:4c:91:db:06:f1:a2:dc:21:e0:8f: 78:45:13:7a:b3:1d:38:99:28:88:4e:8d:28:ef:09: e8:a4:46:e9:44:e7:c3:c9:0d:e3:88:7b:58:9f:10: f6:c2:16:32:34:9f:c8:e0:64:af:4a:69:01:39:2d: b5:8b:6d:54:db:41:f5:27:12:d8:ca:36:aa:b9:cc: 8b:44:2f:ed:e8:2c:cb:92:87:8d:4b:53:21:d9:f6: 5f:41:b0:cc:80:4a:a1:ea:7a:e9:2f:f3:b0:e6:01: dc:45:80:e1:90:36:66:8e:01:b3:78:fe:54:ae:d3: 24:8e:51:2c:84:c2:ec:b1:55:fb:c9:6c:df:22:b9: a6:db:1a:11:c6:da:b2:bd:9e:8d:59:19:1d:6d:15: cb:ee:fd:cc:54:1c:bb:f9:99:6b:2d:7e:49:78:63: 6d:46:e3:ae:b9:3d:42:59:6e:0d:8a:da:04:30:1b: 24:fb:0e:0c:84:64:b6:40:f4:94:17:24:2d:d0:52: 24:79:68:f9:07:32:5a:02:d2:fe:4b:3c:3d:54:2e: 7f:f6:4a:df:4c:b9:87:51:cf:54:56:1d:08:be:01: b9:6b:90:d4:57:c0:82:33:eb:80:6f:78:ff:63:35: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6D:3E:42:0E:83:96:5B:F6:E0:28:1E:31:17:CA:F5:8A:94:16:C0 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/j20-Qg6Dllv24CgeMRfK9YqUFsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.93.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:27:95:89:0c:1f:f3:a4:86:20:32:0e:5d:38:58:2f:2e:01: 4e:42:e1:90:57:95:f8:67:1b:9b:f3:3e:3a:d8:82:4a:3c:3a: 64:28:1b:cf:37:70:78:4e:b7:f8:68:7c:1e:60:ee:4d:ab:0b: 7b:07:10:80:34:7a:cf:16:26:cc:ce:c8:59:da:62:ed:66:bf: de:77:17:67:ac:d0:2b:bc:7e:9e:8c:81:c4:51:31:33:9d:df: e7:b6:49:e8:63:36:3c:b0:40:4d:c2:47:e3:d8:64:a0:f6:01: 41:ab:56:de:cf:2a:1f:d5:4c:ca:10:ba:7f:af:33:6b:03:4f: d7:3f:03:76:10:32:37:35:34:b2:78:ea:38:7f:d5:d0:3a:ee: 55:a8:03:be:0a:11:b1:27:68:79:e8:10:4c:24:23:ea:d0:71: bd:ac:6f:47:12:1a:45:cb:52:a7:c1:6f:14:8b:46:e2:53:db: f6:0d:96:66:dc:c2:24:75:d0:ca:66:85:00:3c:ce:3b:cf:2c: 94:3e:d0:04:2d:87:78:26:ac:e0:f9:a4:1b:bc:bc:5a:ee:49: 19:3a:4f:6c:a9:fb:e1:73:3d:e9:57:5a:26:f9:ce:da:60:8c: d4:4e:bf:d2:5a:97:ef:2b:2e:5b:9a:3e:c0:76:a0:3d:f7:db: b8:fc:90:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsXn1Ln0GO/EJZegbgsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjZkM2U0MjBlODM5NjViZjZlMDI4MWUzMTE3Y2FmNThhOTQxNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKuzLqB7HAY97bqCaqzIeUInW0yR 2wbxotwh4I94RRN6sx04mSiITo0o7wnopEbpROfDyQ3jiHtYnxD2whYyNJ/I4GSv SmkBOS21i21U20H1JxLYyjaqucyLRC/t6CzLkoeNS1Mh2fZfQbDMgEqh6nrpL/Ow 5gHcRYDhkDZmjgGzeP5UrtMkjlEshMLssVX7yWzfIrmm2xoRxtqyvZ6NWRkdbRXL 7v3MVBy7+ZlrLX5JeGNtRuOuuT1CWW4NitoEMBsk+w4MhGS2QPSUFyQt0FIkeWj5 BzJaAtL+Szw9VC5/9krfTLmHUc9UVh0IvgG5a5DUV8CCM+uAb3j/YzWeawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9tPkIOg5Zb9uAoHjEXyvWKlBbAMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvajIwLVFnNkRsbHYyNENnZU1SZks5WXFVRnNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJdMA0G CSqGSIb3DQEBCwUAA4IBAQBtJ5WJDB/zpIYgMg5dOFgvLgFOQuGQV5X4Zxub8z46 2IJKPDpkKBvPN3B4Trf4aHweYO5Nqwt7BxCANHrPFibMzshZ2mLtZr/edxdnrNAr vH6ejIHEUTEznd/ntknoYzY8sEBNwkfj2GSg9gFBq1bezyof1UzKELp/rzNrA0/X PwN2EDI3NTSyeOo4f9XQOu5VqAO+ChGxJ2h56BBMJCPq0HG9rG9HEhpFy1KnwW8U i0biU9v2DZZm3MIkddDKZoUAPM47zyyUPtAELYd4Jqzg+aQbvLxa7kkZOk9sqfvh cz3pV1om+c7aYIzUTr/SWpfvKy5bmj7AdqA999u4/JBa -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:06 2026 by rpki-client