This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/coNCzvd4EKyjX0UhdzyCswUVu8c.roa File: coNCzvd4EKyjX0UhdzyCswUVu8c.roa (raw, json) Hash identifier: wNZzIhMnJPQrWHw0reoLLRpSJGX0pJCcVwP0w1vwA5E= Subject key identifier: 72:83:42:CE:F7:78:10:AC:A3:5F:45:21:77:3C:82:B3:05:15:BB:C7 Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee Certificate serial: 019B7AC7D1936E39545EC147132058CB5A1A Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/coNCzvd4EKyjX0UhdzyCswUVu8c.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 194.180.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d1:93:6e:39:54:5e:c1:47:13:20:58:cb:5a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=728342cef77810aca35f4521773c82b30515bbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:51:7f:65:95:24:12:de:71:98:88:ae:17: 5b:99:af:24:94:4c:5c:55:25:58:91:42:cd:02:df: e0:d1:55:0f:ee:7d:f7:0c:ba:ac:f3:08:a7:4b:a3: de:4a:cc:92:4d:bc:85:fd:64:ec:93:21:19:ce:46: dd:e8:6e:63:4f:a9:4b:91:3e:12:cf:b8:7a:98:2b: 23:57:63:c8:be:e6:55:52:9b:ba:83:df:7b:e8:2f: b5:02:a8:e9:89:d1:ca:da:1f:d2:3a:b3:c4:a5:ef: 28:1d:c7:03:14:70:9d:bc:82:fe:ad:72:bb:4b:89: 09:7b:a2:68:7d:77:61:06:ce:fc:e9:8b:5c:8f:2e: 0c:2c:3b:92:02:3a:51:75:c1:08:6a:bf:9e:74:4c: 1b:5e:cc:f5:41:33:17:e8:92:bb:c9:26:ce:f3:6c: e4:7e:e2:bb:0c:29:a1:98:34:46:3d:f2:39:10:1a: d9:79:a8:51:4c:3e:1b:73:62:4b:d2:3b:98:7e:45: 42:03:db:f1:ec:39:9a:cb:56:6d:e3:9e:de:b7:63: 3f:4c:5c:e6:e8:91:56:3a:c7:fc:68:c1:32:c2:8d: 6f:ef:dd:99:cc:de:5e:12:0b:f0:af:e9:76:d3:f7: 12:dc:c0:43:04:93:7e:91:21:d2:1a:e7:66:fc:02: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:42:CE:F7:78:10:AC:A3:5F:45:21:77:3C:82:B3:05:15:BB:C7 X509v3 Authority Key Identifier: keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/coNCzvd4EKyjX0UhdzyCswUVu8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.18.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:3c:70:37:71:6f:ca:7f:af:cc:a4:ab:aa:e2:eb:4e:b1:de: ce:f4:91:68:96:9d:60:4f:03:a1:65:b8:59:9d:96:39:ef:6c: ae:5a:64:4f:31:10:d3:da:f7:9c:fc:fb:fc:cc:80:93:88:32: f4:92:2b:79:47:67:49:5a:be:7c:88:88:bf:ac:8c:3e:f7:ba: d6:46:c4:51:5e:50:a6:25:62:28:7f:dc:23:61:f5:4f:27:00: bb:f4:a0:61:e5:45:96:da:dc:42:4e:a9:5c:2c:cb:ef:ec:c2: aa:45:e4:7d:95:e4:f6:16:c3:e9:f4:90:cb:89:a2:af:cc:30: b5:bd:92:2a:1c:ba:c0:07:87:19:b3:41:5d:b1:fd:22:58:8c: 8a:75:62:f2:8f:a8:b4:e1:c7:65:b5:01:c5:b5:a2:a3:ab:74: b8:7d:be:ea:e1:c8:2c:14:8d:7a:a5:f2:a1:b7:d0:44:98:8f: b5:da:8f:cb:b0:74:ad:d5:18:0a:09:b9:98:50:01:9b:7b:73: 72:09:01:9f:af:1d:ab:82:9e:fc:35:0b:82:42:58:97:a1:4f: 12:f1:d3:64:73:82:a4:df:6c:51:ba:ec:59:e8:37:1a:bf:23: 56:8b:8b:51:74:e8:1b:b2:94:d6:1a:48:20:a1:32:e7:fc:fa: 2b:6b:46:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9GTbjlUXsFHEyBYy1oaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMmU5M2NhOWY5ZDQ2ZGU1NDNmZjdjMmQwNTQwZTg5N2Rj MTRmZWUwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjgzNDJjZWY3NzgxMGFjYTM1ZjQ1MjE3NzNjODJiMzA1MTViYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ZRf2WVJBLecZiIrhdbma8klExc VSVYkULNAt/g0VUP7n33DLqs8winS6PeSsySTbyF/WTskyEZzkbd6G5jT6lLkT4S z7h6mCsjV2PIvuZVUpu6g9976C+1AqjpidHK2h/SOrPEpe8oHccDFHCdvIL+rXK7 S4kJe6JofXdhBs786Ytcjy4MLDuSAjpRdcEIar+edEwbXsz1QTMX6JK7ySbO82zk fuK7DCmhmDRGPfI5EBrZeahRTD4bc2JL0juYfkVCA9vx7Dmay1Zt457et2M/TFzm 6JFWOsf8aMEywo1v792ZzN5eEgvwr+l20/cS3MBDBJN+kSHSGudm/AKYTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKDQs73eBCso19FIXc8grMFFbvHMB8GA1UdIwQY MBaAFEsuk8qfnUbeVD/3wtBUDol9wU/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3k2VHlwLWRSdDVVUF9mQzBGUU9pWDNCVC00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MTIxMGMtYTM4MC00YjU5LWIyYWQt NDVhMjFiMjkwMjNkLzEvY29OQ3p2ZDRFS3lqWDBVaGR6eUNzd1VWdThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81MTIxMGMtYTM4MC00YjU5LWIyYWQtNDVhMjFiMjkwMjNk LzEvU3k2VHlwLWRSdDVVUF9mQzBGUU9pWDNCVC00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrQSMA0G CSqGSIb3DQEBCwUAA4IBAQA6PHA3cW/Kf6/MpKuq4utOsd7O9JFolp1gTwOhZbhZ nZY572yuWmRPMRDT2vec/Pv8zICTiDL0kit5R2dJWr58iIi/rIw+97rWRsRRXlCm JWIof9wjYfVPJwC79KBh5UWW2txCTqlcLMvv7MKqReR9leT2FsPp9JDLiaKvzDC1 vZIqHLrAB4cZs0Fdsf0iWIyKdWLyj6i04cdltQHFtaKjq3S4fb7q4cgsFI16pfKh t9BEmI+12o/LsHSt1RgKCbmYUAGbe3NyCQGfrx2rgp78NQuCQliXoU8S8dNkc4Kk 32xRuuxZ6DcavyNWi4tRdOgbspTWGkggoTLn/Pora0bY -----END CERTIFICATE-----Generated at Mon Jan 26 01:21:58 2026 by rpki-client