This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/s0Slj9yVMX7lCq79bqSGCqW6KPg.roa File: s0Slj9yVMX7lCq79bqSGCqW6KPg.roa (raw, json) Hash identifier: RaEewhp7TYWAZZHFh2A3/CMtjGLdyIT76c5b57zkYYU= Subject key identifier: B3:44:A5:8F:DC:95:31:7E:E5:0A:AE:FD:6E:A4:86:0A:A5:BA:28:F8 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA03DD79F26EB689EECBBDBC38316 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/s0Slj9yVMX7lCq79bqSGCqW6KPg.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 194.35.72.0/24 maxlen: 24 194.62.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a0:3d:d7:9f:26:eb:68:9e:ec:bb:db:c3:83:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b344a58fdc95317ee50aaefd6ea4860aa5ba28f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:46:44:e3:4b:da:4f:d8:71:8f:7e:08:1e: 03:cf:1b:93:ea:0c:a7:17:bd:3e:78:ea:5a:b5:98: fc:30:c0:6b:3b:bc:bf:89:1d:2c:98:4b:0e:f2:94: 13:14:32:43:74:fd:bc:53:0d:f5:80:8e:23:1d:03: 6c:d7:96:50:96:cf:42:91:27:e6:0c:d3:3c:43:a1: 55:c4:8a:b6:11:97:fc:1e:cd:70:4f:5e:08:10:16: cf:d1:49:26:d0:7c:8e:27:92:28:64:c1:c2:64:9c: fc:ab:33:af:5a:26:1f:68:bd:ee:f8:15:d6:4b:78: d5:db:e0:8c:66:34:72:e8:6f:d5:b3:e0:20:b6:02: d8:ae:52:01:49:f3:64:57:de:30:03:96:7d:1b:2e: e8:2b:24:00:f9:5d:34:1a:b1:b2:d1:bf:94:bd:da: f6:80:c4:cb:41:ae:75:1e:c4:d6:5e:e7:c8:bf:a8: 17:1e:2d:98:f0:ed:a7:9e:bd:77:cb:30:3a:9c:ad: cb:f1:b2:c6:de:06:64:ea:74:0b:1a:1f:47:2a:15: 45:d8:28:0e:84:30:cc:bf:6c:47:e1:34:e6:11:49: 90:8d:56:c6:b8:66:45:2b:c6:aa:40:04:f7:e5:f3: cb:cc:75:4a:bc:ae:54:3f:ff:40:27:74:c0:77:c3: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:44:A5:8F:DC:95:31:7E:E5:0A:AE:FD:6E:A4:86:0A:A5:BA:28:F8 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/s0Slj9yVMX7lCq79bqSGCqW6KPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.72.0/24 194.62.210.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f8:36:00:f5:11:4b:75:8c:37:7b:66:15:77:2b:6c:64:11: 41:77:dc:8a:26:19:31:45:4c:b6:75:c8:e7:f6:9d:f2:d3:6b: 8a:fd:c3:db:1c:1d:00:c5:a0:85:79:d6:e8:9e:76:a2:b3:93: db:58:70:c1:00:ca:d7:4f:f4:9a:cc:89:67:43:d4:13:d7:6d: 6b:ab:5f:04:b6:db:fe:fc:a0:c1:2c:0d:04:34:be:9c:38:32: 46:36:6e:dc:f5:dd:6b:37:5d:2a:61:b4:3e:db:f8:14:c9:94: 5b:88:cb:3c:2b:2b:70:ad:a4:d3:51:f4:c5:75:2d:c5:b8:21: 97:7b:0e:b3:d4:8b:ea:d8:4d:16:44:04:f1:0e:64:58:4a:29: 94:db:52:40:a7:76:2a:15:5d:d9:81:80:1f:17:00:70:23:8e: 38:d2:ff:e7:a9:3a:38:d3:d9:9e:a2:39:96:69:21:e7:d5:41: bd:77:b8:e4:1a:6c:f7:e6:6e:32:d5:17:dc:5e:1c:56:1f:30: 1b:b2:47:95:71:7d:b2:36:04:32:e7:cc:84:80:f8:8f:8e:72: 72:64:0c:6b:96:d4:2b:ab:5d:28:0d:95:5e:9c:df:9b:15:90: 4f:1c:84:70:fa:a2:b7:f8:7e:84:89:a3:44:f8:35:c0:da:3e: e7:af:ce:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fqA9158m62ie7Lvbw4MWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzQ0YTU4ZmRjOTUzMTdlZTUwYWFlZmQ2ZWE0ODYwYWE1YmEyOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrRGRONL2k/YcY9+CB4DzxuT6gyn F70+eOpatZj8MMBrO7y/iR0smEsO8pQTFDJDdP28Uw31gI4jHQNs15ZQls9CkSfm DNM8Q6FVxIq2EZf8Hs1wT14IEBbP0Ukm0HyOJ5IoZMHCZJz8qzOvWiYfaL3u+BXW S3jV2+CMZjRy6G/Vs+AgtgLYrlIBSfNkV94wA5Z9Gy7oKyQA+V00GrGy0b+Uvdr2 gMTLQa51HsTWXufIv6gXHi2Y8O2nnr13yzA6nK3L8bLG3gZk6nQLGh9HKhVF2CgO hDDMv2xH4TTmEUmQjVbGuGZFK8aqQAT35fPLzHVKvK5UP/9AJ3TAd8OduQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLNEpY/clTF+5Qqu/W6khgqluij4MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvczBTbGo5eVZNWDdsQ3E3OWJxU0dDcVc2S1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiNIAwQA wj7SMA0GCSqGSIb3DQEBCwUAA4IBAQB2+DYA9RFLdYw3e2YVdytsZBFBd9yKJhkx RUy2dcjn9p3y02uK/cPbHB0AxaCFedbonnais5PbWHDBAMrXT/SazIlnQ9QT121r q18Ettv+/KDBLA0ENL6cODJGNm7c9d1rN10qYbQ+2/gUyZRbiMs8KytwraTTUfTF dS3FuCGXew6z1Ivq2E0WRATxDmRYSimU21JAp3YqFV3ZgYAfFwBwI4440v/nqTo4 09meojmWaSHn1UG9d7jkGmz35m4y1RfcXhxWHzAbskeVcX2yNgQy58yEgPiPjnJy ZAxrltQrq10oDZVenN+bFZBPHIRw+qK3+H6EiaNE+DXA2j7nr842 -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:46 2026 by rpki-client