This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/1-AUGKVpaUI8EZ6hHXShhxJpWyTo.roa File: 1-AUGKVpaUI8EZ6hHXShhxJpWyTo.roa (raw, json) Hash identifier: YXWwbGUmP1DPllntzNeKp7cmAtpZjKD8wzMqEST5hD8= Subject key identifier: F8:05:06:29:5A:5A:50:8F:04:67:A8:47:5D:28:61:C4:9A:56:C9:3A Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019A9C4D86923FE99E059DF23470C2EA6FAE Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/1-AUGKVpaUI8EZ6hHXShhxJpWyTo.roa Signing time: Wed 19 Nov 2025 13:28:37 +0000 ROA not before: Wed 19 Nov 2025 13:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25211 IP address blocks: 94.26.3.0/24 maxlen: 24 94.26.38.0/24 maxlen: 24 94.26.41.0/24 maxlen: 24 94.26.42.0/24 maxlen: 24 94.26.69.0/24 maxlen: 24 94.26.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:4d:86:92:3f:e9:9e:05:9d:f2:34:70:c2:ea:6f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Nov 19 13:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f80506295a5a508f0467a8475d2861c49a56c93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:14:a3:c0:b4:ec:56:56:78:b7:ab:26:2e: 43:af:16:b1:af:46:df:61:a0:cc:5e:85:04:d0:47: e4:54:04:4f:12:b0:6d:bf:62:a6:dd:88:3d:e9:44: a0:3e:49:b2:1b:fa:21:19:20:85:a0:11:8c:d1:82: ec:25:36:46:c4:7e:32:cc:1d:e8:86:95:ce:6a:d2: 04:13:03:68:0b:ca:4b:df:3c:a2:68:f3:87:e6:a4: ba:ec:14:c5:57:9f:45:78:a7:c0:d2:16:df:63:aa: d3:a7:d1:26:c0:df:ad:49:48:3a:38:4d:8c:00:3a: f5:a4:0d:ca:a3:52:e1:5f:a4:28:8f:ea:10:1c:61: e0:7b:fe:f1:59:b3:4b:39:ba:e4:68:41:8c:84:38: 85:0d:b0:aa:02:c9:50:7b:6b:8e:e1:62:51:a7:69: 54:fe:a1:ca:23:ed:a5:52:f3:70:11:62:cf:56:73: 19:2c:19:22:7c:b2:c1:9c:75:f3:41:2e:2a:90:38: 4a:a6:57:40:1b:67:04:e0:94:17:df:7c:9e:34:51: 83:54:a3:68:a5:9f:96:b2:03:f4:f1:df:bf:a1:f7: 70:82:9c:b2:4a:47:4d:c0:d8:33:89:51:36:a7:d3: 3d:e9:15:1a:2f:a6:97:ff:2a:68:83:a1:7d:3e:4f: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:05:06:29:5A:5A:50:8F:04:67:A8:47:5D:28:61:C4:9A:56:C9:3A X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/1-AUGKVpaUI8EZ6hHXShhxJpWyTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.3.0/24 94.26.38.0/24 94.26.41.0-94.26.42.255 94.26.69.0/24 94.26.88.0/24 Signature Algorithm: sha256WithRSAEncryption 55:56:66:40:65:18:ae:c2:a8:79:7d:e9:d5:be:be:fc:ce:9f: e9:7a:29:06:a7:5b:bc:85:6d:1e:50:73:6f:e5:3c:a6:4c:ed: 0b:03:0c:69:d5:40:35:f5:a4:f1:db:7a:a0:3d:f0:c1:61:81: 55:b2:43:1e:71:1e:56:99:c1:af:3a:4c:3e:b1:38:03:1d:cf: 96:c1:85:44:7b:e7:eb:db:3b:d2:14:d3:55:11:35:94:d6:78: 90:a0:a5:01:cd:4c:2f:cc:c0:af:d6:19:0d:f4:d7:1c:d5:8c: 0e:32:f1:6e:4a:f6:40:bc:f4:a6:39:7f:1d:33:37:bc:42:cb: e3:8f:52:c3:52:f6:14:76:71:d8:0f:5a:5f:86:f9:3e:36:82: bb:f4:eb:e4:fe:d1:e3:9b:8f:4f:c5:e2:4d:f5:53:71:68:21: 4b:13:30:03:97:69:12:15:4d:0d:45:fa:14:8a:3f:e2:6a:cd: c3:e9:36:ff:03:dd:6c:79:78:fe:3d:45:b5:1e:c9:fd:ac:f1: 02:ff:53:0c:7c:d6:bf:bd:3d:1d:8e:5c:d3:a3:34:3c:32:28: 34:9d:4b:d9:fe:46:43:37:97:bb:3f:14:6b:03:3c:66:eb:24: f0:be:d1:f5:fc:bb:b1:3f:93:76:8d:39:6d:b9:16:01:38:28: 81:5e:90:47 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZqcTYaSP+meBZ3yNHDC6m+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMTE5MTMyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODA1MDYyOTVhNWE1MDhmMDQ2N2E4NDc1ZDI4NjFjNDlhNTZjOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WgUo8C07FZWeLerJi5Drxaxr0bf YaDMXoUE0EfkVARPErBtv2Km3Yg96USgPkmyG/ohGSCFoBGM0YLsJTZGxH4yzB3o hpXOatIEEwNoC8pL3zyiaPOH5qS67BTFV59FeKfA0hbfY6rTp9EmwN+tSUg6OE2M ADr1pA3Ko1LhX6Qoj+oQHGHge/7xWbNLObrkaEGMhDiFDbCqAslQe2uO4WJRp2lU /qHKI+2lUvNwEWLPVnMZLBkifLLBnHXzQS4qkDhKpldAG2cE4JQX33yeNFGDVKNo pZ+WsgP08d+/ofdwgpyySkdNwNgziVE2p9M96RUaL6aX/ypog6F9Pk8PmwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPgFBilaWlCPBGeoR10oYcSaVsk6MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvMS1BVUdLVnBhVUk4RVo2aEhYU2hoeEpwV3lUby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTQvMjY5YTA0LTc3YjQtNGVlNy1iMTY0LWMxNjc4NzI3MjA0 OS8xLzNoTHJuSFhUV2RKUk43WHZUaGR2WHV0c1EwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAF4aAwME AF4aJjAMAwQAXhopAwQAXhoqAwQAXhpFAwQAXhpYMA0GCSqGSIb3DQEBCwUAA4IB AQBVVmZAZRiuwqh5fenVvr78zp/peikGp1u8hW0eUHNv5TymTO0LAwxp1UA19aTx 23qgPfDBYYFVskMecR5WmcGvOkw+sTgDHc+WwYVEe+fr2zvSFNNVETWU1niQoKUB zUwvzMCv1hkN9Ncc1YwOMvFuSvZAvPSmOX8dMze8Qsvjj1LDUvYUdnHYD1pfhvk+ NoK79Ovk/tHjm49PxeJN9VNxaCFLEzADl2kSFU0NRfoUij/ias3D6Tb/A91seXj+ PUW1Hsn9rPEC/1MMfNa/vT0djlzTozQ8Mig0nUvZ/kZDN5e7PxRrAzxm6yTwvtH1 /LuxP5N2jTltuRYBOCiBXpBH -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:31 2025 by rpki-client