This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ClwzdGSmtXrO63HgPlEjZ_se0A4.roa File: ClwzdGSmtXrO63HgPlEjZ_se0A4.roa (raw, json) Hash identifier: Sjb3Q2nRtqdPoqA1Q0gRD+djUqyx+vfH/8hgBocbxnI= Subject key identifier: 0A:5C:33:74:64:A6:B5:7A:CE:EB:71:E0:3E:51:23:67:FB:1E:D0:0E Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED214D15C791FD58BD6F1FE68926FB Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ClwzdGSmtXrO63HgPlEjZ_se0A4.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210515 IP address blocks: 94.188.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:21:4d:15:c7:91:fd:58:bd:6f:1f:e6:89:26:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a5c337464a6b57aceeb71e03e512367fb1ed00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:c9:7e:23:8b:68:18:1a:7d:e8:b5:9d:f5: 5a:06:d5:73:3a:83:47:e0:aa:a1:eb:c2:05:fe:7d: 6c:03:f2:7b:7b:9f:08:2d:42:83:cc:4a:fd:32:6c: cc:30:7f:46:95:00:e5:58:84:90:d4:72:07:e7:dd: 86:c2:f4:dd:6f:7a:34:66:d6:e2:f5:23:6d:a4:c1: ee:46:2c:6e:17:84:40:ca:b3:f5:a3:ac:46:1b:1d: 9e:3a:fe:1a:2b:83:e7:fa:01:d5:12:07:e0:c2:34: b5:b0:d4:48:f7:8f:45:45:60:7e:cf:c5:bf:02:ba: 7e:12:4d:6a:60:53:28:65:d4:5c:63:e9:f8:14:40: a8:52:9c:8f:d1:99:68:77:73:dd:e8:4f:74:f1:f3: f9:90:0c:f2:c5:20:c6:11:6c:6c:8b:6b:ce:c8:33: 18:e5:b4:c1:47:0b:05:cc:12:0f:a1:7e:dd:31:e3: 32:b1:42:fb:a4:7b:72:fa:d5:d3:09:ad:bc:94:3d: 47:81:22:b8:ab:0d:4a:d7:ea:bf:70:fe:39:18:ae: bf:e6:04:19:d5:3c:b4:0c:10:8c:60:f7:29:f8:d3: f8:9f:2d:01:78:73:46:f0:f5:c9:ed:1b:b1:bf:ef: e5:d7:81:eb:02:a5:9f:e7:b5:ae:65:ae:a2:13:4b: 5f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:33:74:64:A6:B5:7A:CE:EB:71:E0:3E:51:23:67:FB:1E:D0:0E X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/ClwzdGSmtXrO63HgPlEjZ_se0A4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.174.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:4d:cf:64:26:e3:29:0a:5a:69:a4:26:f3:45:4c:18:12:08: e7:c3:b6:c0:3e:56:12:34:6f:42:04:d1:97:ce:03:45:06:ec: 66:8f:7c:5b:f0:c4:c9:5d:8a:62:f3:54:ca:c5:ed:53:6e:d4: be:b2:82:31:41:33:47:db:81:fc:9f:4b:60:36:cb:bd:33:fd: d4:e0:21:ae:df:85:3b:32:72:b4:fa:5d:e1:4f:d7:92:7b:55: 0f:91:38:98:2f:bf:e2:f9:7a:cb:0e:09:77:48:b2:90:53:ad: fe:d6:f8:7c:78:27:7e:89:66:26:40:71:d4:ae:5d:11:95:8b: 01:a2:3c:b1:07:bb:63:17:29:38:6d:0f:1c:fc:9a:e8:96:18: df:f0:6d:f8:1e:36:49:15:db:00:30:eb:01:45:e4:a8:59:ce: 3a:41:f1:e6:4e:75:f9:b1:f3:b6:0a:bc:67:cf:4f:ca:1a:b1: 32:37:16:9b:b1:01:46:8c:e1:bf:5e:29:e1:99:b0:74:42:2e: ef:4d:6f:d6:31:e3:1e:e5:d8:3e:df:f5:a1:76:7a:4c:5c:07: 2c:42:ca:7a:b0:7a:b7:98:d0:7d:a8:ba:b2:44:ee:0a:7d:49: 33:0c:f2:09:bf:01:d8:ba:12:f7:d3:f9:d8:c0:e4:c1:5d:61: d0:6d:e9:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SFNFceR/Vi9bx/miSb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTVjMzM3NDY0YTZiNTdhY2VlYjcxZTAzZTUxMjM2N2ZiMWVkMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWvJfiOLaBgafei1nfVaBtVzOoNH 4Kqh68IF/n1sA/J7e58ILUKDzEr9MmzMMH9GlQDlWISQ1HIH592GwvTdb3o0Ztbi 9SNtpMHuRixuF4RAyrP1o6xGGx2eOv4aK4Pn+gHVEgfgwjS1sNRI949FRWB+z8W/ Arp+Ek1qYFMoZdRcY+n4FECoUpyP0Zlod3Pd6E908fP5kAzyxSDGEWxsi2vOyDMY 5bTBRwsFzBIPoX7dMeMysUL7pHty+tXTCa28lD1HgSK4qw1K1+q/cP45GK6/5gQZ 1Ty0DBCMYPcp+NP4ny0BeHNG8PXJ7Ruxv+/l14HrAqWf57WuZa6iE0tfSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApcM3RkprV6zutx4D5RI2f7HtAOMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvQ2x3emRHU210WHJPNjNIZ1BsRWpaX3NlMEE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXryuMA0G CSqGSIb3DQEBCwUAA4IBAQBPTc9kJuMpClpppCbzRUwYEgjnw7bAPlYSNG9CBNGX zgNFBuxmj3xb8MTJXYpi81TKxe1TbtS+soIxQTNH24H8n0tgNsu9M/3U4CGu34U7 MnK0+l3hT9eSe1UPkTiYL7/i+XrLDgl3SLKQU63+1vh8eCd+iWYmQHHUrl0RlYsB ojyxB7tjFyk4bQ8c/Jrolhjf8G34HjZJFdsAMOsBReSoWc46QfHmTnX5sfO2Crxn z0/KGrEyNxabsQFGjOG/XinhmbB0Qi7vTW/WMeMe5dg+3/WhdnpMXAcsQsp6sHq3 mNB9qLqyRO4KfUkzDPIJvwHYuhL30/nYwOTBXWHQbekK -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:04 2026 by rpki-client