This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/s_-rtPWyJtSdbj2b2iepfSNLN3A.roa File: s_-rtPWyJtSdbj2b2iepfSNLN3A.roa (raw, json) Hash identifier: vscO7n+spvCHR7R8R9iLdqblwKoXvI1QMAIbCId48HU= Subject key identifier: B3:FF:AB:B4:F5:B2:26:D4:9D:6E:3D:9B:DA:27:A9:7D:23:4B:37:70 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C76A643480370B1813D26B7CED93FE Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/s_-rtPWyJtSdbj2b2iepfSNLN3A.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6778 IP address blocks: 194.183.56.0/23 maxlen: 23 194.183.62.0/24 maxlen: 24 195.136.0.0/18 maxlen: 18 195.136.71.0/24 maxlen: 24 195.136.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:64:34:80:37:0b:18:13:d2:6b:7c:ed:93:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3ffabb4f5b226d49d6e3d9bda27a97d234b3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:3d:12:52:20:0a:bf:77:a0:80:cf:c2:47: 8e:16:5c:19:ac:12:9b:cb:40:ee:58:96:ac:03:f0: 42:c3:89:25:c2:cd:4b:f4:4b:73:95:60:ee:f3:27: c3:40:0e:d9:e8:56:c0:0f:d6:e0:d5:98:62:ef:8d: af:e0:a9:7d:07:a4:54:c5:06:52:fa:2d:51:5a:50: 3e:52:23:be:76:45:81:2a:9a:29:08:17:6a:5a:0f: c3:be:d8:d1:f0:34:21:62:48:55:a8:2c:19:e9:9a: fd:47:1e:2f:dc:24:58:40:c5:c1:62:3b:43:ba:c3: 4b:23:ea:b5:05:e2:30:73:12:08:44:4f:d3:a0:0c: 3b:22:e7:5d:33:be:fb:77:5e:a1:94:85:cb:8e:38: 70:d8:dd:a2:78:f7:19:bd:c1:85:6d:37:19:99:7d: 3c:8a:f4:78:b1:25:af:76:09:c1:d9:63:f0:c1:2f: 16:04:03:7b:e3:f6:b4:b8:b7:62:2d:16:36:ca:5d: dc:fe:32:10:8a:1f:80:19:27:ae:31:dc:31:e0:6a: 1f:52:1d:d8:31:c8:f2:2f:3b:92:0a:7d:6f:c1:45: 2c:4e:6e:28:f5:25:fb:0d:78:75:96:7b:91:1d:41: 0f:ae:2d:9a:47:7d:d7:1b:f0:91:1c:ed:c5:45:b2: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FF:AB:B4:F5:B2:26:D4:9D:6E:3D:9B:DA:27:A9:7D:23:4B:37:70 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/s_-rtPWyJtSdbj2b2iepfSNLN3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.183.56.0/23 194.183.62.0/24 195.136.0.0/18 195.136.71.0/24 195.136.192.0/18 Signature Algorithm: sha256WithRSAEncryption 1f:35:b8:cf:35:95:19:dd:0a:d7:3b:9b:9e:d1:ae:7e:8c:e5: 06:86:39:3c:e4:d5:0e:51:25:41:64:bb:5d:3b:ce:cd:64:5c: aa:77:60:56:13:30:98:91:cc:eb:b6:b0:a7:0a:ff:a8:a9:ac: 9c:71:ee:a8:e4:f3:5c:29:f8:f2:e5:98:fe:73:46:e0:c4:88: d1:a2:d9:a7:cf:97:dc:83:dc:7d:33:82:00:fe:b1:a2:79:a6: 13:34:dc:3b:40:aa:6a:61:94:8b:9d:5b:30:1c:17:e8:06:72: 71:50:5a:07:20:94:b0:5f:4b:2b:b5:0e:d9:a5:02:1a:94:5c: c4:1c:84:01:ee:d2:ba:31:3f:87:c8:38:27:ca:c1:78:4c:f9: aa:3d:b7:33:42:bd:d8:48:25:15:7c:27:d1:67:93:87:1e:d5: d8:1c:d6:b0:d3:64:9b:f6:81:ef:17:d5:40:95:c0:e9:87:d6: ca:61:74:44:9f:25:ae:ec:96:99:af:37:4c:12:99:87:7c:e1: fa:f4:1a:45:3c:8c:76:fc:ab:49:c5:cf:96:a9:f0:c0:79:84: 56:50:d3:41:56:1a:66:67:3f:43:43:8d:2a:a5:7f:d7:fd:e0: 23:eb:56:b5:40:ea:14:04:b2:a2:fa:dd:3b:28:0b:4d:b7:0b: 1a:39:ff:0c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3x2pkNIA3CxgT0mt87ZP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2ZmYWJiNGY1YjIyNmQ0OWQ2ZTNkOWJkYTI3YTk3ZDIzNGIzNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrU9ElIgCr93oIDPwkeOFlwZrBKb y0DuWJasA/BCw4klws1L9EtzlWDu8yfDQA7Z6FbAD9bg1Zhi742v4Kl9B6RUxQZS +i1RWlA+UiO+dkWBKpopCBdqWg/DvtjR8DQhYkhVqCwZ6Zr9Rx4v3CRYQMXBYjtD usNLI+q1BeIwcxIIRE/ToAw7IuddM777d16hlIXLjjhw2N2iePcZvcGFbTcZmX08 ivR4sSWvdgnB2WPwwS8WBAN74/a0uLdiLRY2yl3c/jIQih+AGSeuMdwx4GofUh3Y McjyLzuSCn1vwUUsTm4o9SX7DXh1lnuRHUEPri2aR33XG/CRHO3FRbJyVQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLP/q7T1sibUnW49m9onqX0jSzdwMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvc18tcnRQV3lKdFNkYmoyYjJpZXBmU05MTjNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBwrc4AwQA wrc+AwQGw4gAAwQAw4hHAwQGw4jAMA0GCSqGSIb3DQEBCwUAA4IBAQAfNbjPNZUZ 3QrXO5ue0a5+jOUGhjk85NUOUSVBZLtdO87NZFyqd2BWEzCYkczrtrCnCv+oqayc ce6o5PNcKfjy5Zj+c0bgxIjRotmnz5fcg9x9M4IA/rGieaYTNNw7QKpqYZSLnVsw HBfoBnJxUFoHIJSwX0srtQ7ZpQIalFzEHIQB7tK6MT+HyDgnysF4TPmqPbczQr3Y SCUVfCfRZ5OHHtXYHNaw02Sb9oHvF9VAlcDph9bKYXREnyWu7JaZrzdMEpmHfOH6 9BpFPIx2/KtJxc+WqfDAeYRWUNNBVhpmZz9DQ40qpX/X/eAj61a1QOoUBLKi+t07 KAtNtwsaOf8M -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:01 2026 by rpki-client