This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/rEIw8icF5JeHNJs8hiRgw1rRnR0.roa File: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (raw, json) Hash identifier: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ= Subject key identifier: AC:42:30:F2:27:05:E4:97:87:34:9B:3C:86:24:60:C3:5A:D1:9D:1D Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019B7D5D1875180DFD20692BB59BCAC86864 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/rEIw8icF5JeHNJs8hiRgw1rRnR0.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8735 IP address blocks: 193.188.250.0/24 maxlen: 24 194.8.96.0/19 maxlen: 25 194.145.64.0/19 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:18:75:18:0d:fd:20:69:2b:b5:9b:ca:c8:68:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4230f22705e49787349b3c862460c35ad19d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:34:8a:6e:36:45:32:7c:ea:1c:dc:cb:78: 8c:93:bd:9b:c9:74:41:d6:69:9a:a7:6e:f0:24:91: ea:e4:27:09:36:74:54:82:98:31:c8:87:14:a4:52: 07:f8:e3:97:90:67:6b:81:e1:ca:50:cb:53:7e:da: 8d:12:40:52:11:5e:5e:e6:d8:67:f9:b6:58:58:b9: 58:20:6b:60:7d:ed:44:f0:1f:f8:de:26:ae:f0:74: 8b:4a:b1:5e:23:5e:26:b4:17:d1:4a:45:3f:c4:c6: 6a:7a:7a:78:a4:a3:40:b8:cb:41:14:53:d1:f5:64: ff:39:b5:b0:62:2f:ee:e6:91:df:8a:c5:f1:9c:0f: 9e:54:31:a3:1e:6c:0b:13:86:70:49:34:d5:23:32: bc:36:e0:95:bb:0d:3b:17:dd:5f:65:4b:da:69:13: eb:d5:45:7d:fb:49:4c:c7:2e:14:b5:fd:1e:90:38: c6:57:45:d5:81:db:90:0a:b4:20:bf:8c:44:1c:62: 26:90:79:26:f6:ef:61:4e:8e:59:85:34:fe:41:92: e2:a1:03:4c:b6:8b:9f:f7:df:bf:30:71:f8:18:27: 3c:a6:cc:35:8c:c4:6e:d0:c7:15:5d:10:cf:95:43: cf:8f:9a:57:93:7e:5b:c3:c6:3b:22:ef:50:2b:ce: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:42:30:F2:27:05:E4:97:87:34:9B:3C:86:24:60:C3:5A:D1:9D:1D X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/rEIw8icF5JeHNJs8hiRgw1rRnR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.250.0/24 194.8.96.0/19 194.145.64.0/19 Signature Algorithm: sha256WithRSAEncryption 07:fd:75:32:b9:64:c0:6e:f2:83:71:dc:1c:ef:b1:e7:7c:84: e9:84:4c:01:5a:e1:31:1c:31:5a:82:32:80:60:12:04:9e:b9: fe:6d:14:32:0d:e6:a1:a5:69:06:18:8c:80:03:0c:90:43:f5: a4:30:a9:95:c8:44:42:cf:87:92:dc:41:1d:3f:9d:9f:0f:47: 6b:e0:e0:85:9c:4e:0d:63:98:56:32:7e:34:e6:e2:0a:e7:bf: c9:65:70:2d:a6:14:58:79:29:9d:0a:da:37:2c:f7:63:b1:9b: 34:d7:58:cc:18:de:df:91:48:41:9c:7a:48:07:bd:88:34:2c: 57:8e:7a:e9:de:91:19:08:d0:09:34:07:ad:21:20:68:83:14: f7:ee:aa:eb:6c:09:c8:b3:22:ed:0e:3c:9b:d3:ab:08:0b:05: 07:9a:f3:4f:71:3d:4c:c7:8e:50:a8:82:1e:d0:2e:be:4f:58: 6d:fd:3b:ce:2b:2a:df:3f:e6:e7:31:33:ea:e2:f7:da:e1:af: ea:79:83:86:06:02:a5:ad:24:04:32:66:bf:7b:a3:20:60:44: cc:9d:31:ce:98:b8:d0:4f:5b:7f:18:fa:15:3d:73:4f:4d:fc: f2:93:86:58:db:35:e4:c5:3f:44:70:af:91:f9:f4:4f:6f:1b: 94:a2:cb:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XRh1GA39IGkrtZvKyGhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQyMzBmMjI3MDVlNDk3ODczNDliM2M4NjI0NjBjMzVhZDE5ZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG80im42RTJ86hzcy3iMk72byXRB 1mmap27wJJHq5CcJNnRUgpgxyIcUpFIH+OOXkGdrgeHKUMtTftqNEkBSEV5e5thn +bZYWLlYIGtgfe1E8B/43iau8HSLSrFeI14mtBfRSkU/xMZqenp4pKNAuMtBFFPR 9WT/ObWwYi/u5pHfisXxnA+eVDGjHmwLE4ZwSTTVIzK8NuCVuw07F91fZUvaaRPr 1UV9+0lMxy4Utf0ekDjGV0XVgduQCrQgv4xEHGImkHkm9u9hTo5ZhTT+QZLioQNM touf99+/MHH4GCc8psw1jMRu0McVXRDPlUPPj5pXk35bw8Y7Iu9QK86EYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKxCMPInBeSXhzSbPIYkYMNa0Z0dMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvckVJdzhpY0Y1SmVITkpzOGhpUmd3MXJSblIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwbz6AwQF wghgAwQFwpFAMA0GCSqGSIb3DQEBCwUAA4IBAQAH/XUyuWTAbvKDcdwc77HnfITp hEwBWuExHDFagjKAYBIEnrn+bRQyDeahpWkGGIyAAwyQQ/WkMKmVyERCz4eS3EEd P52fD0dr4OCFnE4NY5hWMn405uIK57/JZXAtphRYeSmdCto3LPdjsZs011jMGN7f kUhBnHpIB72INCxXjnrp3pEZCNAJNAetISBogxT37qrrbAnIsyLtDjyb06sICwUH mvNPcT1Mx45QqIIe0C6+T1ht/TvOKyrfP+bnMTPq4vfa4a/qeYOGBgKlrSQEMma/ e6MgYETMnTHOmLjQT1t/GPoVPXNPTfzyk4ZY2zXkxT9EcK+R+fRPbxuUosuB -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:03 2026 by rpki-client