This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/_G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa File: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (raw, json) Hash identifier: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng= Subject key identifier: FC:6E:22:6F:CC:B6:32:1A:7D:7E:65:BE:CC:37:11:32:9F:45:4C:D4 Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Certificate serial: 019B797E471C5DB568B86AD5B7C1A5825785 Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/_G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa Signing time: Thu 01 Jan 2026 12:17:57 +0000 ROA not before: Thu 01 Jan 2026 12:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34863 IP address blocks: 194.36.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:47:1c:5d:b5:68:b8:6a:d5:b7:c1:a5:82:57:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc6e226fccb6321a7d7e65becc3711329f454cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:4f:3a:12:48:23:d2:ee:ba:53:62:7f:57: 77:4a:20:b8:0e:b5:51:35:db:88:ef:e7:e6:8e:66: f7:7b:db:63:02:92:c3:35:d2:f3:bc:e2:a4:7f:4b: 00:af:ae:d0:97:ce:c3:40:92:25:46:ab:ae:ed:5c: 51:ec:4a:f8:9f:30:8e:e4:f3:1e:93:9d:04:9a:fe: 6e:d6:04:69:92:23:ac:ab:a5:f2:26:a7:54:b7:b2: ed:5c:fd:54:61:8d:3b:c9:9d:45:45:d0:84:d3:4f: ae:a9:3f:a8:c0:08:28:54:7e:05:81:ca:4c:b2:10: 28:3c:3a:10:0a:a5:6c:a2:65:39:75:bd:7f:47:61: 57:d8:80:74:5b:93:2e:49:d5:12:3a:62:2f:d3:ac: e4:7b:0d:c3:e3:28:be:32:b2:6e:10:d7:e1:72:78: dc:78:10:55:aa:51:c9:fd:2c:38:73:92:15:44:eb: 84:0e:03:dd:6e:e5:b0:65:fd:c8:5c:40:4f:84:b1: 90:39:1b:6b:c7:74:1e:d1:aa:ad:2c:74:6c:ea:5f: fb:b1:ea:86:0c:a9:5d:46:e6:5b:09:b9:7c:80:30: 19:2a:1a:d1:41:9a:d9:24:4c:9c:2a:11:af:3b:15: 73:f4:bf:2e:96:c8:09:b9:b1:17:ae:ee:7e:38:de: 96:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6E:22:6F:CC:B6:32:1A:7D:7E:65:BE:CC:37:11:32:9F:45:4C:D4 X509v3 Authority Key Identifier: keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/_G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.82.0/24 Signature Algorithm: sha256WithRSAEncryption 89:26:7f:9c:3c:8d:05:ce:11:c3:dc:33:87:91:24:4d:b6:90: d5:dc:ab:e3:20:f6:1c:a1:df:05:e0:23:2e:99:f5:11:e4:b4: c0:b8:9b:4e:1c:86:16:f5:6e:25:dd:95:4a:a8:4a:0f:d1:f5: ed:0c:ac:85:f6:79:a6:6e:44:07:cb:9a:20:d5:f2:13:29:55: 64:a5:ed:6c:4d:8a:31:c9:7e:e5:90:5f:ce:25:e7:3d:23:6f: 98:c9:90:61:9d:23:da:c6:db:0d:4b:9a:8f:a2:fd:dc:08:d7: 13:14:4d:3d:99:6e:4a:a6:85:29:c2:17:58:bf:18:11:57:08: a4:36:7a:ab:13:6c:4e:2a:ea:d7:62:73:18:ac:7b:c5:9b:cd: bc:d0:38:6e:f3:fa:35:78:c9:fd:4c:08:45:ee:3f:df:f4:b5: 5c:b1:ab:e4:cc:de:17:cd:f4:0a:a7:6b:d1:55:12:9e:d1:4f: 68:d2:88:20:03:cf:1a:95:8e:b3:dc:c0:90:6d:74:fe:88:63: 55:d0:28:6e:3e:9f:0d:96:79:f7:bb:e4:51:d4:cf:60:39:9e: 78:83:1a:81:f6:1c:de:d7:f5:f5:a2:29:db:75:22:51:9b:97: 61:76:bd:fc:24:1d:e3:89:d4:c2:3e:f2:9d:6c:bc:4e:d4:cc: 28:97:fb:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkccXbVouGrVt8GlgleFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWU3MWQxYjg2MDVhMzNiOWRkNjU0YmEzOGRkZmFiYzFj ZWY1ZWIwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzZlMjI2ZmNjYjYzMjFhN2Q3ZTY1YmVjYzM3MTEzMjlmNDU0Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuBPOhJII9LuulNif1d3SiC4DrVR NduI7+fmjmb3e9tjApLDNdLzvOKkf0sAr67Ql87DQJIlRquu7VxR7Er4nzCO5PMe k50Emv5u1gRpkiOsq6XyJqdUt7LtXP1UYY07yZ1FRdCE00+uqT+owAgoVH4FgcpM shAoPDoQCqVsomU5db1/R2FX2IB0W5MuSdUSOmIv06zkew3D4yi+MrJuENfhcnjc eBBVqlHJ/Sw4c5IVROuEDgPdbuWwZf3IXEBPhLGQORtrx3Qe0aqtLHRs6l/7seqG DKldRuZbCbl8gDAZKhrRQZrZJEycKhGvOxVz9L8ulsgJubEXru5+ON6WMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxuIm/MtjIafX5lvsw3ETKfRUzUMB8GA1UdIwQY MBaAFFGecdG4YFozud1lS6ON36vBzvXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQt ZmQ2ZjIzNWRhZjBiLzEvX0c0aWI4eTJNaHA5Zm1XLXpEY1JNcDlGVE5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mMzVmYjUtMGY2Ny00NGU0LTlhNTQtZmQ2ZjIzNWRhZjBi LzEvVVo1eDBiaGdXak81M1dWTG80M2ZxOEhPOWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiRSMA0G CSqGSIb3DQEBCwUAA4IBAQCJJn+cPI0FzhHD3DOHkSRNtpDV3KvjIPYcod8F4CMu mfUR5LTAuJtOHIYW9W4l3ZVKqEoP0fXtDKyF9nmmbkQHy5og1fITKVVkpe1sTYox yX7lkF/OJec9I2+YyZBhnSPaxtsNS5qPov3cCNcTFE09mW5KpoUpwhdYvxgRVwik NnqrE2xOKurXYnMYrHvFm8280Dhu8/o1eMn9TAhF7j/f9LVcsavkzN4XzfQKp2vR VRKe0U9o0oggA88alY6z3MCQbXT+iGNV0ChuPp8Nlnn3u+RR1M9gOZ54gxqB9hze 1/X1oinbdSJRm5dhdr38JB3jidTCPvKdbLxO1Mwol/tZ -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:34 2026 by rpki-client