This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ATgciNvIucjKCFQUFyNe0yS56Xs.roa File: ATgciNvIucjKCFQUFyNe0yS56Xs.roa (raw, json) Hash identifier: ODwExdkuk2O0WB+oRGE/a1ipu8Cu3cgAGkwUAaoVX9Y= Subject key identifier: 01:38:1C:88:DB:C8:B9:C8:CA:08:54:14:17:23:5E:D3:24:B9:E9:7B Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Certificate serial: 019B7F819B9753D845BC620A7843D89C6631 Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ATgciNvIucjKCFQUFyNe0yS56Xs.roa Signing time: Fri 02 Jan 2026 16:19:18 +0000 ROA not before: Fri 02 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45012 IP address blocks: 194.34.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:9b:97:53:d8:45:bc:62:0a:78:43:d8:9c:66:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Validity Not Before: Jan 2 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01381c88dbc8b9c8ca08541417235ed324b9e97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:e2:b7:1d:85:16:5e:a4:ee:89:f6:40:aa: 91:11:6d:8e:fe:a0:b2:6b:d3:87:39:66:c1:5c:5b: 15:c0:04:c1:31:59:ea:d3:42:02:c7:bd:d3:de:4c: f3:e0:cd:a4:5a:5e:c7:65:d1:3d:df:a1:49:fe:82: 80:32:71:65:3e:0b:69:59:9a:a0:b7:c3:14:df:55: 8b:79:45:92:05:a4:42:0e:fa:d3:6e:72:86:69:1f: e3:90:a2:db:5b:c2:c4:3e:c6:9a:d3:95:d8:4d:bc: 78:d0:f8:9d:e9:f0:77:23:3e:29:0b:5b:02:82:00: 0a:8b:5b:bd:8f:b5:f7:11:33:1b:3b:45:ec:cd:aa: 06:c9:66:8c:48:e6:e7:62:91:a5:e1:ae:0c:62:b4: 52:bc:2f:5a:74:85:ac:51:46:16:f7:11:64:ca:e1: 8e:27:f1:f2:b0:a8:99:58:c0:d3:7c:32:0d:67:a7: b8:ed:e1:f6:ae:b4:71:65:22:b1:9c:8e:95:ee:7d: 30:e4:da:00:85:c4:c1:a6:bd:2c:cb:dd:15:97:01: f7:0a:23:90:7a:1b:af:50:14:27:95:b5:0d:0f:fe: 0f:14:b5:94:8c:53:20:cd:1a:9c:df:57:d5:4b:3c: c5:fc:c0:93:7a:9b:99:49:bb:2f:4d:6c:d2:57:86: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:38:1C:88:DB:C8:B9:C8:CA:08:54:14:17:23:5E:D3:24:B9:E9:7B X509v3 Authority Key Identifier: keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ATgciNvIucjKCFQUFyNe0yS56Xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.225.0/24 Signature Algorithm: sha256WithRSAEncryption a9:1b:1e:9a:8d:68:16:87:4f:f8:d2:d2:1f:d0:ba:aa:58:9d: ef:85:5b:b7:ad:d8:a7:70:67:db:35:cf:f6:1f:ab:d6:8a:5b: 22:aa:a4:34:99:b2:88:71:dd:15:c5:d2:4e:a4:c6:a8:c6:1e: f5:1b:74:37:69:06:fa:ad:1a:83:33:d7:4e:79:87:e1:6f:31: 5f:15:e6:b2:80:00:a4:34:54:37:d9:2f:a9:87:fb:66:d2:6f: 92:79:57:66:87:00:da:fe:e1:ba:79:8f:16:ec:5e:8b:11:13: 59:16:48:b2:f3:fc:59:c4:10:7c:bb:81:87:52:6d:0e:5c:d8: 4d:5f:cb:34:b3:f5:7b:e7:09:56:b5:20:a1:76:8a:5b:7f:29: 0e:99:54:14:14:8f:8b:38:59:ab:94:a0:40:29:b1:30:dc:b8: 9d:77:f7:39:3b:f3:1d:4f:32:a4:f4:b2:92:d7:0f:7a:c2:6e: 63:e8:67:09:12:6a:cb:21:35:6b:06:c4:0d:46:62:6a:5a:b2: 5b:42:c0:8d:bb:f7:48:45:5c:ea:6b:17:d8:09:32:63:7d:2c: fa:45:aa:f7:68:f6:57:5d:6d:b2:75:c6:5a:2c:8e:6b:4a:df: c0:e1:c4:35:43:22:c7:e1:d3:91:80:59:d5:68:ed:c7:70:fa: d8:a2:27:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gZuXU9hFvGIKeEPYnGYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0 ZTQzZWEwHhcNMjYwMTAyMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTM4MWM4OGRiYzhiOWM4Y2EwODU0MTQxNzIzNWVkMzI0YjllOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCvitx2FFl6k7on2QKqREW2O/qCy a9OHOWbBXFsVwATBMVnq00ICx73T3kzz4M2kWl7HZdE936FJ/oKAMnFlPgtpWZqg t8MU31WLeUWSBaRCDvrTbnKGaR/jkKLbW8LEPsaa05XYTbx40Pid6fB3Iz4pC1sC ggAKi1u9j7X3ETMbO0XszaoGyWaMSObnYpGl4a4MYrRSvC9adIWsUUYW9xFkyuGO J/HysKiZWMDTfDINZ6e47eH2rrRxZSKxnI6V7n0w5NoAhcTBpr0sy90VlwH3CiOQ ehuvUBQnlbUND/4PFLWUjFMgzRqc31fVSzzF/MCTepuZSbsvTWzSV4ZO/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAE4HIjbyLnIyghUFBcjXtMkuel7MB8GA1UdIwQY MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt ZmVhMGFmZjM1OWY1LzEvQVRnY2lOdkl1Y2pLQ0ZRVUZ5TmUweVM1NlhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1 LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiLhMA0G CSqGSIb3DQEBCwUAA4IBAQCpGx6ajWgWh0/40tIf0LqqWJ3vhVu3rdincGfbNc/2 H6vWilsiqqQ0mbKIcd0VxdJOpMaoxh71G3Q3aQb6rRqDM9dOeYfhbzFfFeaygACk NFQ32S+ph/tm0m+SeVdmhwDa/uG6eY8W7F6LERNZFkiy8/xZxBB8u4GHUm0OXNhN X8s0s/V75wlWtSChdopbfykOmVQUFI+LOFmrlKBAKbEw3Lidd/c5O/MdTzKk9LKS 1w96wm5j6GcJEmrLITVrBsQNRmJqWrJbQsCNu/dIRVzqaxfYCTJjfSz6Rar3aPZX XW2ydcZaLI5rSt/A4cQ1QyLH4dORgFnVaO3HcPrYoid7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:51 2026 by rpki-client