This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/_p0aUwYl-1dyjwOUm3O_rMzv5GQ.roa File: _p0aUwYl-1dyjwOUm3O_rMzv5GQ.roa (raw, json) Hash identifier: +4D+Vf2ieO3Nw9LR54Vk3JVkU75qug/HqlqupW5ZQ3c= Subject key identifier: FE:9D:1A:53:06:25:FB:57:72:8F:03:94:9B:73:BF:AC:CC:EF:E4:64 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B978ED6126871BC9B72B3058CCDA63E48 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/_p0aUwYl-1dyjwOUm3O_rMzv5GQ.roa Signing time: Wed 07 Jan 2026 08:24:39 +0000 ROA not before: Wed 07 Jan 2026 08:24:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211904 IP address blocks: 94.184.11.0/24 maxlen: 24 94.184.12.0/24 maxlen: 24 94.184.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:8e:d6:12:68:71:bc:9b:72:b3:05:8c:cd:a6:3e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 7 08:24:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe9d1a530625fb57728f03949b73bfacccefe464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:cd:58:52:62:1b:ae:f2:a4:0b:ab:c2:2c: 00:fc:97:8f:12:77:88:c3:a5:d1:76:cc:b4:ff:ea: 10:d5:4b:a3:2a:8b:87:83:a9:c9:ef:5f:00:d5:2b: 82:34:0f:f1:df:b0:be:a3:c1:a8:e8:ed:eb:24:72: 32:3c:49:1c:11:a5:fa:57:3f:f0:b6:ae:7a:f9:7f: 6c:8a:16:ae:af:18:d7:39:8d:e0:4d:88:20:64:10: 48:ee:3b:5c:89:4a:dd:92:1a:26:eb:a9:cd:f6:0a: ca:15:bc:a2:80:71:c7:29:53:e0:f7:f7:54:a7:d3: d3:7e:25:d7:f8:43:ce:0f:3e:48:08:9c:2b:d8:6f: 3c:f9:28:41:3e:55:29:02:2b:4f:0e:73:89:d5:f1: 22:0a:b0:34:97:32:71:b2:dd:b1:81:65:3b:23:35: c8:99:e5:3e:2f:83:ea:62:99:dd:4a:d8:b3:b9:05: e4:81:e1:65:58:d8:45:05:ca:0f:0d:21:f7:cb:83: 0c:92:54:3f:a0:eb:fc:86:7f:ca:1e:c1:45:fa:57: 49:d8:3a:ae:77:b2:e1:8b:e4:c4:f8:e0:cb:cd:a4: cf:1f:ab:29:47:98:1a:0d:7f:e6:ef:22:01:ef:21: 37:13:89:da:e1:fc:cd:05:ea:9f:6d:3c:0c:86:17: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9D:1A:53:06:25:FB:57:72:8F:03:94:9B:73:BF:AC:CC:EF:E4:64 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/_p0aUwYl-1dyjwOUm3O_rMzv5GQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.11.0-94.184.13.255 Signature Algorithm: sha256WithRSAEncryption 2f:83:6a:45:a1:06:09:42:a5:70:9c:28:dd:9d:a2:31:e9:6f: 4d:85:d4:0b:40:c9:28:7f:16:f1:84:c9:92:c8:de:fc:6f:c0: 23:eb:32:e2:5d:a0:cb:ee:a5:0e:da:12:07:c3:b3:65:36:0d: 7d:82:d3:bc:10:d1:8a:6f:8f:b1:10:d2:5a:a7:12:ca:eb:10: 3e:8f:62:af:6b:a0:e0:8c:1e:a6:dc:44:6e:56:7b:0b:71:e8: 02:fa:29:8a:58:93:8b:1a:48:ab:40:57:26:0d:24:7c:40:00: b5:86:90:90:1f:10:f2:25:ab:c7:db:4f:76:b5:f4:1d:e1:4c: d4:69:b3:30:37:41:6a:ec:dc:2f:85:20:cd:65:7b:8e:fa:b0: d5:5e:3d:96:72:0a:19:6d:d0:2c:e5:8b:89:33:6f:41:2a:0a: 13:ab:c1:a7:77:b6:65:c3:7a:72:84:8c:c7:ca:4c:94:7e:96: fb:20:68:9e:2f:69:80:84:df:cd:c1:d2:d3:34:86:22:00:df: ec:67:12:db:06:16:48:12:e6:96:80:7b:de:0d:77:71:38:8f: 48:ba:16:33:3b:1f:79:50:d0:44:b5:86:9c:e5:fb:74:09:ea: 5c:a8:2c:aa:9e:35:4f:bd:6e:c6:8b:45:10:56:52:0b:61:47: cf:93:89:3d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuXjtYSaHG8m3KzBYzNpj5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTA3MDgyNDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTlkMWE1MzA2MjVmYjU3NzI4ZjAzOTQ5YjczYmZhY2NjZWZlNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS3NWFJiG67ypAurwiwA/JePEneI w6XRdsy0/+oQ1UujKouHg6nJ718A1SuCNA/x37C+o8Go6O3rJHIyPEkcEaX6Vz/w tq56+X9sihaurxjXOY3gTYggZBBI7jtciUrdkhom66nN9grKFbyigHHHKVPg9/dU p9PTfiXX+EPODz5ICJwr2G88+ShBPlUpAitPDnOJ1fEiCrA0lzJxst2xgWU7IzXI meU+L4PqYpndStizuQXkgeFlWNhFBcoPDSH3y4MMklQ/oOv8hn/KHsFF+ldJ2Dqu d7Lhi+TE+ODLzaTPH6spR5gaDX/m7yIB7yE3E4na4fzNBeqfbTwMhhfuAQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFP6dGlMGJftXco8DlJtzv6zM7+RkMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvX3AwYVV3WWwtMWR5andPVW0zT19yTXp2NUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABeuAsD BAFeuAwwDQYJKoZIhvcNAQELBQADggEBAC+DakWhBglCpXCcKN2dojHpb02F1AtA ySh/FvGEyZLI3vxvwCPrMuJdoMvupQ7aEgfDs2U2DX2C07wQ0Ypvj7EQ0lqnEsrr ED6PYq9roOCMHqbcRG5Wewtx6AL6KYpYk4saSKtAVyYNJHxAALWGkJAfEPIlq8fb T3a19B3hTNRpszA3QWrs3C+FIM1le476sNVePZZyChlt0Czli4kzb0EqChOrwad3 tmXDenKEjMfKTJR+lvsgaJ4vaYCE383B0tM0hiIA3+xnEtsGFkgS5paAe94Nd3E4 j0i6FjM7H3lQ0ES1hpzl+3QJ6lyoLKqeNU+9bsaLRRBWUgthR8+TiT0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:10 2026 by rpki-client