This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/aS9r4UoYTN7i9o5wIizi1fsZBIU.roa File: aS9r4UoYTN7i9o5wIizi1fsZBIU.roa (raw, json) Hash identifier: TJzQS1ndk+khaqZbiPWAuVizhDR9e6zPgjRjzntOgMU= Subject key identifier: 69:2F:6B:E1:4A:18:4C:DE:E2:F6:8E:70:22:2C:E2:D5:FB:19:04:85 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC466B414DD70130953EB03FA34F3 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/aS9r4UoYTN7i9o5wIizi1fsZBIU.roa Signing time: Fri 02 Jan 2026 08:19:59 +0000 ROA not before: Fri 02 Jan 2026 08:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211056 IP address blocks: 94.184.14.0/24 maxlen: 24 94.184.15.0/24 maxlen: 24 94.184.19.0/24 maxlen: 24 94.184.20.0/24 maxlen: 24 94.184.23.0/24 maxlen: 24 94.184.24.0/24 maxlen: 24 94.184.25.0/24 maxlen: 24 94.184.26.0/24 maxlen: 24 94.184.27.0/24 maxlen: 24 94.184.28.0/24 maxlen: 24 94.184.29.0/24 maxlen: 24 94.184.30.0/24 maxlen: 24 94.184.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c4:66:b4:14:dd:70:13:09:53:eb:03:fa:34:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=692f6be14a184cdee2f68e70222ce2d5fb190485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:37:11:1e:aa:db:bf:b1:24:59:82:25:16:4c: 69:24:c2:86:8f:5c:20:2c:92:f5:16:1e:39:bb:7d: 0c:c5:9d:dd:0b:f1:04:30:a8:0a:92:b4:fd:52:60: 81:ef:ad:2a:a2:0c:4b:62:e8:87:7d:c9:93:82:51: a9:cf:27:14:a8:96:d6:a4:e3:80:da:df:a4:42:b0: b8:d2:66:04:aa:49:4a:b3:1f:e3:d3:7c:5b:32:d4: 46:36:ff:71:93:1d:12:4d:74:5e:2f:e6:f8:c8:f2: 89:8a:12:c2:55:d8:e3:7c:cc:51:a9:e4:22:ab:31: 28:ce:a8:c4:bc:ac:f1:13:f3:10:59:a2:20:da:bb: 61:5d:65:70:80:8d:32:e4:72:47:bf:de:99:56:a7: d5:4d:28:4c:33:82:4f:b7:75:d1:9d:7d:57:8f:c2: df:8f:dc:a2:b7:22:6f:ec:37:f7:3d:31:db:3e:19: fc:e4:28:77:d2:a6:12:4d:ff:d7:7a:f3:27:32:4a: d3:0b:a8:97:14:82:32:e5:a0:ee:ab:7f:0a:26:16: a9:6b:5d:e7:cc:2b:95:91:be:2a:11:d9:bf:cb:8d: a1:57:e3:a1:b8:0d:04:66:65:d8:07:a9:4e:c7:7c: 02:50:f0:86:c7:a6:41:2d:95:8f:17:f6:c5:66:86: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:6B:E1:4A:18:4C:DE:E2:F6:8E:70:22:2C:E2:D5:FB:19:04:85 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/aS9r4UoYTN7i9o5wIizi1fsZBIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.14.0/23 94.184.19.0-94.184.20.255 94.184.23.0-94.184.31.255 Signature Algorithm: sha256WithRSAEncryption 3a:80:67:5e:c4:2d:5b:d8:2e:96:14:ed:9e:8b:61:52:75:ce: 40:c9:b9:90:7d:53:54:cb:04:63:b7:6d:f4:ae:59:87:4d:6f: 12:81:30:ba:2f:fe:8e:56:89:9c:db:a5:9c:47:98:ba:bf:50: 4c:5d:08:fe:20:47:aa:f8:38:4e:bd:cd:ff:6b:50:16:2b:b2: f5:57:96:88:06:eb:1f:be:d1:b9:6e:14:cf:1f:dd:c6:90:a5: dd:dc:d3:77:e9:86:4b:ef:07:43:a3:79:1d:23:f9:42:71:7c: 22:ec:8a:60:04:fa:e4:dd:d3:99:29:93:47:2c:ba:69:f9:70: 07:84:ee:44:fd:24:53:2b:32:77:a7:0b:cb:fa:cc:32:c0:ed: a0:a5:5b:cc:11:3b:61:34:d7:7e:1e:67:b8:cb:44:4a:21:92: eb:e9:c8:c9:12:2f:23:08:06:dd:5e:77:9f:86:a0:a9:35:7b: 21:a6:3b:0c:66:3f:5e:be:7e:0a:79:47:42:80:23:be:82:3f: 22:ea:b8:64:ee:d6:5c:f4:a2:01:d3:63:bb:11:2e:a0:4d:4b: 9e:de:01:d6:e2:53:c4:1d:9e:5a:38:08:42:8f:d4:bb:e2:c6: f6:42:0c:d4:63:2b:2f:cf:68:12:63:21:73:cd:73:2e:03:d6: 70:4a:8a:50 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9ysRmtBTdcBMJU+sD+jTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTJmNmJlMTRhMTg0Y2RlZTJmNjhlNzAyMjJjZTJkNWZiMTkwNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zcRHqrbv7EkWYIlFkxpJMKGj1wg LJL1Fh45u30MxZ3dC/EEMKgKkrT9UmCB760qogxLYuiHfcmTglGpzycUqJbWpOOA 2t+kQrC40mYEqklKsx/j03xbMtRGNv9xkx0STXReL+b4yPKJihLCVdjjfMxRqeQi qzEozqjEvKzxE/MQWaIg2rthXWVwgI0y5HJHv96ZVqfVTShMM4JPt3XRnX1Xj8Lf j9yityJv7Df3PTHbPhn85Ch30qYSTf/XevMnMkrTC6iXFIIy5aDuq38KJhapa13n zCuVkb4qEdm/y42hV+OhuA0EZmXYB6lOx3wCUPCGx6ZBLZWPF/bFZoZ6VQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGkva+FKGEze4vaOcCIs4tX7GQSFMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvYVM5cjRVb1lUTjdpOW81d0lpemkxZnNaQklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBXrgOMAwD BABeuBMDBABeuBQwDAMEAF64FwMEBV64ADANBgkqhkiG9w0BAQsFAAOCAQEAOoBn XsQtW9gulhTtnothUnXOQMm5kH1TVMsEY7dt9K5Zh01vEoEwui/+jlaJnNulnEeY ur9QTF0I/iBHqvg4Tr3N/2tQFiuy9VeWiAbrH77RuW4Uzx/dxpCl3dzTd+mGS+8H Q6N5HSP5QnF8IuyKYAT65N3TmSmTRyy6aflwB4TuRP0kUysyd6cLy/rMMsDtoKVb zBE7YTTXfh5nuMtESiGS6+nIyRIvIwgG3V53n4agqTV7IaY7DGY/Xr5+CnlHQoAj voI/Iuq4ZO7WXPSiAdNjuxEuoE1Lnt4B1uJTxB2eWjgIQo/Uu+LG9kIM1GMrL89o EmMhc81zLgPWcEqKUA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:17 2026 by rpki-client