This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/IdCieT_FXqDI14dT8duUpcsBKXs.roa File: IdCieT_FXqDI14dT8duUpcsBKXs.roa (raw, json) Hash identifier: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA= Subject key identifier: 21:D0:A2:79:3F:C5:5E:A0:C8:D7:87:53:F1:DB:94:A5:CB:01:29:7B Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48 Certificate serial: 019B7BA513378F1A6C0A8F86BF65301DF0E8 Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/IdCieT_FXqDI14dT8duUpcsBKXs.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31493 IP address blocks: 194.33.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:13:37:8f:1a:6c:0a:8f:86:bf:65:30:1d:f0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21d0a2793fc55ea0c8d78753f1db94a5cb01297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:49:9a:7d:01:14:70:73:19:34:5d:a1:31: 9b:a7:25:db:fc:04:52:8d:d3:cf:6f:9f:3c:5b:3c: 04:df:96:52:70:90:7d:90:e3:72:3c:a7:8a:5c:cd: aa:47:f4:e6:c2:3b:3d:70:c2:0f:f5:dd:a2:1c:a1: cf:e2:9d:ec:22:7a:0d:2d:b3:cd:35:a8:21:79:63: 53:26:35:b6:0c:d1:d4:e0:52:25:58:24:fc:6a:13: e5:ce:e3:95:db:2b:81:9a:bb:5a:a5:7b:7f:76:58: 9f:8e:1f:42:c3:ee:d8:52:1c:21:36:a6:fb:84:8f: ca:cc:29:ea:59:dc:41:0d:18:5c:73:4e:f7:ab:39: 5a:23:b5:d1:af:56:f0:1f:27:47:f4:20:b9:dc:e9: 0b:fe:33:ab:19:08:58:b7:db:ab:90:ca:bc:58:36: 1f:b8:9d:93:8c:6a:17:78:71:67:f5:92:07:f3:9d: 9e:a6:af:91:ec:4f:98:9a:92:b8:0c:1c:10:73:fd: 28:53:69:7d:4a:2a:48:e7:93:af:21:6d:8d:e1:5d: df:23:9b:65:8a:2b:f2:de:97:9a:f7:45:7b:63:98: dd:ad:29:f3:3e:70:1d:a6:9b:23:1f:a8:56:24:25: 15:da:b7:37:32:0f:eb:bc:55:34:2e:cf:d9:8b:97: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:A2:79:3F:C5:5E:A0:C8:D7:87:53:F1:DB:94:A5:CB:01:29:7B X509v3 Authority Key Identifier: keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/IdCieT_FXqDI14dT8duUpcsBKXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.63.0/24 Signature Algorithm: sha256WithRSAEncryption 79:03:df:32:03:75:65:3c:37:04:28:68:cb:5e:48:33:78:d4: 4c:c1:77:7d:9d:18:4e:7f:4c:d0:a0:3c:aa:c5:02:36:3f:da: a8:0a:81:3a:5d:8b:ec:3a:c8:6a:f8:6b:dc:06:90:80:87:de: 05:58:3a:a6:68:e1:6a:84:42:98:60:5d:9f:07:1b:95:6b:f3: b7:20:60:de:93:d4:44:93:ce:d6:97:7a:0d:f0:6e:4a:6c:74: 38:6f:7f:36:aa:d5:35:3f:c0:82:82:78:40:45:84:0d:b2:a0: 83:ba:a7:7c:91:a3:f3:5a:40:70:a4:b2:09:ae:f1:48:28:14: 52:4f:6c:da:08:eb:71:f1:54:0a:da:8a:32:d1:80:d5:4b:1e: 63:20:63:9e:c5:ad:68:8b:8c:1a:51:c1:f7:78:0b:84:93:f8: 03:48:85:84:c1:83:d8:bc:ea:eb:f1:27:f1:02:69:c7:6b:77: f3:29:bf:dd:53:0a:8a:6b:62:9a:98:e6:e8:64:31:e7:bc:7b: c1:b1:6d:4c:03:5b:39:f3:02:5e:5d:1d:8b:c4:0a:3b:15:d0: 94:e2:be:fc:a5:5a:b2:ff:4f:08:d0:a2:3b:20:d3:22:ab:eb: 48:fe:33:fd:57:5e:21:76:1e:d3:be:71:82:53:d4:1f:5f:85: 03:f1:40:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRM3jxpsCo+Gv2UwHfDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3N2ZmNThkMTlhZjEwYmRhNGZjYjBjZjMxZTU4ZGUwOTRi YmJiNDgwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWQwYTI3OTNmYzU1ZWEwYzhkNzg3NTNmMWRiOTRhNWNiMDEyOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxJmn0BFHBzGTRdoTGbpyXb/ARS jdPPb588WzwE35ZScJB9kONyPKeKXM2qR/Tmwjs9cMIP9d2iHKHP4p3sInoNLbPN NagheWNTJjW2DNHU4FIlWCT8ahPlzuOV2yuBmrtapXt/dlifjh9Cw+7YUhwhNqb7 hI/KzCnqWdxBDRhcc073qzlaI7XRr1bwHydH9CC53OkL/jOrGQhYt9urkMq8WDYf uJ2TjGoXeHFn9ZIH852epq+R7E+YmpK4DBwQc/0oU2l9SipI55OvIW2N4V3fI5tl iivy3pea90V7Y5jdrSnzPnAdppsjH6hWJCUV2rc3Mg/rvFU0Ls/Zi5dXnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCHQonk/xV6gyNeHU/HblKXLASl7MB8GA1UdIwQY MBaAFMd/9Y0ZrxC9pPywzzHljeCUu7tIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUt MGE2ZjhiMWM2NTRkLzEvSWRDaWVUX0ZYcURJMTRkVDhkdVVwY3NCS1hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84NDY2MDctMDBjOC00MDFkLWJjZmUtMGE2ZjhiMWM2NTRk LzEveDNfMWpSbXZFTDJrX0xEUE1lV040SlM3dTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiE/MA0G CSqGSIb3DQEBCwUAA4IBAQB5A98yA3VlPDcEKGjLXkgzeNRMwXd9nRhOf0zQoDyq xQI2P9qoCoE6XYvsOshq+GvcBpCAh94FWDqmaOFqhEKYYF2fBxuVa/O3IGDek9RE k87Wl3oN8G5KbHQ4b382qtU1P8CCgnhARYQNsqCDuqd8kaPzWkBwpLIJrvFIKBRS T2zaCOtx8VQK2ooy0YDVSx5jIGOexa1oi4waUcH3eAuEk/gDSIWEwYPYvOrr8Sfx AmnHa3fzKb/dUwqKa2KamOboZDHnvHvBsW1MA1s58wJeXR2LxAo7FdCU4r78pVqy /08I0KI7INMiq+tI/jP9V14hdh7TvnGCU9QfX4UD8UCj -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:39 2026 by rpki-client