This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/i34QcCXHBTz4i7dARxhxMvU6cMI.roa File: i34QcCXHBTz4i7dARxhxMvU6cMI.roa (raw, json) Hash identifier: cLmYe2PhCggVytEcDwfmBz/hTRq+Jq4kQ9LDTbCEPVs= Subject key identifier: 8B:7E:10:70:25:C7:05:3C:F8:8B:B7:40:47:18:71:32:F5:3A:70:C2 Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9 Certificate serial: 019B77C696BC51877A6C40E605A21AD79C94 Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/i34QcCXHBTz4i7dARxhxMvU6cMI.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42093 IP address blocks: 193.169.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:bc:51:87:7a:6c:40:e6:05:a2:1a:d7:9c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7e107025c7053cf88bb74047187132f53a70c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:6a:ee:f6:89:35:a2:3f:e0:83:11:1e:32: fa:27:26:30:49:16:f5:ba:46:c3:f3:79:dd:f8:2c: 36:61:a9:7c:d4:ab:b4:23:ee:c3:c8:5a:29:72:7d: 90:b9:e0:3e:7f:5b:96:a5:15:9e:61:fb:7d:bb:9b: 95:ff:ee:18:4a:18:28:47:c4:42:a0:fe:92:c8:b0: f6:8e:c6:14:6d:25:8b:6c:5f:88:63:e8:81:81:d4: 64:44:5a:52:bc:52:8c:98:ea:6a:b8:29:ba:96:1f: 9b:0c:d8:c5:23:d0:16:72:0e:15:56:02:c5:7d:43: 85:0a:2a:21:f3:e5:da:8c:5c:23:fc:76:9a:be:fd: 6c:78:ab:93:5e:24:67:c3:24:72:9c:d8:ec:0a:7f: 9a:6e:3a:80:3c:79:cc:eb:dc:b6:11:c1:e2:7c:1d: 2f:48:70:99:01:a5:4c:95:97:05:e0:33:d0:64:68: ce:e3:ac:30:6e:ba:b5:69:3a:f3:6d:5a:c2:e0:79: ba:2b:0f:86:18:f1:a5:61:88:79:0e:05:75:33:a4: 18:7b:a6:e9:87:a1:d4:97:53:48:f7:14:ed:3a:15: 10:ea:6e:74:00:e7:11:e1:15:c2:dc:14:bf:14:d2: 9a:d3:0f:60:20:a0:dd:29:0b:db:c5:1d:d0:09:7d: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:10:70:25:C7:05:3C:F8:8B:B7:40:47:18:71:32:F5:3A:70:C2 X509v3 Authority Key Identifier: keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/i34QcCXHBTz4i7dARxhxMvU6cMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.68.0/23 Signature Algorithm: sha256WithRSAEncryption 89:61:f6:28:47:3c:e3:9b:67:76:83:b1:37:3f:36:e5:a0:5a: b6:0d:9d:a0:f2:7a:f4:64:49:0d:2f:25:ec:91:fe:2b:e6:a1: 14:58:b4:2f:71:6f:cb:c7:8c:e9:42:4c:c1:83:59:d5:f3:29: 16:4f:f7:e0:3c:3f:58:42:79:76:84:1e:47:fe:8a:b7:3f:90: 7e:83:a9:80:07:84:28:90:ee:b5:cf:5e:35:2c:ef:43:19:ac: 55:44:16:5b:cd:4b:dd:b3:42:0a:16:4a:09:5f:6a:d4:27:e4: bc:ab:a9:15:f5:a1:cf:b7:1c:db:d8:72:f9:bf:79:4b:79:ae: 49:cf:0d:24:58:ff:d5:e0:8c:73:6a:a2:c5:6f:84:be:6a:c6: f6:3c:fa:44:ad:ac:1c:de:2c:e1:d8:e1:44:21:30:b9:ad:53: 9c:60:f9:93:e3:fd:d3:8c:3d:9a:9f:d9:20:a7:fe:76:92:20: 37:03:53:0a:00:0e:1f:e4:c4:42:74:31:43:98:24:c1:e5:3a: f9:fd:d0:b3:0d:d0:74:5a:3c:c7:47:8a:fd:cf:21:a5:ac:d0: ce:51:86:e9:16:d4:50:13:a5:0b:34:ee:eb:fa:09:83:e9:af: 4a:0b:77:c9:e9:86:b0:e1:32:48:32:cb:1f:7d:2e:bd:20:13: ef:7f:32:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpa8UYd6bEDmBaIa15yUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZWZiZDFkNWUxYWM3MzVmNmYyMzUwOWNmMmEwZWI0YTFm OWI0ZTkwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdlMTA3MDI1YzcwNTNjZjg4YmI3NDA0NzE4NzEzMmY1M2E3MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5lq7vaJNaI/4IMRHjL6JyYwSRb1 ukbD83nd+Cw2Yal81Ku0I+7DyFopcn2QueA+f1uWpRWeYft9u5uV/+4YShgoR8RC oP6SyLD2jsYUbSWLbF+IY+iBgdRkRFpSvFKMmOpquCm6lh+bDNjFI9AWcg4VVgLF fUOFCioh8+XajFwj/Haavv1seKuTXiRnwyRynNjsCn+abjqAPHnM69y2EcHifB0v SHCZAaVMlZcF4DPQZGjO46wwbrq1aTrzbVrC4Hm6Kw+GGPGlYYh5DgV1M6QYe6bp h6HUl1NI9xTtOhUQ6m50AOcR4RXC3BS/FNKa0w9gIKDdKQvbxR3QCX1ZFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIt+EHAlxwU8+Iu3QEcYcTL1OnDCMB8GA1UdIwQY MBaAFBTvvR1eGsc19vI1Cc8qDrSh+bTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk8tOUhWNGF4elgyOGpVSnp5b090S0g1dE9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zOGVjNzYtZTZhOS00MzI3LWIzMjIt NTBmMWE4NTg1ZjA5LzEvaTM0UWNDWEhCVHo0aTdkQVJ4aHhNdlU2Y01JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zOGVjNzYtZTZhOS00MzI3LWIzMjItNTBmMWE4NTg1ZjA5 LzEvRk8tOUhWNGF4elgyOGpVSnp5b090S0g1dE9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwalEMA0G CSqGSIb3DQEBCwUAA4IBAQCJYfYoRzzjm2d2g7E3PzbloFq2DZ2g8nr0ZEkNLyXs kf4r5qEUWLQvcW/Lx4zpQkzBg1nV8ykWT/fgPD9YQnl2hB5H/oq3P5B+g6mAB4Qo kO61z141LO9DGaxVRBZbzUvds0IKFkoJX2rUJ+S8q6kV9aHPtxzb2HL5v3lLea5J zw0kWP/V4IxzaqLFb4S+asb2PPpErawc3izh2OFEITC5rVOcYPmT4/3TjD2an9kg p/52kiA3A1MKAA4f5MRCdDFDmCTB5Tr5/dCzDdB0WjzHR4r9zyGlrNDOUYbpFtRQ E6ULNO7r+gmD6a9KC3fJ6Yaw4TJIMssffS69IBPvfzLk -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:12 2026 by rpki-client