This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa File: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (raw, json) Hash identifier: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM= Subject key identifier: 74:8D:0A:81:7C:49:23:B8:25:BC:EF:E6:7E:C0:CF:98:84:39:36:40 Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549 Certificate serial: 019B7B3679DA304CBEE5DBADBAA0F64E6FEC Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 194.147.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:79:da:30:4c:be:e5:db:ad:ba:a0:f6:4e:6f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e30c179cd42a8641583234501b18eff2515549 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=748d0a817c4923b825bcefe67ec0cf9884393640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:17:29:d5:d6:82:0f:f4:01:d2:22:5e:c8: 6c:2c:41:58:fa:7f:47:bd:f5:11:a3:b3:f1:89:23: 97:f9:51:5f:d8:80:be:08:c5:1e:36:72:5c:b5:a2: fb:15:70:23:1e:8b:97:93:f8:98:14:24:00:34:b8: a3:21:02:5f:73:1e:b5:20:16:0a:15:3e:c4:f0:83: c5:07:44:51:f7:77:31:4f:3d:bc:c2:e6:1a:e4:6e: d9:83:ee:d3:7d:57:75:40:10:a4:45:d1:99:92:9d: 99:26:da:ec:92:fc:06:db:ec:b2:59:c7:bf:85:eb: 40:71:16:2d:9a:d3:ef:0d:29:c9:a4:aa:b8:25:ab: bc:8b:f1:1d:cf:9a:2c:1d:21:ff:46:43:97:a1:0f: e1:b4:9e:a0:5a:f7:ee:a5:12:c1:f5:52:a8:ca:89: 8c:58:20:ed:2c:2c:a8:fb:22:a9:d3:ab:80:6f:a4: b0:f0:e9:9b:ed:4d:79:c8:a7:42:17:77:12:38:a9: 53:d3:38:67:4c:3e:21:e3:c9:a1:c6:49:4f:09:cb: 76:f9:64:f8:22:89:84:a4:9e:b7:19:53:23:0d:7e: 1b:f7:f5:73:12:ca:28:3d:09:56:35:e4:c0:08:9c: e4:da:77:48:e0:db:cd:6c:9a:86:fe:87:e6:8b:f4: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:0A:81:7C:49:23:B8:25:BC:EF:E6:7E:C0:CF:98:84:39:36:40 X509v3 Authority Key Identifier: keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.173.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ca:43:34:e0:42:d3:83:11:02:52:4e:26:34:80:b0:ee:91: 00:aa:2e:c1:6f:d0:f0:07:c1:32:d7:47:6d:d6:63:5a:c5:86: 24:0a:da:e4:34:f3:ca:61:e8:84:36:33:43:85:5f:3c:39:83: 2a:bc:39:9d:5c:39:90:59:5b:32:3c:ae:df:bf:3f:d3:49:aa: fa:fa:c3:ab:70:a2:ce:00:1e:06:59:f9:5d:26:33:ab:d1:15: 1b:35:5e:d0:09:af:bc:62:30:00:7f:0b:64:a2:b1:6b:00:a9: 51:eb:91:8e:7b:26:60:58:45:15:29:8b:1c:d0:4c:9e:c4:0f: 6f:15:7c:62:e0:46:01:85:39:34:cf:5e:85:02:2a:81:1e:3d: ee:53:74:74:9e:01:0f:a1:f2:80:1b:c3:fe:33:cb:21:21:7f: 3c:c1:3c:b0:64:13:64:e6:21:ee:01:10:0d:7a:75:58:27:67: 7c:6e:75:0e:b7:56:74:ac:46:20:44:5b:c3:7c:6c:eb:01:ff: fe:b1:67:52:b1:96:ee:8b:41:ad:53:6c:bf:47:37:b4:25:f4: ac:aa:cd:44:c4:dc:48:ac:df:69:d4:d0:9b:95:25:15:eb:85: 01:f6:31:53:6e:51:15:61:3e:39:b7:ac:e0:14:60:91:b6:ce: af:90:fd:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnnaMEy+5dutuqD2Tm/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1 MTU1NDkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDhkMGE4MTdjNDkyM2I4MjViY2VmZTY3ZWMwY2Y5ODg0MzkzNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OQXKdXWgg/0AdIiXshsLEFY+n9H vfURo7PxiSOX+VFf2IC+CMUeNnJctaL7FXAjHouXk/iYFCQANLijIQJfcx61IBYK FT7E8IPFB0RR93cxTz28wuYa5G7Zg+7TfVd1QBCkRdGZkp2ZJtrskvwG2+yyWce/ hetAcRYtmtPvDSnJpKq4Jau8i/Edz5osHSH/RkOXoQ/htJ6gWvfupRLB9VKoyomM WCDtLCyo+yKp06uAb6Sw8Omb7U15yKdCF3cSOKlT0zhnTD4h48mhxklPCct2+WT4 IomEpJ63GVMjDX4b9/VzEsooPQlWNeTACJzk2ndI4NvNbJqG/ofmi/TrwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSNCoF8SSO4Jbzv5n7Az5iEOTZAMB8GA1UdIwQY MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt YzU2M2Y3MzRhYjc0LzEvZEkwS2dYeEpJN2dsdk9fbWZzRFBtSVE1TmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0 LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOtMA0G CSqGSIb3DQEBCwUAA4IBAQCqykM04ELTgxECUk4mNICw7pEAqi7Bb9DwB8Ey10dt 1mNaxYYkCtrkNPPKYeiENjNDhV88OYMqvDmdXDmQWVsyPK7fvz/TSar6+sOrcKLO AB4GWfldJjOr0RUbNV7QCa+8YjAAfwtkorFrAKlR65GOeyZgWEUVKYsc0EyexA9v FXxi4EYBhTk0z16FAiqBHj3uU3R0ngEPofKAG8P+M8shIX88wTywZBNk5iHuARAN enVYJ2d8bnUOt1Z0rEYgRFvDfGzrAf/+sWdSsZbui0GtU2y/Rze0JfSsqs1ExNxI rN9p1NCblSUV64UB9jFTblEVYT45t6zgFGCRts6vkP03 -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:41 2026 by rpki-client