This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/rNttweQh2PLctodsZ8mGF8Xdou4.roa File: rNttweQh2PLctodsZ8mGF8Xdou4.roa (raw, json) Hash identifier: RnrUAyBZsGmfOkyGXTt4MMRoQ1xT0nGSE3thOB+UT3c= Subject key identifier: AC:DB:6D:C1:E4:21:D8:F2:DC:B6:87:6C:67:C9:86:17:C5:DD:A2:EE Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Certificate serial: 019B77C6D71DA0E9935F311033AEDCF8B124 Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/rNttweQh2PLctodsZ8mGF8Xdou4.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 192.94.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d7:1d:a0:e9:93:5f:31:10:33:ae:dc:f8:b1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acdb6dc1e421d8f2dcb6876c67c98617c5dda2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:5d:19:66:bf:c6:c5:f5:be:60:1c:e3:98: 7d:b6:36:ae:65:5e:82:ef:af:4d:a0:ac:5e:30:d7: 26:68:85:c5:a5:b7:08:4d:ed:52:96:6c:5c:3e:c8: 04:2b:ce:16:b4:c5:8d:82:d5:de:b1:15:8e:b0:67: d4:e6:ed:51:c9:07:2d:f3:a9:d7:58:fc:93:5c:82: b9:62:17:74:f1:5a:99:be:c7:fa:4e:66:53:73:fd: 30:40:91:ce:48:5c:70:c1:fa:f8:f2:e6:fc:46:6c: 38:06:b1:ac:26:bd:ff:36:19:a0:84:dc:76:5f:0b: e4:2f:2a:f6:ff:8b:8b:60:55:2c:39:28:9c:e8:8d: e2:a6:50:83:eb:b8:72:67:7f:41:7e:88:ad:ba:7c: eb:31:41:6c:2c:c8:13:e1:ca:f4:79:53:2d:7e:25: 3e:9f:8f:ef:05:6f:d7:17:99:b3:2b:61:8f:1c:e4: 3f:09:9f:6e:5f:e6:2f:fd:44:38:10:d6:9f:87:b9: 6e:92:b9:d9:eb:97:e4:01:a5:cd:8c:94:cc:a5:fe: 26:a7:70:07:1c:b9:41:14:27:07:46:52:38:cd:5b: 78:d4:49:67:21:33:a5:07:e1:ca:a3:e7:c8:32:6f: 09:4e:07:1f:a0:49:d6:99:84:42:26:de:94:da:5d: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DB:6D:C1:E4:21:D8:F2:DC:B6:87:6C:67:C9:86:17:C5:DD:A2:EE X509v3 Authority Key Identifier: keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/rNttweQh2PLctodsZ8mGF8Xdou4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.94.226.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ab:3c:18:79:89:9a:11:8f:2a:97:d9:0d:f0:38:31:ed:52: 24:43:fd:42:75:74:09:d6:1e:49:9b:c1:21:7d:7a:18:ea:66: be:16:6f:12:d4:5c:7e:df:8d:ca:22:ca:36:c5:92:14:51:3e: d3:ae:04:3b:57:d0:1e:40:ac:fc:11:a3:97:51:76:d7:80:5d: 92:a8:b6:ef:c9:ef:d0:bc:41:1f:b1:d7:80:a9:22:5a:30:3a: 6e:ee:a4:c4:12:28:96:54:0c:b8:f8:d3:94:8e:1c:ae:d8:7b: b6:f4:b6:fc:48:d5:5c:33:51:5f:2b:f0:f3:13:a1:cc:6d:ee: 65:eb:1f:74:b6:b2:5f:a8:a7:61:e1:13:3e:7e:ae:26:d4:1f: 81:a4:87:5d:c2:4b:a4:16:af:46:83:5f:5f:56:a0:bc:83:0f: a6:aa:7d:78:d4:09:6f:c7:f1:9d:ae:4f:a6:a2:e9:9d:93:8e: 5b:98:aa:88:40:e3:f4:54:6c:af:e8:b9:b5:06:55:ee:d9:c0: 7f:58:18:03:81:5a:af:61:df:9f:e9:a0:a2:32:15:07:1b:39: 02:f9:f1:af:f6:a3:53:0f:26:24:ae:ca:b7:54:a1:3a:0a:5a: c9:4c:d0:c1:6f:cb:c7:01:78:25:fe:c8:49:10:89:1c:b1:82: f9:7c:03:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtcdoOmTXzEQM67c+LEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey MTVlYWEwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2RiNmRjMWU0MjFkOGYyZGNiNjg3NmM2N2M5ODYxN2M1ZGRhMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fJdGWa/xsX1vmAc45h9tjauZV6C 769NoKxeMNcmaIXFpbcITe1SlmxcPsgEK84WtMWNgtXesRWOsGfU5u1RyQct86nX WPyTXIK5Yhd08VqZvsf6TmZTc/0wQJHOSFxwwfr48ub8Rmw4BrGsJr3/NhmghNx2 XwvkLyr2/4uLYFUsOSic6I3iplCD67hyZ39BfoitunzrMUFsLMgT4cr0eVMtfiU+ n4/vBW/XF5mzK2GPHOQ/CZ9uX+Yv/UQ4ENafh7lukrnZ65fkAaXNjJTMpf4mp3AH HLlBFCcHRlI4zVt41ElnITOlB+HKo+fIMm8JTgcfoEnWmYRCJt6U2l0N/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKzbbcHkIdjy3LaHbGfJhhfF3aLuMB8GA1UdIwQY MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt OGNlNDE3OTIzMmM4LzEvck50dHdlUWgyUExjdG9kc1o4bUdGOFhkb3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4 LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF7iMA0G CSqGSIb3DQEBCwUAA4IBAQAfqzwYeYmaEY8ql9kN8Dgx7VIkQ/1CdXQJ1h5Jm8Eh fXoY6ma+Fm8S1Fx+343KIso2xZIUUT7TrgQ7V9AeQKz8EaOXUXbXgF2SqLbvye/Q vEEfsdeAqSJaMDpu7qTEEiiWVAy4+NOUjhyu2Hu29Lb8SNVcM1FfK/DzE6HMbe5l 6x90trJfqKdh4RM+fq4m1B+BpIddwkukFq9Gg19fVqC8gw+mqn141Alvx/Gdrk+m oumdk45bmKqIQOP0VGyv6Lm1BlXu2cB/WBgDgVqvYd+f6aCiMhUHGzkC+fGv9qNT DyYkrsq3VKE6ClrJTNDBb8vHAXgl/shJEIkcsYL5fAPs -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client