This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/xK8Uva9pKu8SiEzAfAFxiyy7kf4.roa File: xK8Uva9pKu8SiEzAfAFxiyy7kf4.roa (raw, json) Hash identifier: d6gMqqQgOngwVzvKSMbg+S1gXWQvMt1hGMdLmOwF4eo= Subject key identifier: C4:AF:14:BD:AF:69:2A:EF:12:88:4C:C0:7C:01:71:8B:2C:BB:91:FE Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e Certificate serial: 019B7CED590E581557159666675ACC80E8BC Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/xK8Uva9pKu8SiEzAfAFxiyy7kf4.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202319 IP address blocks: 185.166.104.0/24 maxlen: 24 185.166.106.0/24 maxlen: 24 194.34.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:59:0e:58:15:57:15:96:66:67:5a:cc:80:e8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4af14bdaf692aef12884cc07c01718b2cbb91fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:f6:74:f7:8d:92:f6:4e:e8:f8:f4:fe:71: 59:6a:75:fc:fd:9e:f5:58:79:0e:45:0a:e7:72:86: 72:27:7e:9d:e2:a0:f6:dc:89:5d:82:26:a7:63:fd: bd:3d:00:d9:9c:78:d4:76:8b:01:a9:99:6a:ba:df: 6c:6f:b7:d7:18:62:2f:d1:88:c8:0e:e2:1a:42:10: 81:fe:4c:ac:44:88:20:38:eb:8a:e8:63:f7:cc:8b: 1a:8c:b7:47:22:93:2d:81:a4:46:f9:a8:a6:59:a1: d7:e8:8e:9f:8e:87:b3:35:d8:cd:9b:73:d9:e6:84: 53:62:a5:91:00:98:24:b2:70:e1:ce:c0:58:8b:b3: 3b:f6:36:33:ae:59:2e:c8:2b:62:48:d7:d2:cb:00: c6:0b:d1:89:25:21:1c:2a:15:6f:1c:95:21:96:ce: e9:7d:22:3e:68:09:70:8b:84:86:e7:4f:1e:37:00: 35:91:8d:78:5c:be:dd:29:2d:ca:e2:99:61:4d:91: 00:6e:99:96:39:e6:fd:bb:0b:39:a2:9f:0c:59:ba: 3f:b7:d9:94:2a:1f:6c:9e:30:1d:58:4b:1c:e5:0c: 59:ca:94:e2:e5:4f:c8:d5:8d:48:37:70:6d:34:de: d8:1b:46:a3:00:53:f4:74:ed:e0:44:6f:59:de:3d: 67:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AF:14:BD:AF:69:2A:EF:12:88:4C:C0:7C:01:71:8B:2C:BB:91:FE X509v3 Authority Key Identifier: keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/xK8Uva9pKu8SiEzAfAFxiyy7kf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.104.0/24 185.166.106.0/24 194.34.163.0/24 Signature Algorithm: sha256WithRSAEncryption 03:5e:b7:4e:7d:0f:9a:b9:b2:28:eb:c8:bf:31:15:5f:c5:74: 17:b8:28:79:35:0b:74:e0:5d:df:94:42:af:54:e5:d0:82:f1: 63:c9:c4:e8:85:49:d0:da:e2:dc:6f:d9:eb:87:bc:b2:b7:b8: 6e:3f:36:43:38:c9:e7:22:ec:e5:e7:55:d2:80:24:5e:07:de: 01:f5:51:d2:fb:79:5b:18:9c:4c:be:4d:13:3d:55:08:a9:b5: b3:b6:14:cf:f0:9c:79:e8:ed:02:9c:13:ee:f1:8b:d5:e4:7b: 6f:01:a6:e1:40:bc:09:59:d5:dc:a4:41:8b:ca:31:c5:93:e6: d4:84:1a:46:4b:c7:5a:73:b9:7e:42:a0:a8:48:c0:ed:bf:08: d3:9c:1d:e2:4f:2e:60:69:9e:ed:63:ba:ed:5e:d7:d8:ff:e2: 24:95:a6:af:9e:06:e8:1a:74:1c:ce:c3:69:a0:02:4b:be:b1: 86:e2:a0:c3:73:34:2d:9b:b1:0d:a2:01:20:06:81:83:c8:84: 47:ac:31:03:62:a3:1f:d2:13:e1:9d:bc:2c:99:4f:c0:c3:4b: 11:ab:a3:63:63:8d:c9:e4:75:4b:b7:5a:ae:59:3e:d6:7e:32: 28:5d:7c:8a:dd:34:96:d9:4a:a4:5f:6a:51:89:24:26:d8:07: c0:11:ac:74 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87VkOWBVXFZZmZ1rMgOi8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4 ZmFiM2UwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGFmMTRiZGFmNjkyYWVmMTI4ODRjYzA3YzAxNzE4YjJjYmI5MWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16H2dPeNkvZO6Pj0/nFZanX8/Z71 WHkORQrncoZyJ36d4qD23IldgianY/29PQDZnHjUdosBqZlqut9sb7fXGGIv0YjI DuIaQhCB/kysRIggOOuK6GP3zIsajLdHIpMtgaRG+aimWaHX6I6fjoezNdjNm3PZ 5oRTYqWRAJgksnDhzsBYi7M79jYzrlkuyCtiSNfSywDGC9GJJSEcKhVvHJUhls7p fSI+aAlwi4SG508eNwA1kY14XL7dKS3K4plhTZEAbpmWOeb9uws5op8MWbo/t9mU Kh9snjAdWEsc5QxZypTi5U/I1Y1IN3BtNN7YG0ajAFP0dO3gRG9Z3j1nYQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMSvFL2vaSrvEohMwHwBcYssu5H+MB8GA1UdIwQY MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt MDQxMzEyMjQyZmYzLzEveEs4VXZhOXBLdThTaUV6QWZBRnhpeXk3a2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuaZoAwQA uaZqAwQAwiKjMA0GCSqGSIb3DQEBCwUAA4IBAQADXrdOfQ+aubIo68i/MRVfxXQX uCh5NQt04F3flEKvVOXQgvFjycTohUnQ2uLcb9nrh7yyt7huPzZDOMnnIuzl51XS gCReB94B9VHS+3lbGJxMvk0TPVUIqbWzthTP8Jx56O0CnBPu8YvV5HtvAabhQLwJ WdXcpEGLyjHFk+bUhBpGS8dac7l+QqCoSMDtvwjTnB3iTy5gaZ7tY7rtXtfY/+Ik laavngboGnQczsNpoAJLvrGG4qDDczQtm7ENogEgBoGDyIRHrDEDYqMf0hPhnbws mU/Aw0sRq6NjY43J5HVLt1quWT7WfjIoXXyK3TSW2UqkX2pRiSQm2AfAEax0 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:42 2026 by rpki-client