This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/rC0spcl-pdrTbDRKzG5ofIHYKcI.roa File: rC0spcl-pdrTbDRKzG5ofIHYKcI.roa (raw, json) Hash identifier: lCBqHzXRs9Yu91X4wPPiBVftfQRsm2XGgS23G8xgYj0= Subject key identifier: AC:2D:2C:A5:C9:7E:A5:DA:D3:6C:34:4A:CC:6E:68:7C:81:D8:29:C2 Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Certificate serial: 019B7F84915C3F70D71374425D0746241BA2 Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/rC0spcl-pdrTbDRKzG5ofIHYKcI.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 94.247.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:91:5c:3f:70:d7:13:74:42:5d:07:46:24:1b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac2d2ca5c97ea5dad36c344acc6e687c81d829c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:27:41:30:16:4b:de:85:f0:25:71:ec:25: 75:e4:ae:67:eb:d5:c8:de:1e:36:7c:ef:e1:80:f1: 34:a0:ea:67:60:d5:49:33:1d:34:50:69:af:76:a2: 6c:9e:d6:a2:60:09:76:92:51:65:30:d0:35:ef:88: 19:f8:67:d7:94:b5:6a:35:51:9d:6d:dd:7b:e5:52: a8:c9:9a:81:74:9b:cd:4f:3f:f5:96:ba:f2:99:70: b4:4b:66:d7:93:c3:bd:f3:2d:c9:55:3b:67:01:0f: 8a:05:00:7b:cb:81:56:dc:59:2a:74:99:9c:88:80: 9e:f2:29:55:41:a5:f2:0e:01:0d:1d:aa:ab:37:e3: 38:c8:be:51:76:23:90:84:ba:7a:26:4a:07:6a:7d: c5:fa:ac:a5:75:fb:c0:94:24:bc:7b:5a:d8:9b:2e: 9f:7c:c6:62:cc:33:1f:6c:aa:05:0d:33:b0:67:0c: 80:da:b2:c1:f9:4b:fd:f7:e6:ae:d4:25:e2:88:31: 96:46:c9:2c:e1:db:42:e9:6f:b0:23:2d:5a:4a:53: 8c:36:b4:b1:5c:ad:7d:c4:e9:36:3e:ef:d4:6b:db: 33:74:0c:0a:8d:b3:cf:63:cf:70:7d:71:ee:be:6f: c4:c6:9a:f5:da:8c:fa:a1:34:9b:d0:4c:26:49:80: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2D:2C:A5:C9:7E:A5:DA:D3:6C:34:4A:CC:6E:68:7C:81:D8:29:C2 X509v3 Authority Key Identifier: keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/rC0spcl-pdrTbDRKzG5ofIHYKcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.141.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f3:a9:14:1f:3b:a5:d1:46:a8:7b:e2:9f:5a:dd:09:89:dd: 9f:6e:6a:43:48:2c:1c:5e:17:82:d0:86:3f:2b:6b:79:1c:54: d0:4b:44:1b:99:87:1c:4b:81:f5:ec:2d:9c:00:8b:79:c2:97: d2:65:a4:ec:1a:23:b7:24:74:cb:2a:49:37:ad:19:ec:a4:67: a3:8d:56:37:02:b1:f7:5a:69:ce:01:68:c1:b0:52:39:2e:02: c7:ef:7f:2a:41:9c:3b:3e:cf:d4:8e:21:10:d7:b0:c9:ed:f7: b8:d9:96:63:e2:dd:61:37:5d:a3:e5:ab:e6:9b:9d:f0:9f:3b: e3:6b:31:97:44:40:12:33:7c:c4:ee:84:b6:22:81:35:b1:29: 0a:f0:63:bc:a5:be:15:60:6a:ef:3c:88:e5:e0:d2:3c:8d:67: ae:f5:ec:41:6d:d4:23:3c:97:01:26:86:78:7b:43:70:80:04: d4:46:44:5d:67:9d:77:d0:aa:97:82:2b:96:93:db:a3:a0:fd: fb:48:e1:20:7d:60:b9:43:d0:1b:cb:67:6d:9f:45:47:e2:23: 15:c7:0f:89:2e:1c:16:52:28:15:78:be:4d:30:82:37:6e:90: 45:41:49:64:86:e7:7b:76:30:83:b6:3d:3f:16:64:4b:d1:3b: b6:0d:9a:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJFcP3DXE3RCXQdGJBuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1 NmRjMzYwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzJkMmNhNWM5N2VhNWRhZDM2YzM0NGFjYzZlNjg3YzgxZDgyOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRQnQTAWS96F8CVx7CV15K5n69XI 3h42fO/hgPE0oOpnYNVJMx00UGmvdqJsntaiYAl2klFlMNA174gZ+GfXlLVqNVGd bd175VKoyZqBdJvNTz/1lrrymXC0S2bXk8O98y3JVTtnAQ+KBQB7y4FW3FkqdJmc iICe8ilVQaXyDgENHaqrN+M4yL5RdiOQhLp6JkoHan3F+qyldfvAlCS8e1rYmy6f fMZizDMfbKoFDTOwZwyA2rLB+Uv99+au1CXiiDGWRsks4dtC6W+wIy1aSlOMNrSx XK19xOk2Pu/Ua9szdAwKjbPPY89wfXHuvm/Expr12oz6oTSb0EwmSYCEewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwtLKXJfqXa02w0SsxuaHyB2CnCMB8GA1UdIwQY MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt MDgyMzBjYzUwZWE5LzEvckMwc3BjbC1wZHJUYkRSS3pHNW9mSUhZS2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5 LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXveNMA0G CSqGSIb3DQEBCwUAA4IBAQBp86kUHzul0Uaoe+KfWt0Jid2fbmpDSCwcXheC0IY/ K2t5HFTQS0QbmYccS4H17C2cAIt5wpfSZaTsGiO3JHTLKkk3rRnspGejjVY3ArH3 WmnOAWjBsFI5LgLH738qQZw7Ps/UjiEQ17DJ7fe42ZZj4t1hN12j5avmm53wnzvj azGXREASM3zE7oS2IoE1sSkK8GO8pb4VYGrvPIjl4NI8jWeu9exBbdQjPJcBJoZ4 e0NwgATURkRdZ5130KqXgiuWk9ujoP37SOEgfWC5Q9Aby2dtn0VH4iMVxw+JLhwW UigVeL5NMII3bpBFQUlkhud7djCDtj0/FmRL0Tu2DZrO -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:35 2026 by rpki-client