This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/RF8NSoKFBF5OaqJYcDdT02VuHSs.roa File: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (raw, json) Hash identifier: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI= Subject key identifier: 44:5F:0D:4A:82:85:04:5E:4E:6A:A2:58:70:37:53:D3:65:6E:1D:2B Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECBF5DD53FCE44D325BEA07E5EB358 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/RF8NSoKFBF5OaqJYcDdT02VuHSs.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197177 IP address blocks: 94.240.20.0/24 maxlen: 24 94.240.21.0/24 maxlen: 24 94.240.38.0/24 maxlen: 24 94.240.39.0/24 maxlen: 24 94.240.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bf:5d:d5:3f:ce:44:d3:25:be:a0:7e:5e:b3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=445f0d4a8285045e4e6aa258703753d3656e1d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:ca:fd:f3:cc:03:3e:f7:c6:eb:31:e1:1a: b9:c1:a1:61:e8:5c:0c:ee:4a:46:15:de:4b:33:2f: 5c:c7:42:c1:bc:5b:f0:8a:6a:64:f7:d0:44:22:ab: 1c:a1:7d:d3:6b:48:b9:90:55:13:ae:87:d3:67:00: 6e:f7:7f:ee:f4:6e:8e:72:e1:f2:7e:85:b2:1d:0c: 2d:bc:94:06:61:ec:ae:98:bd:e7:da:d7:5e:60:b6: 61:0c:fd:55:08:fc:17:48:0f:6b:76:22:99:d7:77: a5:05:2d:6b:6f:5e:a8:c7:9d:3c:54:19:9f:25:7d: e3:cc:9b:65:74:8d:76:66:ef:c8:7d:5b:16:8f:9f: 0c:0e:20:84:4b:4e:a5:ce:3f:86:a2:58:21:ef:16: 54:6b:bd:f2:f3:2c:24:a3:3f:fc:ee:e6:97:e2:6f: 11:ef:bc:23:a7:4f:3c:ab:62:50:d3:28:42:72:76: a8:80:9a:43:db:29:cb:fd:dd:b1:ee:be:75:3f:e3: 21:0c:bb:67:d9:d0:c9:e7:c7:aa:69:c6:ee:31:df: d6:fb:3f:d8:c7:c8:65:27:2c:85:f8:33:d7:d5:66: 42:72:11:0f:e1:48:de:37:34:7b:61:a4:6a:9f:be: a9:b0:0d:68:0c:6e:b0:1c:35:93:84:06:52:ac:51: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5F:0D:4A:82:85:04:5E:4E:6A:A2:58:70:37:53:D3:65:6E:1D:2B X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/RF8NSoKFBF5OaqJYcDdT02VuHSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.20.0/23 94.240.38.0/23 94.240.60.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:93:3a:73:3a:b6:a4:6b:46:b4:cd:65:a7:53:0f:be:d7:90: 61:cd:63:c1:2f:c8:eb:11:48:fd:4f:23:e9:e2:82:cb:26:4a: 82:b3:42:02:e0:7c:52:e8:05:8b:37:93:6b:aa:4a:0c:0f:aa: c1:4f:a4:84:5c:0d:b0:a0:c6:f4:80:4a:e9:b3:e8:fa:90:61: d6:b7:fe:63:31:56:60:14:5b:ce:5b:46:ea:80:b3:19:d3:db: e4:7b:e4:ac:4b:4e:18:3a:ab:6c:85:f8:67:23:d8:57:8b:32: 3d:bd:e3:58:b9:c6:c7:f1:97:0f:74:65:9c:10:3a:f8:65:2d: 78:cd:1d:2d:5c:e8:fc:03:5f:fe:86:8a:57:2e:62:bc:cc:4e: b4:6b:70:3f:72:25:8b:17:21:d5:8b:64:93:8d:7c:df:ee:31: 7c:b4:8f:73:a5:a9:05:2a:78:f9:d4:98:b8:2d:10:00:64:b7: 4c:73:94:41:2b:5e:6a:ec:a2:f8:a9:c5:0e:55:8c:a3:c8:bc: c0:dc:1a:02:3f:a8:e7:be:fd:c8:19:46:94:81:0b:12:8e:32: f4:a6:16:a4:d7:4e:fb:f3:b0:66:1f:3d:c7:26:d6:d9:22:50: aa:e1:56:74:28:c4:c2:74:01:aa:d5:9e:9b:03:ce:e6:f7:47: dd:d4:84:3d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57L9d1T/ORNMlvqB+XrNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDVmMGQ0YTgyODUwNDVlNGU2YWEyNTg3MDM3NTNkMzY1NmUxZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41fK/fPMAz73xusx4Rq5waFh6FwM 7kpGFd5LMy9cx0LBvFvwimpk99BEIqscoX3Ta0i5kFUTrofTZwBu93/u9G6OcuHy foWyHQwtvJQGYeyumL3n2tdeYLZhDP1VCPwXSA9rdiKZ13elBS1rb16ox508VBmf JX3jzJtldI12Zu/IfVsWj58MDiCES06lzj+Golgh7xZUa73y8ywkoz/87uaX4m8R 77wjp088q2JQ0yhCcnaogJpD2ynL/d2x7r51P+MhDLtn2dDJ58eqacbuMd/W+z/Y x8hlJyyF+DPX1WZCchEP4UjeNzR7YaRqn76psA1oDG6wHDWThAZSrFHFNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFERfDUqChQReTmqiWHA3U9Nlbh0rMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvUkY4TlNvS0ZCRjVPYXFKWWNEZFQwMlZ1SFNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXvAUAwQB XvAmAwQAXvA8MA0GCSqGSIb3DQEBCwUAA4IBAQAtkzpzOraka0a0zWWnUw++15Bh zWPBL8jrEUj9TyPp4oLLJkqCs0IC4HxS6AWLN5NrqkoMD6rBT6SEXA2woMb0gErp s+j6kGHWt/5jMVZgFFvOW0bqgLMZ09vke+SsS04YOqtshfhnI9hXizI9veNYucbH 8ZcPdGWcEDr4ZS14zR0tXOj8A1/+hopXLmK8zE60a3A/ciWLFyHVi2STjXzf7jF8 tI9zpakFKnj51Ji4LRAAZLdMc5RBK15q7KL4qcUOVYyjyLzA3BoCP6jnvv3IGUaU gQsSjjL0phak107787BmHz3HJtbZIlCq4VZ0KMTCdAGq1Z6bA87m90fd1IQ9 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:41 2026 by rpki-client