This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/_dG6jEUZ-kQyr5cS6HpnDzr2Ces.roa File: _dG6jEUZ-kQyr5cS6HpnDzr2Ces.roa (raw, json) Hash identifier: QKYT/WBu7YKryr/+sbF21T2l6vtqTWK6ppot6XHEXy0= Subject key identifier: FD:D1:BA:8C:45:19:FA:44:32:AF:97:12:E8:7A:67:0F:3A:F6:09:EB Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15BE10767D26CB8F550BDC6BCDAE39 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/_dG6jEUZ-kQyr5cS6HpnDzr2Ces.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197478 IP address blocks: 194.224.229.0/24 maxlen: 24 195.57.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:be:10:76:7d:26:cb:8f:55:0b:dc:6b:cd:ae:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdd1ba8c4519fa4432af9712e87a670f3af609eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:ac:68:a0:a2:54:64:02:90:54:b3:d9:7c: 8b:db:a8:79:79:f9:c3:20:4b:22:13:d5:a8:cf:cc: 6d:34:e2:a7:28:61:d6:cd:9f:d8:dd:dd:2d:d6:76: 9a:c8:51:4d:4c:7f:e2:04:60:c4:7a:16:1b:fc:b4: b0:49:28:7f:dc:b0:61:cb:37:d6:39:30:b5:68:72: a0:1d:5a:dd:7d:79:32:f2:9a:e8:17:62:b9:cf:08: bc:d8:47:1e:7e:38:81:89:21:bc:10:1e:1c:e1:13: 47:9b:59:12:01:35:e7:ea:f0:58:a6:4d:1d:ed:4c: 4f:49:c3:e6:84:d8:68:1c:33:90:5f:29:f0:7a:ac: ee:dd:85:ad:56:6c:09:a5:e0:8a:7c:33:c1:0c:e7: 41:26:e8:f9:b9:98:00:b8:68:97:28:a8:aa:a1:82: b2:2f:ed:ea:7e:cc:73:3b:5a:8a:1f:d3:a3:b1:3e: 77:45:37:cb:26:b5:7f:a9:2e:d5:5b:8f:d0:d4:41: 60:8a:7e:66:3b:8e:77:00:44:0f:bd:46:c5:dd:d3: ef:30:9c:95:c3:8a:3d:5b:24:c7:7a:8f:39:06:c7: 74:2e:89:1c:e4:6f:b3:f1:d2:91:04:e2:4f:8a:6a: fd:6d:ca:67:a3:54:39:58:91:c2:40:0a:a5:0b:d3: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D1:BA:8C:45:19:FA:44:32:AF:97:12:E8:7A:67:0F:3A:F6:09:EB X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/_dG6jEUZ-kQyr5cS6HpnDzr2Ces.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.224.229.0/24 195.57.43.0/24 Signature Algorithm: sha256WithRSAEncryption d5:e6:b4:68:37:38:eb:9b:12:43:98:8d:c4:28:0c:7c:ff:ae: 01:77:3f:21:f6:0c:b3:46:02:64:5f:4e:e5:7e:8d:f5:60:fc: 84:12:31:72:4a:3d:55:de:32:28:ee:b4:33:fa:67:4d:df:52: a4:ce:8a:ec:be:6e:c1:e1:94:63:c5:1e:7a:3f:ac:7e:56:15: d3:c3:65:bf:76:75:6f:ee:e5:9b:7b:fe:23:59:96:b2:1a:c3: 6c:57:c1:b6:08:16:b1:3a:ea:4d:e5:15:0e:e3:db:a2:f8:04: 89:84:5f:7d:fc:e6:e6:d5:99:6a:6d:18:73:22:b8:6c:db:08: 9d:08:a4:5f:d5:68:a1:4c:b0:80:f6:11:d8:56:a7:18:5a:c6: 3a:03:ac:a8:5f:8a:03:c4:d1:ed:b1:73:84:9b:22:79:3d:ff: 88:17:67:a2:ec:50:f7:0a:6c:d7:c2:dc:a5:be:f3:01:7b:af: cf:02:74:a1:5c:2b:49:7b:79:eb:e3:2a:cc:b9:f1:7e:e1:29: 6c:f1:1a:33:e5:c1:5f:ed:49:2b:14:39:07:ac:57:08:db:cb: 88:fc:67:68:39:4a:0c:b0:b0:3c:9a:b4:18:ee:8b:47:99:8b: c4:a9:d7:23:8e:ee:b1:ff:be:0b:a6:f6:32:88:fe:45:e5:59: ef:47:93:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fb4Qdn0my49VC9xrza45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQxYmE4YzQ1MTlmYTQ0MzJhZjk3MTJlODdhNjcwZjNhZjYwOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunesaKCiVGQCkFSz2XyL26h5efnD IEsiE9Woz8xtNOKnKGHWzZ/Y3d0t1naayFFNTH/iBGDEehYb/LSwSSh/3LBhyzfW OTC1aHKgHVrdfXky8proF2K5zwi82EcefjiBiSG8EB4c4RNHm1kSATXn6vBYpk0d 7UxPScPmhNhoHDOQXynweqzu3YWtVmwJpeCKfDPBDOdBJuj5uZgAuGiXKKiqoYKy L+3qfsxzO1qKH9OjsT53RTfLJrV/qS7VW4/Q1EFgin5mO453AEQPvUbF3dPvMJyV w4o9WyTHeo85Bsd0Lokc5G+z8dKRBOJPimr9bcpno1Q5WJHCQAqlC9OFpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP3RuoxFGfpEMq+XEuh6Zw869gnrMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvX2RHNmpFVVota1F5cjVjUzZIcG5EenIyQ2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwuDlAwQA wzkrMA0GCSqGSIb3DQEBCwUAA4IBAQDV5rRoNzjrmxJDmI3EKAx8/64Bdz8h9gyz RgJkX07lfo31YPyEEjFySj1V3jIo7rQz+mdN31Kkzorsvm7B4ZRjxR56P6x+VhXT w2W/dnVv7uWbe/4jWZayGsNsV8G2CBaxOupN5RUO49ui+ASJhF99/Obm1ZlqbRhz Irhs2widCKRf1WihTLCA9hHYVqcYWsY6A6yoX4oDxNHtsXOEmyJ5Pf+IF2ei7FD3 CmzXwtylvvMBe6/PAnShXCtJe3nr4yrMufF+4Sls8Roz5cFf7UkrFDkHrFcI28uI /GdoOUoMsLA8mrQY7otHmYvEqdcjju6x/74LpvYyiP5F5VnvR5PE -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:20 2026 by rpki-client