This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/F44bKH9OXVnCIoILdhGNkCfhXGk.roa File: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (raw, json) Hash identifier: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk= Subject key identifier: 17:8E:1B:28:7F:4E:5D:59:C2:22:82:0B:76:11:8D:90:27:E1:5C:69 Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Certificate serial: 019B78A2B44B6EC4AF649520791313B42AE3 Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/F44bKH9OXVnCIoILdhGNkCfhXGk.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29551 IP address blocks: 195.114.10.0/23 maxlen: 24 2001:67c:6fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b4:4b:6e:c4:af:64:95:20:79:13:13:b4:2a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=178e1b287f4e5d59c222820b76118d9027e15c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:dc:2e:6d:0d:ff:56:fc:39:7e:71:bd:e4: 14:8d:02:b0:73:d4:c1:59:aa:b4:70:43:06:85:12: 65:cb:89:07:24:ea:37:0a:9c:75:ac:33:17:04:77: b2:69:b2:47:c8:a4:a2:cd:e9:5b:c6:b7:5f:10:8d: 57:dc:ec:38:eb:5c:32:cf:33:eb:b5:be:3b:da:07: 70:a9:1d:08:de:66:36:89:ea:03:9e:2d:1d:7b:4d: 22:22:cc:ec:f2:84:9e:5e:13:2d:ac:9b:c2:94:7b: ad:9d:77:3a:c2:77:9c:eb:4e:9b:8c:cf:a0:18:3b: a3:21:26:b6:c3:b3:0a:ce:cd:e5:6b:9d:18:39:70: 5f:cd:79:72:54:30:ac:06:59:62:ff:37:72:6e:02: 5b:8c:db:fb:eb:e1:71:93:47:fd:de:e8:39:a2:5f: 4a:e7:4a:93:21:79:e5:25:8a:7c:24:58:a7:9d:48: 50:0f:58:83:2b:d4:19:c7:f2:87:f6:75:13:8b:fd: f9:2a:5a:5a:fd:6d:14:93:49:85:aa:f2:1a:71:1f: ce:ab:6c:3e:ae:4d:d5:cf:e3:fd:39:7b:39:5b:67: 4c:78:ce:08:53:31:bc:df:dc:5b:52:40:d7:ad:51: ee:54:2a:51:ab:07:02:37:22:02:28:56:25:2f:44: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8E:1B:28:7F:4E:5D:59:C2:22:82:0B:76:11:8D:90:27:E1:5C:69 X509v3 Authority Key Identifier: keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/F44bKH9OXVnCIoILdhGNkCfhXGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.10.0/23 IPv6: 2001:67c:6fc::/48 Signature Algorithm: sha256WithRSAEncryption 70:81:0d:ad:1a:27:ed:97:c7:82:6a:f6:b3:c7:43:9f:24:e4: 72:8f:6b:72:d2:45:59:b4:25:8b:c4:14:1c:3e:4a:27:fd:df: 1f:de:1f:bc:e3:83:2e:71:a5:6a:50:8d:93:d9:a1:d4:8b:b2: aa:63:86:dc:0e:3e:35:24:38:73:57:27:ff:28:4c:e3:63:bf: 73:64:aa:74:40:61:eb:90:c2:1f:ed:56:ef:6a:cc:2b:ca:fb: 20:75:60:b3:1e:8b:0d:43:a2:4a:52:a6:b5:fa:7b:06:ca:35: 05:cf:28:08:dc:f9:d6:7b:c4:10:02:10:95:89:2e:ef:b8:b4: 12:f4:b0:2c:85:1d:7d:c6:b2:31:55:d4:36:61:75:93:ff:ee: 50:d8:4a:d1:0a:d7:be:42:3f:97:d8:3e:a4:00:62:ec:80:9c: ae:62:65:b0:4f:e3:2a:b7:22:17:ea:29:d5:0f:d8:dc:f7:ca: 6a:74:db:52:73:cb:71:f4:ca:e5:f9:89:fa:74:25:33:01:ef: 60:d2:3a:67:a8:4a:36:d3:ac:48:3f:0e:7d:07:61:29:a1:c7: 61:81:41:dc:5e:18:70:ce:69:7e:8b:53:a1:de:31:46:5c:94: f9:94:c7:83:a1:28:a9:69:40:c2:8d:54:1a:e4:69:5e:67:f3: e9:45:33:2b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4orRLbsSvZJUgeRMTtCrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl ZWRiNjQwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzhlMWIyODdmNGU1ZDU5YzIyMjgyMGI3NjExOGQ5MDI3ZTE1YzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KbcLm0N/1b8OX5xveQUjQKwc9TB Waq0cEMGhRJly4kHJOo3Cpx1rDMXBHeyabJHyKSizelbxrdfEI1X3Ow461wyzzPr tb472gdwqR0I3mY2ieoDni0de00iIszs8oSeXhMtrJvClHutnXc6wnec606bjM+g GDujISa2w7MKzs3la50YOXBfzXlyVDCsBlli/zdybgJbjNv76+Fxk0f93ug5ol9K 50qTIXnlJYp8JFinnUhQD1iDK9QZx/KH9nUTi/35Klpa/W0Uk0mFqvIacR/Oq2w+ rk3Vz+P9OXs5W2dMeM4IUzG839xbUkDXrVHuVCpRqwcCNyICKFYlL0TW0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBeOGyh/Tl1ZwiKCC3YRjZAn4VxpMB8GA1UdIwQY MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt ZWI2OGVmYzQ3NDhiLzEvRjQ0YktIOU9YVm5DSW9JTGRoR05rQ2ZoWEdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw3IKMA8E AgACMAkDBwAgAQZ8BvwwDQYJKoZIhvcNAQELBQADggEBAHCBDa0aJ+2Xx4Jq9rPH Q58k5HKPa3LSRVm0JYvEFBw+Sif93x/eH7zjgy5xpWpQjZPZodSLsqpjhtwOPjUk OHNXJ/8oTONjv3NkqnRAYeuQwh/tVu9qzCvK+yB1YLMeiw1DokpSprX6ewbKNQXP KAjc+dZ7xBACEJWJLu+4tBL0sCyFHX3GsjFV1DZhdZP/7lDYStEK175CP5fYPqQA YuyAnK5iZbBP4yq3IhfqKdUP2Nz3ymp021Jzy3H0yuX5ifp0JTMB72DSOmeoSjbT rEg/Dn0HYSmhx2GBQdxeGHDOaX6LU6HeMUZclPmUx4OhKKlpQMKNVBrkaV5n8+lF Mys= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:17 2026 by rpki-client