This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/_r4p5grlhpI0wCfUHUUUMbJ1F6U.roa File: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (raw, json) Hash identifier: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4= Subject key identifier: FE:BE:29:E6:0A:E5:86:92:34:C0:27:D4:1D:45:14:31:B2:75:17:A5 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B7A5B0E3AD7BC00E4E6D27BD1C74DCE26 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/_r4p5grlhpI0wCfUHUUUMbJ1F6U.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212749 IP address blocks: 82.199.204.0/24 maxlen: 24 185.86.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0e:3a:d7:bc:00:e4:e6:d2:7b:d1:c7:4d:ce:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=febe29e60ae5869234c027d41d451431b27517a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:d7:1e:24:be:16:5f:85:66:32:af:50:0f: 0c:d6:86:a7:89:94:df:1b:6f:f3:b8:df:7a:19:03: ac:ac:ac:19:af:6e:c0:1a:0f:66:93:2e:89:ff:7d: 9b:8d:ea:a6:f2:5a:56:7d:d5:6a:77:8d:3c:4b:f6: 3c:a4:dc:99:f7:49:d0:ef:98:95:dc:9b:4a:47:6c: 7d:b2:e3:24:55:b7:cf:07:6e:f5:a6:94:ec:1c:da: 5c:bb:5e:3c:c4:d9:2e:12:e5:ae:6b:8f:4e:b6:44: 42:0c:9e:ba:bc:27:9b:d8:01:ab:ee:87:92:e3:d4: 52:65:2d:19:48:83:76:1a:c1:b4:34:2d:04:fd:4d: c3:9d:a2:42:2a:67:c1:bd:90:71:2e:83:c3:87:f4: cb:49:68:2e:2d:42:2b:67:3f:fb:38:a8:72:29:6c: 6f:6c:1a:ee:eb:45:b1:e0:b0:5a:3b:e7:67:04:7b: 5f:a9:b0:17:27:01:a6:3b:8e:d1:8d:a7:70:c6:39: 30:df:e4:cd:6f:eb:b9:db:a0:0e:c3:1d:f3:bf:56: 3e:18:2d:39:8b:9f:27:ff:1a:8f:e6:9d:71:02:14: 09:2f:9a:9a:da:25:6a:3e:34:dc:f4:15:f0:c0:0a: e9:3a:bf:c6:79:50:aa:dc:7d:66:4b:fe:58:9a:fd: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BE:29:E6:0A:E5:86:92:34:C0:27:D4:1D:45:14:31:B2:75:17:A5 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/_r4p5grlhpI0wCfUHUUUMbJ1F6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.204.0/24 185.86.194.0/24 Signature Algorithm: sha256WithRSAEncryption a8:77:b6:d8:b7:e0:36:d7:02:62:a2:79:10:ea:f7:47:bf:1d: 1a:c3:1c:40:83:b8:4f:28:b5:11:8e:ed:e7:3b:07:05:9d:af: a4:df:0b:90:db:9b:76:0a:cd:e4:67:1d:d4:35:f8:60:70:2b: e0:cf:da:ac:62:b7:fc:e8:ab:70:8e:74:25:63:6b:c7:74:17: 26:eb:52:b5:bc:57:0d:d0:3c:2a:e8:fc:95:90:9c:83:17:e2: 92:8e:40:df:3a:54:64:2b:7c:80:cd:34:7b:cc:6d:48:1e:6b: 6a:d7:27:2c:cb:5b:19:aa:3b:42:ed:23:20:3e:1d:4a:e0:c6: 91:d8:29:ba:70:be:ee:6a:e5:ba:73:0b:6e:26:ff:0b:fe:23: 69:22:f8:b3:37:7f:dc:93:f1:30:51:be:5c:c1:2f:51:8e:ab: 5e:b0:f1:69:e3:c2:8e:76:ce:99:7c:27:ff:6f:19:77:d2:5b: 23:cf:8c:a0:9d:93:e4:61:80:de:d2:38:da:23:ea:d7:cf:e7: 54:97:85:c9:00:a7:23:82:f5:f7:52:5d:19:c2:e8:f7:45:a3: 75:59:19:b8:f5:b5:e2:33:b6:71:ee:6f:dd:bf:e4:b1:4f:15: 59:93:a7:04:1f:fb:bd:5a:50:20:fa:da:f9:d7:e2:b2:0d:91: ff:0e:09:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Ww4617wA5ObSe9HHTc4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWJlMjllNjBhZTU4NjkyMzRjMDI3ZDQxZDQ1MTQzMWIyNzUxN2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77XXHiS+Fl+FZjKvUA8M1oaniZTf G2/zuN96GQOsrKwZr27AGg9mky6J/32bjeqm8lpWfdVqd408S/Y8pNyZ90nQ75iV 3JtKR2x9suMkVbfPB271ppTsHNpcu148xNkuEuWua49OtkRCDJ66vCeb2AGr7oeS 49RSZS0ZSIN2GsG0NC0E/U3DnaJCKmfBvZBxLoPDh/TLSWguLUIrZz/7OKhyKWxv bBru60Wx4LBaO+dnBHtfqbAXJwGmO47Rjadwxjkw3+TNb+u526AOwx3zv1Y+GC05 i58n/xqP5p1xAhQJL5qa2iVqPjTc9BXwwArpOr/GeVCq3H1mS/5Ymv00swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP6+KeYK5YaSNMAn1B1FFDGydRelMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvX3I0cDVncmxocEkwd0NmVUhVVVVNYkoxRjZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUsfMAwQA uVbCMA0GCSqGSIb3DQEBCwUAA4IBAQCod7bYt+A21wJionkQ6vdHvx0awxxAg7hP KLURju3nOwcFna+k3wuQ25t2Cs3kZx3UNfhgcCvgz9qsYrf86KtwjnQlY2vHdBcm 61K1vFcN0Dwq6PyVkJyDF+KSjkDfOlRkK3yAzTR7zG1IHmtq1ycsy1sZqjtC7SMg Ph1K4MaR2Cm6cL7uauW6cwtuJv8L/iNpIvizN3/ck/EwUb5cwS9RjqtesPFp48KO ds6ZfCf/bxl30lsjz4ygnZPkYYDe0jjaI+rXz+dUl4XJAKcjgvX3Ul0Zwuj3RaN1 WRm49bXiM7Zx7m/dv+SxTxVZk6cEH/u9WlAg+tr51+KyDZH/DgkY -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:32 2026 by rpki-client