This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa File: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (raw, json) Hash identifier: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc= Subject key identifier: A7:4E:05:BE:F0:44:1F:33:13:5D:5A:0D:34:DD:CB:4A:63:76:8D:24 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B7EA616CCF2F194D3D14D4B79D77B7063 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa Signing time: Fri 02 Jan 2026 12:19:32 +0000 ROA not before: Fri 02 Jan 2026 12:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211090 IP address blocks: 194.127.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:16:cc:f2:f1:94:d3:d1:4d:4b:79:d7:7b:70:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 2 12:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a74e05bef0441f33135d5a0d34ddcb4a63768d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:d4:76:af:80:e1:fc:d4:9c:23:2c:7f:29: 17:0b:4c:a7:d6:9d:2c:18:21:66:5c:2a:c2:83:5a: 50:1b:94:5b:22:90:d4:4e:8e:8d:b9:8c:09:7c:24: 40:b8:27:28:9f:ab:c3:31:84:fc:f4:90:77:9a:50: 18:78:3c:54:54:9c:c1:f2:92:c1:e9:a2:cc:80:10: 2d:22:cf:cb:32:6e:36:23:55:c0:69:15:9b:da:5f: 25:3f:16:76:ed:13:9f:d7:73:a5:d7:46:b9:36:d4: 7d:9c:d8:c7:e9:78:61:11:d0:c0:41:3d:a6:f2:78: aa:41:36:a8:32:83:b8:fd:51:32:30:9e:e5:74:c1: a8:16:75:10:30:ef:1e:51:c9:38:79:03:80:95:c1: 1a:ef:09:32:60:d9:34:ac:db:f3:33:41:c8:48:ee: b9:e4:46:51:81:a5:8f:d2:d1:08:32:a1:32:68:8f: bd:e0:4f:44:47:87:0d:a9:a1:7f:a1:ea:d1:87:de: 2b:da:0d:a7:2d:b3:e6:ee:42:19:91:0c:da:48:0c: 68:53:db:1d:9e:c1:fc:bb:f5:8e:67:9d:6e:af:da: 44:3c:1b:08:2d:f5:41:5e:fe:34:dc:ee:9d:12:1a: 9a:50:d5:66:e6:80:96:28:af:e6:e6:fe:19:4b:dc: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:05:BE:F0:44:1F:33:13:5D:5A:0D:34:DD:CB:4A:63:76:8D:24 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.111.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:74:8e:3e:1a:25:cc:0a:46:cb:b3:96:f4:b6:a7:72:f5:31: b0:a6:75:c3:1a:e9:6b:18:9d:b6:eb:e2:84:26:b0:92:22:ba: 6b:c7:62:96:f9:5a:11:d5:ac:b2:01:7a:39:4d:5e:fb:6d:9c: 93:3e:89:43:c9:3d:d1:df:0b:6c:c3:0a:b7:41:d0:fc:f9:d7: 82:4a:45:0c:ca:8b:bc:ed:e4:a2:a5:99:40:41:25:b9:0f:56: 22:ca:e7:37:70:4c:12:5b:39:aa:ff:b9:90:55:99:f9:a8:57: 6c:0a:ed:78:fd:b8:3f:16:05:3a:94:e8:de:13:29:f6:29:69: b3:b8:89:bb:2d:de:d6:80:7a:ad:55:1b:78:0e:ca:7c:75:23: 9c:85:68:c2:92:09:fc:34:e0:ef:49:65:79:e3:91:88:21:82: c5:b9:cc:1b:d5:6f:68:0e:d3:34:e5:9d:c9:ff:c9:2e:6d:30: 5f:9d:d0:2a:b3:7b:fa:3b:8f:f6:ff:90:b5:96:c5:eb:45:16: bb:0e:ed:8b:64:13:fc:50:74:21:d6:27:7c:47:f4:0f:8f:2e: f2:2e:dd:69:eb:53:74:81:df:f9:4e:5e:2e:9d:35:39:3e:f0: 5f:64:48:64:06:a0:0e:cf:78:f1:a0:d1:80:c6:74:ac:66:23: 8a:89:fd:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+phbM8vGU09FNS3nXe3BjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTAyMTIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzRlMDViZWYwNDQxZjMzMTM1ZDVhMGQzNGRkY2I0YTYzNzY4ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplDUdq+A4fzUnCMsfykXC0yn1p0s GCFmXCrCg1pQG5RbIpDUTo6NuYwJfCRAuCcon6vDMYT89JB3mlAYeDxUVJzB8pLB 6aLMgBAtIs/LMm42I1XAaRWb2l8lPxZ27ROf13Ol10a5NtR9nNjH6XhhEdDAQT2m 8niqQTaoMoO4/VEyMJ7ldMGoFnUQMO8eUck4eQOAlcEa7wkyYNk0rNvzM0HISO65 5EZRgaWP0tEIMqEyaI+94E9ER4cNqaF/oerRh94r2g2nLbPm7kIZkQzaSAxoU9sd nsH8u/WOZ51ur9pEPBsILfVBXv403O6dEhqaUNVm5oCWKK/m5v4ZS9w8dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdOBb7wRB8zE11aDTTdy0pjdo0kMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvcDA0RnZ2QkVIek1UWFZvTk5OM0xTbU4yalNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn9vMA0G CSqGSIb3DQEBCwUAA4IBAQBLdI4+GiXMCkbLs5b0tqdy9TGwpnXDGulrGJ226+KE JrCSIrprx2KW+VoR1ayyAXo5TV77bZyTPolDyT3R3wtswwq3QdD8+deCSkUMyou8 7eSipZlAQSW5D1Yiyuc3cEwSWzmq/7mQVZn5qFdsCu14/bg/FgU6lOjeEyn2KWmz uIm7Ld7WgHqtVRt4Dsp8dSOchWjCkgn8NODvSWV545GIIYLFucwb1W9oDtM05Z3J /8kubTBfndAqs3v6O4/2/5C1lsXrRRa7Du2LZBP8UHQh1id8R/QPjy7yLt1p61N0 gd/5Tl4unTU5PvBfZEhkBqAOz3jxoNGAxnSsZiOKif0V -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:04 2026 by rpki-client