This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/0RRbgUYbY47EzL3vocqK6zrfYdk.roa File: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (raw, json) Hash identifier: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo= Subject key identifier: D1:14:5B:81:46:1B:63:8E:C4:CC:BD:EF:A1:CA:8A:EB:3A:DF:61:D9 Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Certificate serial: 019BC139563809D3C5BB047A7E04FCD9A865 Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/0RRbgUYbY47EzL3vocqK6zrfYdk.roa Signing time: Thu 15 Jan 2026 10:35:18 +0000 ROA not before: Thu 15 Jan 2026 10:35:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 94.116.0.0/16 maxlen: 16 94.117.0.0/16 maxlen: 16 94.118.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:39:56:38:09:d3:c5:bb:04:7a:7e:04:fc:d9:a8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430 Validity Not Before: Jan 15 10:35:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1145b81461b638ec4ccbdefa1ca8aeb3adf61d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:3a:1e:48:0e:63:1e:fc:57:82:3c:42:40: b1:0a:0a:ce:8a:06:8c:30:91:03:3b:e4:37:b5:cc: 1d:e9:c1:21:ae:d1:c6:bd:2b:0a:ea:de:f8:bb:d3: 74:25:ef:1b:b5:5a:8a:d0:75:5a:b3:37:63:76:bc: 99:0d:fa:ec:38:cb:7d:f6:3e:80:ac:da:0a:32:b8: b3:f2:62:df:30:01:6d:78:67:63:bf:c8:23:06:aa: 93:1a:21:c8:95:e7:e9:95:f1:a5:c2:1b:eb:c4:16: 0f:32:21:68:1e:d2:31:74:d3:35:3b:18:2e:43:da: 9c:8e:b6:b1:fc:b5:82:0c:74:9a:87:8f:ca:53:5d: 97:3c:e7:16:7e:22:87:6c:37:53:e2:74:3a:55:55: 44:0c:02:79:1e:0b:e5:9e:eb:43:0a:d2:c1:a3:c0: 12:e4:8e:c6:d3:3e:5d:25:47:96:a2:6c:e7:b4:38: 73:cd:ac:83:ad:e4:47:8b:46:94:91:54:02:98:75: 03:56:99:7d:49:99:e8:5f:58:e5:44:67:be:e2:2a: ea:37:e6:8d:50:bc:a0:9e:65:1f:cd:8c:c3:1b:2f: db:21:c6:19:ab:8f:d9:e4:0f:d7:fe:9c:ab:4d:d5: 35:7b:9e:5c:e7:0b:e7:04:3c:a2:54:e5:86:df:c8: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:14:5B:81:46:1B:63:8E:C4:CC:BD:EF:A1:CA:8A:EB:3A:DF:61:D9 X509v3 Authority Key Identifier: keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/0RRbgUYbY47EzL3vocqK6zrfYdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.116.0.0-94.118.255.255 Signature Algorithm: sha256WithRSAEncryption e6:aa:7d:b9:4a:c1:30:1b:7c:1e:82:33:36:b9:a2:05:bc:3e: d0:47:ea:82:12:86:05:96:8c:20:c8:ca:f7:ff:9a:02:94:40: 54:3d:77:ac:58:3f:df:e2:ec:13:4d:0b:5b:65:e9:ca:7f:5f: e9:e5:80:ea:41:a6:a0:c3:83:6f:a2:6e:1e:fd:fc:52:22:3f: 72:63:d0:02:8a:10:ac:26:d0:5c:7b:ae:e6:8b:e6:bd:c0:c7: 78:0c:b8:df:04:7a:f8:e4:f5:a1:75:f5:75:f9:96:26:0d:f9: 3d:d3:b8:33:1f:3e:95:58:02:d8:fd:dd:d3:4e:fc:2a:df:4a: 5a:02:a1:d6:0c:67:a7:0c:eb:52:b9:2d:bf:df:77:2f:c6:4a: 52:25:1e:90:fb:b2:80:5c:1f:de:c8:b2:e3:d9:bf:49:42:84: 4d:92:3f:e0:f5:3d:31:54:ef:c4:bd:57:59:c3:e9:0c:05:ea: 15:29:88:2c:b7:07:da:f1:bc:6b:2a:4f:42:eb:aa:eb:c5:18: 92:da:54:d1:65:9f:6a:f3:3b:86:f3:35:e8:f9:07:38:5a:ac: ba:14:8d:41:73:46:17:e6:f4:9f:dd:12:c9:9b:9c:b8:45:f9: 1a:59:6b:08:a5:a5:de:3c:16:a2:22:da:ca:f8:11:ed:83:2a: 29:88:f5:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvBOVY4CdPFuwR6fgT82ahlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj YjQ0MzAwHhcNMjYwMTE1MTAzNTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTE0NWI4MTQ2MWI2MzhlYzRjY2JkZWZhMWNhOGFlYjNhZGY2MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHo6HkgOYx78V4I8QkCxCgrOigaM MJEDO+Q3tcwd6cEhrtHGvSsK6t74u9N0Je8btVqK0HVaszdjdryZDfrsOMt99j6A rNoKMriz8mLfMAFteGdjv8gjBqqTGiHIlefplfGlwhvrxBYPMiFoHtIxdNM1Oxgu Q9qcjrax/LWCDHSah4/KU12XPOcWfiKHbDdT4nQ6VVVEDAJ5HgvlnutDCtLBo8AS 5I7G0z5dJUeWomzntDhzzayDreRHi0aUkVQCmHUDVpl9SZnoX1jlRGe+4irqN+aN ULygnmUfzYzDGy/bIcYZq4/Z5A/X/pyrTdU1e55c5wvnBDyiVOWG38gV3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNEUW4FGG2OOxMy976HKius632HZMB8GA1UdIwQY MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt MzA2MDQ1ZWZjZDY4LzEvMFJSYmdVWWJZNDdFekwzdm9jcUs2enJmWWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4 LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAwJedAMD AF52MA0GCSqGSIb3DQEBCwUAA4IBAQDmqn25SsEwG3wegjM2uaIFvD7QR+qCEoYF lowgyMr3/5oClEBUPXesWD/f4uwTTQtbZenKf1/p5YDqQaagw4Nvom4e/fxSIj9y Y9ACihCsJtBce67mi+a9wMd4DLjfBHr45PWhdfV1+ZYmDfk907gzHz6VWALY/d3T Tvwq30paAqHWDGenDOtSuS2/33cvxkpSJR6Q+7KAXB/eyLLj2b9JQoRNkj/g9T0x VO/EvVdZw+kMBeoVKYgstwfa8bxrKk9C66rrxRiS2lTRZZ9q8zuG8zXo+Qc4Wqy6 FI1Bc0YX5vSf3RLJm5y4RfkaWWsIpaXePBaiItrK+BHtgyopiPWl -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:31 2026 by rpki-client