This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/pETFowZQ1HrdAwm7H1rF9B9k2BQ.roa File: pETFowZQ1HrdAwm7H1rF9B9k2BQ.roa (raw, json) Hash identifier: 5yec7IoQ7KxsmsypwK7+l3R0mHNW/cIPu8S/g9q5prs= Subject key identifier: A4:44:C5:A3:06:50:D4:7A:DD:03:09:BB:1F:5A:C5:F4:1F:64:D8:14 Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16 Certificate serial: 019B7EA7061A6725B41494929721A87CF94B Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/pETFowZQ1HrdAwm7H1rF9B9k2BQ.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13039 IP address blocks: 194.76.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:06:1a:67:25:b4:14:94:92:97:21:a8:7c:f9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a444c5a30650d47add0309bb1f5ac5f41f64d814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:66:dc:2b:84:4a:fb:0e:06:bf:b2:b7:7d: f4:af:c4:b8:60:9a:ed:0b:c8:06:97:0e:38:cd:ef: 26:52:ad:8e:eb:ea:70:f1:08:68:e8:8a:56:68:56: 2d:9c:59:29:59:5c:ed:cd:6a:d9:40:c9:16:86:04: c5:5b:73:ac:51:cf:67:3d:8d:e2:e0:b3:5d:19:9b: 79:00:41:85:c9:fe:b2:31:24:32:7c:53:a7:b4:d0: e3:08:8b:cc:d4:80:a7:ae:51:64:ec:11:7d:ca:25: 33:27:6a:4e:b0:ed:23:8c:3c:24:b6:04:6b:51:da: 80:82:84:92:aa:61:61:dd:49:4f:0e:47:dd:76:8b: 25:9d:06:8c:40:80:10:28:c5:06:29:84:59:af:61: cd:ae:6e:2e:fa:79:a0:15:b3:9d:ee:00:0c:c6:f6: 65:a5:49:69:8d:10:1c:02:ce:c8:51:05:34:8b:8b: c5:6f:56:75:10:db:91:0d:38:b9:48:35:40:df:ad: c0:7e:80:2c:dc:02:92:22:d2:e4:10:f4:20:bc:6a: 82:25:5e:9d:55:65:2f:bb:c3:b6:42:fe:63:86:9c: 2c:2f:88:55:44:da:5a:eb:56:29:ad:4b:de:f1:79: 9b:7d:16:e1:1b:f4:fc:f5:62:29:2a:ff:91:06:26: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:44:C5:A3:06:50:D4:7A:DD:03:09:BB:1F:5A:C5:F4:1F:64:D8:14 X509v3 Authority Key Identifier: keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/pETFowZQ1HrdAwm7H1rF9B9k2BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.14.0/24 Signature Algorithm: sha256WithRSAEncryption 48:e3:ac:43:91:73:36:f8:b8:31:60:93:9e:53:38:49:f4:63: 33:8f:16:a7:ae:ac:ed:6b:c2:36:05:d9:50:ab:e6:05:eb:11: 98:ef:87:27:90:46:5d:34:d2:1a:61:2e:cb:26:86:5a:ce:07: 1d:19:4b:9c:16:d7:f0:41:9e:78:f2:0e:0b:d1:51:2a:28:45: ed:e9:77:60:96:58:f0:46:30:71:d6:7f:31:80:f6:7e:14:7d: 3d:02:60:22:15:d0:df:34:5b:2a:08:3c:d9:c2:29:69:9c:8e: 8f:26:5b:0c:3a:1b:de:45:48:7a:cc:8e:cb:10:24:f7:44:cd: 1c:30:c5:b4:b0:c6:d2:86:00:d0:03:86:55:a4:76:2e:d7:6e: b0:9b:cc:96:5e:db:46:5f:89:3d:50:85:16:41:07:96:a0:e4: 55:27:ee:5c:7f:67:88:a5:57:98:6a:e9:ca:a5:fb:d7:9f:cb: 45:b6:f2:66:a0:26:0a:5c:a2:f9:ae:77:93:75:3d:24:95:fe: c7:2f:cd:8d:ef:34:87:b1:13:c1:c8:e7:81:13:a1:f5:bb:cd: 55:87:50:cd:5c:eb:2f:3f:32:b1:86:3e:df:ac:dc:62:39:88: d9:80:55:9e:eb:a8:30:b3:94:ef:97:40:0b:81:39:bc:50:12: dd:f1:0c:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwYaZyW0FJSSlyGofPlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjJmNjgyMDUzZDQzYzlhZDFjNjUzOWNhZWU5ZjQ2MjFi MGRhMTYwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDQ0YzVhMzA2NTBkNDdhZGQwMzA5YmIxZjVhYzVmNDFmNjRkODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRFm3CuESvsOBr+yt330r8S4YJrt C8gGlw44ze8mUq2O6+pw8Qho6IpWaFYtnFkpWVztzWrZQMkWhgTFW3OsUc9nPY3i 4LNdGZt5AEGFyf6yMSQyfFOntNDjCIvM1ICnrlFk7BF9yiUzJ2pOsO0jjDwktgRr UdqAgoSSqmFh3UlPDkfddoslnQaMQIAQKMUGKYRZr2HNrm4u+nmgFbOd7gAMxvZl pUlpjRAcAs7IUQU0i4vFb1Z1ENuRDTi5SDVA363AfoAs3AKSItLkEPQgvGqCJV6d VWUvu8O2Qv5jhpwsL4hVRNpa61YprUve8XmbfRbhG/T89WIpKv+RBib9mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRExaMGUNR63QMJux9axfQfZNgUMB8GA1UdIwQY MBaAFJ/y9oIFPUPJrRxlOcrun0YhsNoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2Qt MTY1MTFhNmVkOWM2LzEvcEVURm93WlExSHJkQXdtN0gxckY5QjlrMkJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2QtMTY1MTFhNmVkOWM2 LzEvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkwOMA0G CSqGSIb3DQEBCwUAA4IBAQBI46xDkXM2+LgxYJOeUzhJ9GMzjxanrqzta8I2BdlQ q+YF6xGY74cnkEZdNNIaYS7LJoZazgcdGUucFtfwQZ548g4L0VEqKEXt6Xdglljw RjBx1n8xgPZ+FH09AmAiFdDfNFsqCDzZwilpnI6PJlsMOhveRUh6zI7LECT3RM0c MMW0sMbShgDQA4ZVpHYu126wm8yWXttGX4k9UIUWQQeWoORVJ+5cf2eIpVeYaunK pfvXn8tFtvJmoCYKXKL5rneTdT0klf7HL82N7zSHsRPByOeBE6H1u81Vh1DNXOsv PzKxhj7frNxiOYjZgFWe66gws5Tvl0ALgTm8UBLd8QyT -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:47 2026 by rpki-client