This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/d2KT8A8pg82saNRdGq6GRMXB3UA.roa File: d2KT8A8pg82saNRdGq6GRMXB3UA.roa (raw, json) Hash identifier: dF7P01hXnA73GTd4pqtox0R46I5SwoggxbtIgrQCC9Q= Subject key identifier: 77:62:93:F0:0F:29:83:CD:AC:68:D4:5D:1A:AE:86:44:C5:C1:DD:40 Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Certificate serial: 019B797E9C07157FA2E795D3A5082DEA6445 Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/d2KT8A8pg82saNRdGq6GRMXB3UA.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 194.115.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9c:07:15:7f:a2:e7:95:d3:a5:08:2d:ea:64:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=776293f00f2983cdac68d45d1aae8644c5c1dd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:d9:9d:c1:85:93:0c:dc:1e:00:f4:2d:6a: 8d:57:c1:f7:84:67:9a:d7:ab:b5:c6:bb:f7:50:cd: b3:16:f2:ad:64:01:13:1b:ae:c0:0d:97:a0:18:f1: 9f:18:c7:62:2c:cd:72:38:e7:fb:02:d1:cd:c8:7a: 6e:54:98:46:98:5f:a9:62:64:c0:a1:0d:26:a9:77: 3c:60:8f:f7:65:db:25:2e:b2:aa:3d:6a:4f:f6:7d: 8d:c8:52:91:0d:35:ea:64:9d:1f:fb:8f:09:df:76: d6:0d:fa:80:a6:48:3a:1d:1b:2f:03:29:fd:4a:24: 2f:77:95:b8:5e:51:e5:2f:79:b9:f0:e1:59:ee:1d: 85:ef:4d:8b:1b:f8:2f:02:0a:68:bb:ab:fc:fa:9b: fa:ff:44:c4:06:15:e4:6f:af:a5:99:3d:70:48:62: 8b:86:b9:0e:ff:e3:a0:84:71:c7:58:c5:82:b3:c7: 51:51:7c:58:03:25:78:3d:d8:d7:08:f9:51:38:64: 50:ec:dd:ba:5f:9f:b9:1a:49:57:4c:8b:3e:4c:71: 8e:d6:3e:5d:2e:f1:7c:a1:b7:e9:6b:6f:e9:98:f7: 03:ec:1c:52:14:e5:98:ef:c8:3f:e7:d5:17:e3:fe: 90:9a:07:d3:98:c9:35:95:cb:2e:99:11:95:59:c0: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:62:93:F0:0F:29:83:CD:AC:68:D4:5D:1A:AE:86:44:C5:C1:DD:40 X509v3 Authority Key Identifier: keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/d2KT8A8pg82saNRdGq6GRMXB3UA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.115.182.0/23 Signature Algorithm: sha256WithRSAEncryption 55:8b:a8:e1:da:66:72:05:55:95:07:22:d9:3d:30:c6:38:5d: bf:3a:e2:a4:93:11:2b:11:54:a9:41:63:c0:ad:c9:4c:d2:2e: 9f:02:50:ed:35:ed:39:df:88:a9:45:62:27:84:3c:55:42:6b: 2e:7d:04:82:1a:33:29:6c:cb:90:10:10:eb:90:8b:71:e9:34: 5e:a8:55:61:f6:6b:59:ac:10:88:89:dd:4d:79:fd:ac:52:99: b7:14:44:58:01:b2:94:63:24:1b:9e:51:b7:f4:34:40:df:c9: 1e:84:39:8b:49:18:f6:b9:c1:95:f7:72:8c:76:7e:67:74:a2: 5f:26:d7:d0:5e:84:07:47:b1:0e:9f:40:5a:2d:27:c7:02:07: 5c:59:77:76:e4:1e:1c:51:d0:24:15:01:90:83:e2:7a:d0:32: bc:23:d1:21:26:75:1e:b7:34:20:97:93:c1:65:da:03:40:3d: ea:3c:7f:17:f1:e6:af:45:11:c6:67:54:93:be:40:68:a7:20: 74:09:78:e5:4b:74:92:fd:99:78:68:2c:b8:31:0d:af:87:a1: 4b:b8:4b:41:85:3e:83:00:aa:25:66:90:21:52:7c:c2:66:cc: dd:e4:99:be:b3:e3:47:ac:10:17:9b:2c:4d:6c:27:6c:c9:03: 73:18:86:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpwHFX+i55XTpQgt6mRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi NTU2MTgwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzYyOTNmMDBmMjk4M2NkYWM2OGQ0NWQxYWFlODY0NGM1YzFkZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZDZncGFkwzcHgD0LWqNV8H3hGea 16u1xrv3UM2zFvKtZAETG67ADZegGPGfGMdiLM1yOOf7AtHNyHpuVJhGmF+pYmTA oQ0mqXc8YI/3ZdslLrKqPWpP9n2NyFKRDTXqZJ0f+48J33bWDfqApkg6HRsvAyn9 SiQvd5W4XlHlL3m58OFZ7h2F702LG/gvAgpou6v8+pv6/0TEBhXkb6+lmT1wSGKL hrkO/+OghHHHWMWCs8dRUXxYAyV4PdjXCPlROGRQ7N26X5+5GklXTIs+THGO1j5d LvF8obfpa2/pmPcD7BxSFOWY78g/59UX4/6QmgfTmMk1lcsumRGVWcAjAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHdik/APKYPNrGjUXRquhkTFwd1AMB8GA1UdIwQY MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt NzQ5N2U1YThmMTFiLzEvZDJLVDhBOHBnODJzYU5SZEdxNkdSTVhCM1VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnO2MA0G CSqGSIb3DQEBCwUAA4IBAQBVi6jh2mZyBVWVByLZPTDGOF2/OuKkkxErEVSpQWPA rclM0i6fAlDtNe0534ipRWInhDxVQmsufQSCGjMpbMuQEBDrkItx6TReqFVh9mtZ rBCIid1Nef2sUpm3FERYAbKUYyQbnlG39DRA38kehDmLSRj2ucGV93KMdn5ndKJf JtfQXoQHR7EOn0BaLSfHAgdcWXd25B4cUdAkFQGQg+J60DK8I9EhJnUetzQgl5PB ZdoDQD3qPH8X8eavRRHGZ1STvkBopyB0CXjlS3SS/Zl4aCy4MQ2vh6FLuEtBhT6D AKolZpAhUnzCZszd5Jm+s+NHrBAXmyxNbCdsyQNzGIbg -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:32 2026 by rpki-client