This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/rTC0QfBbtuMqPMUcNggAjT6mTZU.roa File: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (raw, json) Hash identifier: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA= Subject key identifier: AD:30:B4:41:F0:5B:B6:E3:2A:3C:C5:1C:36:08:00:8D:3E:A6:4D:95 Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a Certificate serial: 019B7834EB9BD0E270686E9852B988DFA15C Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/rTC0QfBbtuMqPMUcNggAjT6mTZU.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 156.118.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:eb:9b:d0:e2:70:68:6e:98:52:b9:88:df:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad30b441f05bb6e32a3cc51c3608008d3ea64d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:4f:67:b2:ab:3c:6f:2c:c0:fd:03:55:df: 67:44:c0:52:98:f1:4b:e2:3e:22:a5:8c:0c:da:c2: b9:af:4a:30:18:79:c1:6f:4a:4d:ea:30:8a:3d:3b: 2e:4f:54:19:c9:91:f0:fd:1f:f8:df:e2:3f:e6:f8: 9d:7f:34:a5:07:0c:81:0b:fd:86:6f:c7:06:01:ad: dc:b4:ad:4e:ca:5a:52:2a:25:6c:04:29:4f:cb:d0: 60:8e:78:f0:32:f8:8f:0e:51:10:fa:4e:24:ed:48: ef:d1:a8:99:7c:07:79:2f:f8:79:d2:2e:48:2e:1f: bd:c7:4b:c2:b5:72:00:00:d4:b7:92:25:ac:ac:4e: ad:e1:98:c4:e3:56:6d:94:d0:4b:ec:fc:f0:12:89: 4b:87:a6:b0:41:7b:58:68:3f:74:79:49:dd:0f:42: 65:9f:1a:35:9b:6d:e8:11:f9:3b:d6:c9:d1:49:d2: d0:d6:53:08:93:4f:20:99:6a:eb:c3:86:78:d2:e4: f7:87:33:8f:29:8d:70:8e:fe:d7:fc:10:28:84:94: 4f:ef:9a:06:7e:54:e2:28:f4:ce:56:94:45:97:0f: aa:93:61:21:1f:51:42:68:70:43:a4:26:9f:73:8f: b1:5f:d3:25:61:cb:66:d7:3d:53:6d:c0:8f:27:fb: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:B4:41:F0:5B:B6:E3:2A:3C:C5:1C:36:08:00:8D:3E:A6:4D:95 X509v3 Authority Key Identifier: keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/rTC0QfBbtuMqPMUcNggAjT6mTZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.118.2.0/24 Signature Algorithm: sha256WithRSAEncryption 03:32:ec:6c:50:52:d1:4b:7a:8b:c0:a1:4b:79:33:36:e4:49: 36:81:e8:85:10:4b:2d:7e:0c:0a:9f:57:a7:4c:b7:96:77:2c: 78:c3:1a:aa:93:79:94:32:31:9a:bd:12:c9:8e:4e:76:97:d7: fa:c5:68:76:10:d9:ea:82:71:e8:01:b0:ce:32:40:39:5c:b6: 72:65:bb:4e:f4:e2:72:40:58:67:9f:9e:40:2a:23:41:f5:96: 8d:91:a8:b2:08:14:c6:10:43:bd:97:74:a7:32:55:84:b9:46: 4c:bf:31:25:ee:25:9a:d2:05:e8:b2:c2:b1:f3:b3:c1:78:83: 22:0b:89:b2:49:cd:83:07:4f:32:77:00:4a:e8:a6:fd:65:5c: fc:9f:e2:87:bd:ee:00:00:a4:22:6b:46:50:c4:ac:80:ca:86: 63:67:42:26:96:4e:75:fb:cd:d1:1c:a8:f9:e3:1e:50:26:ed: 90:ba:a7:33:55:d2:ae:99:e4:83:c5:e0:86:74:ba:5b:6d:c9: fc:02:9b:15:14:6d:92:64:f7:67:dd:15:99:d1:65:18:a4:41: de:56:41:4a:ea:6d:e9:53:7b:fa:c4:79:a5:66:a7:ea:f3:5f: 42:05:01:40:f9:ad:0c:9b:df:7f:f5:d3:19:75:8f:1b:64:62: 75:f6:38:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOub0OJwaG6YUrmI36FcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1 MDlkMmEwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDMwYjQ0MWYwNWJiNmUzMmEzY2M1MWMzNjA4MDA4ZDNlYTY0ZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifBPZ7KrPG8swP0DVd9nRMBSmPFL 4j4ipYwM2sK5r0owGHnBb0pN6jCKPTsuT1QZyZHw/R/43+I/5vidfzSlBwyBC/2G b8cGAa3ctK1OylpSKiVsBClPy9BgjnjwMviPDlEQ+k4k7Ujv0aiZfAd5L/h50i5I Lh+9x0vCtXIAANS3kiWsrE6t4ZjE41ZtlNBL7PzwEolLh6awQXtYaD90eUndD0Jl nxo1m23oEfk71snRSdLQ1lMIk08gmWrrw4Z40uT3hzOPKY1wjv7X/BAohJRP75oG flTiKPTOVpRFlw+qk2EhH1FCaHBDpCafc4+xX9MlYctm1z1TbcCPJ/tgYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0wtEHwW7bjKjzFHDYIAI0+pk2VMB8GA1UdIwQY MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt Y2IyOTY3MDhkZWM4LzEvclRDMFFmQmJ0dU1xUE1VY05nZ0FqVDZtVFpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4 LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnHYCMA0G CSqGSIb3DQEBCwUAA4IBAQADMuxsUFLRS3qLwKFLeTM25Ek2geiFEEstfgwKn1en TLeWdyx4wxqqk3mUMjGavRLJjk52l9f6xWh2ENnqgnHoAbDOMkA5XLZyZbtO9OJy QFhnn55AKiNB9ZaNkaiyCBTGEEO9l3SnMlWEuUZMvzEl7iWa0gXossKx87PBeIMi C4mySc2DB08ydwBK6Kb9ZVz8n+KHve4AAKQia0ZQxKyAyoZjZ0Imlk51+83RHKj5 4x5QJu2QuqczVdKumeSDxeCGdLpbbcn8ApsVFG2SZPdn3RWZ0WUYpEHeVkFK6m3p U3v6xHmlZqfq819CBQFA+a0Mm99/9dMZdY8bZGJ19jhG -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:01 2026 by rpki-client