This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/_82cHPWdD8U7C1sniheBgC2F7fY.roa File: _82cHPWdD8U7C1sniheBgC2F7fY.roa (raw, json) Hash identifier: qbuKXsHTUOPuJFxTAC7wGY6PjrnYJdIJ0GDkVQSoVko= Subject key identifier: FF:CD:9C:1C:F5:9D:0F:C5:3B:0B:5B:27:8A:17:81:80:2D:85:ED:F6 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED207730FCABF839B9914E95416AFF Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/_82cHPWdD8U7C1sniheBgC2F7fY.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206950 IP address blocks: 94.188.145.0/24 maxlen: 24 94.188.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:20:77:30:fc:ab:f8:39:b9:91:4e:95:41:6a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffcd9c1cf59d0fc53b0b5b278a1781802d85edf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:6f:65:96:b8:04:ae:e0:6c:95:a5:c0:1e: 96:34:ee:78:76:44:18:4e:13:cf:3a:e6:77:ee:26: a5:02:59:c5:5a:cd:17:29:c6:0f:c1:ab:88:e9:39: 30:c7:4e:de:26:06:75:54:3b:90:d6:3a:45:95:06: ce:2c:81:19:6b:e8:1c:a7:44:6d:08:de:3a:20:9a: 9b:1c:65:6a:1f:e7:2c:9c:61:fe:1c:fa:56:e2:a7: d1:b2:d2:23:39:e2:06:b6:44:37:06:ff:39:16:c6: 3f:3f:a0:94:fa:d7:a7:d6:0a:d6:10:dd:e5:4b:2b: df:bd:89:ad:5c:1c:3e:78:60:f4:18:54:07:71:dc: dc:c8:d2:92:a9:58:b0:09:c4:7f:2f:18:70:1d:e0: e6:22:fb:72:33:99:6f:1d:3f:24:80:8b:a6:8b:a3: db:ea:f0:15:89:7e:89:9e:0c:06:6f:d3:6b:87:cf: 5b:0c:e4:46:c6:11:e0:54:f0:3b:1c:88:60:f3:9c: b5:40:ed:f0:1a:6e:df:b1:8c:79:a9:0b:e7:eb:c2: 3d:0a:b3:d1:dd:c2:01:05:e8:40:0a:d5:ea:1c:37: 93:e3:14:6d:94:20:bd:13:2e:80:02:40:b4:7d:e0: 3a:d5:aa:06:01:60:f6:f9:66:c6:6f:8b:2f:ce:42: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:9C:1C:F5:9D:0F:C5:3B:0B:5B:27:8A:17:81:80:2D:85:ED:F6 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/_82cHPWdD8U7C1sniheBgC2F7fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.145.0/24 94.188.185.0/24 Signature Algorithm: sha256WithRSAEncryption 07:39:92:0c:07:c3:c3:b2:a0:3d:19:29:5f:f5:c3:d2:b0:92: 9c:15:8e:72:23:c6:8a:9d:ad:5f:1d:a4:9d:e5:7c:95:d7:79: 28:ec:07:0b:75:c5:bb:0b:65:59:10:2d:03:23:c1:52:d0:86: 01:73:16:71:b4:9e:68:79:dc:e7:5b:68:4c:c9:00:1a:53:b0: 58:ae:37:83:ed:1e:df:e2:35:26:c4:7f:46:94:9e:44:f5:79: 64:2f:35:aa:09:ea:65:e7:56:ca:5b:14:7c:54:4b:e3:d6:26: 2f:37:e7:e6:8c:32:4f:91:e0:50:1f:48:6d:b6:6e:48:92:c8: 14:7e:6e:12:e7:00:10:c5:de:a5:3b:7f:e8:ca:bd:ff:0d:7a: fc:ad:67:33:61:81:87:e9:5f:0b:90:99:bd:d7:14:5c:47:3f: 94:04:20:fe:00:9e:f4:41:5d:f0:60:cc:df:56:d4:69:fe:19: 6b:5d:e1:a8:a4:1c:8f:43:fd:44:93:1d:02:37:d2:21:af:4a: 57:52:ae:a9:10:85:31:e8:8a:1e:69:a8:a5:d9:43:fe:7d:3d: 10:1c:23:38:c8:59:5a:27:23:20:d3:f1:66:8a:b2:29:ee:9b: 76:15:a1:37:cc:84:cf:37:71:ef:a1:03:9d:98:e9:32:4d:93: 75:15:c8:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57SB3MPyr+Dm5kU6VQWr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmNkOWMxY2Y1OWQwZmM1M2IwYjViMjc4YTE3ODE4MDJkODVlZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSFvZZa4BK7gbJWlwB6WNO54dkQY ThPPOuZ37ialAlnFWs0XKcYPwauI6Tkwx07eJgZ1VDuQ1jpFlQbOLIEZa+gcp0Rt CN46IJqbHGVqH+csnGH+HPpW4qfRstIjOeIGtkQ3Bv85FsY/P6CU+ten1grWEN3l SyvfvYmtXBw+eGD0GFQHcdzcyNKSqViwCcR/LxhwHeDmIvtyM5lvHT8kgIumi6Pb 6vAViX6JngwGb9Nrh89bDORGxhHgVPA7HIhg85y1QO3wGm7fsYx5qQvn68I9CrPR 3cIBBehACtXqHDeT4xRtlCC9Ey6AAkC0feA61aoGAWD2+WbGb4svzkKQoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP/NnBz1nQ/FOwtbJ4oXgYAthe32MB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvXzgyY0hQV2REOFU3QzFzbmloZUJnQzJGN2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXryRAwQA Xry5MA0GCSqGSIb3DQEBCwUAA4IBAQAHOZIMB8PDsqA9GSlf9cPSsJKcFY5yI8aK na1fHaSd5XyV13ko7AcLdcW7C2VZEC0DI8FS0IYBcxZxtJ5oedznW2hMyQAaU7BY rjeD7R7f4jUmxH9GlJ5E9XlkLzWqCepl51bKWxR8VEvj1iYvN+fmjDJPkeBQH0ht tm5IksgUfm4S5wAQxd6lO3/oyr3/DXr8rWczYYGH6V8LkJm91xRcRz+UBCD+AJ70 QV3wYMzfVtRp/hlrXeGopByPQ/1Ekx0CN9Ihr0pXUq6pEIUx6Ioeaail2UP+fT0Q HCM4yFlaJyMg0/FmirIp7pt2FaE3zITPN3HvoQOdmOkyTZN1Fcg3 -----END CERTIFICATE-----Generated at Mon Jan 12 00:03:30 2026 by rpki-client