This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/RnUS1igSJL82HjX33CCsU61QZck.roa File: RnUS1igSJL82HjX33CCsU61QZck.roa (raw, json) Hash identifier: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA= Subject key identifier: 46:75:12:D6:28:12:24:BF:36:1E:35:F7:DC:20:AC:53:AD:50:65:C9 Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323 Certificate serial: 019B76EAD6956D1E9F3E5527C613526D15BC Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/RnUS1igSJL82HjX33CCsU61QZck.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16262 IP address blocks: 94.199.4.0/24 maxlen: 24 192.162.240.0/21 maxlen: 21 195.211.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d6:95:6d:1e:9f:3e:55:27:c6:13:52:6d:15:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=467512d6281224bf361e35f7dc20ac53ad5065c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:06:e4:e7:ce:63:0c:4d:58:03:ba:bf:56: b1:d3:08:62:00:77:0f:15:01:c7:ab:a8:d7:aa:39: 24:66:55:5f:4c:55:6c:a9:37:20:03:5b:a5:1a:c6: 74:76:ca:3e:dd:98:6a:78:8c:8b:71:33:0e:61:27: b3:5d:fc:c2:6f:37:fa:22:2d:a8:92:03:32:d8:bd: 65:bc:fd:18:ad:ae:96:be:66:11:71:71:a9:20:2f: 57:d5:db:70:50:93:a4:75:51:fd:e7:fe:5a:e3:ec: 9e:4e:43:0b:4b:bc:4b:0d:d8:a0:2c:d3:2a:06:a9: 0a:e7:77:ee:d7:30:9e:49:2b:d5:98:02:e5:92:a1: 59:ac:10:08:60:fe:cf:28:fd:5d:d1:bc:a9:4b:18: 8f:18:a3:90:af:c0:fa:3f:c4:e4:54:5d:72:59:20: a9:18:32:15:e3:2e:6f:66:fa:82:40:86:e1:d2:69: 07:aa:de:7d:9c:6c:99:6f:3d:0e:83:38:b3:83:9a: 3a:11:33:f2:46:bb:c5:19:ad:0d:b4:40:e4:9f:94: 3d:de:0d:03:1f:c8:b8:10:b4:e3:2b:74:dd:aa:35: 1c:f0:fa:d7:13:40:60:e6:f4:da:e9:1a:4d:e9:aa: 37:e6:b6:a5:89:13:f0:f9:d0:02:19:7a:cd:e2:7b: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:75:12:D6:28:12:24:BF:36:1E:35:F7:DC:20:AC:53:AD:50:65:C9 X509v3 Authority Key Identifier: keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/RnUS1igSJL82HjX33CCsU61QZck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.4.0/24 192.162.240.0/21 195.211.100.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:1c:8c:73:d4:79:d2:ef:09:9e:4b:0c:73:fe:f5:d4:f9:49: 51:e7:70:66:78:0c:62:5f:a9:01:b1:55:ff:32:59:27:2a:30: 88:2a:d0:50:3b:38:7c:43:c2:2e:27:71:c5:68:0f:36:ed:1e: 8e:24:1d:08:85:4d:dd:c5:3b:97:e8:33:c8:22:e4:a4:2f:2a: 02:a4:1c:2c:19:cb:cd:38:49:d5:b8:a7:71:df:54:14:91:f8: 9d:06:41:6f:b9:65:c9:84:09:9b:42:02:4c:3f:17:aa:9b:a5: ab:12:cf:ff:a6:2a:d2:e5:cd:c2:d6:ba:69:8f:3a:a8:27:de: 9a:e8:e6:17:58:2e:d0:cd:10:48:85:70:0f:70:c7:72:71:3d: 18:67:ce:7c:f8:d1:d3:73:98:e0:8a:ff:f4:a5:c3:23:86:cb: 07:14:03:35:80:9b:50:ee:b8:ee:eb:27:0e:0e:60:7e:53:46: 30:b7:16:8a:b6:ff:14:cb:ee:1c:87:42:8f:79:b1:23:d6:1c: c9:a4:c8:f8:8e:0e:23:2e:c4:87:e7:c1:ec:e3:30:9e:39:96: 06:9c:0c:31:29:11:6f:ad:53:f8:cf:17:4f:73:98:a3:a6:18: af:07:86:6c:db:4b:b2:1c:4d:06:40:ca:24:e2:11:06:93:a7: ba:4d:44:2b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26taVbR6fPlUnxhNSbRW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYzOTEzOWI3MTBjNGY3MjM3ZWRmZDg4NTE4NjU1YWYz OWMzMjMwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njc1MTJkNjI4MTIyNGJmMzYxZTM1ZjdkYzIwYWM1M2FkNTA2NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/MG5OfOYwxNWAO6v1ax0whiAHcP FQHHq6jXqjkkZlVfTFVsqTcgA1ulGsZ0dso+3ZhqeIyLcTMOYSezXfzCbzf6Ii2o kgMy2L1lvP0Yra6WvmYRcXGpIC9X1dtwUJOkdVH95/5a4+yeTkMLS7xLDdigLNMq BqkK53fu1zCeSSvVmALlkqFZrBAIYP7PKP1d0bypSxiPGKOQr8D6P8TkVF1yWSCp GDIV4y5vZvqCQIbh0mkHqt59nGyZbz0Ogzizg5o6ETPyRrvFGa0NtEDkn5Q93g0D H8i4ELTjK3TdqjUc8PrXE0Bg5vTa6RpN6ao35raliRPw+dACGXrN4numlwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEZ1EtYoEiS/Nh4199wgrFOtUGXJMB8GA1UdIwQY MBaAFBS/ORObcQxPcjft/YhRhlWvOcMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYt YTg2MmI4ODU5M2EwLzEvUm5VUzFpZ1NKTDgySGpYMzNDQ3NVNjFRWmNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYtYTg2MmI4ODU5M2Ew LzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXscEAwQD wKLwAwQCw9NkMA0GCSqGSIb3DQEBCwUAA4IBAQAPHIxz1HnS7wmeSwxz/vXU+UlR 53BmeAxiX6kBsVX/MlknKjCIKtBQOzh8Q8IuJ3HFaA827R6OJB0IhU3dxTuX6DPI IuSkLyoCpBwsGcvNOEnVuKdx31QUkfidBkFvuWXJhAmbQgJMPxeqm6WrEs//pirS 5c3C1rppjzqoJ96a6OYXWC7QzRBIhXAPcMdycT0YZ858+NHTc5jgiv/0pcMjhssH FAM1gJtQ7rju6ycODmB+U0YwtxaKtv8Uy+4ch0KPebEj1hzJpMj4jg4jLsSH58Hs 4zCeOZYGnAwxKRFvrVP4zxdPc5ijphivB4Zs20uyHE0GQMok4hEGk6e6TUQr -----END CERTIFICATE-----Generated at Thu Jan 1 21:18:24 2026 by rpki-client