This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/1xjGy8kGxJyh7J2Qkdm_1CgIizw.roa File: 1xjGy8kGxJyh7J2Qkdm_1CgIizw.roa (raw, json) Hash identifier: SCjTStnx3d9rgUqD/sa6z+Um/fiujbi+YSkvNuWw4AU= Subject key identifier: D7:18:C6:CB:C9:06:C4:9C:A1:EC:9D:90:91:D9:BF:D4:28:08:8B:3C Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Certificate serial: 019B7FF1A8E2A346D0F9D0D051804CCA050D Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/1xjGy8kGxJyh7J2Qkdm_1CgIizw.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8410 IP address blocks: 194.0.120.0/22 maxlen: 22 194.0.120.0/24 maxlen: 24 194.0.121.0/24 maxlen: 24 194.0.122.0/24 maxlen: 24 194.0.123.0/24 maxlen: 24 194.55.161.0/24 maxlen: 24 194.55.163.0/24 maxlen: 24 194.55.168.0/24 maxlen: 24 194.55.171.0/24 maxlen: 24 195.140.180.0/22 maxlen: 22 195.140.180.0/24 maxlen: 24 195.140.181.0/24 maxlen: 24 195.140.182.0/24 maxlen: 24 195.140.183.0/24 maxlen: 24 212.15.32.0/21 maxlen: 21 212.15.32.0/24 maxlen: 24 212.15.33.0/24 maxlen: 24 212.15.34.0/24 maxlen: 24 212.15.35.0/24 maxlen: 24 212.15.36.0/24 maxlen: 24 212.15.37.0/24 maxlen: 24 212.15.38.0/24 maxlen: 24 212.15.39.0/24 maxlen: 24 212.15.40.0/24 maxlen: 24 212.15.41.0/24 maxlen: 24 212.15.43.0/24 maxlen: 24 212.15.44.0/24 maxlen: 24 212.15.45.0/24 maxlen: 24 212.15.46.0/24 maxlen: 24 212.15.48.0/24 maxlen: 24 212.15.52.0/24 maxlen: 24 212.15.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a8:e2:a3:46:d0:f9:d0:d0:51:80:4c:ca:05:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d718c6cbc906c49ca1ec9d9091d9bfd428088b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:cf:a0:16:13:5b:5a:2b:23:19:1d:b7:b0: 6a:4c:3e:e3:b3:fd:fb:40:84:0b:ed:68:18:45:88: bd:dd:ce:00:d3:0a:e5:76:c7:06:e3:38:95:1e:a2: c9:89:21:0f:c9:c4:eb:cc:06:da:23:9b:4f:54:50: 7a:b6:6c:7b:a8:60:57:15:27:7a:2a:6c:db:f7:d8: ed:7d:e3:ce:c8:5b:d2:1c:08:92:a2:43:11:ed:43: 0b:2b:1d:e7:51:86:1c:7c:5b:ad:e3:da:7a:75:27: 6e:68:1f:86:fe:94:a9:93:31:fe:a4:9b:c1:0e:bf: 53:04:cd:7e:de:50:64:b0:4e:d5:00:85:4e:0d:35: fe:38:c8:cb:d2:9a:c8:3f:eb:15:d1:08:85:be:b4: 62:0c:a4:a5:52:60:6c:40:20:ff:28:ad:30:da:3f: 0f:d0:1f:42:8d:0f:fa:50:db:03:a8:fd:34:41:a5: 57:7e:e4:2f:c5:54:0a:55:ae:5b:8f:61:9b:b0:23: bd:58:40:b9:61:b3:08:6c:b8:38:85:6f:9c:d0:f5: 10:f6:7f:69:d3:b7:f1:11:98:73:85:4a:69:c8:88: cf:83:11:24:ab:d4:5d:e8:0b:04:01:03:bb:9b:86: 0b:0c:1d:e2:54:df:9e:18:57:74:b5:12:16:b9:8c: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:C6:CB:C9:06:C4:9C:A1:EC:9D:90:91:D9:BF:D4:28:08:8B:3C X509v3 Authority Key Identifier: keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/1xjGy8kGxJyh7J2Qkdm_1CgIizw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.120.0/22 194.55.161.0/24 194.55.163.0/24 194.55.168.0/24 194.55.171.0/24 195.140.180.0/22 212.15.32.0-212.15.41.255 212.15.43.0-212.15.46.255 212.15.48.0/24 212.15.52.0/23 Signature Algorithm: sha256WithRSAEncryption 01:06:6d:e6:60:b3:e1:36:d0:e4:91:d5:3b:b3:1b:e4:dd:e6: 55:3d:bd:af:cc:ac:4f:64:6e:de:9f:f6:75:78:88:ee:9a:c5: 02:57:3c:10:d5:57:1b:cc:e9:29:9e:e3:28:fc:b6:0d:15:55: d0:94:b4:fd:56:f2:d1:d7:a4:06:d9:b0:c5:2c:ee:91:4b:b7: f9:c1:b5:bf:74:4a:9e:88:13:36:49:38:b8:45:0d:8d:25:01: 9e:3a:9f:e3:40:b4:2c:02:f8:d5:58:65:90:50:87:a2:c9:44: 9f:f8:79:c6:4d:ea:22:f8:47:2a:e3:c9:55:97:3c:f9:ed:af: 1d:23:a7:a8:26:41:a7:fe:01:c3:d2:f5:81:c6:a7:f9:d2:03: cb:4a:ad:f6:c9:7e:4d:a2:b9:fc:43:ee:4d:bc:36:cf:e1:2b: ae:20:54:f4:b0:9e:d8:14:f7:1f:79:12:a8:33:b5:5a:2d:72: f7:82:00:db:ec:ca:a8:aa:03:fe:f1:c6:33:75:15:36:a8:7b: cd:36:fd:ac:80:91:8a:63:af:85:b9:88:66:d4:bc:1b:66:c9: 6b:04:c6:90:88:cb:f0:24:4f:3a:88:ee:06:38:f4:88:f6:3a: 91:dd:a3:86:bb:0a:fc:09:e9:04:ef:ba:c4:2a:30:94:bc:dd: 6d:54:a5:a9 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt/8ajio0bQ+dDQUYBMygUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1 NjY1OTgwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE4YzZjYmM5MDZjNDljYTFlYzlkOTA5MWQ5YmZkNDI4MDg4YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmDPoBYTW1orIxkdt7BqTD7js/37 QIQL7WgYRYi93c4A0wrldscG4ziVHqLJiSEPycTrzAbaI5tPVFB6tmx7qGBXFSd6 Kmzb99jtfePOyFvSHAiSokMR7UMLKx3nUYYcfFut49p6dSduaB+G/pSpkzH+pJvB Dr9TBM1+3lBksE7VAIVODTX+OMjL0prIP+sV0QiFvrRiDKSlUmBsQCD/KK0w2j8P 0B9CjQ/6UNsDqP00QaVXfuQvxVQKVa5bj2GbsCO9WEC5YbMIbLg4hW+c0PUQ9n9p 07fxEZhzhUppyIjPgxEkq9Rd6AsEAQO7m4YLDB3iVN+eGFd0tRIWuYxktQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFNcYxsvJBsScoeydkJHZv9QoCIs8MB8GA1UdIwQY MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt NWVjYWZkYTQ3MWY3LzEvMXhqR3k4a0d4SnloN0oyUWtkbV8xQ2dJaXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3 LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQCwgB4AwQA wjehAwQAwjejAwQAwjeoAwQAwjerAwQCw4y0MAwDBAXUDyADBAHUDygwDAMEANQP KwMEANQPLgMEANQPMAMEAdQPNDANBgkqhkiG9w0BAQsFAAOCAQEAAQZt5mCz4TbQ 5JHVO7Mb5N3mVT29r8ysT2Ru3p/2dXiI7prFAlc8ENVXG8zpKZ7jKPy2DRVV0JS0 /Vby0dekBtmwxSzukUu3+cG1v3RKnogTNkk4uEUNjSUBnjqf40C0LAL41VhlkFCH oslEn/h5xk3qIvhHKuPJVZc8+e2vHSOnqCZBp/4Bw9L1gcan+dIDy0qt9sl+TaK5 /EPuTbw2z+ErriBU9LCe2BT3H3kSqDO1Wi1y94IA2+zKqKoD/vHGM3UVNqh7zTb9 rICRimOvhbmIZtS8G2bJawTGkIjL8CRPOojuBjj0iPY6kd2jhrsK/AnpBO+6xCow lLzdbVSlqQ== -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:14 2026 by rpki-client