This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa File: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (raw, json) Hash identifier: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg= Subject key identifier: 45:AF:CE:D6:D2:4F:AB:17:1E:CA:AF:EB:02:18:B0:14:C3:AB:2A:3C Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8 Certificate serial: 019B7AC7A0A9087C08E6E4495C39AE05C415 Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 193.43.16.0/24 maxlen: 24 193.43.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a0:a9:08:7c:08:e6:e4:49:5c:39:ae:05:c4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8 Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45afced6d24fab171ecaafeb0218b014c3ab2a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:d7:ba:e4:e1:95:5f:08:34:94:d8:36:89: 90:e7:cd:73:e2:9c:b7:0c:e0:3c:53:ab:28:76:14: 50:57:99:64:a0:11:c4:00:2a:6b:26:0f:dc:28:95: 44:0c:a3:ec:fe:68:16:1a:13:34:f5:86:d5:1c:3e: fe:83:9a:59:bf:f6:56:94:77:84:1e:c1:a7:31:4c: 55:a4:f5:2f:96:8f:85:11:43:ff:28:3c:47:92:3e: 22:10:96:52:e1:20:4b:a9:1e:32:ce:2e:ad:76:30: f9:39:f2:47:be:9b:51:71:7d:37:73:58:92:5e:cc: 8f:83:ce:ab:f8:f3:5b:e4:23:c4:b5:9f:ea:38:ff: f9:f0:41:69:5f:5e:3c:9f:33:a9:85:72:15:6f:2f: e0:98:04:07:82:a0:c1:41:0d:ff:fb:aa:8a:02:cd: f1:a0:58:91:e5:cd:bc:54:bd:5f:d5:ad:1d:34:d3: 3c:8f:9a:b7:1e:54:d5:30:88:b7:4e:61:c0:3f:6a: 86:16:93:1d:a9:d5:84:98:16:dd:45:c6:46:55:6a: 86:f3:17:3e:ea:c0:ec:12:ac:a9:e8:76:5d:8b:cf: d6:e3:7f:ee:79:70:16:3b:4c:f8:35:2d:ce:f6:0c: be:f1:7b:68:b0:0c:13:13:25:84:91:ba:ce:70:47: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AF:CE:D6:D2:4F:AB:17:1E:CA:AF:EB:02:18:B0:14:C3:AB:2A:3C X509v3 Authority Key Identifier: keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.16.0/23 Signature Algorithm: sha256WithRSAEncryption a9:74:27:4c:b2:84:21:0d:03:64:a6:02:30:00:d0:8a:3f:d1: 36:d2:a2:47:66:93:ed:d9:b2:b2:ee:50:46:18:5b:70:5b:9b: 13:bd:d8:1d:f9:94:a7:89:ef:b5:79:ad:6d:1c:64:b7:f6:1f: f7:91:dd:58:6b:06:42:54:8a:10:f2:67:00:d8:69:e8:f2:39: 1e:81:1f:e3:2d:18:ec:db:f7:d9:de:1b:b8:0f:91:92:c8:6b: 6b:17:62:28:41:37:5b:e5:a6:93:9a:55:34:8a:d6:63:5f:63: 02:34:66:7a:1b:4c:11:a3:91:6f:90:9d:25:41:f0:d4:b9:9b: 44:af:34:cb:71:fc:4a:4f:8e:46:5b:87:5c:7c:79:81:b2:66: e1:b9:32:93:7e:23:79:5a:e7:d1:d9:c8:89:6b:6c:e4:51:f6: c0:40:8d:0e:3b:e5:ab:5d:6a:4e:09:66:2f:fa:26:bf:b6:fa: e3:e6:74:84:03:b1:4c:a4:67:9f:ee:d9:f6:31:18:9f:49:bf: da:6a:a1:e3:65:9b:cc:c6:bf:dd:8d:65:8e:44:32:43:bf:2a: 51:11:d1:12:4f:39:46:1c:78:7f:99:24:68:c2:61:22:e5:b4: 97:09:df:4f:b5:af:2a:89:4d:4c:e7:fb:29:94:b0:28:bb:b2: 7f:82:f5:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6CpCHwI5uRJXDmuBcQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjYzNTk5NDljZWNmMjQxOGM1YTJkYjIxYWNhYjg1ZGQ5 MTkzZDgwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWFmY2VkNmQyNGZhYjE3MWVjYWFmZWIwMjE4YjAxNGMzYWIyYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ITXuuThlV8INJTYNomQ581z4py3 DOA8U6sodhRQV5lkoBHEACprJg/cKJVEDKPs/mgWGhM09YbVHD7+g5pZv/ZWlHeE HsGnMUxVpPUvlo+FEUP/KDxHkj4iEJZS4SBLqR4yzi6tdjD5OfJHvptRcX03c1iS XsyPg86r+PNb5CPEtZ/qOP/58EFpX148nzOphXIVby/gmAQHgqDBQQ3/+6qKAs3x oFiR5c28VL1f1a0dNNM8j5q3HlTVMIi3TmHAP2qGFpMdqdWEmBbdRcZGVWqG8xc+ 6sDsEqyp6HZdi8/W43/ueXAWO0z4NS3O9gy+8XtosAwTEyWEkbrOcEd4KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWvztbST6sXHsqv6wIYsBTDqyo8MB8GA1UdIwQY MBaAFHYmNZlJzs8kGMWi2yGsq4XdkZPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMt YzgwNDA4M2U3ZDQ5LzEvUmFfTzF0SlBxeGNleXFfckFoaXdGTU9yS2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMtYzgwNDA4M2U3ZDQ5 LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSsQMA0G CSqGSIb3DQEBCwUAA4IBAQCpdCdMsoQhDQNkpgIwANCKP9E20qJHZpPt2bKy7lBG GFtwW5sTvdgd+ZSnie+1ea1tHGS39h/3kd1YawZCVIoQ8mcA2Gno8jkegR/jLRjs 2/fZ3hu4D5GSyGtrF2IoQTdb5aaTmlU0itZjX2MCNGZ6G0wRo5FvkJ0lQfDUuZtE rzTLcfxKT45GW4dcfHmBsmbhuTKTfiN5WufR2ciJa2zkUfbAQI0OO+WrXWpOCWYv +ia/tvrj5nSEA7FMpGef7tn2MRifSb/aaqHjZZvMxr/djWWORDJDvypREdESTzlG HHh/mSRowmEi5bSXCd9Pta8qiU1M5/splLAou7J/gvUo -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:29 2026 by rpki-client