This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/r036AdIz75Z053MFaHs3tcuY-Nw.roa File: r036AdIz75Z053MFaHs3tcuY-Nw.roa (raw, json) Hash identifier: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI= Subject key identifier: AF:4D:FA:01:D2:33:EF:96:74:E7:73:05:68:7B:37:B5:CB:98:F8:DC Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019B7B36F847E90456D30B05E8F7930BA132 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/r036AdIz75Z053MFaHs3tcuY-Nw.roa Signing time: Thu 01 Jan 2026 20:19:18 +0000 ROA not before: Thu 01 Jan 2026 20:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39020 IP address blocks: 193.30.100.0/24 maxlen: 24 2a07:f7c7:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f8:47:e9:04:56:d3:0b:05:e8:f7:93:0b:a1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Jan 1 20:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af4dfa01d233ef9674e77305687b37b5cb98f8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:c7:43:6a:ce:44:d0:9f:bb:07:07:58:72: 84:58:75:2f:9a:b9:8e:22:17:5c:55:cb:db:4d:33: 49:56:68:06:a9:3c:64:16:e2:29:4d:db:04:ac:c1: 3a:fa:e7:58:53:66:49:07:28:64:0c:b7:66:e8:2f: f5:0d:10:37:c2:74:29:54:c5:c9:22:93:32:f1:85: 67:ae:b2:be:07:e7:c6:24:bc:8b:86:83:d1:23:0e: ff:a1:77:64:1e:93:3b:c4:f7:a6:7d:e2:00:70:36: f5:63:f1:36:ca:33:48:4f:ce:93:09:e8:64:eb:d2: 9e:71:49:f8:fe:0b:6f:c8:da:b3:65:a3:4f:82:65: 97:a4:e6:6f:cc:59:c3:e2:48:ca:42:87:c8:3b:c2: 1d:34:d7:24:10:39:5b:67:ba:5e:43:62:bb:05:7c: 9e:2a:70:5b:73:ae:80:3c:5e:d1:fa:7d:85:40:5e: cc:71:bf:2a:e4:16:b9:7a:8c:00:5c:7c:9b:96:98: ee:99:93:fd:b2:2f:f0:e9:87:29:75:b6:f4:a5:5a: ff:43:4e:8a:b1:5c:94:ad:51:78:3c:90:c7:04:61: 67:49:5f:10:b2:79:b1:d5:b8:19:14:67:39:a8:ce: ac:04:dc:c1:48:49:5d:47:d3:17:ae:cc:43:1b:99: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4D:FA:01:D2:33:EF:96:74:E7:73:05:68:7B:37:B5:CB:98:F8:DC X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/r036AdIz75Z053MFaHs3tcuY-Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.100.0/24 IPv6: 2a07:f7c7:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 97:39:a9:f4:87:b2:46:38:7e:0e:d2:da:10:eb:1a:64:8c:99: bc:df:f2:27:39:52:f5:6a:0b:8b:8b:55:d4:d6:cf:0b:07:3f: dc:a2:eb:70:f5:e2:59:a4:17:ea:58:c2:7d:25:78:f6:0c:3a: e2:9f:dd:b0:23:2f:03:d1:1e:5c:9c:fc:68:bf:0c:80:75:0f: c3:01:cd:ed:6a:96:ef:8f:b2:03:6a:de:7f:6c:f2:7f:13:6d: 90:cb:b1:2c:eb:cf:96:7c:d5:e7:68:12:c9:a3:8c:44:af:25: 08:f8:2e:2e:92:d2:ec:19:39:01:4f:e4:37:ec:b6:e4:90:a8: 5b:d7:1b:68:85:57:9f:c0:1a:87:f3:1b:32:69:83:de:3f:03: b1:63:70:5a:89:f7:04:ba:33:0a:ab:e6:f6:1b:49:af:e4:75: 43:6b:84:0f:d0:f4:62:7a:5d:f3:0a:3e:7e:99:72:23:c2:ce: b7:c0:aa:67:69:d7:21:45:a0:7e:32:5e:b1:c6:79:8c:77:17: ad:89:22:30:36:13:78:3a:84:0d:58:b5:c3:48:91:1b:27:9f: 1d:64:19:8e:d6:92:93:8a:07:fa:4b:10:76:c7:4c:20:ab:85: 75:d8:50:e9:ad:cc:07:f9:86:5f:24:00:61:46:8a:46:fc:d6: f0:42:46:fc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NvhH6QRW0wsF6PeTC6EyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjYwMTAxMjAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjRkZmEwMWQyMzNlZjk2NzRlNzczMDU2ODdiMzdiNWNiOThmOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/HQ2rORNCfuwcHWHKEWHUvmrmO IhdcVcvbTTNJVmgGqTxkFuIpTdsErME6+udYU2ZJByhkDLdm6C/1DRA3wnQpVMXJ IpMy8YVnrrK+B+fGJLyLhoPRIw7/oXdkHpM7xPemfeIAcDb1Y/E2yjNIT86TCehk 69KecUn4/gtvyNqzZaNPgmWXpOZvzFnD4kjKQofIO8IdNNckEDlbZ7peQ2K7BXye KnBbc66APF7R+n2FQF7Mcb8q5Ba5eowAXHyblpjumZP9si/w6Ycpdbb0pVr/Q06K sVyUrVF4PJDHBGFnSV8Qsnmx1bgZFGc5qM6sBNzBSEldR9MXrsxDG5negwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFK9N+gHSM++WdOdzBWh7N7XLmPjcMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvcjAzNkFkSXo3NVowNTNNRmFIczN0Y3VZLU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwR5kMA8E AgACMAkDBwAqB/fH//8wDQYJKoZIhvcNAQELBQADggEBAJc5qfSHskY4fg7S2hDr GmSMmbzf8ic5UvVqC4uLVdTWzwsHP9yi63D14lmkF+pYwn0lePYMOuKf3bAjLwPR Hlyc/Gi/DIB1D8MBze1qlu+PsgNq3n9s8n8TbZDLsSzrz5Z81edoEsmjjESvJQj4 Li6S0uwZOQFP5DfstuSQqFvXG2iFV5/AGofzGzJpg94/A7FjcFqJ9wS6Mwqr5vYb Sa/kdUNrhA/Q9GJ6XfMKPn6ZciPCzrfAqmdp1yFFoH4yXrHGeYx3F62JIjA2E3g6 hA1YtcNIkRsnnx1kGY7WkpOKB/pLEHbHTCCrhXXYUOmtzAf5hl8kAGFGikb81vBC Rvw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:26 2026 by rpki-client