This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/niPFA17j7uRHpaTYenf6Cly67RI.roa File: niPFA17j7uRHpaTYenf6Cly67RI.roa (raw, json) Hash identifier: OfpHBcAsXXX8TZPERzrr+Zdymzn7MUaqne9gmeiSJVo= Subject key identifier: 9E:23:C5:03:5E:E3:EE:E4:47:A5:A4:D8:7A:77:FA:0A:5C:BA:ED:12 Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91 Certificate serial: 019B7D5CD5299A6590A7CBF94E895A1343A4 Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/niPFA17j7uRHpaTYenf6Cly67RI.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8937 IP address blocks: 193.24.16.0/21 maxlen: 21 193.24.16.0/24 maxlen: 24 193.24.17.0/24 maxlen: 24 193.24.18.0/24 maxlen: 24 193.24.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d5:29:9a:65:90:a7:cb:f9:4e:89:5a:13:43:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91 Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e23c5035ee3eee447a5a4d87a77fa0a5cbaed12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:65:16:22:eb:d5:6d:7a:07:4e:a4:5a:74: 92:c7:15:59:a9:41:65:56:25:73:59:be:28:ec:0a: 4a:ac:88:e8:6d:70:37:49:b0:c7:9d:2d:d2:c2:3e: 97:90:5f:3d:9f:5a:01:e0:6a:0b:ea:29:60:cf:80: 01:3d:3b:45:9a:7a:17:88:b9:52:60:55:25:f0:3f: a7:04:f4:78:0b:17:38:eb:be:cb:ed:1b:15:d7:56: df:21:8f:97:84:f5:81:6f:a2:fc:9c:c4:a2:85:8e: 81:78:29:d0:ef:42:4c:33:c2:f7:0a:dd:d3:42:db: 18:33:ae:31:3a:c0:f7:7d:6c:e2:49:5c:28:3d:6c: 0e:56:f0:a5:db:b5:38:11:48:dd:7f:20:4d:9f:c4: a2:9e:e3:06:c2:d2:34:5c:41:fe:a3:d9:b4:ca:f1: 8a:cd:e9:e5:ff:64:a9:65:1b:a5:e3:e9:3c:34:9a: 07:0c:a4:4c:6b:94:ff:04:4e:ca:ee:86:ff:cd:60: 32:4f:9c:67:98:d1:ed:e6:bb:89:24:c5:01:c2:fa: 8b:39:2b:4a:cb:f7:ae:21:86:9e:d9:84:0c:34:0d: 89:ea:2e:b6:56:b1:65:32:83:63:78:d0:e3:1c:99: 86:56:bd:42:85:08:b5:de:df:a2:cb:3f:b8:f0:74: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:C5:03:5E:E3:EE:E4:47:A5:A4:D8:7A:77:FA:0A:5C:BA:ED:12 X509v3 Authority Key Identifier: keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/niPFA17j7uRHpaTYenf6Cly67RI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.16.0/21 Signature Algorithm: sha256WithRSAEncryption d9:2b:70:02:2b:66:c7:b6:46:06:2b:03:67:c9:2e:0f:29:d6: 71:94:9f:89:a9:83:ed:ee:94:a8:7c:26:f5:de:3f:7a:c5:47: 69:67:0f:9b:93:cf:de:4d:a9:e9:09:56:1e:50:e5:3c:06:e7: 9f:ec:7a:ea:40:ff:ae:ed:b5:70:45:76:cf:93:d3:ae:94:65: 06:9a:e0:20:40:46:e4:f9:23:31:fa:03:2c:0b:59:34:bb:00: ea:22:d7:5f:f9:af:94:b5:4a:6d:15:0a:58:6b:f6:f7:5b:7b: da:54:74:32:21:0a:c1:dc:0d:de:f5:82:87:79:cb:c6:41:f4: b7:fe:d9:06:93:33:8a:ce:b3:af:d6:37:6e:23:7f:74:89:20: 48:71:c5:b6:74:56:92:73:18:99:01:26:2e:d8:2a:4e:c2:4f: 1e:fa:56:79:62:ea:2c:ae:69:d9:d1:35:5d:51:8e:d8:4e:16: c7:67:8c:40:f4:07:d8:51:8b:3e:29:51:a0:f3:f9:3d:d5:f4: ed:30:87:a9:80:74:3a:7d:c3:c8:5e:43:9f:53:53:06:83:a2: 7d:c6:1a:39:66:bb:e7:b9:9a:d0:a5:30:80:16:25:cd:a7:97: 31:a1:46:1b:8c:e7:1d:13:9a:9f:71:1d:46:a5:11:99:91:85: aa:3d:67:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNUpmmWQp8v5TolaE0OkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTJjNTJmMzYwYTNhNzJmZTIyNDQxYWMzZmM3ZTBlNTIy NWVlOTEwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTIzYzUwMzVlZTNlZWU0NDdhNWE0ZDg3YTc3ZmEwYTVjYmFlZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiJlFiLr1W16B06kWnSSxxVZqUFl ViVzWb4o7ApKrIjobXA3SbDHnS3Swj6XkF89n1oB4GoL6ilgz4ABPTtFmnoXiLlS YFUl8D+nBPR4Cxc4677L7RsV11bfIY+XhPWBb6L8nMSihY6BeCnQ70JMM8L3Ct3T QtsYM64xOsD3fWziSVwoPWwOVvCl27U4EUjdfyBNn8SinuMGwtI0XEH+o9m0yvGK zenl/2SpZRul4+k8NJoHDKRMa5T/BE7K7ob/zWAyT5xnmNHt5ruJJMUBwvqLOStK y/euIYae2YQMNA2J6i62VrFlMoNjeNDjHJmGVr1ChQi13t+iyz+48HQ0SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ4jxQNe4+7kR6Wk2Hp3+gpcuu0SMB8GA1UdIwQY MBaAFDGSxS82Cjpy/iJEGsP8fg5SJe6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MjRiZmUtYzVhZS00ZjY3LTg0MTMt Mjc0OGM0MDAyYzJlLzEvbmlQRkExN2o3dVJIcGFUWWVuZjZDbHk2N1JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81MjRiZmUtYzVhZS00ZjY3LTg0MTMtMjc0OGM0MDAyYzJl LzEvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwRgQMA0G CSqGSIb3DQEBCwUAA4IBAQDZK3ACK2bHtkYGKwNnyS4PKdZxlJ+JqYPt7pSofCb1 3j96xUdpZw+bk8/eTanpCVYeUOU8Buef7HrqQP+u7bVwRXbPk9OulGUGmuAgQEbk +SMx+gMsC1k0uwDqItdf+a+UtUptFQpYa/b3W3vaVHQyIQrB3A3e9YKHecvGQfS3 /tkGkzOKzrOv1jduI390iSBIccW2dFaScxiZASYu2CpOwk8e+lZ5YuosrmnZ0TVd UY7YThbHZ4xA9AfYUYs+KVGg8/k91fTtMIepgHQ6fcPIXkOfU1MGg6J9xho5Zrvn uZrQpTCAFiXNp5cxoUYbjOcdE5qfcR1GpRGZkYWqPWcC -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:32 2026 by rpki-client