This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/bs3te7njxydTnYWSP4ChGEGcJkQ.roa File: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (raw, json) Hash identifier: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8= Subject key identifier: 6E:CD:ED:7B:B9:E3:C7:27:53:9D:85:92:3F:80:A1:18:41:9C:26:44 Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312 Certificate serial: 019B7AC77800C228B69DB221302C2D7B67B4 Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/bs3te7njxydTnYWSP4ChGEGcJkQ.roa Signing time: Thu 01 Jan 2026 18:17:31 +0000 ROA not before: Thu 01 Jan 2026 18:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201228 IP address blocks: 193.5.184.0/24 maxlen: 24 193.5.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:78:00:c2:28:b6:9d:b2:21:30:2c:2d:7b:67:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312 Validity Not Before: Jan 1 18:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ecded7bb9e3c727539d85923f80a118419c2644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:e5:32:44:58:0c:d4:58:d1:9d:b9:12:a4: be:db:41:80:57:70:56:e9:28:f6:8f:04:71:c1:b2: 62:ef:1b:c7:5a:35:54:a3:b5:03:07:2f:8c:4f:d7: 74:dc:1d:0c:1c:a9:23:b0:5d:f4:2b:c4:72:07:07: 10:e8:99:9e:b1:db:be:74:7b:7c:52:8b:b3:cd:6e: 36:05:8c:5c:f5:bf:2d:89:c8:10:5f:ff:ad:84:96: e7:74:de:c1:a8:e5:18:2c:c1:ae:55:4a:b3:bf:29: 5a:f2:40:6f:40:46:6f:33:23:5c:29:b3:77:f3:ea: 18:95:86:ce:83:8d:fc:23:f9:c2:76:69:8b:bd:0a: 78:41:e9:e6:3c:50:4d:3d:74:92:8c:4b:5c:9f:d2: c1:d8:e2:ad:40:f9:e1:ed:8e:c0:cf:b9:8f:76:3d: 66:be:da:5a:a5:9d:8a:69:fc:fa:87:0e:db:24:ec: fe:91:b1:60:5a:5f:67:ec:36:49:f7:ec:42:ee:c9: 19:4d:ac:08:dd:00:03:09:8e:a8:de:74:b7:3c:c4: 00:85:0e:2c:d6:59:3a:80:e4:77:f8:3d:c2:86:21: 57:18:6f:f7:88:ba:b2:8c:87:af:3d:69:de:02:da: cf:2f:25:f0:48:db:39:ff:d6:ed:4d:b1:4f:de:6b: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CD:ED:7B:B9:E3:C7:27:53:9D:85:92:3F:80:A1:18:41:9C:26:44 X509v3 Authority Key Identifier: keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/bs3te7njxydTnYWSP4ChGEGcJkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.184.0/24 193.5.190.0/24 Signature Algorithm: sha256WithRSAEncryption 26:ce:dc:79:66:fa:86:a0:03:b1:50:7e:8f:5f:80:82:ef:6d: ee:fd:33:75:8f:6f:ce:80:21:98:9b:7e:2b:ef:48:64:c6:40: ea:0d:97:17:f9:78:01:5e:94:88:73:0d:40:88:03:1c:77:b9: 86:a6:57:e9:28:e5:b2:a3:32:a9:35:27:f6:be:bc:ff:ae:89: 33:e4:0f:10:33:d8:60:6c:69:3d:a9:81:8d:d5:37:45:28:7a: ac:0e:7c:d8:57:f9:c0:20:37:a8:18:09:ed:f3:52:04:7d:7e: cf:d1:cb:b9:da:48:62:02:da:33:f3:16:3c:a7:a2:e6:04:1e: 8e:22:49:91:f3:29:55:af:b2:59:7c:07:e8:51:cd:dd:00:00: da:8f:f0:4b:88:9a:e2:ee:28:f7:a0:33:95:6c:8d:cc:e6:1f: 29:1b:e0:16:b3:8a:8f:14:40:70:3a:4b:c9:d3:6f:d8:5f:09: d0:62:8c:37:d7:01:9f:62:d6:21:23:d6:d5:87:a5:34:5e:36: 0f:65:57:5f:1c:d9:3d:5f:32:34:37:f2:50:8c:ab:9e:1a:50: 02:60:b7:45:3f:d5:b6:2e:c4:b0:9a:36:6b:5a:5f:30:e1:7e: 2d:26:68:d7:63:19:2e:40:a0:99:da:fe:1a:ad:99:8b:d7:50: a0:58:01:72 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x3gAwii2nbIhMCwte2e0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYWFiYTdkYTdjOGYzNmM4YjI3NWNhNzM4NDkxY2VkY2Ni NWUzMTIwHhcNMjYwMTAxMTgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWNkZWQ3YmI5ZTNjNzI3NTM5ZDg1OTIzZjgwYTExODQxOWMyNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QPlMkRYDNRY0Z25EqS+20GAV3BW 6Sj2jwRxwbJi7xvHWjVUo7UDBy+MT9d03B0MHKkjsF30K8RyBwcQ6Jmesdu+dHt8 UouzzW42BYxc9b8ticgQX/+thJbndN7BqOUYLMGuVUqzvyla8kBvQEZvMyNcKbN3 8+oYlYbOg438I/nCdmmLvQp4QenmPFBNPXSSjEtcn9LB2OKtQPnh7Y7Az7mPdj1m vtpapZ2Kafz6hw7bJOz+kbFgWl9n7DZJ9+xC7skZTawI3QADCY6o3nS3PMQAhQ4s 1lk6gOR3+D3ChiFXGG/3iLqyjIevPWneAtrPLyXwSNs5/9btTbFP3mt+mwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG7N7Xu548cnU52Fkj+AoRhBnCZEMB8GA1UdIwQY MBaAFBqqun2nyPNsiydcpzhJHO3MteMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQt MGU4YTk0ODVhOWEyLzEvYnMzdGU3bmp4eWRUbllXU1A0Q2hHRUdjSmtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQtMGU4YTk0ODVhOWEy LzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwQW4AwQA wQW+MA0GCSqGSIb3DQEBCwUAA4IBAQAmztx5ZvqGoAOxUH6PX4CC723u/TN1j2/O gCGYm34r70hkxkDqDZcX+XgBXpSIcw1AiAMcd7mGplfpKOWyozKpNSf2vrz/rokz 5A8QM9hgbGk9qYGN1TdFKHqsDnzYV/nAIDeoGAnt81IEfX7P0cu52khiAtoz8xY8 p6LmBB6OIkmR8ylVr7JZfAfoUc3dAADaj/BLiJri7ij3oDOVbI3M5h8pG+AWs4qP FEBwOkvJ02/YXwnQYow31wGfYtYhI9bVh6U0XjYPZVdfHNk9XzI0N/JQjKueGlAC YLdFP9W2LsSwmjZrWl8w4X4tJmjXYxkuQKCZ2v4arZmL11CgWAFy -----END CERTIFICATE-----Generated at Mon Jan 26 12:56:38 2026 by rpki-client