This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/A72vNYtrAqZwGwVdWSRVIoELlNU.roa File: A72vNYtrAqZwGwVdWSRVIoELlNU.roa (raw, json) Hash identifier: HjnhtlX3seiaGTReSxKDFImzMbn8Z77fXG9LnqCmXhA= Subject key identifier: 03:BD:AF:35:8B:6B:02:A6:70:1B:05:5D:59:24:55:22:81:0B:94:D5 Certificate issuer: /CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Certificate serial: 019BDC1FA8255D354E8FA3AA2000EA77F233 Authority key identifier: E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/A72vNYtrAqZwGwVdWSRVIoELlNU.roa Signing time: Tue 20 Jan 2026 15:57:00 +0000 ROA not before: Tue 20 Jan 2026 15:57:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 193.36.16.0/21 maxlen: 21 193.36.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.mft rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:1f:a8:25:5d:35:4e:8f:a3:aa:20:00:ea:77:f2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6b5dc97b801fa0ffb93005ccbf4d6727b75192a Validity Not Before: Jan 20 15:57:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03bdaf358b6b02a6701b055d59245522810b94d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:ff:78:4a:69:89:31:01:2f:bd:6b:fb:ba: bc:50:69:3f:49:64:5c:c0:9f:e7:55:aa:c6:d8:8e: 3a:02:ba:ba:d7:39:49:7e:c3:89:bc:22:57:6b:b1: 7f:6f:7a:84:4e:33:7b:a2:da:8a:c5:49:45:0f:e9: 24:31:c9:6f:ef:b8:4a:f1:f9:9e:d0:4f:f8:98:46: 8d:40:c8:cb:48:75:13:fb:80:f7:53:b6:08:fd:69: 7c:a4:57:94:ac:8c:44:e7:37:5b:47:0f:a1:a4:f7: dc:d1:43:25:d1:80:81:be:8e:10:93:78:40:b2:90: 36:54:d1:73:c5:71:d6:2d:ca:1e:cb:2b:7f:db:3e: c1:e3:6c:96:83:65:b3:de:b8:86:07:bb:22:36:ae: f7:4e:97:51:c1:c5:a8:e6:ce:71:69:72:1e:89:72: fd:90:36:1f:ec:07:0d:02:18:95:a7:e6:c3:18:ad: c0:eb:86:86:12:d7:88:e5:7a:ad:ef:56:3e:25:0d: 52:68:ef:fa:11:87:15:02:43:f1:f3:e5:0c:67:99: b5:3f:8f:49:fb:3d:4e:c3:c5:9f:e6:19:5a:22:19: 0d:1d:6c:12:fa:51:54:6c:fd:b5:04:dc:64:9d:8e: a2:38:5d:1b:f1:63:8c:59:31:53:c2:23:97:fe:a9: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BD:AF:35:8B:6B:02:A6:70:1B:05:5D:59:24:55:22:81:0B:94:D5 X509v3 Authority Key Identifier: keyid:E6:B5:DC:97:B8:01:FA:0F:FB:93:00:5C:CB:F4:D6:72:7B:75:19:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rXcl7gB-g_7kwBcy_TWcnt1GSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/A72vNYtrAqZwGwVdWSRVIoELlNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b98bda-d3c9-4d0c-a195-699621e00f46/1/5rXcl7gB-g_7kwBcy_TWcnt1GSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.16.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:5c:1b:13:3d:e9:6c:0f:c1:6b:a3:2c:5d:22:34:f1:9c:08: 5c:1d:aa:b7:0e:43:7d:7f:9f:ae:8f:08:ba:34:23:ab:58:a8: 4f:af:4a:5d:19:0c:60:fb:b5:ce:1b:46:31:95:5f:15:12:8b: 26:85:ad:0a:41:9c:de:13:1f:aa:7a:e6:b5:98:26:91:d1:15: 9d:52:01:ab:3f:1c:99:64:7e:37:38:93:36:a5:36:c8:ba:f4: 4f:e9:a5:51:de:34:0a:0e:e3:e6:32:c3:da:a2:0f:37:90:dc: e3:a1:60:87:70:c6:13:13:cd:4f:9e:8f:97:a2:ab:32:9f:55: 5b:20:6c:7c:fd:f8:8b:b6:26:af:cb:15:fa:f0:90:8b:61:5b: 17:85:44:eb:df:1d:1e:bf:4d:ff:3e:a7:97:c7:04:d3:e0:66: 3e:99:ba:c2:e0:a1:28:67:e0:d6:51:ac:af:36:84:6c:36:2a: bc:b3:19:c0:48:11:9f:79:f6:49:94:7f:47:56:80:3f:40:cc: cd:bc:ba:51:aa:e8:86:ee:42:52:fe:05:24:33:74:bd:9a:a4: 3e:da:40:63:18:ba:58:ed:62:cd:2a:e5:c8:c0:4a:5d:8c:ab: c6:5e:1f:fc:d0:ec:62:22:89:9f:ba:5a:23:3c:95:1e:8f:8b: 5f:5c:d7:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcH6glXTVOj6OqIADqd/IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YjVkYzk3YjgwMWZhMGZmYjkzMDA1Y2NiZjRkNjcyN2I3 NTE5MmEwHhcNMjYwMTIwMTU1NzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2JkYWYzNThiNmIwMmE2NzAxYjA1NWQ1OTI0NTUyMjgxMGI5NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWH/eEppiTEBL71r+7q8UGk/SWRc wJ/nVarG2I46Arq61zlJfsOJvCJXa7F/b3qETjN7otqKxUlFD+kkMclv77hK8fme 0E/4mEaNQMjLSHUT+4D3U7YI/Wl8pFeUrIxE5zdbRw+hpPfc0UMl0YCBvo4Qk3hA spA2VNFzxXHWLcoeyyt/2z7B42yWg2Wz3riGB7siNq73TpdRwcWo5s5xaXIeiXL9 kDYf7AcNAhiVp+bDGK3A64aGEteI5Xqt71Y+JQ1SaO/6EYcVAkPx8+UMZ5m1P49J +z1Ow8Wf5hlaIhkNHWwS+lFUbP21BNxknY6iOF0b8WOMWTFTwiOX/qlK6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAO9rzWLawKmcBsFXVkkVSKBC5TVMB8GA1UdIwQY MBaAFOa13Je4AfoP+5MAXMv01nJ7dRkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUt Njk5NjIxZTAwZjQ2LzEvQTcydk5ZdHJBcVp3R3dWZFdTUlZJb0VMbE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOThiZGEtZDNjOS00ZDBjLWExOTUtNjk5NjIxZTAwZjQ2 LzEvNXJYY2w3Z0ItZ183a3dCY3lfVFdjbnQxR1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwSQQMA0G CSqGSIb3DQEBCwUAA4IBAQB8XBsTPelsD8FroyxdIjTxnAhcHaq3DkN9f5+ujwi6 NCOrWKhPr0pdGQxg+7XOG0YxlV8VEosmha0KQZzeEx+qeua1mCaR0RWdUgGrPxyZ ZH43OJM2pTbIuvRP6aVR3jQKDuPmMsPaog83kNzjoWCHcMYTE81Pno+Xoqsyn1Vb IGx8/fiLtiavyxX68JCLYVsXhUTr3x0ev03/PqeXxwTT4GY+mbrC4KEoZ+DWUayv NoRsNiq8sxnASBGfefZJlH9HVoA/QMzNvLpRquiG7kJS/gUkM3S9mqQ+2kBjGLpY 7WLNKuXIwEpdjKvGXh/80OxiIomfulojPJUej4tfXNel -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:08 2026 by rpki-client