This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/t1JXKPULVgSgvQ0I80otAQ7Epzg.roa File: t1JXKPULVgSgvQ0I80otAQ7Epzg.roa (raw, json) Hash identifier: sx0p3fASYGJ0JSBWFt0pc+jsNHZgbTF+OTJo6DFYN9A= Subject key identifier: B7:52:57:28:F5:0B:56:04:A0:BD:0D:08:F3:4A:2D:01:0E:C4:A7:38 Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Certificate serial: 019B7F151DF5717F0455B3AD6420290BB6F5 Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/t1JXKPULVgSgvQ0I80otAQ7Epzg.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.150.48.0/24 maxlen: 24 193.201.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1d:f5:71:7f:04:55:b3:ad:64:20:29:0b:b6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7525728f50b5604a0bd0d08f34a2d010ec4a738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:28:7e:df:f7:7c:e8:cb:96:dd:20:a2:7e: 97:b0:9b:b5:7d:d8:12:3c:aa:77:32:6f:20:98:bc: 4f:fc:39:5c:d3:07:44:ff:c3:ce:7f:73:72:03:d1: e7:cf:b6:d7:ee:85:04:de:0d:2f:cc:c6:75:1c:65: 1e:fe:c6:05:a1:0a:5f:21:f3:f9:28:32:e4:80:a3: 0e:8a:20:28:ba:1c:58:34:8e:e3:c1:e9:28:d9:2b: db:03:f5:fe:0b:35:c3:ea:a3:85:2e:93:d0:52:45: b8:9c:84:ea:ac:fd:ba:5b:78:7d:b3:0a:56:08:b5: 5c:e2:79:87:e1:87:ed:6d:d7:8d:26:dd:30:d3:da: 0e:8c:79:cb:fd:e9:7e:69:91:41:a6:f7:cd:df:55: e6:ce:c1:83:a9:af:7a:bb:6a:ff:df:d4:96:68:9a: 9c:50:84:b6:1f:4b:d2:44:88:ca:5d:32:f9:d1:19: 1d:78:4c:5b:ee:2e:d0:8f:cc:23:d0:4f:3b:6c:54: 9d:97:76:45:0f:da:87:5c:a5:54:56:f2:71:41:f4: bb:5a:0c:7d:d8:08:74:38:00:97:42:e0:79:0a:a9: e0:6f:17:72:4a:06:1b:21:2a:ca:3a:31:ef:ac:5e: 53:d1:d6:cb:ba:11:ec:75:71:46:29:85:3e:13:93: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:52:57:28:F5:0B:56:04:A0:BD:0D:08:F3:4A:2D:01:0E:C4:A7:38 X509v3 Authority Key Identifier: keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/t1JXKPULVgSgvQ0I80otAQ7Epzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.48.0/24 193.201.122.0/23 Signature Algorithm: sha256WithRSAEncryption 56:e2:8b:24:6f:05:d8:18:40:3c:ba:71:cf:de:cb:56:1b:c4: fd:73:5f:f2:70:7d:97:f4:ed:8f:79:df:82:c0:2e:25:19:38: 56:b0:07:3b:0c:63:66:75:45:d5:67:79:4c:66:4b:24:db:32: 5a:ff:9c:7a:c0:4d:28:e1:bc:93:ca:27:d7:f8:bb:38:cd:55: a2:e4:8c:c5:5b:b0:48:11:26:96:e0:ee:a5:76:8f:4b:52:fe: 0b:b4:0d:03:22:ea:dd:08:4e:c6:d6:bc:3d:fd:b3:d0:5c:aa: c7:e6:9a:8a:8a:10:2d:2b:e7:3b:4c:37:bf:be:e2:ab:78:23: f8:9a:0e:a4:e1:2c:43:7d:67:07:94:c7:6e:bb:b8:ed:a7:6a: df:89:09:6f:35:14:67:20:f5:d6:92:b2:f5:d8:70:5a:f6:83: 0b:fb:49:fa:d2:96:59:b4:42:20:1a:ec:71:aa:9d:94:a7:78: 7f:a3:50:00:f3:ae:7b:ba:3d:b4:95:a5:0b:f6:11:e7:de:e3: b5:20:f7:0f:1c:a2:53:e5:09:1e:25:91:cd:99:19:19:44:b8: e3:d7:82:4f:92:d3:d6:49:72:43:e6:85:72:75:41:04:8c:cf: 3f:af:30:1d:f7:de:e9:5e:30:e9:b8:ca:cb:58:48:78:38:55: a3:57:54:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FR31cX8EVbOtZCApC7b1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjViMzBkYWQ3NGFjNzY5ZDRiNWIzMjMxMmRhOGZhODFh YjMzZDEwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzUyNTcyOGY1MGI1NjA0YTBiZDBkMDhmMzRhMmQwMTBlYzRhNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYoft/3fOjLlt0gon6XsJu1fdgS PKp3Mm8gmLxP/Dlc0wdE/8POf3NyA9Hnz7bX7oUE3g0vzMZ1HGUe/sYFoQpfIfP5 KDLkgKMOiiAouhxYNI7jweko2SvbA/X+CzXD6qOFLpPQUkW4nITqrP26W3h9swpW CLVc4nmH4YftbdeNJt0w09oOjHnL/el+aZFBpvfN31XmzsGDqa96u2r/39SWaJqc UIS2H0vSRIjKXTL50RkdeExb7i7Qj8wj0E87bFSdl3ZFD9qHXKVUVvJxQfS7Wgx9 2Ah0OACXQuB5CqngbxdySgYbISrKOjHvrF5T0dbLuhHsdXFGKYU+E5M+pQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLdSVyj1C1YEoL0NCPNKLQEOxKc4MB8GA1UdIwQY MBaAFL5lsw2tdKx2nUtbMjEtqPqBqzPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmIt NTEwY2ZhNDU1NjQwLzEvdDFKWEtQVUxWZ1NndlEwSTgwb3RBUTdFcHpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmItNTEwY2ZhNDU1NjQw LzEvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwZYwAwQB wcl6MA0GCSqGSIb3DQEBCwUAA4IBAQBW4oskbwXYGEA8unHP3stWG8T9c1/ycH2X 9O2Ped+CwC4lGThWsAc7DGNmdUXVZ3lMZksk2zJa/5x6wE0o4byTyifX+Ls4zVWi 5IzFW7BIESaW4O6ldo9LUv4LtA0DIurdCE7G1rw9/bPQXKrH5pqKihAtK+c7TDe/ vuKreCP4mg6k4SxDfWcHlMduu7jtp2rfiQlvNRRnIPXWkrL12HBa9oML+0n60pZZ tEIgGuxxqp2Up3h/o1AA8657uj20laUL9hHn3uO1IPcPHKJT5QkeJZHNmRkZRLjj 14JPktPWSXJD5oVydUEEjM8/rzAd997pXjDpuMrLWEh4OFWjV1Tq -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:10 2026 by rpki-client