This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/_a4udz3Wowgk3kz0TQHNdav2CGQ.roa File: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (raw, json) Hash identifier: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA= Subject key identifier: FD:AE:2E:77:3D:D6:A3:08:24:DE:4C:F4:4D:01:CD:75:AB:F6:08:64 Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Certificate serial: 019B78354B8AA44BEAA30C1CBE3A88510DE8 Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/_a4udz3Wowgk3kz0TQHNdav2CGQ.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.247.58.0/24 maxlen: 24 193.247.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4b:8a:a4:4b:ea:a3:0c:1c:be:3a:88:51:0d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdae2e773dd6a30824de4cf44d01cd75abf60864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:59:c8:c3:9d:c4:91:a5:64:b3:b5:28:b4: 63:8d:b0:77:a2:33:29:e4:54:8b:df:2d:9e:06:d4: ec:a3:52:bc:b2:99:6c:54:62:68:c4:2d:c1:fd:72: 51:ae:5e:0d:8f:e8:99:b5:46:4e:53:6c:5e:2c:03: 1b:f8:c0:e2:84:40:8d:7c:0a:4b:12:7c:d0:46:87: 2a:ac:95:24:9e:55:bc:98:28:d9:c0:33:0f:35:03: 8c:7b:73:ee:e7:83:fb:fd:c5:3c:1e:b0:6b:e3:0c: c7:b0:eb:ee:21:2a:e7:8b:c8:a0:2d:e4:23:46:df: 73:8f:c9:d0:b7:76:b4:4c:48:68:02:2d:8c:fb:d8: 64:50:a8:44:5d:43:29:4e:0c:8c:9e:b1:fe:58:a1: 52:84:2a:0c:7f:11:73:e5:5a:14:41:55:06:1e:f8: 1a:3b:3e:f2:8f:fa:1f:4a:9b:8e:16:80:8e:8a:5e: 99:27:27:cf:18:b2:c0:ac:e3:23:b3:d0:5d:9d:e8: 05:cd:03:e5:bc:1a:2e:c0:c4:a5:c0:5e:b0:e9:33: 6a:41:c2:b1:f8:e9:99:e0:01:e8:fb:fe:aa:68:f5: e4:54:f2:31:c1:e3:e6:3d:1b:65:b9:cf:25:e6:19: 96:30:d4:b2:38:aa:fb:7e:d1:69:60:8b:f1:dc:39: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AE:2E:77:3D:D6:A3:08:24:DE:4C:F4:4D:01:CD:75:AB:F6:08:64 X509v3 Authority Key Identifier: keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/_a4udz3Wowgk3kz0TQHNdav2CGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.58.0/24 193.247.60.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:dd:45:eb:10:3f:16:04:4f:94:46:09:9b:9f:23:1f:92:d4: 5d:1e:b2:e3:f4:dc:2b:52:5a:be:db:a3:8f:16:2c:ac:c1:a0: b1:d0:0c:6d:09:b8:9b:df:7f:05:ba:e4:91:0f:8d:76:98:36: 2a:69:02:b1:71:b9:4c:e4:96:af:0a:86:4d:54:2e:5e:16:5c: ca:e1:8c:9f:6c:ba:64:06:4c:4c:af:73:ce:47:d1:1b:7c:93: bc:4d:fd:c4:4f:98:a6:ca:7d:d3:cb:d8:bf:b0:90:b6:2c:5a: 79:f2:5c:54:88:2a:26:00:67:57:98:e5:a8:66:c0:4a:ea:36: 3e:7f:b2:c0:e9:78:fb:9b:02:8e:f7:cd:b2:ce:30:a4:46:c2: 56:7b:02:ac:48:87:6e:a4:11:30:53:8e:27:13:aa:3a:65:a4: 96:c2:52:26:dd:57:e5:7e:49:d6:fd:3e:0b:ee:b7:4e:3e:74: a9:f6:88:83:8f:79:aa:46:81:49:87:db:2c:2f:a3:4e:86:a3: 8b:f3:58:27:13:43:c2:29:3c:3e:87:a2:05:06:86:ec:40:7a: f0:dd:f8:5f:56:6e:5c:4f:f5:6d:66:f2:2a:78:b8:85:07:8d: e6:89:f7:1d:03:63:aa:a3:53:20:99:8f:c8:15:cb:5c:09:56: c3:04:c9:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NUuKpEvqowwcvjqIUQ3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm OWY5YzUwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGFlMmU3NzNkZDZhMzA4MjRkZTRjZjQ0ZDAxY2Q3NWFiZjYwODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArexZyMOdxJGlZLO1KLRjjbB3ojMp 5FSL3y2eBtTso1K8splsVGJoxC3B/XJRrl4Nj+iZtUZOU2xeLAMb+MDihECNfApL EnzQRocqrJUknlW8mCjZwDMPNQOMe3Pu54P7/cU8HrBr4wzHsOvuISrni8igLeQj Rt9zj8nQt3a0TEhoAi2M+9hkUKhEXUMpTgyMnrH+WKFShCoMfxFz5VoUQVUGHvga Oz7yj/ofSpuOFoCOil6ZJyfPGLLArOMjs9BdnegFzQPlvBouwMSlwF6w6TNqQcKx +OmZ4AHo+/6qaPXkVPIxwePmPRtluc8l5hmWMNSyOKr7ftFpYIvx3DmcJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP2uLnc91qMIJN5M9E0BzXWr9ghkMB8GA1UdIwQY MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt ZjU0ODY5OWY5NDdhLzEvX2E0dWR6M1dvd2drM2t6MFRRSE5kYXYyQ0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwfc6AwQB wfc8MA0GCSqGSIb3DQEBCwUAA4IBAQAe3UXrED8WBE+URgmbnyMfktRdHrLj9Nwr Ulq+26OPFiyswaCx0AxtCbib338FuuSRD412mDYqaQKxcblM5JavCoZNVC5eFlzK 4YyfbLpkBkxMr3POR9EbfJO8Tf3ET5imyn3Ty9i/sJC2LFp58lxUiComAGdXmOWo ZsBK6jY+f7LA6Xj7mwKO982yzjCkRsJWewKsSIdupBEwU44nE6o6ZaSWwlIm3Vfl fknW/T4L7rdOPnSp9oiDj3mqRoFJh9ssL6NOhqOL81gnE0PCKTw+h6IFBobsQHrw 3fhfVm5cT/VtZvIqeLiFB43mifcdA2Oqo1MgmY/IFctcCVbDBMn3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:20 2026 by rpki-client