This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/v872mIxxwSGV2ha6Yd9jq9CMUao.roa File: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (raw, json) Hash identifier: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM= Subject key identifier: BF:CE:F6:98:8C:71:C1:21:95:DA:16:BA:61:DF:63:AB:D0:8C:51:AA Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898 Certificate serial: 019B76EB4E2F5885B2272D4DFCC54FAAF089 Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/v872mIxxwSGV2ha6Yd9jq9CMUao.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44682 IP address blocks: 193.111.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4e:2f:58:85:b2:27:2d:4d:fc:c5:4f:aa:f0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfcef6988c71c12195da16ba61df63abd08c51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:4d:21:66:24:21:33:78:d4:ce:b1:c6:c3: 2a:a2:44:98:96:11:f5:7e:43:59:fd:f4:da:99:a1: e1:2b:1b:b0:7c:ab:6e:59:18:d0:b8:dd:20:70:17: 81:60:0e:64:63:74:5b:68:3a:02:80:18:93:87:fb: 62:2d:3f:b8:81:c7:57:99:9a:31:53:80:ba:a1:e8: bc:1a:da:9a:64:58:61:df:f6:31:0e:69:e6:b4:66: e7:83:18:84:1f:a2:54:7a:5c:fd:f4:95:a3:02:0c: df:57:04:ba:8e:14:45:ae:7e:96:2b:f2:59:b3:b3: 8a:e7:de:95:aa:65:5c:b5:9f:44:f7:fc:66:44:12: b4:bd:1c:a9:40:a0:d2:09:81:27:47:43:07:ed:1a: f8:ad:cb:f6:11:d8:e3:1c:60:55:d8:53:30:2e:1c: 3a:16:86:d2:cd:24:d6:36:3b:99:26:32:8d:1a:3b: 98:df:9d:32:c1:2e:11:3c:00:91:5c:15:08:54:82: ae:f2:19:cd:8c:61:e6:81:03:80:f1:de:2e:5e:33: 89:45:98:01:85:65:44:08:94:9f:77:5c:da:e8:04: 8f:ac:a0:8d:14:3e:d5:1e:64:7a:92:17:a7:99:59: 35:24:e3:a1:13:73:06:9e:ca:d5:b8:26:45:7c:a6: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CE:F6:98:8C:71:C1:21:95:DA:16:BA:61:DF:63:AB:D0:8C:51:AA X509v3 Authority Key Identifier: keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/v872mIxxwSGV2ha6Yd9jq9CMUao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.120.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:f9:43:83:f9:a5:c1:df:74:12:31:bb:64:10:da:46:5e:11: ea:9f:8b:c0:91:e0:e4:d0:6f:61:91:1d:8e:77:cd:33:2c:43: a9:84:c9:b3:7f:8d:91:02:3b:40:db:62:07:75:43:29:8a:e9: c8:25:d0:4f:c0:48:66:fc:12:80:32:ef:8c:66:67:05:01:99: 14:07:a8:5b:e1:ed:20:70:30:9f:f2:ff:bd:89:13:c0:8a:8c: d2:21:cb:04:d2:ea:08:9d:7b:eb:0e:4a:93:69:12:46:5e:69: 8b:ed:23:33:d1:a0:53:27:22:21:86:22:bf:8b:28:72:5e:5b: e2:fb:51:09:5d:02:df:43:82:49:be:cb:c2:b3:f6:7d:75:4c: c9:bd:12:e2:71:6f:e7:fc:d0:29:d3:13:1a:46:dc:4a:3b:14: 9d:b8:91:7b:2a:af:45:36:9d:a4:61:40:0a:5b:f8:09:09:6c: 35:ae:6d:a4:10:92:26:5f:bb:87:af:96:1b:13:35:47:85:1f: e8:56:a7:b1:d6:6e:0b:19:da:a2:d3:5f:9a:e7:24:95:7e:66: 87:89:5a:52:62:45:e6:c2:9d:ee:64:bd:10:9f:c8:32:f8:8e: ae:21:21:2e:04:5b:d2:3a:18:08:d6:f8:06:0f:38:bb:10:60: 2a:42:98:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2604vWIWyJy1N/MVPqvCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3 NDQ4OTgwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNlZjY5ODhjNzFjMTIxOTVkYTE2YmE2MWRmNjNhYmQwOGM1MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlhNIWYkITN41M6xxsMqokSYlhH1 fkNZ/fTamaHhKxuwfKtuWRjQuN0gcBeBYA5kY3RbaDoCgBiTh/tiLT+4gcdXmZox U4C6oei8GtqaZFhh3/YxDmnmtGbngxiEH6JUelz99JWjAgzfVwS6jhRFrn6WK/JZ s7OK596VqmVctZ9E9/xmRBK0vRypQKDSCYEnR0MH7Rr4rcv2EdjjHGBV2FMwLhw6 FobSzSTWNjuZJjKNGjuY350ywS4RPACRXBUIVIKu8hnNjGHmgQOA8d4uXjOJRZgB hWVECJSfd1za6ASPrKCNFD7VHmR6khenmVk1JOOhE3MGnsrVuCZFfKZ+pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/O9piMccEhldoWumHfY6vQjFGqMB8GA1UdIwQY MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It NGQ0M2Y2NmFiNzMxLzEvdjg3Mm1JeHh3U0dWMmhhNllkOWpxOUNNVWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW94MA0G CSqGSIb3DQEBCwUAA4IBAQBb+UOD+aXB33QSMbtkENpGXhHqn4vAkeDk0G9hkR2O d80zLEOphMmzf42RAjtA22IHdUMpiunIJdBPwEhm/BKAMu+MZmcFAZkUB6hb4e0g cDCf8v+9iRPAiozSIcsE0uoInXvrDkqTaRJGXmmL7SMz0aBTJyIhhiK/iyhyXlvi +1EJXQLfQ4JJvsvCs/Z9dUzJvRLicW/n/NAp0xMaRtxKOxSduJF7Kq9FNp2kYUAK W/gJCWw1rm2kEJImX7uHr5YbEzVHhR/oVqex1m4LGdqi01+a5ySVfmaHiVpSYkXm wp3uZL0Qn8gy+I6uISEuBFvSOhgI1vgGDzi7EGAqQpiO -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:04 2026 by rpki-client