This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/b25kHpS94xs5d-Cb2gg_RWdRdqA.roa File: b25kHpS94xs5d-Cb2gg_RWdRdqA.roa (raw, json) Hash identifier: UnoS92iWWLeA3lFor4dioIwIwXhzelHfz1mr8ZCSkhY= Subject key identifier: 6F:6E:64:1E:94:BD:E3:1B:39:77:E0:9B:DA:08:3F:45:67:51:76:A0 Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019B7C129DBEDC9CD0B8E0ECC546D1A4835F Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/b25kHpS94xs5d-Cb2gg_RWdRdqA.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62242 IP address blocks: 193.23.28.0/24 maxlen: 24 2a04:9ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9d:be:dc:9c:d0:b8:e0:ec:c5:46:d1:a4:83:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f6e641e94bde31b3977e09bda083f45675176a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:b2:79:39:67:91:c0:0b:a8:24:e2:9d:52: 9a:df:15:4f:39:8c:51:33:96:56:6d:a2:e1:12:40: 0f:fb:c5:79:ca:37:e7:00:72:91:96:8d:09:8f:e0: 7c:02:45:33:a2:66:a3:21:e8:47:b9:5f:87:1e:bc: 96:22:4f:49:e1:90:c1:53:b1:82:96:9d:e7:84:62: f4:1d:e9:43:76:31:35:aa:05:7e:fb:75:5d:87:72: 9f:ac:d9:c3:1b:fd:6b:50:03:e0:57:91:90:14:dd: 66:7a:8d:73:51:98:63:4f:81:cb:5b:71:05:c7:5f: f4:0b:c8:1a:f0:ee:9b:15:5b:d7:e3:ab:ba:16:37: c3:89:a0:b6:26:22:82:c3:73:20:4e:71:fc:19:85: bf:a6:02:ae:1b:90:ad:6b:9a:f0:31:ec:30:d4:06: af:56:be:13:44:29:e0:3c:d0:d7:7f:5c:f7:a3:9c: 2c:1d:9e:86:a8:fb:c5:4f:97:ac:08:1f:b3:ff:fc: 51:41:0c:37:8d:35:9b:80:da:53:a5:8b:1e:68:c2: b4:38:c9:03:d4:5f:79:e6:d7:16:6e:90:10:ec:9d: 35:1d:3c:c7:54:75:c2:cf:a7:41:47:80:eb:3e:58: b2:e9:d3:bb:ea:c2:7b:39:20:08:b6:38:65:c0:a6: 95:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:64:1E:94:BD:E3:1B:39:77:E0:9B:DA:08:3F:45:67:51:76:A0 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/b25kHpS94xs5d-Cb2gg_RWdRdqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.28.0/24 IPv6: 2a04:9ac0::/32 Signature Algorithm: sha256WithRSAEncryption c4:8e:97:b2:c6:62:d5:8f:83:b7:fe:90:50:a0:df:2c:5b:9b: 13:56:54:b7:58:a0:30:de:11:a3:0e:b2:0d:cd:da:b2:c0:4a: 8a:f1:3a:9b:b6:cf:3e:a9:d6:dc:17:f0:bc:ca:c1:ff:b7:62: ea:b9:57:ed:ad:49:27:b4:a6:1c:4d:dc:b2:73:a4:08:56:2c: a4:3c:ed:dd:79:47:ab:95:6f:ed:00:ea:17:7e:85:3d:50:4f: 4f:ea:fd:d6:2f:68:7f:de:30:59:31:cf:77:be:ae:f2:13:a4: cf:02:ce:ce:44:35:66:b1:8c:58:ff:7f:06:5b:30:dd:af:38: b8:1a:8f:6b:7d:54:e2:3a:3c:30:c0:82:64:3d:81:d5:61:f4: 4a:13:cb:9c:eb:ae:d2:d5:31:09:20:55:ed:86:d5:af:12:b2: 6a:01:6b:8b:f7:0f:bb:b7:d0:18:23:a3:ab:b0:9a:f7:72:4a: 3e:60:45:30:56:c3:bb:ec:eb:2d:a1:36:74:82:5e:94:15:be: 28:e9:27:23:bb:60:22:16:bc:4b:5b:c8:3d:33:90:75:8b:46: 5b:ed:31:4c:cd:76:64:97:ff:d7:e4:8a:f2:0e:b0:31:14:42: 2c:b6:a4:2d:f8:11:36:df:6d:4d:70:9f:fe:c9:69:84:29:87: 07:6c:51:da -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8Ep2+3JzQuODsxUbRpINfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjZlNjQxZTk0YmRlMzFiMzk3N2UwOWJkYTA4M2Y0NTY3NTE3NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3WyeTlnkcALqCTinVKa3xVPOYxR M5ZWbaLhEkAP+8V5yjfnAHKRlo0Jj+B8AkUzomajIehHuV+HHryWIk9J4ZDBU7GC lp3nhGL0HelDdjE1qgV++3Vdh3KfrNnDG/1rUAPgV5GQFN1meo1zUZhjT4HLW3EF x1/0C8ga8O6bFVvX46u6FjfDiaC2JiKCw3MgTnH8GYW/pgKuG5Cta5rwMeww1Aav Vr4TRCngPNDXf1z3o5wsHZ6GqPvFT5esCB+z//xRQQw3jTWbgNpTpYseaMK0OMkD 1F955tcWbpAQ7J01HTzHVHXCz6dBR4DrPliy6dO76sJ7OSAItjhlwKaVmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG9uZB6UveMbOXfgm9oIP0VnUXagMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvYjI1a0hwUzk0eHM1ZC1DYjJnZ19SV2RSZHFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRccMA0E AgACMAcDBQAqBJrAMA0GCSqGSIb3DQEBCwUAA4IBAQDEjpeyxmLVj4O3/pBQoN8s W5sTVlS3WKAw3hGjDrINzdqywEqK8Tqbts8+qdbcF/C8ysH/t2LquVftrUkntKYc Tdyyc6QIViykPO3deUerlW/tAOoXfoU9UE9P6v3WL2h/3jBZMc93vq7yE6TPAs7O RDVmsYxY/38GWzDdrzi4Go9rfVTiOjwwwIJkPYHVYfRKE8uc667S1TEJIFXthtWv ErJqAWuL9w+7t9AYI6OrsJr3cko+YEUwVsO77OstoTZ0gl6UFb4o6Scju2AiFrxL W8g9M5B1i0Zb7TFMzXZkl//X5IryDrAxFEIstqQt+BE2321NcJ/+yWmEKYcHbFHa -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:18 2026 by rpki-client