This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/rbleZbDw4gebdk07yrvF8SzeP6w.roa File: rbleZbDw4gebdk07yrvF8SzeP6w.roa (raw, json) Hash identifier: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8= Subject key identifier: AD:B9:5E:65:B0:F0:E2:07:9B:76:4D:3B:CA:BB:C5:F1:2C:DE:3F:AC Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799 Certificate serial: 019B79ED5286F2656ED267F8552F56255B93 Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/rbleZbDw4gebdk07yrvF8SzeP6w.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197075 IP address blocks: 193.239.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:86:f2:65:6e:d2:67:f8:55:2f:56:25:5b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adb95e65b0f0e2079b764d3bcabbc5f12cde3fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c3:ea:b8:a3:41:10:f5:e7:56:f6:d6:38:fe: b9:21:4d:77:17:59:bc:da:ae:f5:8a:54:a0:eb:3c: ae:60:3a:d7:be:6b:3c:b5:74:05:90:b0:43:89:cd: 98:e4:81:0e:cc:02:c1:25:3b:0e:d1:fa:cc:fa:67: 92:d1:b8:5f:5d:96:48:1e:8b:ba:79:de:0f:6a:83: 0c:19:2c:7e:be:a1:f0:8b:b0:04:b6:8d:be:70:7e: e7:4e:4a:74:80:b2:44:57:49:09:e3:54:d8:44:e0: ce:69:fc:d1:f7:4e:12:39:ed:2e:db:98:ec:77:7c: 44:8c:2f:3d:39:9a:74:da:6f:24:3f:8f:0f:a2:38: e8:36:43:ce:ac:b1:91:a4:bc:0f:6c:ac:0b:5f:d2: d0:e3:df:ed:a8:1f:f5:6b:06:33:61:e5:d4:b4:5a: 9d:8d:ac:df:00:e5:8f:d1:7d:ae:57:b7:1a:b4:86: db:5e:0e:c6:e0:f4:b4:a9:6a:f3:ff:60:84:90:a1: a2:d2:21:1a:0a:7f:16:a3:13:c6:af:95:73:6a:28: 66:34:9e:1c:90:27:64:38:5f:63:28:6a:0b:ba:a0: 63:53:b7:5e:d0:6c:f8:f0:9b:46:a9:ae:59:4c:43: 6f:95:15:ae:4c:6b:c0:47:46:5b:5e:6b:36:b4:34: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B9:5E:65:B0:F0:E2:07:9B:76:4D:3B:CA:BB:C5:F1:2C:DE:3F:AC X509v3 Authority Key Identifier: keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/rbleZbDw4gebdk07yrvF8SzeP6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.203.0/24 Signature Algorithm: sha256WithRSAEncryption 64:53:60:7e:38:2b:50:51:45:eb:be:6b:13:bd:d8:2d:a0:60: 7b:03:b9:c9:7a:48:8d:53:ce:fc:90:97:3d:83:4a:59:c0:15: a7:bf:75:dd:f7:14:a8:16:23:b4:a3:69:9f:1b:cf:23:fa:34: 8e:b5:09:48:84:f2:a0:dd:48:6c:29:89:34:ee:5c:18:07:3c: 9d:d2:69:3a:9a:fd:db:83:68:88:42:aa:52:f0:a3:84:58:0a: 16:e5:43:fa:44:6f:7f:1e:0a:c4:39:20:41:ef:da:f1:7a:72: 03:c5:68:09:8f:85:4a:05:c7:90:b9:11:dc:5c:b7:e9:00:60: 06:85:91:af:b8:80:9e:f9:4c:1c:25:55:36:ce:a7:a1:31:ba: 8f:28:b5:ce:33:50:fc:83:ef:1f:ab:bf:32:e0:15:24:3f:7a: e2:93:58:e2:7d:fa:21:34:09:f3:0b:4c:8a:46:16:63:8a:1e: c4:76:93:92:2f:9f:13:ed:80:ae:5c:49:28:e0:be:64:7a:fa: 26:62:a8:1d:6a:f0:c7:55:47:4b:74:6c:b8:58:5d:7f:bf:98: f7:bd:ec:a5:d2:97:9a:d1:df:54:67:e1:9d:ed:e0:79:81:f1: cf:43:20:f9:3e:aa:65:d1:61:e3:84:29:89:fb:c7:51:d7:e9: dc:ae:dd:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VKG8mVu0mf4VS9WJVuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk Zjc3OTkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGI5NWU2NWIwZjBlMjA3OWI3NjRkM2JjYWJiYzVmMTJjZGUzZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMPquKNBEPXnVvbWOP65IU13F1m8 2q71ilSg6zyuYDrXvms8tXQFkLBDic2Y5IEOzALBJTsO0frM+meS0bhfXZZIHou6 ed4PaoMMGSx+vqHwi7AEto2+cH7nTkp0gLJEV0kJ41TYRODOafzR904SOe0u25js d3xEjC89OZp02m8kP48PojjoNkPOrLGRpLwPbKwLX9LQ49/tqB/1awYzYeXUtFqd jazfAOWP0X2uV7catIbbXg7G4PS0qWrz/2CEkKGi0iEaCn8WoxPGr5VzaihmNJ4c kCdkOF9jKGoLuqBjU7de0Gz48JtGqa5ZTENvlRWuTGvAR0ZbXms2tDSb8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK25XmWw8OIHm3ZNO8q7xfEs3j+sMB8GA1UdIwQY MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt NzU5OWI0NDFjZDFjLzEvcmJsZVpiRHc0Z2ViZGswN3lydkY4U3plUDZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/LMA0G CSqGSIb3DQEBCwUAA4IBAQBkU2B+OCtQUUXrvmsTvdgtoGB7A7nJekiNU878kJc9 g0pZwBWnv3Xd9xSoFiO0o2mfG88j+jSOtQlIhPKg3UhsKYk07lwYBzyd0mk6mv3b g2iIQqpS8KOEWAoW5UP6RG9/HgrEOSBB79rxenIDxWgJj4VKBceQuRHcXLfpAGAG hZGvuICe+UwcJVU2zqehMbqPKLXOM1D8g+8fq78y4BUkP3rik1jiffohNAnzC0yK RhZjih7EdpOSL58T7YCuXEko4L5kevomYqgdavDHVUdLdGy4WF1/v5j3veyl0pea 0d9UZ+Gd7eB5gfHPQyD5Pqpl0WHjhCmJ+8dR1+ncrt1t -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:41 2026 by rpki-client