This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_A6CwK7Y9XvFLDevpZ3sPn05NF0.roa File: _A6CwK7Y9XvFLDevpZ3sPn05NF0.roa (raw, json) Hash identifier: mq+8HgCaf3ho3Xkx2ArG08SQQHpNMhOkyu0D7B33HDc= Subject key identifier: FC:0E:82:C0:AE:D8:F5:7B:C5:2C:37:AF:A5:9D:EC:3E:7D:39:34:5D Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019BEAFA4BD44E2A6BD9CD7D7A0C516C7A06 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_A6CwK7Y9XvFLDevpZ3sPn05NF0.roa Signing time: Fri 23 Jan 2026 13:10:30 +0000 ROA not before: Fri 23 Jan 2026 13:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216234 IP address blocks: 193.109.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:fa:4b:d4:4e:2a:6b:d9:cd:7d:7a:0c:51:6c:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 23 13:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc0e82c0aed8f57bc52c37afa59dec3e7d39345d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:e4:81:dd:ce:de:6e:19:39:8b:6e:cb:24: e9:35:e8:45:13:67:4d:a5:9a:ae:45:1f:be:2c:05: 71:43:ba:05:f2:fa:35:54:f9:13:eb:e2:98:2b:aa: 37:66:fc:e9:39:00:0a:1e:aa:1e:5c:a0:09:12:97: 1e:f9:94:0d:91:9d:10:de:37:8d:81:7a:d0:d3:15: 14:87:d0:be:ec:33:26:d7:cb:a6:ab:83:8f:92:ef: 0b:c5:30:95:fd:f3:b1:b0:0d:c7:50:b0:af:a5:8b: e5:50:68:ba:62:9f:5e:3d:7a:33:88:ef:51:3b:69: dc:7b:35:5d:d4:2f:6c:c3:de:2d:da:7c:ac:06:20: 28:c0:60:df:07:62:38:a7:92:e7:7c:6a:21:2e:f1: 23:e3:c3:46:7a:d4:62:16:a5:9a:c2:d2:ea:39:95: e9:6a:36:18:de:0c:43:f1:71:84:d5:32:f8:58:0a: aa:da:2e:28:81:40:4f:87:cb:f0:13:44:d9:bc:1a: 06:8b:b5:d8:ca:e4:d2:18:b5:c6:19:38:d9:5c:ec: 0d:75:55:2b:0a:71:d4:8e:99:a1:20:8a:8e:1c:10: 68:81:ca:2a:ee:2b:c4:d9:aa:c8:54:16:fb:29:6f: 90:97:d3:ad:56:9a:cb:5d:4a:79:3f:d5:c9:08:5d: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0E:82:C0:AE:D8:F5:7B:C5:2C:37:AF:A5:9D:EC:3E:7D:39:34:5D X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_A6CwK7Y9XvFLDevpZ3sPn05NF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.85.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:53:f3:3e:0c:bc:6a:1d:af:bb:ca:61:20:f2:6f:45:7a:52: 34:37:8d:09:c1:f6:4c:94:6e:17:ab:61:70:de:be:b5:21:57: 2f:27:9f:c1:f8:e1:03:df:4c:9f:84:9c:01:86:37:18:36:13: cb:e4:88:97:36:61:26:e1:1e:17:b4:38:5b:af:c1:b9:e3:e8: b4:5f:1f:35:5b:e7:e5:46:ac:1c:24:34:8a:b4:a2:e9:d4:71: 6f:81:59:02:e6:91:4a:6f:5f:54:c5:01:22:35:d6:c4:2b:a5: b1:90:68:f5:09:8b:d8:25:97:dc:00:fe:49:10:76:3a:cd:1c: 49:b3:30:82:b2:38:6c:d8:2b:ea:d7:43:75:b3:87:2f:3f:95: c3:b7:1d:d9:39:1d:9a:e0:15:58:a7:ec:2b:46:02:c9:67:9d: 6c:30:6e:dd:0a:80:9d:17:01:54:96:8e:b6:4c:91:f8:1b:bb: de:a6:e9:b1:eb:b9:83:f0:cb:a1:97:5b:3e:77:46:3b:d8:b5: ca:26:08:83:2f:f7:5b:cc:e9:d4:e0:74:33:a6:da:b7:ae:c1: ed:a4:a1:eb:51:95:0a:f4:36:43:37:9c:78:ca:29:89:a6:d0: 59:f0:51:a8:8f:ef:bc:b6:7b:2c:4c:78:7f:db:f7:4b:88:cf: 81:00:c0:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvq+kvUTipr2c19egxRbHoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTIzMTMxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzBlODJjMGFlZDhmNTdiYzUyYzM3YWZhNTlkZWMzZTdkMzkzNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucvkgd3O3m4ZOYtuyyTpNehFE2dN pZquRR++LAVxQ7oF8vo1VPkT6+KYK6o3ZvzpOQAKHqoeXKAJEpce+ZQNkZ0Q3jeN gXrQ0xUUh9C+7DMm18umq4OPku8LxTCV/fOxsA3HULCvpYvlUGi6Yp9ePXoziO9R O2ncezVd1C9sw94t2nysBiAowGDfB2I4p5LnfGohLvEj48NGetRiFqWawtLqOZXp ajYY3gxD8XGE1TL4WAqq2i4ogUBPh8vwE0TZvBoGi7XYyuTSGLXGGTjZXOwNdVUr CnHUjpmhIIqOHBBogcoq7ivE2arIVBb7KW+Ql9OtVprLXUp5P9XJCF1D3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwOgsCu2PV7xSw3r6Wd7D59OTRdMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvX0E2Q3dLN1k5WHZGTERldnBaM3NQbjA1TkYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW1VMA0G CSqGSIb3DQEBCwUAA4IBAQBKU/M+DLxqHa+7ymEg8m9FelI0N40JwfZMlG4Xq2Fw 3r61IVcvJ5/B+OED30yfhJwBhjcYNhPL5IiXNmEm4R4XtDhbr8G54+i0Xx81W+fl RqwcJDSKtKLp1HFvgVkC5pFKb19UxQEiNdbEK6WxkGj1CYvYJZfcAP5JEHY6zRxJ szCCsjhs2Cvq10N1s4cvP5XDtx3ZOR2a4BVYp+wrRgLJZ51sMG7dCoCdFwFUlo62 TJH4G7vepumx67mD8Muhl1s+d0Y72LXKJgiDL/dbzOnU4HQzptq3rsHtpKHrUZUK 9DZDN5x4yimJptBZ8FGoj++8tnssTHh/2/dLiM+BAMDU -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:15 2026 by rpki-client