This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa File: AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa (raw, json) Hash identifier: Pa1IL9mamM/yk2/roqlTQznqixyuJZ5qqNij4nNn7EU= Subject key identifier: 01:B6:35:62:4C:52:16:98:32:42:66:A8:C7:40:D3:BE:70:1A:01:94 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019B7EA49893FA2C508931E73EE9FA07394C Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa Signing time: Fri 02 Jan 2026 12:17:54 +0000 ROA not before: Fri 02 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43665 IP address blocks: 193.10.29.0/24 maxlen: 24 193.10.30.0/23 maxlen: 23 193.10.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:98:93:fa:2c:50:89:31:e7:3e:e9:fa:07:39:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jan 2 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01b635624c521698324266a8c740d3be701a0194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:2d:ba:d5:0d:17:a3:97:fa:b9:72:bd:7f: 5b:6b:be:17:d7:a4:30:66:b3:d1:39:a3:46:f9:3d: c5:94:2a:af:67:bf:11:ce:c5:e1:41:8c:5b:11:6f: a7:be:af:65:75:ee:93:e7:cd:62:95:47:88:05:c4: 70:31:08:48:0c:a4:a6:fc:ad:0f:e3:6e:e2:40:e1: 23:a4:0a:53:28:39:92:29:0a:d2:99:88:ab:2e:db: 1e:8a:85:b6:84:2b:97:9d:9f:3d:f9:d1:37:fe:81: 06:23:78:72:92:cd:59:bc:d7:12:0e:7e:e1:83:31: f3:34:33:e7:3d:50:e5:36:1a:18:f9:22:79:16:89: 89:4e:50:1a:a4:e7:e3:aa:48:fe:12:c5:aa:9a:dc: ed:31:6b:34:f3:e0:b8:97:cb:a1:fc:1d:a1:26:ac: 89:59:c8:a6:bc:c5:be:1e:f5:06:02:df:63:f0:e2: 73:5d:b5:55:61:9d:4a:b8:0a:a9:8f:74:97:de:03: 45:ec:3e:9f:4f:ef:5d:cc:62:3c:37:8a:df:cd:e9: 19:b1:51:f6:06:85:f6:3a:fb:0c:7b:f1:da:64:95: 5b:92:86:e7:b0:fa:54:7f:a3:dc:c3:b6:ba:91:eb: 60:f3:03:04:9f:1a:db:4a:7e:d7:b2:68:6b:35:95: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B6:35:62:4C:52:16:98:32:42:66:A8:C7:40:D3:BE:70:1A:01:94 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/AbY1YkxSFpgyQmaox0DTvnAaAZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.10.29.0-193.10.31.255 193.10.160.0/23 Signature Algorithm: sha256WithRSAEncryption 53:60:8a:c6:07:60:e1:bd:54:d9:4a:5c:a3:b8:ec:a4:3a:cf: 60:8b:4d:f2:c6:3f:2d:07:1d:d4:ec:71:ea:e0:97:a0:23:76: bd:0f:f0:93:7a:f5:d8:86:6b:4b:0c:99:15:2b:a8:55:7c:fa: a2:14:3d:70:55:47:a1:a9:08:02:cc:1f:a6:d5:ab:d0:5d:90: 90:4c:66:cb:68:81:fc:f0:b1:35:b9:80:2d:d7:27:e7:51:11: 34:69:f1:b5:ed:94:a3:4a:ce:c5:0b:26:b3:4d:0b:44:94:ea: 70:7f:95:72:79:d1:71:f0:cd:e8:38:86:c2:6d:24:67:bb:56: b6:62:7c:45:90:f5:bb:cc:79:68:9a:42:ac:b8:39:26:2b:e3: c1:3b:4b:c3:9a:99:c3:a1:32:73:93:ef:ff:98:92:34:e0:cc: b6:8a:47:c7:16:2d:40:80:f2:fb:d6:00:3d:08:77:3e:a9:26: 2e:26:48:3b:f9:db:de:af:09:e8:66:c7:09:7f:04:86:4d:9e: b8:c2:98:52:74:24:f2:11:77:d5:7a:55:9c:aa:91:2e:e0:cd: 69:d8:4e:d5:b6:f3:44:0f:5b:2e:cc:60:01:d9:77:9a:66:d9: f6:93:ad:c6:89:e6:45:e3:27:88:f1:2b:88:7a:bc:75:5b:1b: ad:3c:74:b2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pJiT+ixQiTHnPun6BzlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMTAyMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWI2MzU2MjRjNTIxNjk4MzI0MjY2YThjNzQwZDNiZTcwMWEwMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyItutUNF6OX+rlyvX9ba74X16Qw ZrPROaNG+T3FlCqvZ78RzsXhQYxbEW+nvq9lde6T581ilUeIBcRwMQhIDKSm/K0P 427iQOEjpApTKDmSKQrSmYirLtseioW2hCuXnZ89+dE3/oEGI3hyks1ZvNcSDn7h gzHzNDPnPVDlNhoY+SJ5FomJTlAapOfjqkj+EsWqmtztMWs08+C4l8uh/B2hJqyJ WcimvMW+HvUGAt9j8OJzXbVVYZ1KuAqpj3SX3gNF7D6fT+9dzGI8N4rfzekZsVH2 BoX2OvsMe/HaZJVbkobnsPpUf6Pcw7a6ketg8wMEnxrbSn7XsmhrNZWq0wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAG2NWJMUhaYMkJmqMdA075wGgGUMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvQWJZMVlreFNGcGd5UW1hb3gwRFR2bkFhQVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADBCh0D BAXBCgADBAHBCqAwDQYJKoZIhvcNAQELBQADggEBAFNgisYHYOG9VNlKXKO47KQ6 z2CLTfLGPy0HHdTscergl6Ajdr0P8JN69diGa0sMmRUrqFV8+qIUPXBVR6GpCALM H6bVq9BdkJBMZstogfzwsTW5gC3XJ+dRETRp8bXtlKNKzsULJrNNC0SU6nB/lXJ5 0XHwzeg4hsJtJGe7VrZifEWQ9bvMeWiaQqy4OSYr48E7S8OamcOhMnOT7/+YkjTg zLaKR8cWLUCA8vvWAD0Idz6pJi4mSDv5296vCehmxwl/BIZNnrjCmFJ0JPIRd9V6 VZyqkS7gzWnYTtW280QPWy7MYAHZd5pm2faTrcaJ5kXjJ4jxK4h6vHVbG608dLI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:41:52 2026 by rpki-client