This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/A-DED3zrKOna1FUGWpyHJNkhEZ0.roa File: A-DED3zrKOna1FUGWpyHJNkhEZ0.roa (raw, json) Hash identifier: afJwMBYmR0D76Co10f5BGjdSHXBv59oxmtmfyQsHpHM= Subject key identifier: 03:E0:C4:0F:7C:EB:28:E9:DA:D4:55:06:5A:9C:87:24:D9:21:11:9D Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Certificate serial: 019B78A2A39F7A7F23851F03C575FC6F2865 Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/A-DED3zrKOna1FUGWpyHJNkhEZ0.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31083 IP address blocks: 193.68.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a3:9f:7a:7f:23:85:1f:03:c5:75:fc:6f:28:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03e0c40f7ceb28e9dad455065a9c8724d921119d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:76:b6:4e:c6:81:91:62:52:88:cd:00:de: 76:f5:d3:39:b7:98:51:4f:ea:e4:b9:03:3d:af:9a: d1:ec:b2:c7:e7:f3:94:f3:42:f6:42:48:19:f9:df: 1b:73:7b:ff:4e:eb:57:12:e7:bd:b8:ee:d9:30:f0: 42:90:ba:c6:e1:58:bc:96:d9:ed:88:c9:53:b7:b5: bf:1e:5d:cd:e7:ce:74:3d:7f:ca:ea:b8:be:04:c5: 59:ae:0d:eb:1d:d4:9b:3f:a6:29:3a:aa:7d:b5:6a: 96:12:27:d8:19:1e:ba:23:cb:9e:cc:87:d5:f9:77: d5:1b:20:67:2d:51:12:07:83:83:ea:83:e7:df:28: 5a:13:a9:7b:a7:95:45:fa:76:d0:f6:16:2e:74:11: 72:67:86:ac:0f:1b:52:39:0c:da:32:73:d9:e7:ca: 6e:fa:5b:e3:0f:c2:63:4f:90:8f:8e:a5:59:14:8d: a8:9c:44:f6:fd:b7:aa:af:79:1c:bd:65:d6:30:05: 1f:09:4a:86:70:b6:4b:c3:c8:0c:37:5d:e2:6a:c5: 56:6c:70:ba:ba:cd:22:d9:f9:c6:34:b5:e0:6b:80: 62:cb:9d:36:9e:54:b0:f2:86:9f:bf:64:40:a2:5a: a8:a2:fa:b9:67:04:7e:4f:d1:25:15:5c:ce:86:be: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:C4:0F:7C:EB:28:E9:DA:D4:55:06:5A:9C:87:24:D9:21:11:9D X509v3 Authority Key Identifier: keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/A-DED3zrKOna1FUGWpyHJNkhEZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.68.119.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f5:36:1c:3e:c6:53:ed:80:07:d3:65:47:d1:83:1a:68:4c: b0:f9:41:33:dd:49:f7:7d:5c:7b:33:b3:73:e0:a5:f0:74:8e: cc:22:19:d6:9f:7c:22:06:64:f8:47:a3:b4:82:12:14:eb:58: 54:dd:42:05:da:c5:6a:56:cd:f8:50:9f:66:7c:62:42:4f:fe: 44:28:f3:de:66:3c:df:a9:59:da:f1:ce:9c:e7:3d:41:72:d9: 51:7b:09:30:ab:a6:f4:09:3f:05:bd:e6:2f:31:80:01:81:7c: 95:53:6e:52:66:21:47:c8:cd:e0:81:88:86:fe:60:ef:75:82: c8:71:45:e4:38:c8:37:fe:60:70:8a:66:5b:35:59:00:b8:3b: 1f:19:b1:a6:ff:c3:11:89:64:45:25:62:f5:3f:ee:08:67:fb: ae:7b:83:34:3f:7c:65:1a:57:5f:27:51:cc:73:87:9e:95:32: e3:09:37:52:67:b8:21:af:0e:8f:bd:d3:82:10:5c:87:f3:5e: 9d:9e:5d:7e:1a:ed:52:77:d9:04:a7:50:f4:c2:a8:ca:22:25: c5:5d:c3:d8:26:5e:81:1e:fa:7a:c9:ca:2a:de:38:f9:48:45: b3:83:f6:ca:ff:e6:b0:03:6e:58:42:90:fd:57:a0:04:fd:85: 35:cd:b1:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqOfen8jhR8DxXX8byhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi MjBmNTcwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2UwYzQwZjdjZWIyOGU5ZGFkNDU1MDY1YTljODcyNGQ5MjExMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+52tk7GgZFiUojNAN529dM5t5hR T+rkuQM9r5rR7LLH5/OU80L2QkgZ+d8bc3v/TutXEue9uO7ZMPBCkLrG4Vi8ltnt iMlTt7W/Hl3N5850PX/K6ri+BMVZrg3rHdSbP6YpOqp9tWqWEifYGR66I8uezIfV +XfVGyBnLVESB4OD6oPn3yhaE6l7p5VF+nbQ9hYudBFyZ4asDxtSOQzaMnPZ58pu +lvjD8JjT5CPjqVZFI2onET2/beqr3kcvWXWMAUfCUqGcLZLw8gMN13iasVWbHC6 us0i2fnGNLXga4Biy502nlSw8oafv2RAolqoovq5ZwR+T9ElFVzOhr7qYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPgxA986yjp2tRVBlqchyTZIRGdMB8GA1UdIwQY MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt NDlkNDBhMTNjYmMyLzEvQS1ERUQzenJLT25hMUZVR1dweUhKTmtoRVowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUR3MA0G CSqGSIb3DQEBCwUAA4IBAQB19TYcPsZT7YAH02VH0YMaaEyw+UEz3Un3fVx7M7Nz 4KXwdI7MIhnWn3wiBmT4R6O0ghIU61hU3UIF2sVqVs34UJ9mfGJCT/5EKPPeZjzf qVna8c6c5z1BctlRewkwq6b0CT8FveYvMYABgXyVU25SZiFHyM3ggYiG/mDvdYLI cUXkOMg3/mBwimZbNVkAuDsfGbGm/8MRiWRFJWL1P+4IZ/uue4M0P3xlGldfJ1HM c4eelTLjCTdSZ7ghrw6PvdOCEFyH816dnl1+Gu1Sd9kEp1D0wqjKIiXFXcPYJl6B Hvp6ycoq3jj5SEWzg/bK/+awA25YQpD9V6AE/YU1zbGU -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:12 2026 by rpki-client