This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-aCD2OYP2Rg3iw0TJov9LBp-V5s.roa File: 1-aCD2OYP2Rg3iw0TJov9LBp-V5s.roa (raw, json) Hash identifier: bAdDO6RofC5zRjQ2R9gQUGg1TwXMN4mBGV5hATRPpbc= Subject key identifier: F9:A0:83:D8:E6:0F:D9:18:37:8B:0D:13:26:8B:FD:2C:1A:7E:57:9B Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C801357EFE37117488C81CC834BC58B Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-aCD2OYP2Rg3iw0TJov9LBp-V5s.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25113 IP address blocks: 193.251.158.0/24 maxlen: 24 193.252.124.0/24 maxlen: 24 193.252.150.0/23 maxlen: 24 193.252.152.0/23 maxlen: 24 193.252.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:57:ef:e3:71:17:48:8c:81:cc:83:4b:c5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a083d8e60fd918378b0d13268bfd2c1a7e579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:82:ea:1d:52:41:c9:52:be:e9:9c:76:81: c1:d0:c4:63:96:b6:7b:81:6b:49:82:ea:4b:31:33: 22:b6:61:3c:a4:82:93:e9:f2:a8:a4:a7:ea:6f:da: 05:b2:80:d8:02:6a:43:87:49:ff:62:bf:19:0b:a9: 4d:73:43:ba:94:d2:d9:e0:74:22:24:fe:f6:d9:0d: 32:08:59:ea:51:63:0c:8e:0a:42:5e:09:b4:2e:c4: 67:cd:d6:a2:aa:15:1b:b1:28:33:2b:de:eb:fb:36: 83:70:2f:66:a6:00:47:57:9e:0d:54:14:f0:6f:53: 26:6d:40:6c:e7:66:0a:7c:91:21:38:d1:ec:4b:2c: 65:a9:52:7e:c6:76:af:52:ce:73:55:29:1a:e6:d3: b9:7d:44:36:9d:75:60:ee:aa:bf:79:1b:d8:af:21: 29:a1:9d:97:c8:72:d4:8e:24:5a:c6:99:e2:f7:b5: d1:fc:db:eb:6e:18:a7:91:67:3e:7d:16:f8:e7:4b: ce:c1:d7:f7:5a:d9:d7:0b:a4:a4:09:9b:63:e7:7b: 39:a8:6e:02:1e:1d:7a:2f:91:11:9b:b8:42:72:63: 7f:f2:fb:dd:6e:1b:a7:0b:08:93:56:6f:da:ac:cc: 0f:26:64:92:65:45:54:d7:f9:f9:9f:57:09:af:85: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:83:D8:E6:0F:D9:18:37:8B:0D:13:26:8B:FD:2C:1A:7E:57:9B X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-aCD2OYP2Rg3iw0TJov9LBp-V5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.251.158.0/24 193.252.124.0/24 193.252.150.0-193.252.153.255 193.252.235.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:d4:4e:5a:76:05:9b:5d:2b:81:75:7e:bd:2a:24:4c:03:68: dc:67:fc:15:0f:6f:e1:c6:73:0a:fa:ec:32:43:09:7c:fb:a6: 16:28:fc:9e:2b:2d:00:69:63:63:78:eb:2e:df:12:6f:fc:81: 69:a7:70:dc:ea:d4:22:ea:e5:71:be:1b:dc:25:92:8f:e4:ff: eb:e1:96:a2:10:d2:a1:7f:11:b9:a2:83:e0:22:c8:5b:7d:6e: 93:ba:9b:36:e6:63:29:4f:0d:96:a6:dc:ee:82:86:31:b9:21: 56:01:74:21:27:ad:9e:3a:45:27:d8:90:8d:4f:e4:21:8d:9e: 12:64:bd:ba:31:c9:b2:d9:11:26:de:74:b4:80:96:01:aa:5c: e8:46:42:e4:00:e8:f2:b7:63:a9:c9:04:46:dd:40:a7:dc:54: 74:17:d4:46:a4:11:34:04:85:c5:db:26:02:f2:6a:51:a3:47: 3f:2b:64:77:0f:8f:32:b9:3c:f6:5e:e9:9d:f9:e2:0e:c0:5d: a6:d7:55:0c:7d:33:65:d4:2b:23:d1:17:ea:1c:7a:9b:9e:4f: 66:06:6e:41:92:d3:bf:6b:b2:8e:05:55:06:e6:21:0f:52:fe: de:db:be:e0:33:13:6c:af:10:78:00:e1:31:2f:56:be:41:fe: f4:e4:7f:9e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8gBNX7+NxF0iMgcyDS8WLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWEwODNkOGU2MGZkOTE4Mzc4YjBkMTMyNjhiZmQyYzFhN2U1NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLCC6h1SQclSvumcdoHB0MRjlrZ7 gWtJgupLMTMitmE8pIKT6fKopKfqb9oFsoDYAmpDh0n/Yr8ZC6lNc0O6lNLZ4HQi JP722Q0yCFnqUWMMjgpCXgm0LsRnzdaiqhUbsSgzK97r+zaDcC9mpgBHV54NVBTw b1MmbUBs52YKfJEhONHsSyxlqVJ+xnavUs5zVSka5tO5fUQ2nXVg7qq/eRvYryEp oZ2XyHLUjiRaxpni97XR/NvrbhinkWc+fRb450vOwdf3WtnXC6SkCZtj53s5qG4C Hh16L5ERm7hCcmN/8vvdbhunCwiTVm/arMwPJmSSZUVU1/n5n1cJr4VpTwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPmgg9jmD9kYN4sNEyaL/SwaflebMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvMS1hQ0QyT1lQMlJnM2l3MFRKb3Y5TEJwLVY1cy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmEx Mi8xL092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAMH7ngME AMH8fDAMAwQBwfyWAwQBwfyYAwQAwfzrMA0GCSqGSIb3DQEBCwUAA4IBAQBP1E5a dgWbXSuBdX69KiRMA2jcZ/wVD2/hxnMK+uwyQwl8+6YWKPyeKy0AaWNjeOsu3xJv /IFpp3Dc6tQi6uVxvhvcJZKP5P/r4ZaiENKhfxG5ooPgIshbfW6Tups25mMpTw2W ptzugoYxuSFWAXQhJ62eOkUn2JCNT+QhjZ4SZL26Mcmy2REm3nS0gJYBqlzoRkLk AOjyt2OpyQRG3UCn3FR0F9RGpBE0BIXF2yYC8mpRo0c/K2R3D48yuTz2Xumd+eIO wF2m11UMfTNl1Csj0RfqHHqbnk9mBm5BktO/a7KOBVUG5iEPUv7e277gMxNsrxB4 AOExL1a+Qf705H+e -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:30 2026 by rpki-client