This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/s_ckIK0LVvqQjN-Fga7N1PGEKnA.roa File: s_ckIK0LVvqQjN-Fga7N1PGEKnA.roa (raw, json) Hash identifier: TY3JqfxP0JobLxsDQ6EXldUWNXSM4kgsLbFuU3iPfEE= Subject key identifier: B3:F7:24:20:AD:0B:56:FA:90:8C:DF:85:81:AE:CD:D4:F1:84:2A:70 Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa Certificate serial: 019B7F843B507FC70D1DF6256B45EDDE498E Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/s_ckIK0LVvqQjN-Fga7N1PGEKnA.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200645 IP address blocks: 193.104.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3b:50:7f:c7:0d:1d:f6:25:6b:45:ed:de:49:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3f72420ad0b56fa908cdf8581aecdd4f1842a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:eb:2b:18:c2:da:a6:17:89:36:7c:39:dd: 07:ca:8d:60:7b:dc:a5:51:83:2d:f3:5b:e7:ac:8e: 07:3d:1a:62:6c:07:dc:d1:7d:d5:a1:58:a4:38:05: a4:83:cb:94:7a:10:12:c9:34:2a:45:f1:57:31:21: 7a:db:0b:8b:a9:e2:7e:9d:8b:a7:85:8e:45:9e:e8: a5:62:ed:ea:f1:bc:28:3d:a3:09:78:4c:20:30:05: 3c:ff:94:b5:e4:03:3b:ad:1a:70:ab:ea:a9:3e:8f: 28:89:76:37:41:f7:c3:d8:73:ee:5e:60:6f:35:0e: 91:94:6c:b5:0b:0a:69:b8:12:3e:53:2b:f5:39:33: ba:92:11:17:95:88:76:4a:11:72:49:11:a7:ab:b4: 95:1f:05:f9:82:dc:36:e6:eb:73:99:88:67:93:00: d8:e1:cb:41:1f:c5:21:34:e0:cc:5b:63:9f:bc:ab: 51:59:b7:9b:26:e4:3c:2b:fe:69:a5:2c:22:8d:24: 63:7c:fc:10:cf:63:12:da:95:fc:ff:af:68:59:4f: f0:21:7d:be:e6:4c:38:a5:7a:77:43:36:fa:83:d3: 53:a4:5a:bc:e6:00:cf:8f:e8:07:87:d9:47:a8:36: a6:aa:2d:0f:fa:a9:54:89:98:46:da:b2:0e:99:91: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F7:24:20:AD:0B:56:FA:90:8C:DF:85:81:AE:CD:D4:F1:84:2A:70 X509v3 Authority Key Identifier: keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/s_ckIK0LVvqQjN-Fga7N1PGEKnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.29.0/24 Signature Algorithm: sha256WithRSAEncryption 97:60:bf:8b:ea:42:0e:94:d3:69:33:1c:9d:3d:b4:29:ea:e7: 79:e9:d4:02:68:e7:3a:f7:fc:5a:fe:99:7f:72:b3:3e:f8:53: a4:76:7e:b3:a1:00:e4:ea:fe:4f:a4:4b:dd:b6:9e:9c:b7:33: 25:74:14:c9:e6:03:f8:d4:d6:2f:75:76:24:c8:45:b9:a1:32: e7:5e:69:0e:ff:3c:9a:f2:52:24:c6:08:34:1b:f2:b3:9f:17: 41:42:eb:5a:20:0e:16:f5:9d:5a:a1:3e:c5:27:cb:f6:0f:b0: f2:0f:cc:f5:1a:89:12:cd:5d:d6:30:84:52:84:44:d7:54:47: ba:2e:00:d1:ff:13:99:1b:d0:b9:09:e3:bb:68:fb:fe:e7:90: cf:61:ba:8c:3e:5c:dd:4b:d9:4c:09:80:3c:05:d6:75:4d:20: 14:4a:d0:87:41:7d:a4:a5:86:87:eb:4d:95:22:f5:ac:8f:62: c1:42:93:29:a1:8b:8f:35:3a:c3:4c:2a:9a:8d:48:4a:e1:54: 0d:35:19:8e:9e:e9:62:42:6f:39:79:e7:2e:bd:c2:8d:aa:ce: d0:e1:cc:0d:f7:fb:a6:44:f0:b1:4e:65:1a:46:9d:ed:8d:23: 80:d3:f2:b8:9d:2f:05:f8:45:a3:94:4d:0f:29:58:0f:7f:99: dc:df:d6:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDtQf8cNHfYla0Xt3kmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0 ZGJmYWEwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Y3MjQyMGFkMGI1NmZhOTA4Y2RmODU4MWFlY2RkNGYxODQyYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8TrKxjC2qYXiTZ8Od0Hyo1ge9yl UYMt81vnrI4HPRpibAfc0X3VoVikOAWkg8uUehASyTQqRfFXMSF62wuLqeJ+nYun hY5FnuilYu3q8bwoPaMJeEwgMAU8/5S15AM7rRpwq+qpPo8oiXY3QffD2HPuXmBv NQ6RlGy1CwppuBI+Uyv1OTO6khEXlYh2ShFySRGnq7SVHwX5gtw25utzmYhnkwDY 4ctBH8UhNODMW2OfvKtRWbebJuQ8K/5ppSwijSRjfPwQz2MS2pX8/69oWU/wIX2+ 5kw4pXp3Qzb6g9NTpFq85gDPj+gHh9lHqDamqi0P+qlUiZhG2rIOmZHc7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLP3JCCtC1b6kIzfhYGuzdTxhCpwMB8GA1UdIwQY MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct ZWM1MGRhYWQ4MmY3LzEvc19ja0lLMExWdnFRak4tRmdhN04xUEdFS25BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3 LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgdMA0G CSqGSIb3DQEBCwUAA4IBAQCXYL+L6kIOlNNpMxydPbQp6ud56dQCaOc69/xa/pl/ crM++FOkdn6zoQDk6v5PpEvdtp6ctzMldBTJ5gP41NYvdXYkyEW5oTLnXmkO/zya 8lIkxgg0G/KznxdBQutaIA4W9Z1aoT7FJ8v2D7DyD8z1GokSzV3WMIRShETXVEe6 LgDR/xOZG9C5CeO7aPv+55DPYbqMPlzdS9lMCYA8BdZ1TSAUStCHQX2kpYaH602V IvWsj2LBQpMpoYuPNTrDTCqajUhK4VQNNRmOnuliQm85eecuvcKNqs7Q4cwN9/um RPCxTmUaRp3tjSOA0/K4nS8F+EWjlE0PKVgPf5nc39Za -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:16 2026 by rpki-client