This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/k0ldwye2atdMGffynKmUvuUXgZU.roa File: k0ldwye2atdMGffynKmUvuUXgZU.roa (raw, json) Hash identifier: JrwiTiu9NwMxULNngbCiKVNUte/YzwEe47fYqeH12rc= Subject key identifier: 93:49:5D:C3:27:B6:6A:D7:4C:19:F7:F2:9C:A9:94:BE:E5:17:81:95 Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb Certificate serial: 019B797EE9384EF8FD523604929006BBB669 Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/k0ldwye2atdMGffynKmUvuUXgZU.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199256 IP address blocks: 193.120.22.0/24 maxlen: 24 193.120.40.0/23 maxlen: 23 193.120.55.0/24 maxlen: 24 193.120.164.0/23 maxlen: 23 194.125.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e9:38:4e:f8:fd:52:36:04:92:90:06:bb:b6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93495dc327b66ad74c19f7f29ca994bee5178195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:79:28:f3:e2:35:16:30:8f:54:1f:57:02:bb: 1c:d4:ac:73:99:7b:bd:bf:0f:a1:7a:50:fe:d6:40: 06:ce:6f:72:19:7a:6d:f0:14:7d:91:db:b3:1c:a9: ed:01:3c:dc:44:10:f0:16:e9:e7:19:5d:74:e9:fe: 25:92:4c:a0:cb:e8:03:24:4b:44:09:ab:d0:8d:0d: 54:df:99:db:8e:0e:9f:f2:15:0d:19:d7:8e:48:f0: 2c:80:ca:c2:df:41:5c:fc:1e:23:04:06:84:21:88: 31:7a:a6:dc:17:cf:87:a8:41:55:3c:f0:e1:10:17: 49:7a:bc:7e:66:0b:25:9f:a9:71:a7:29:de:cc:6f: 23:20:73:3c:e5:82:24:3e:7b:b1:87:49:ca:33:ed: 42:52:36:b6:5f:12:7a:6f:8c:68:96:09:a8:b9:3f: f4:a8:e0:4e:70:9b:ef:da:db:f5:4b:f2:ea:74:c2: ef:27:db:32:d4:5e:a3:e2:a7:03:02:1d:4f:b5:b8: a5:01:f4:b6:23:54:b9:b4:b0:aa:e7:ad:d1:01:0e: ab:88:1b:16:8c:61:fe:d1:74:dc:5b:83:2e:34:c6: 25:b4:3a:fc:bf:2f:3d:f4:26:04:c6:68:e0:73:1c: db:77:ca:04:fe:a3:67:6e:08:53:e7:70:31:de:34: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:49:5D:C3:27:B6:6A:D7:4C:19:F7:F2:9C:A9:94:BE:E5:17:81:95 X509v3 Authority Key Identifier: keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/k0ldwye2atdMGffynKmUvuUXgZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.120.22.0/24 193.120.40.0/23 193.120.55.0/24 193.120.164.0/23 194.125.118.0/24 Signature Algorithm: sha256WithRSAEncryption 24:80:0d:24:59:10:e1:0b:91:b1:c1:e0:0e:72:4f:5b:c8:71: 18:9a:fe:7d:83:88:6c:63:90:47:60:91:8f:a8:76:2f:9d:7e: 06:f4:28:22:97:44:43:f6:34:f4:95:1c:78:c9:de:2f:1d:ce: e5:2e:65:1f:e9:60:2c:a5:2d:4a:7b:8a:73:4b:df:6b:8d:74: cc:f0:e1:6a:79:f8:b5:e7:e3:29:e0:02:ac:90:8a:98:99:4a: 07:ad:98:51:dc:b7:01:12:b0:26:8e:8d:2a:26:db:5f:f7:ef: 0d:33:9e:3a:b5:14:60:5e:b0:97:83:35:78:2a:08:d4:0c:68: 29:c7:ac:aa:72:c8:bc:88:71:ef:08:b1:fb:01:07:c0:b9:8e: bf:11:7c:72:4e:36:7c:8d:0d:62:47:11:a2:53:d7:02:59:40: 66:81:f7:38:7c:84:b8:62:98:73:38:23:d0:77:a0:d1:5c:45: 1e:cf:a1:8c:52:97:c6:21:22:c0:8d:8b:5f:8e:95:01:8b:54: 0a:fa:cc:e7:4c:57:8b:20:a5:f3:9a:0b:71:c7:6d:95:2d:76: ea:41:5c:13:bf:ea:bc:8f:b2:0b:e3:9b:97:9f:dc:dd:40:30: 70:60:47:d9:eb:7a:d0:33:86:7c:23:3d:7f:b7:1a:0f:5b:d6: b2:3a:27:19 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fuk4Tvj9UjYEkpAGu7ZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTQzYTUxOTdlYjI1NDQ0NDdlOWQzNmIzZWJmMTQ0NTJj Nzc3ZWIwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzQ5NWRjMzI3YjY2YWQ3NGMxOWY3ZjI5Y2E5OTRiZWU1MTc4MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Hko8+I1FjCPVB9XArsc1KxzmXu9 vw+helD+1kAGzm9yGXpt8BR9kduzHKntATzcRBDwFunnGV106f4lkkygy+gDJEtE CavQjQ1U35nbjg6f8hUNGdeOSPAsgMrC30Fc/B4jBAaEIYgxeqbcF8+HqEFVPPDh EBdJerx+Zgsln6lxpynezG8jIHM85YIkPnuxh0nKM+1CUja2XxJ6b4xolgmouT/0 qOBOcJvv2tv1S/LqdMLvJ9sy1F6j4qcDAh1PtbilAfS2I1S5tLCq563RAQ6riBsW jGH+0XTcW4MuNMYltDr8vy899CYExmjgcxzbd8oE/qNnbghT53Ax3jQ/lQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJNJXcMntmrXTBn38pyplL7lF4GVMB8GA1UdIwQY MBaAFBBUOlGX6yVERH6dNrPr8URSx3frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmIt ZjdlMGM1ZTI3MDJlLzEvazBsZHd5ZTJhdGRNR2ZmeW5LbVV2dVVYZ1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmItZjdlMGM1ZTI3MDJl LzEvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwXgWAwQB wXgoAwQAwXg3AwQBwXikAwQAwn12MA0GCSqGSIb3DQEBCwUAA4IBAQAkgA0kWRDh C5GxweAOck9byHEYmv59g4hsY5BHYJGPqHYvnX4G9Cgil0RD9jT0lRx4yd4vHc7l LmUf6WAspS1Ke4pzS99rjXTM8OFqefi15+Mp4AKskIqYmUoHrZhR3LcBErAmjo0q Jttf9+8NM546tRRgXrCXgzV4KgjUDGgpx6yqcsi8iHHvCLH7AQfAuY6/EXxyTjZ8 jQ1iRxGiU9cCWUBmgfc4fIS4YphzOCPQd6DRXEUez6GMUpfGISLAjYtfjpUBi1QK +sznTFeLIKXzmgtxx22VLXbqQVwTv+q8j7IL45uXn9zdQDBwYEfZ63rQM4Z8Iz1/ txoPW9ayOicZ -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:18 2026 by rpki-client