This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/D5NkL44tDna5iq5TxBiDoayyR7w.roa File: D5NkL44tDna5iq5TxBiDoayyR7w.roa (raw, json) Hash identifier: xpIWln43hlWk8qKWLoKR9JJ/noHx7dA0xrLy34N2PV8= Subject key identifier: 0F:93:64:2F:8E:2D:0E:76:B9:8A:AE:53:C4:18:83:A1:AC:B2:47:BC Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36AE18DFAE8DC4AB1BD9554EBB967F Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/D5NkL44tDna5iq5TxBiDoayyR7w.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44597 IP address blocks: 193.232.134.0/24 maxlen: 24 2001:67c:1440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ae:18:df:ae:8d:c4:ab:1b:d9:55:4e:bb:96:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f93642f8e2d0e76b98aae53c41883a1acb247bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:da:37:6e:1a:8f:4b:97:91:45:a6:f8:44: 32:c3:51:21:7a:e8:b4:1d:12:5e:6f:5b:2b:b9:d4: 68:ac:36:70:19:2f:3a:f0:0f:9f:b8:65:f1:f7:a7: 97:7a:ec:8e:4e:02:d0:29:03:6c:4f:c3:ca:01:5a: 79:d2:47:af:b1:0f:53:ad:e4:99:16:7f:36:38:4a: f4:f4:fb:9a:8b:0f:a0:a0:5f:52:36:97:20:2b:2d: 14:93:2b:0f:29:0c:cb:ed:65:b1:2a:c8:94:2e:0f: 7d:04:c6:5b:df:11:21:be:86:bb:bb:5f:d5:74:52: d6:99:fa:86:94:3e:6f:89:b0:18:e1:17:70:39:3d: c4:b9:8e:cc:63:07:87:aa:b9:3a:b2:16:82:84:fc: fa:2d:f3:34:2f:b1:eb:49:d5:34:8c:fb:b5:be:a6: 8c:d1:76:8e:44:a3:79:ff:11:6f:8c:78:33:90:47: 8d:6d:3d:a4:7f:77:28:0e:95:0b:29:84:3e:0f:4a: e0:8e:a7:69:75:74:b4:fa:42:87:b3:fa:65:39:70: 02:9c:84:89:ad:ce:bd:0a:f5:75:ed:b7:f9:98:8c: ab:44:45:35:f9:ad:fb:b3:68:26:12:f7:d3:a8:c5: 8b:bc:54:3f:21:de:4c:4f:1e:3d:7a:25:de:43:94: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:64:2F:8E:2D:0E:76:B9:8A:AE:53:C4:18:83:A1:AC:B2:47:BC X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/D5NkL44tDna5iq5TxBiDoayyR7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.134.0/24 IPv6: 2001:67c:1440::/48 Signature Algorithm: sha256WithRSAEncryption 92:11:58:66:34:90:1a:cb:71:7a:0e:a7:5c:6f:a1:7f:6f:a0: ef:fe:ed:30:6c:c1:1b:36:3a:13:ea:40:9d:fd:ef:9d:13:93: 5e:ea:fd:11:b8:3f:6c:d6:d6:e3:47:ac:de:9c:dd:b5:29:dc: f2:80:a2:9a:60:2f:1d:90:b4:29:62:bf:20:a4:04:1d:e5:78: 56:d9:2b:ca:d9:5a:94:1b:26:87:f5:3a:cc:61:09:86:ac:b3: 0b:b4:e9:ea:f2:79:7d:f4:c0:16:b1:de:55:8e:77:85:1d:4b: ff:2a:99:50:89:7b:ec:bf:70:4f:49:f9:75:79:b6:f3:30:27: 2b:b1:29:cb:1c:ab:67:d7:91:d5:68:bd:94:86:d8:46:96:9b: 29:a4:af:fc:f3:d3:73:41:07:59:1d:e5:e8:a3:ab:0f:f1:d5: 5a:9b:10:ef:3f:ee:26:02:ae:bb:61:15:7f:ac:c8:e6:d9:21: 1d:6f:2f:d8:df:51:34:bd:14:0d:89:9b:fa:a4:3f:e7:33:67: e3:4a:2b:35:1d:06:d9:f4:6d:53:dd:f4:8e:48:e6:4f:22:a1: 1a:07:2f:2c:3e:70:c2:be:dc:39:2c:b8:76:ea:19:3a:6d:a4: a0:6a:29:43:75:39:e3:f0:24:15:64:38:47:d7:fb:82:a4:98: 8f:38:5e:8a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nq4Y366NxKsb2VVOu5Z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjkzNjQyZjhlMmQwZTc2Yjk4YWFlNTNjNDE4ODNhMWFjYjI0N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rPaN24aj0uXkUWm+EQyw1Eheui0 HRJeb1srudRorDZwGS868A+fuGXx96eXeuyOTgLQKQNsT8PKAVp50kevsQ9TreSZ Fn82OEr09Puaiw+goF9SNpcgKy0UkysPKQzL7WWxKsiULg99BMZb3xEhvoa7u1/V dFLWmfqGlD5vibAY4RdwOT3EuY7MYweHqrk6shaChPz6LfM0L7HrSdU0jPu1vqaM 0XaORKN5/xFvjHgzkEeNbT2kf3coDpULKYQ+D0rgjqdpdXS0+kKHs/plOXACnISJ rc69CvV17bf5mIyrREU1+a37s2gmEvfTqMWLvFQ/Id5MTx49eiXeQ5Q7JQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFA+TZC+OLQ52uYquU8QYg6Gsske8MB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvRDVOa0w0NHREbmE1aXE1VHhCaURvYXl5Ujd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweiGMA8E AgACMAkDBwAgAQZ8FEAwDQYJKoZIhvcNAQELBQADggEBAJIRWGY0kBrLcXoOp1xv oX9voO/+7TBswRs2OhPqQJ39750Tk17q/RG4P2zW1uNHrN6c3bUp3PKAoppgLx2Q tClivyCkBB3leFbZK8rZWpQbJof1OsxhCYasswu06eryeX30wBax3lWOd4UdS/8q mVCJe+y/cE9J+XV5tvMwJyuxKcscq2fXkdVovZSG2EaWmymkr/zz03NBB1kd5eij qw/x1VqbEO8/7iYCrrthFX+syObZIR1vL9jfUTS9FA2Jm/qkP+czZ+NKKzUdBtn0 bVPd9I5I5k8ioRoHLyw+cMK+3DksuHbqGTptpKBqKUN1OePwJBVkOEfX+4KkmI84 Xoo= -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:29 2026 by rpki-client