This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/dO3ondwwLGbrI_vEcsL_cnUVyk4.roa File: dO3ondwwLGbrI_vEcsL_cnUVyk4.roa (raw, json) Hash identifier: zcZPr9SNFN/r/TTxtdIr0uKIimZwXcjbyUmDYN6jAtY= Subject key identifier: 74:ED:E8:9D:DC:30:2C:66:EB:23:FB:C4:72:C2:FF:72:75:15:CA:4E Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36ACEFCFA04C53A5887B9BFD3F784A Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/dO3ondwwLGbrI_vEcsL_cnUVyk4.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42139 IP address blocks: 193.232.230.0/24 maxlen: 24 2001:67c:1211::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:ef:cf:a0:4c:53:a5:88:7b:9b:fd:3f:78:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74ede89ddc302c66eb23fbc472c2ff727515ca4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:eb:eb:39:01:ab:3f:df:23:48:d3:92:bf:b7: 4b:65:85:2d:dc:2b:b2:5b:8b:04:db:99:e2:60:5b: a3:2c:be:56:36:32:0e:a4:31:2b:2d:70:08:87:cf: e6:0e:85:c7:41:76:cf:93:a2:4a:45:ea:29:e3:3c: 34:02:91:2c:22:69:b5:d7:b1:02:e5:1b:4d:bf:76: 76:d4:ae:9c:b5:4f:01:6c:49:cb:25:3a:12:7a:5f: 65:20:3c:ca:6a:67:90:47:dd:b3:a4:74:17:71:3c: e6:41:0e:b2:2e:df:d1:cb:ad:aa:92:a2:82:00:8a: 96:79:46:97:f5:a9:6d:27:bc:90:e3:ef:17:8c:49: 1b:fb:80:5b:0b:7d:45:0c:a8:ec:2b:f5:d1:bf:bb: 81:80:dd:1f:f5:b6:04:97:af:04:96:f2:5e:35:b2: 23:d3:ee:2f:ae:52:8a:b3:8b:b1:22:a7:ef:4b:9d: ec:6b:fa:2f:5b:9b:30:95:2e:a2:14:f5:f8:66:7c: 41:bd:e3:bb:72:79:2c:74:4d:ca:55:5c:cc:4e:10: 0d:c8:0e:52:2a:f1:7a:97:f3:4f:b0:96:d1:5d:50: e0:2a:fe:ca:25:5f:b2:83:d5:a4:2f:e2:c5:21:ea: 7b:73:eb:eb:eb:4b:2d:fd:99:0e:e9:b5:80:9b:16: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:ED:E8:9D:DC:30:2C:66:EB:23:FB:C4:72:C2:FF:72:75:15:CA:4E X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/dO3ondwwLGbrI_vEcsL_cnUVyk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.230.0/24 IPv6: 2001:67c:1211::/48 Signature Algorithm: sha256WithRSAEncryption 21:ca:99:a5:a0:37:d9:1a:e2:6e:5e:28:c2:2e:a5:77:83:a0: 71:20:51:11:9f:d1:c6:ce:94:45:7d:86:4a:07:0c:db:d6:16: 89:c3:b5:7a:d1:74:98:85:b2:b5:69:2a:41:53:50:0a:1b:04: 49:ef:98:7f:44:e8:19:35:68:fb:01:e0:ea:4b:4c:83:b0:90: 39:a0:cb:40:30:68:0d:f5:3b:39:43:1b:d8:37:d4:d4:4b:cf: 97:33:ee:03:a0:83:11:9e:61:4e:01:38:a6:f0:93:d6:46:0a: 54:c8:4b:58:9a:c8:24:32:15:8f:14:ac:e2:4d:79:02:2a:bc: 45:5a:41:ef:f1:f1:bd:e6:0e:46:a1:e6:3e:22:3c:d9:b2:f1: 23:4e:3a:15:e7:26:20:2f:0e:0f:74:70:37:27:5f:de:45:d1: 0e:ef:cb:a4:11:3c:a3:a8:c9:23:86:ec:a8:36:fa:44:35:ba: e8:d9:d4:d7:f7:85:48:38:58:cd:39:17:b9:d9:d0:3c:99:71: b7:85:8c:f5:61:da:12:9a:95:a3:67:2f:e7:69:c4:6b:90:30: a4:1a:a6:18:d9:29:8a:ad:df:ba:0a:8e:f9:eb:15:30:2b:52: e1:4e:04:34:ba:2f:50:ee:0e:8a:12:2b:5f:b8:76:f7:b5:7b: 0e:c3:b5:20 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nqzvz6BMU6WIe5v9P3hKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGVkZTg5ZGRjMzAyYzY2ZWIyM2ZiYzQ3MmMyZmY3Mjc1MTVjYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OvrOQGrP98jSNOSv7dLZYUt3Cuy W4sE25niYFujLL5WNjIOpDErLXAIh8/mDoXHQXbPk6JKReop4zw0ApEsImm117EC 5RtNv3Z21K6ctU8BbEnLJToSel9lIDzKameQR92zpHQXcTzmQQ6yLt/Ry62qkqKC AIqWeUaX9altJ7yQ4+8XjEkb+4BbC31FDKjsK/XRv7uBgN0f9bYEl68ElvJeNbIj 0+4vrlKKs4uxIqfvS53sa/ovW5swlS6iFPX4ZnxBveO7cnksdE3KVVzMThANyA5S KvF6l/NPsJbRXVDgKv7KJV+yg9WkL+LFIep7c+vr60st/ZkO6bWAmxb9RwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHTt6J3cMCxm6yP7xHLC/3J1FcpOMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvZE8zb25kd3dMR2JySV92RWNzTF9jblVWeWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwejmMA8E AgACMAkDBwAgAQZ8EhEwDQYJKoZIhvcNAQELBQADggEBACHKmaWgN9ka4m5eKMIu pXeDoHEgURGf0cbOlEV9hkoHDNvWFonDtXrRdJiFsrVpKkFTUAobBEnvmH9E6Bk1 aPsB4OpLTIOwkDmgy0AwaA31OzlDG9g31NRLz5cz7gOggxGeYU4BOKbwk9ZGClTI S1iayCQyFY8UrOJNeQIqvEVaQe/x8b3mDkah5j4iPNmy8SNOOhXnJiAvDg90cDcn X95F0Q7vy6QRPKOoySOG7Kg2+kQ1uujZ1Nf3hUg4WM05F7nZ0DyZcbeFjPVh2hKa laNnL+dpxGuQMKQaphjZKYqt37oKjvnrFTArUuFOBDS6L1DuDooSK1+4dve1ew7D tSA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:37 2026 by rpki-client