This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/bJu0scpN1gj7kvsBcbxVtC9ztlc.roa File: bJu0scpN1gj7kvsBcbxVtC9ztlc.roa (raw, json) Hash identifier: ZoOwH22u+aOphRV9ROY0fMKWfnDnA+VojJ7jB+e5a1E= Subject key identifier: 6C:9B:B4:B1:CA:4D:D6:08:FB:92:FB:01:71:BC:55:B4:2F:73:B6:57 Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Certificate serial: 019B797E94B6594458F950C7E109BA2D1B21 Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/bJu0scpN1gj7kvsBcbxVtC9ztlc.roa Signing time: Thu 01 Jan 2026 12:18:17 +0000 ROA not before: Thu 01 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205550 IP address blocks: 193.29.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:94:b6:59:44:58:f9:50:c7:e1:09:ba:2d:1b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c9bb4b1ca4dd608fb92fb0171bc55b42f73b657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:4d:a5:60:c2:70:86:69:09:db:d4:a2:5c: 8b:bf:b4:36:21:78:bc:f0:5b:8b:27:aa:0b:08:4b: 17:c6:1b:ef:e8:d1:66:72:60:9d:f5:7b:6a:7f:54: 7f:c2:db:da:0f:de:1f:88:b0:9d:07:93:a9:ec:90: 1e:b6:c3:29:39:d4:c8:e3:9b:d8:4e:95:53:a5:36: 12:0a:56:d6:0f:ef:d4:d9:2a:9c:01:ca:a5:0f:d4: 38:98:33:dc:63:0b:5c:84:5b:85:2c:65:c3:ac:ef: b9:ea:d9:52:97:82:21:91:5b:01:ff:3b:c9:6a:63: 23:26:d2:45:f9:bc:58:91:14:33:27:64:92:5c:1d: b2:0f:29:1c:c9:24:f7:fd:01:ab:ba:f1:13:6c:3c: 92:72:7b:e8:d8:5c:d1:60:82:d1:23:a7:e4:89:89: eb:12:7d:2a:fc:7e:da:61:1e:27:22:ae:3c:ee:18: 97:34:31:c8:a8:5e:b1:d5:5b:e9:d7:48:fb:d9:4f: 1d:01:aa:80:78:37:08:4d:97:94:32:3c:38:64:a6: 5f:a4:75:9e:61:73:74:8f:bf:66:77:28:f5:86:33: 08:02:7a:e5:b9:ed:20:0c:51:44:82:5b:44:cd:1a: d2:c5:f3:ab:8f:c7:28:7f:79:02:f7:19:9e:c6:fb: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9B:B4:B1:CA:4D:D6:08:FB:92:FB:01:71:BC:55:B4:2F:73:B6:57 X509v3 Authority Key Identifier: keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/bJu0scpN1gj7kvsBcbxVtC9ztlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.50.0/24 Signature Algorithm: sha256WithRSAEncryption 39:41:66:5f:82:7d:25:a5:ff:f9:36:5f:d3:5a:0c:2a:00:13: 7b:d5:28:3e:c7:42:9c:a6:a8:00:65:48:fd:63:7e:15:cd:c7: d7:27:6c:a5:5b:d4:f0:bc:84:45:17:a2:7a:50:e2:ed:88:af: e8:96:2f:7e:c1:0f:a6:56:6f:22:7d:48:5c:24:80:9a:e7:91: c5:48:93:dd:95:38:03:7b:0c:2f:4f:69:ec:f0:49:29:91:4c: f8:a1:6e:27:3a:a6:6b:af:be:6f:d0:be:cc:dc:be:39:67:e9: ef:3a:4d:d7:96:17:4d:a4:1a:2a:74:2b:ae:40:45:3b:97:af: 71:22:86:e1:e6:cc:4b:26:fa:b1:5a:56:3b:fa:39:01:a8:38: e3:2d:88:c9:79:97:44:16:e1:0e:83:e6:0a:48:e3:77:f8:e7: e4:b1:2d:fc:dd:45:3f:92:5c:ce:91:44:73:92:9d:9f:28:81: 2b:0c:df:0a:33:64:2a:4e:d3:21:83:2a:57:da:6b:6c:eb:13: 5a:08:3b:c7:6f:28:52:02:78:1c:63:15:e9:21:8e:6b:c2:81: 00:eb:0c:92:08:80:4d:c4:e8:43:93:fa:af:ee:41:a8:d2:ec: 78:57:53:1e:02:43:29:91:06:30:f6:83:e0:53:62:d6:4d:76: ab:a8:0f:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpS2WURY+VDH4Qm6LRshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzhhMzA2YTM3ZWU4N2JlYmZmNzIzNjU1M2UwZDNjYjY3 MmNkMTcwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzliYjRiMWNhNGRkNjA4ZmI5MmZiMDE3MWJjNTViNDJmNzNiNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTpNpWDCcIZpCdvUolyLv7Q2IXi8 8FuLJ6oLCEsXxhvv6NFmcmCd9Xtqf1R/wtvaD94fiLCdB5Op7JAetsMpOdTI45vY TpVTpTYSClbWD+/U2SqcAcqlD9Q4mDPcYwtchFuFLGXDrO+56tlSl4IhkVsB/zvJ amMjJtJF+bxYkRQzJ2SSXB2yDykcyST3/QGruvETbDyScnvo2FzRYILRI6fkiYnr En0q/H7aYR4nIq487hiXNDHIqF6x1Vvp10j72U8dAaqAeDcITZeUMjw4ZKZfpHWe YXN0j79mdyj1hjMIAnrlue0gDFFEgltEzRrSxfOrj8cof3kC9xmexvuWoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGybtLHKTdYI+5L7AXG8VbQvc7ZXMB8GA1UdIwQY MBaAFEw4owajfuh76/9yNlU+DTy2cs0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAt Yjg2M2MwYTk4YjJkLzEvYkp1MHNjcE4xZ2o3a3ZzQmNieFZ0Qzl6dGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wOGNkOTMtMDg3Ni00M2ZkLTkyYzAtYjg2M2MwYTk4YjJk LzEvVERpakJxTi02SHZyXzNJMlZUNE5QTFp5elJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR0yMA0G CSqGSIb3DQEBCwUAA4IBAQA5QWZfgn0lpf/5Nl/TWgwqABN71Sg+x0KcpqgAZUj9 Y34VzcfXJ2ylW9TwvIRFF6J6UOLtiK/oli9+wQ+mVm8ifUhcJICa55HFSJPdlTgD ewwvT2ns8EkpkUz4oW4nOqZrr75v0L7M3L45Z+nvOk3XlhdNpBoqdCuuQEU7l69x Iobh5sxLJvqxWlY7+jkBqDjjLYjJeZdEFuEOg+YKSON3+OfksS383UU/klzOkURz kp2fKIErDN8KM2QqTtMhgypX2mts6xNaCDvHbyhSAngcYxXpIY5rwoEA6wySCIBN xOhDk/qv7kGo0ux4V1MeAkMpkQYw9oPgU2LWTXarqA8v -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:10 2026 by rpki-client