This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SHKEVaNgH9Bucka6k6DYJtipntE.roa File: SHKEVaNgH9Bucka6k6DYJtipntE.roa (raw, json) Hash identifier: BUtzhRgSiAPbFwNwynYtm2FzNHzBaqAfRxGfLRS/A6M= Subject key identifier: 48:72:84:55:A3:60:1F:D0:6E:72:46:BA:93:A0:D8:26:D8:A9:9E:D1 Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060 Certificate serial: 019B7DCA992DBB44AEB9E6B8430D92D05319 Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SHKEVaNgH9Bucka6k6DYJtipntE.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202797 IP address blocks: 193.22.1.0/24 maxlen: 24 193.22.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:99:2d:bb:44:ae:b9:e6:b8:43:0d:92:d0:53:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e92c341e769443fde1d27566044b4b65159060 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48728455a3601fd06e7246ba93a0d826d8a99ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:09:11:d2:a3:e6:35:cc:1f:ae:a8:2a:48: 85:64:ae:95:18:92:6a:80:fd:fe:2b:d0:1c:a1:ad: 2b:61:58:88:cf:62:24:53:b7:12:45:85:35:fa:9c: e7:bc:fb:4e:1c:3a:e2:75:98:06:21:9c:60:11:93: 34:82:a8:b8:30:e4:c3:f4:ae:a2:17:35:92:53:38: 5b:1f:fd:d2:35:c9:ae:39:a4:8a:85:2f:c7:95:75: eb:aa:61:b8:47:28:ff:9f:10:ab:ed:45:36:2f:11: d9:25:f0:91:c1:59:07:29:dc:4d:07:41:d4:ba:86: 67:c2:9b:5a:9a:f7:dd:c8:e6:a1:a7:65:a6:65:b0: 26:29:3b:4e:cc:34:36:b5:c5:5d:c4:92:aa:15:c3: bd:f2:b4:24:e7:14:f6:73:1a:34:a4:a4:b5:13:e5: 06:1c:3a:ae:3f:58:e8:01:4a:88:c5:6e:49:13:8d: 75:13:84:cd:b5:b9:b2:91:5c:b4:c2:15:ce:f8:63: ed:31:e9:07:29:fd:f4:ce:c4:b1:e9:83:9e:65:7d: c7:3a:65:bb:c0:49:6b:7c:6c:11:29:1f:9f:aa:3b: 2f:84:17:47:b1:17:31:24:ad:8b:5d:e3:fc:f0:67: af:2c:f0:73:93:4f:96:15:f3:ba:2b:7c:d5:e6:26: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:72:84:55:A3:60:1F:D0:6E:72:46:BA:93:A0:D8:26:D8:A9:9E:D1 X509v3 Authority Key Identifier: keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SHKEVaNgH9Bucka6k6DYJtipntE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.1.0/24 193.22.106.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e6:33:8b:eb:78:9a:b4:13:3f:da:34:77:48:ca:e7:75:c4: 72:e7:1c:44:c1:a4:51:c0:e1:d0:86:f6:63:e5:e3:d5:b4:b7: da:4d:6b:ee:3a:ef:97:3a:78:37:79:89:9d:34:90:04:ad:04: 53:37:48:fa:13:13:93:76:b3:21:40:4f:cf:c4:46:75:ba:cd: 66:b9:46:bf:92:95:f7:d2:d5:90:45:d4:81:08:9d:a6:f7:6a: d6:b6:c9:a8:3e:88:0f:d4:2e:ab:94:78:d9:cb:20:78:c8:7f: bb:0c:cb:cf:96:ae:4f:89:02:fa:5b:bd:1e:0d:26:46:7c:69: 41:ab:af:3b:0e:ce:56:d0:51:46:17:a4:b7:f7:3e:da:7c:34: 79:8c:40:ff:2d:cf:80:19:03:2e:40:ca:73:ad:10:20:64:07: b8:11:92:e5:b5:76:05:1c:ff:16:bb:7b:38:cf:68:15:9d:87: cb:94:33:f0:d8:6e:12:55:b9:0e:57:d6:2b:1e:75:3b:1c:e1: 33:a4:a2:af:58:43:b0:0a:c2:6e:31:05:11:38:df:b2:5a:fd: 05:c6:8b:95:68:1c:60:e2:22:e8:b8:76:44:9e:32:a4:3f:ff: 01:bd:4f:0a:c4:66:14:fb:71:39:4b:2f:ce:80:85:5e:a9:88: 64:24:4f:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ypktu0Suuea4Qw2S0FMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx NTkwNjAwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODcyODQ1NWEzNjAxZmQwNmU3MjQ2YmE5M2EwZDgyNmQ4YTk5ZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXQJEdKj5jXMH66oKkiFZK6VGJJq gP3+K9Acoa0rYViIz2IkU7cSRYU1+pznvPtOHDridZgGIZxgEZM0gqi4MOTD9K6i FzWSUzhbH/3SNcmuOaSKhS/HlXXrqmG4Ryj/nxCr7UU2LxHZJfCRwVkHKdxNB0HU uoZnwptamvfdyOahp2WmZbAmKTtOzDQ2tcVdxJKqFcO98rQk5xT2cxo0pKS1E+UG HDquP1joAUqIxW5JE411E4TNtbmykVy0whXO+GPtMekHKf30zsSx6YOeZX3HOmW7 wElrfGwRKR+fqjsvhBdHsRcxJK2LXeP88GevLPBzk0+WFfO6K3zV5iaQbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEhyhFWjYB/QbnJGupOg2CbYqZ7RMB8GA1UdIwQY MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt YzFkMjk2ZjhmZDA3LzEvU0hLRVZhTmdIOUJ1Y2thNms2RFlKdGlwbnRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3 LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRYBAwQA wRZqMA0GCSqGSIb3DQEBCwUAA4IBAQB75jOL63iatBM/2jR3SMrndcRy5xxEwaRR wOHQhvZj5ePVtLfaTWvuOu+XOng3eYmdNJAErQRTN0j6ExOTdrMhQE/PxEZ1us1m uUa/kpX30tWQRdSBCJ2m92rWtsmoPogP1C6rlHjZyyB4yH+7DMvPlq5PiQL6W70e DSZGfGlBq687Ds5W0FFGF6S39z7afDR5jED/Lc+AGQMuQMpzrRAgZAe4EZLltXYF HP8Wu3s4z2gVnYfLlDPw2G4SVbkOV9YrHnU7HOEzpKKvWEOwCsJuMQURON+yWv0F xouVaBxg4iLouHZEnjKkP/8BvU8KxGYU+3E5Sy/OgIVeqYhkJE98 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:08 2026 by rpki-client