This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa File: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (raw, json) Hash identifier: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto= Subject key identifier: 0F:82:20:D1:BA:11:F2:5F:37:0D:D8:B5:2A:18:59:50:38:F7:04:83 Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Certificate serial: 019B791145BA7E2739EBD670263644DFB488 Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202717 IP address blocks: 193.33.124.0/24 maxlen: 24 2a10:a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:45:ba:7e:27:39:eb:d6:70:26:36:44:df:b4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f8220d1ba11f25f370dd8b52a18595038f70483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:e0:71:94:6a:36:11:19:68:d7:7e:e0:8d: bd:2a:06:9e:37:3c:54:4c:10:60:28:e4:b0:68:21: 1c:c4:20:81:57:51:84:a1:c4:42:c5:19:db:5a:40: 06:66:f3:c2:ce:40:e6:e7:cc:a5:d6:2e:d6:52:3c: 85:8c:14:20:a0:8b:eb:8a:97:31:7c:68:70:80:3f: 34:3c:ab:40:df:43:9e:36:35:0f:87:63:3b:ab:2b: 15:6d:dc:d8:58:c8:88:c1:0c:76:f8:72:42:87:41: dc:77:9b:b6:c2:43:ed:3b:87:f2:06:3e:d0:bd:de: 59:a9:a5:05:9a:6f:54:35:29:b7:d5:50:5b:bf:35: 2e:a4:b7:de:69:2d:2c:76:f4:63:04:ff:9d:90:93: b4:80:d5:38:c4:0b:d4:e1:75:64:ec:70:53:d0:1d: 55:90:1f:3a:76:a4:84:58:bc:87:14:49:8a:94:a2: 4b:cb:a5:76:4c:35:c0:dc:ca:3d:d9:50:63:70:b0: a0:ba:e9:bc:3d:41:90:71:fa:4b:dd:99:f9:96:bd: 25:09:72:de:43:56:e6:e0:1c:96:09:37:21:8e:32: db:ca:33:ff:78:fd:5c:0c:14:a1:a1:cf:e4:58:d8: 7a:3d:a2:9a:3e:60:1c:3e:1d:a5:b6:a9:5f:60:b9: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:82:20:D1:BA:11:F2:5F:37:0D:D8:B5:2A:18:59:50:38:F7:04:83 X509v3 Authority Key Identifier: keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.124.0/24 IPv6: 2a10:a80::/32 Signature Algorithm: sha256WithRSAEncryption 77:2e:64:f0:c9:b7:4d:5e:e6:90:00:ef:b9:69:a9:3c:02:86: be:fb:22:e5:91:01:3f:1a:c5:26:74:a0:9b:6b:2c:42:99:b8: 75:97:46:5d:44:ae:30:22:14:c0:d8:28:c9:dc:4b:3f:61:f7: 1e:d3:b2:71:32:3a:25:38:71:87:4b:2c:88:a1:30:94:81:9f: d2:b1:70:ad:29:5d:bb:f2:50:33:90:2a:ae:62:f4:1e:69:54: 72:3f:9d:29:3f:8c:bb:98:5d:a6:b8:3f:63:40:d2:ff:6a:da: f6:7b:d5:55:06:70:03:34:6a:76:86:89:72:d8:4d:0b:d2:f8: 2b:d8:25:85:0a:99:25:18:1a:b5:6b:00:3d:1d:20:85:31:bc: 08:3e:f9:58:de:18:30:cc:d0:d4:fc:fa:a9:a5:2b:98:fd:49: e2:3e:56:43:02:40:54:44:39:65:0c:07:51:88:19:e6:f8:05: cd:33:28:c1:f0:2e:82:f0:91:1d:48:1c:06:39:b2:a5:1d:d5: e1:3b:57:6c:44:5f:db:ee:b0:88:c9:db:87:8c:7d:47:75:2c: 29:ac:05:e3:56:31:5a:25:c3:78:e0:bf:0f:29:86:f2:19:a7: 30:60:49:ed:22:9f:eb:62:c5:19:6d:61:b5:5a:b1:e0:e2:ca: d6:1f:66:d2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EUW6fic569ZwJjZE37SIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2Y5OTk2MmY5ODlmN2I3MzNkYTdhYTcwZWFmOWU0MTA1 MmFlMTkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjgyMjBkMWJhMTFmMjVmMzcwZGQ4YjUyYTE4NTk1MDM4ZjcwNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG7gcZRqNhEZaNd+4I29KgaeNzxU TBBgKOSwaCEcxCCBV1GEocRCxRnbWkAGZvPCzkDm58yl1i7WUjyFjBQgoIvripcx fGhwgD80PKtA30OeNjUPh2M7qysVbdzYWMiIwQx2+HJCh0Hcd5u2wkPtO4fyBj7Q vd5ZqaUFmm9UNSm31VBbvzUupLfeaS0sdvRjBP+dkJO0gNU4xAvU4XVk7HBT0B1V kB86dqSEWLyHFEmKlKJLy6V2TDXA3Mo92VBjcLCguum8PUGQcfpL3Zn5lr0lCXLe Q1bm4ByWCTchjjLbyjP/eP1cDBShoc/kWNh6PaKaPmAcPh2ltqlfYLn2/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA+CING6EfJfNw3YtSoYWVA49wSDMB8GA1UdIwQY MBaAFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEt NDA5ZWExMjA4OTI2LzEvRDRJZzBib1I4bDgzRGRpMUtoaFpVRGozQklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEtNDA5ZWExMjA4OTI2 LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSF8MA0E AgACMAcDBQAqEAqAMA0GCSqGSIb3DQEBCwUAA4IBAQB3LmTwybdNXuaQAO+5aak8 Aoa++yLlkQE/GsUmdKCbayxCmbh1l0ZdRK4wIhTA2CjJ3Es/Yfce07JxMjolOHGH SyyIoTCUgZ/SsXCtKV278lAzkCquYvQeaVRyP50pP4y7mF2muD9jQNL/atr2e9VV BnADNGp2holy2E0L0vgr2CWFCpklGBq1awA9HSCFMbwIPvlY3hgwzNDU/PqppSuY /UniPlZDAkBURDllDAdRiBnm+AXNMyjB8C6C8JEdSBwGObKlHdXhO1dsRF/b7rCI yduHjH1HdSwprAXjVjFaJcN44L8PKYbyGacwYEntIp/rYsUZbWG1WrHg4srWH2bS -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:08 2026 by rpki-client