This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/IAKnFoBsposU8qbkMNBVQi6u0U4.roa File: IAKnFoBsposU8qbkMNBVQi6u0U4.roa (raw, json) Hash identifier: px6Cx4NrVZxvYIYvt1adCu8FtQqIWF7vWIdCtxdWlwA= Subject key identifier: 20:02:A7:16:80:6C:A6:8B:14:F2:A6:E4:30:D0:55:42:2E:AE:D1:4E Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C735D9A3F073D293C5025756F61D7C Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/IAKnFoBsposU8qbkMNBVQi6u0U4.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44704 IP address blocks: 193.232.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:35:d9:a3:f0:73:d2:93:c5:02:57:56:f6:1d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2002a716806ca68b14f2a6e430d055422eaed14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:99:56:c8:43:d8:41:5a:7a:ef:6e:cf:cc: e7:d2:0c:4a:01:a5:55:00:f6:f3:88:11:61:09:5d: 6d:83:77:1b:61:e4:86:cc:5b:01:ac:64:35:06:c7: 65:2d:69:da:14:0d:6e:dc:6c:db:8f:2f:e4:a7:5a: 5f:54:b4:f5:b4:00:d0:97:75:fb:57:7d:a5:d0:f0: 0f:0a:8b:e0:d0:88:64:f0:6b:d3:4f:79:49:40:22: b8:ee:e6:77:c6:1c:9e:84:25:c9:85:57:5f:32:a8: 15:53:cc:c9:43:ba:f1:ca:17:ed:23:7f:1b:cf:a8: bc:f3:31:01:84:db:f7:f8:9d:c2:74:7c:9b:9f:29: b8:5f:e3:45:30:99:fe:28:48:07:f8:d8:9b:86:df: 27:4a:5c:cc:67:3f:01:5a:7e:68:c4:a9:88:dd:80: 6b:55:b0:aa:ce:b7:3c:21:36:5b:d7:d4:22:af:6e: 61:67:83:6c:e2:34:a7:49:30:2b:29:53:65:66:97: f1:40:27:6f:71:9e:af:b3:03:29:f0:68:30:b5:f9: bd:ce:9e:96:94:0e:e9:3b:b0:09:b2:b7:77:77:1d: 66:0b:eb:ec:1d:0a:93:c6:21:74:cc:f3:6f:e9:9d: 43:f6:e6:e5:e1:82:62:a1:65:8c:f1:e3:49:59:3d: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:02:A7:16:80:6C:A6:8B:14:F2:A6:E4:30:D0:55:42:2E:AE:D1:4E X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/IAKnFoBsposU8qbkMNBVQi6u0U4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.108.0/24 Signature Algorithm: sha256WithRSAEncryption 01:f6:07:9b:e7:b6:67:91:76:b5:4c:cf:ff:7c:a2:58:48:06: 93:a1:19:51:a9:00:cb:3c:7a:5e:f2:b0:96:fb:c4:91:d8:46: 02:91:21:b6:a1:f2:c5:a9:87:1c:93:04:f9:b9:3f:b7:25:02: 44:b3:a5:37:1f:d2:6b:2f:7f:0c:3b:25:54:71:3f:d3:fd:71: 43:98:84:62:0f:76:8e:17:9b:d3:d3:15:e4:3e:05:ad:84:3e: e2:b5:db:51:11:9b:92:98:42:79:a4:ce:ea:d8:61:7a:37:50: 0e:1e:8c:2c:3e:fb:e4:ca:62:62:87:31:45:5e:f0:c7:8e:d6: 37:b8:05:3c:39:80:c1:20:c1:28:32:b0:c8:b1:a0:18:26:03: 42:52:90:06:2a:8b:aa:f7:91:9f:f0:da:66:c3:41:e2:b1:02: cf:ce:7d:b2:bf:bb:4d:aa:dd:94:09:83:45:b2:58:74:c4:14: 16:0c:54:c6:aa:5b:ac:19:c8:ef:b6:44:7d:c4:a8:7d:3f:db: 67:1f:8a:bc:c1:38:86:c9:5f:ae:17:d8:16:97:04:e8:c7:b4: b6:96:c0:82:f1:16:59:32:65:52:68:72:ac:36:6a:49:34:f5: f2:9a:86:57:a6:83:3e:9f:2c:86:92:1f:67:35:8f:a9:43:83: b4:2e:fa:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzXZo/Bz0pPFAldW9h18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDAyYTcxNjgwNmNhNjhiMTRmMmE2ZTQzMGQwNTU0MjJlYWVkMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61qZVshD2EFaeu9uz8zn0gxKAaVV APbziBFhCV1tg3cbYeSGzFsBrGQ1BsdlLWnaFA1u3Gzbjy/kp1pfVLT1tADQl3X7 V32l0PAPCovg0Ihk8GvTT3lJQCK47uZ3xhyehCXJhVdfMqgVU8zJQ7rxyhftI38b z6i88zEBhNv3+J3CdHybnym4X+NFMJn+KEgH+Nibht8nSlzMZz8BWn5oxKmI3YBr VbCqzrc8ITZb19Qir25hZ4Ns4jSnSTArKVNlZpfxQCdvcZ6vswMp8Ggwtfm9zp6W lA7pO7AJsrd3dx1mC+vsHQqTxiF0zPNv6Z1D9ubl4YJioWWM8eNJWT2TywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCACpxaAbKaLFPKm5DDQVUIurtFOMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvSUFLbkZvQnNwb3NVOHFia01OQlZRaTZ1MFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwehsMA0G CSqGSIb3DQEBCwUAA4IBAQAB9geb57ZnkXa1TM//fKJYSAaToRlRqQDLPHpe8rCW +8SR2EYCkSG2ofLFqYcckwT5uT+3JQJEs6U3H9JrL38MOyVUcT/T/XFDmIRiD3aO F5vT0xXkPgWthD7itdtREZuSmEJ5pM7q2GF6N1AOHowsPvvkymJihzFFXvDHjtY3 uAU8OYDBIMEoMrDIsaAYJgNCUpAGKouq95Gf8Npmw0HisQLPzn2yv7tNqt2UCYNF slh0xBQWDFTGqlusGcjvtkR9xKh9P9tnH4q8wTiGyV+uF9gWlwTox7S2lsCC8RZZ MmVSaHKsNmpJNPXymoZXpoM+nyyGkh9nNY+pQ4O0Lvp+ -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:08 2026 by rpki-client