This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa File: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (raw, json) Hash identifier: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo= Subject key identifier: 74:25:8B:46:60:5A:05:0C:72:E9:EA:16:54:72:97:3E:AF:14:9D:B6 Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Certificate serial: 019B79110D1E94073A75DB011B06FE000E6E Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203384 IP address blocks: 193.73.106.0/23 maxlen: 24 193.223.192.0/20 maxlen: 24 193.223.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0d:1e:94:07:3a:75:db:01:1b:06:fe:00:0e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74258b46605a050c72e9ea165472973eaf149db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:e7:5e:d2:74:0b:5b:0e:90:38:48:b9:bb: c8:19:a7:10:cf:42:de:03:98:88:d2:7e:05:95:c5: 79:87:09:4d:6e:41:59:f0:41:3e:38:6a:11:d4:00: 05:7a:0c:fe:ee:c7:ea:49:b1:20:97:27:82:cf:a2: d2:0c:25:59:76:5b:70:4d:de:a9:f9:1f:c4:31:fa: 34:a2:58:d7:f7:f5:f4:09:7b:80:a8:d6:69:88:27: 3a:21:f1:ec:28:b6:e9:d2:74:9d:27:a3:bf:5e:2e: 9a:73:17:1d:35:f9:61:54:61:94:76:7a:7d:c3:20: e9:57:f6:d8:6f:8c:42:44:0e:53:d3:2d:e3:0c:5f: be:f5:73:e1:f3:4d:be:b8:a1:3b:fc:96:43:85:0a: f8:c2:e4:03:71:22:20:5f:26:0c:40:3e:6f:21:93: 94:24:97:11:8c:be:4a:4b:5e:6d:2f:4b:0c:f1:29: 78:bd:83:26:02:ba:5b:8e:9c:db:40:6f:0d:17:68: 6d:ab:f6:27:67:4f:96:60:17:0f:f9:93:d3:30:5e: 33:c1:50:ad:53:ae:f6:2c:49:cd:8c:80:3e:aa:9f: 63:52:1d:de:5b:6f:af:fd:f3:fb:f6:94:93:2a:ba: e5:b3:31:97:62:01:ae:dc:0d:69:80:74:ed:1a:d6: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:25:8B:46:60:5A:05:0C:72:E9:EA:16:54:72:97:3E:AF:14:9D:B6 X509v3 Authority Key Identifier: keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.73.106.0/23 193.223.192.0/20 193.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption 10:9d:0e:f2:bc:b7:f3:e1:69:9c:02:43:4b:9c:5f:70:1f:c7: 51:83:aa:79:ba:d2:db:d4:c4:33:a2:78:f4:dd:18:17:ad:e2: 46:c8:ab:7e:a5:28:94:eb:ac:aa:38:f1:16:13:96:9a:91:d4: c5:52:c8:c2:28:a1:f0:ff:69:b4:7b:62:6a:c9:dc:13:a0:27: eb:27:d8:1b:b6:6b:b6:85:e2:66:04:c9:9d:74:96:95:1b:4e: 7e:00:06:82:a5:6a:d1:c7:ff:09:83:d8:89:6d:4e:9e:e6:fb: d6:fa:0b:91:3d:2b:ed:d6:32:ab:ee:c1:a3:de:26:f4:39:ca: 4a:a2:48:ff:37:58:9b:f7:e4:d9:64:9e:b8:bf:30:39:9f:25: 1a:e5:cb:c6:f9:dd:66:f4:e0:cf:ad:55:53:c0:9c:b1:fe:32: 85:09:5a:62:5a:49:19:4e:7f:f4:8e:15:36:40:71:b6:b0:bb: 5c:b3:e0:0b:69:37:84:61:4b:25:89:5e:8f:78:3d:66:49:79: 33:3c:0e:f2:6a:12:c1:b5:6e:f2:98:1c:e9:82:0a:73:81:ec: 5a:19:77:25:75:8a:a5:30:33:4b:39:56:bc:08:42:33:48:98: 6d:27:d0:46:70:d8:a0:63:0b:6d:70:82:5b:38:bf:07:a3:3b: 8e:07:40:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EQ0elAc6ddsBGwb+AA5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh M2NhYTUwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI1OGI0NjYwNWEwNTBjNzJlOWVhMTY1NDcyOTczZWFmMTQ5ZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWfnXtJ0C1sOkDhIubvIGacQz0Le A5iI0n4FlcV5hwlNbkFZ8EE+OGoR1AAFegz+7sfqSbEglyeCz6LSDCVZdltwTd6p +R/EMfo0oljX9/X0CXuAqNZpiCc6IfHsKLbp0nSdJ6O/Xi6acxcdNflhVGGUdnp9 wyDpV/bYb4xCRA5T0y3jDF++9XPh802+uKE7/JZDhQr4wuQDcSIgXyYMQD5vIZOU JJcRjL5KS15tL0sM8Sl4vYMmArpbjpzbQG8NF2htq/YnZ0+WYBcP+ZPTMF4zwVCt U672LEnNjIA+qp9jUh3eW2+v/fP79pSTKrrlszGXYgGu3A1pgHTtGtbotwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHQli0ZgWgUMcunqFlRylz6vFJ22MB8GA1UdIwQY MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt NDFjM2NmOTA4ZTk3LzEvZENXTFJtQmFCUXh5NmVvV1ZIS1hQcThVbmJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3 LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwUlqAwQE wd/AAwQEwd/gMA0GCSqGSIb3DQEBCwUAA4IBAQAQnQ7yvLfz4WmcAkNLnF9wH8dR g6p5utLb1MQzonj03RgXreJGyKt+pSiU66yqOPEWE5aakdTFUsjCKKHw/2m0e2Jq ydwToCfrJ9gbtmu2heJmBMmddJaVG05+AAaCpWrRx/8Jg9iJbU6e5vvW+guRPSvt 1jKr7sGj3ib0OcpKokj/N1ib9+TZZJ64vzA5nyUa5cvG+d1m9ODPrVVTwJyx/jKF CVpiWkkZTn/0jhU2QHG2sLtcs+ALaTeEYUsliV6PeD1mSXkzPA7yahLBtW7ymBzp ggpzgexaGXcldYqlMDNLOVa8CEIzSJhtJ9BGcNigYwttcIJbOL8HozuOB0Cy -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:10 2026 by rpki-client