This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa File: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (raw, json) Hash identifier: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU= Subject key identifier: 07:AA:3C:C3:82:70:9D:C5:79:52:97:52:81:C3:BB:22:D2:76:BC:E6 Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109 Certificate serial: 019B7CED190047C750CC893F021A7E3E05E1 Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa Signing time: Fri 02 Jan 2026 04:17:51 +0000 ROA not before: Fri 02 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21473 IP address blocks: 193.16.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:19:00:47:c7:50:cc:89:3f:02:1a:7e:3e:05:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07aa3cc382709dc57952975281c3bb22d276bce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:59:cd:ae:bc:ad:96:54:0b:27:d3:8d:c6: d8:12:37:b9:ac:bd:38:86:21:89:90:13:6b:ce:2d: 07:27:5d:92:3f:76:17:2d:d6:4f:0a:4a:50:8a:d9: b7:47:f0:d3:5a:09:18:c1:36:4f:81:9f:6c:4f:e4: 0f:38:0a:c4:d6:77:2e:9c:e4:d3:f1:02:fc:75:66: b2:19:f2:49:41:97:c7:c3:85:69:c7:5c:f0:39:bb: dc:65:fb:62:ad:b7:c9:69:bf:d3:2f:37:66:1a:8e: 33:a5:1e:d3:8b:2a:27:4d:32:bb:e8:5e:b9:85:06: 34:52:58:7b:d0:2e:51:93:d5:6f:f4:8d:c3:f1:cd: 44:4f:39:22:b7:22:44:43:b0:4f:1d:f2:4c:22:8c: 17:3b:09:1b:7e:6a:c7:1f:cd:92:03:3f:f2:87:61: f6:ec:12:3d:06:74:98:9f:1e:2b:4e:77:8c:d9:eb: 5c:84:a1:8a:1b:b2:f8:13:3c:88:c0:08:6e:c4:5e: 3c:51:f0:4f:3c:66:e1:0e:66:e9:c5:f8:c3:c4:e1: b4:df:e6:82:30:77:c5:e2:00:0d:77:f0:d4:17:23: ff:44:e9:32:89:85:43:90:ef:43:db:0c:20:5a:c5: b4:57:3a:cf:61:fe:17:5d:75:5d:01:6a:df:b4:7b: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:3C:C3:82:70:9D:C5:79:52:97:52:81:C3:BB:22:D2:76:BC:E6 X509v3 Authority Key Identifier: keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.245.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:13:b9:03:02:86:23:26:b5:1a:8e:d0:11:ee:cd:f9:34:75: 05:73:11:8f:a1:82:6a:c0:fc:b4:18:de:4a:7d:0a:e2:cd:c0: 7e:0f:f3:84:2a:a6:9c:77:31:74:42:21:cc:35:4e:c6:83:cf: b4:64:1b:ae:7a:bd:d3:59:ae:ed:aa:be:37:68:c0:54:11:24: 10:d9:2a:c6:ad:4e:ec:53:b7:6a:77:2a:77:a6:54:51:8b:25: ae:00:ac:b1:be:55:a5:2b:57:52:a0:ae:c9:43:23:64:5c:1c: f4:6c:2c:82:ae:4b:e0:43:6e:4e:86:92:f8:27:ad:6a:b6:59: ed:c4:3f:c1:45:22:1d:1f:46:09:f0:50:e6:58:92:c4:03:cc: 2e:2e:e5:7b:3b:7f:9d:c7:c5:1c:f7:99:79:1b:b2:ac:f1:b3: 43:31:be:52:ff:b4:c3:39:2b:6d:5e:5f:8d:27:80:29:c2:ca: 2f:d6:5c:9a:de:d1:11:4b:9c:34:1b:d5:41:e9:f6:e6:8d:94: 4f:a1:54:22:ec:a6:d3:30:8e:7f:9a:db:21:d0:7b:19:67:c1: 87:22:07:46:20:c4:0b:9c:73:00:0c:81:79:7c:e4:86:bb:ab: f0:ef:2d:2e:3b:05:fa:f3:22:30:a0:a8:ce:60:2b:2c:71:e3: c5:bb:1b:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87RkAR8dQzIk/Ahp+PgXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3 NzUxMDkwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2FhM2NjMzgyNzA5ZGM1Nzk1Mjk3NTI4MWMzYmIyMmQyNzZiY2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGhZza68rZZUCyfTjcbYEje5rL04 hiGJkBNrzi0HJ12SP3YXLdZPCkpQitm3R/DTWgkYwTZPgZ9sT+QPOArE1ncunOTT 8QL8dWayGfJJQZfHw4Vpx1zwObvcZftirbfJab/TLzdmGo4zpR7TiyonTTK76F65 hQY0Ulh70C5Rk9Vv9I3D8c1ETzkityJEQ7BPHfJMIowXOwkbfmrHH82SAz/yh2H2 7BI9BnSYnx4rTneM2etchKGKG7L4EzyIwAhuxF48UfBPPGbhDmbpxfjDxOG03+aC MHfF4gANd/DUFyP/ROkyiYVDkO9D2wwgWsW0VzrPYf4XXXVdAWrftHtIFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeqPMOCcJ3FeVKXUoHDuyLSdrzmMB8GA1UdIwQY MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt NjU3ZTQxYzYzY2E5LzEvQjZvOHc0SnduY1Y1VXBkU2djTzdJdEoydk9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5 LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRD1MA0G CSqGSIb3DQEBCwUAA4IBAQBbE7kDAoYjJrUajtAR7s35NHUFcxGPoYJqwPy0GN5K fQrizcB+D/OEKqacdzF0QiHMNU7Gg8+0ZBuuer3TWa7tqr43aMBUESQQ2SrGrU7s U7dqdyp3plRRiyWuAKyxvlWlK1dSoK7JQyNkXBz0bCyCrkvgQ25OhpL4J61qtlnt xD/BRSIdH0YJ8FDmWJLEA8wuLuV7O3+dx8Uc95l5G7Ks8bNDMb5S/7TDOSttXl+N J4Apwsov1lya3tERS5w0G9VB6fbmjZRPoVQi7KbTMI5/mtsh0HsZZ8GHIgdGIMQL nHMADIF5fOSGu6vw7y0uOwX68yIwoKjOYCsscePFuxuF -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:30 2026 by rpki-client