This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/vH_sEfDU81k82bCyQ3wMyP5PVWE.roa File: vH_sEfDU81k82bCyQ3wMyP5PVWE.roa (raw, json) Hash identifier: FwaLONRBNXLNCaY37uk5cOKRRSKJajQin0uHoBoCrh0= Subject key identifier: BC:7F:EC:11:F0:D4:F3:59:3C:D9:B0:B2:43:7C:0C:C8:FE:4F:55:61 Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Certificate serial: 019B7B356DFC98EC0B9EBD4B9B0E66CA095C Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/vH_sEfDU81k82bCyQ3wMyP5PVWE.roa Signing time: Thu 01 Jan 2026 20:17:37 +0000 ROA not before: Thu 01 Jan 2026 20:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 193.33.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:6d:fc:98:ec:0b:9e:bd:4b:9b:0e:66:ca:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144 Validity Not Before: Jan 1 20:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc7fec11f0d4f3593cd9b0b2437c0cc8fe4f5561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:c9:3b:a7:ba:97:30:34:1c:65:6b:85:a7: 5c:a2:b1:c4:bf:c0:f5:ab:7c:22:3f:5e:a1:fa:74: 2d:22:40:6c:d0:ee:46:c2:c4:64:e5:99:72:c5:ed: 07:b5:6f:ad:4b:57:eb:6d:b8:94:e6:76:14:17:e0: 34:00:0f:2d:a7:20:98:79:2a:82:6b:4b:74:bf:1b: 66:d3:6d:5c:71:6d:30:21:a1:c0:3b:82:99:8c:f6: 34:7e:6c:76:6a:e5:a3:a5:61:07:35:24:71:2d:2f: eb:bf:97:82:3f:b9:75:75:fa:6b:bd:33:0e:4e:f3: 73:a9:4a:be:23:90:09:55:6f:73:07:d9:a4:b7:92: 7f:d4:77:72:40:4d:63:14:52:2b:72:c5:8a:15:e0: 66:3e:74:18:68:17:bd:f2:88:ed:1f:eb:77:ca:ec: fd:c8:54:ac:e3:3c:18:68:3c:d4:5a:4d:e6:98:f0: 4b:f9:96:b8:e4:2d:6a:06:d9:f0:1e:c6:f8:9b:bd: b1:2b:e6:79:40:7c:ee:a4:58:0a:29:f9:29:38:a3: ea:f5:14:b8:58:dd:65:1f:04:e8:24:b5:1b:b0:99: 65:72:9b:df:cb:29:bc:81:12:7f:c4:b8:88:17:d8: 51:0c:bc:4a:62:4d:4f:65:01:b8:28:11:39:25:f2: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:EC:11:F0:D4:F3:59:3C:D9:B0:B2:43:7C:0C:C8:FE:4F:55:61 X509v3 Authority Key Identifier: keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/vH_sEfDU81k82bCyQ3wMyP5PVWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.254.0/23 Signature Algorithm: sha256WithRSAEncryption 87:fc:51:be:5e:98:75:ae:f5:89:4c:29:f0:13:55:db:6d:1a: 3c:f8:d9:04:de:d1:99:a8:8d:f7:1d:91:d9:43:c6:f2:3d:36: 50:6a:7f:34:68:22:74:44:37:7c:6b:c3:ec:75:fd:57:6d:63: b9:0e:e5:b7:e8:0d:f8:7b:18:a8:5f:0a:94:ff:d6:b5:95:b1: f2:22:cb:4c:81:45:38:a8:e7:76:69:0a:5c:c0:ce:c6:85:67: a7:c0:fb:dc:17:a4:e1:99:1f:fd:56:ac:ca:78:84:59:55:74: ab:7e:62:f4:c3:1c:72:c9:25:68:0f:35:ff:b6:47:3a:e7:63: 6e:89:14:55:d3:23:b8:a5:ab:03:71:ec:4d:4b:ba:55:e0:c0: eb:54:2f:e1:95:c8:88:0a:4e:1e:7c:b2:2a:f3:02:7d:1f:81: 09:a0:ca:f4:00:74:7c:84:23:ec:a2:fb:f5:00:54:f9:11:0d: ca:d5:db:56:ee:4c:f4:33:05:bb:38:49:6c:67:e2:0a:91:d5: 57:9a:4a:38:97:e4:f6:12:ff:fc:8f:ad:06:54:c7:29:1b:fb: be:c0:ea:1a:86:07:81:8a:f9:d3:31:0d:4c:a5:98:b8:a8:fb: 59:1e:3f:40:2f:26:f6:cf:74:0c:03:0b:67:f1:e7:c5:f5:26: 78:06:34:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NW38mOwLnr1Lmw5myglcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMzA5NTY4M2IyOTQ3ZGRkNDllZWVhYzBkYmQ5ZWE5NTRh ZWExNDQwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzdmZWMxMWYwZDRmMzU5M2NkOWIwYjI0MzdjMGNjOGZlNGY1NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT/JO6e6lzA0HGVrhadcorHEv8D1 q3wiP16h+nQtIkBs0O5GwsRk5Zlyxe0HtW+tS1frbbiU5nYUF+A0AA8tpyCYeSqC a0t0vxtm021ccW0wIaHAO4KZjPY0fmx2auWjpWEHNSRxLS/rv5eCP7l1dfprvTMO TvNzqUq+I5AJVW9zB9mkt5J/1HdyQE1jFFIrcsWKFeBmPnQYaBe98ojtH+t3yuz9 yFSs4zwYaDzUWk3mmPBL+Za45C1qBtnwHsb4m72xK+Z5QHzupFgKKfkpOKPq9RS4 WN1lHwToJLUbsJllcpvfyym8gRJ/xLiIF9hRDLxKYk1PZQG4KBE5JfJN2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLx/7BHw1PNZPNmwskN8DMj+T1VhMB8GA1UdIwQY MBaAFIAwlWg7KUfd1J7urA29nqlUrqFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMt NmJkZDM0NzhkMTBjLzEvdkhfc0VmRFU4MWs4MmJDeVEzd015UDVQVldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMtNmJkZDM0NzhkMTBj LzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSH+MA0G CSqGSIb3DQEBCwUAA4IBAQCH/FG+Xph1rvWJTCnwE1XbbRo8+NkE3tGZqI33HZHZ Q8byPTZQan80aCJ0RDd8a8Psdf1XbWO5DuW36A34exioXwqU/9a1lbHyIstMgUU4 qOd2aQpcwM7GhWenwPvcF6ThmR/9VqzKeIRZVXSrfmL0wxxyySVoDzX/tkc652Nu iRRV0yO4pasDcexNS7pV4MDrVC/hlciICk4efLIq8wJ9H4EJoMr0AHR8hCPsovv1 AFT5EQ3K1dtW7kz0MwW7OElsZ+IKkdVXmko4l+T2Ev/8j60GVMcpG/u+wOoahgeB ivnTMQ1MpZi4qPtZHj9ALyb2z3QMAwtn8efF9SZ4BjTY -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:22 2026 by rpki-client