This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa File: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (raw, json) Hash identifier: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I= Subject key identifier: B2:BC:19:A8:3D:CD:2D:BE:8C:81:F9:21:D3:15:63:AE:54:1C:EE:9F Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Certificate serial: 019B797E0AB53C5CF5188F9588770EDFFA7E Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35575 IP address blocks: 193.117.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0a:b5:3c:5c:f5:18:8f:95:88:77:0e:df:fa:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2bc19a83dcd2dbe8c81f921d31563ae541cee9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e8:61:2f:3e:0f:c4:8d:53:e6:58:15:ad:c6: 85:b3:23:1c:b0:40:df:1b:71:62:c9:46:93:5d:6f: 10:09:91:37:41:0c:a9:3e:67:fb:78:2e:dd:da:c2: 57:d6:44:10:a7:c1:62:1e:0e:ce:7c:46:ca:a8:58: 5d:7e:e4:6a:80:7c:5d:35:e1:16:43:92:c5:bc:bd: ab:af:c8:9f:27:a9:31:3b:31:20:9e:1e:36:70:05: 16:57:61:c0:a6:f8:71:fa:31:fd:58:da:f4:4d:6d: 20:c8:12:d7:5e:b8:5f:11:6d:62:f0:d1:7a:c6:cb: 8d:fa:b3:2e:ab:9d:d2:56:31:4f:08:af:42:d4:80: f2:13:7f:10:2a:b3:b7:c8:1d:cc:8d:72:0a:05:f7: d1:34:8f:0a:6f:01:33:d1:87:9f:1e:4c:1b:2a:d1: 3a:eb:24:3d:35:8e:d6:79:4f:f8:33:9c:2f:56:71: fd:30:aa:00:3c:32:58:79:86:8d:99:a0:e1:9c:ce: 82:75:0f:03:26:e1:83:99:f3:fe:68:7e:86:66:13: fe:df:29:33:13:2f:0b:e4:a0:50:07:13:d6:9a:0e: d0:22:4c:e1:69:e2:1e:9e:b5:8b:57:3f:ca:8d:57: 1b:7a:d0:99:a2:0b:cb:ca:79:29:e9:4b:dc:b9:96: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:19:A8:3D:CD:2D:BE:8C:81:F9:21:D3:15:63:AE:54:1C:EE:9F X509v3 Authority Key Identifier: keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.117.56.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b0:c1:cf:cd:6c:d4:58:fb:ce:ec:45:f6:c0:ee:ab:6c:76: 56:2f:e0:cd:c2:ce:49:75:06:01:6b:bf:83:51:41:a6:bb:4f: d1:bf:ee:b2:5f:3c:e6:a3:9a:7d:7b:7e:1b:9e:0a:3c:93:80: 62:d4:d9:49:f3:6d:a7:e9:25:e4:3c:33:81:34:a8:d6:90:5a: 88:17:75:c8:43:03:0c:8e:46:a5:e9:6a:cc:7d:98:f6:18:20: 24:8e:08:b6:3a:df:3b:d1:7d:1c:6c:da:40:de:0e:c1:6f:78: 49:ac:64:90:dc:95:5b:d8:df:e8:eb:0a:55:de:aa:2c:e6:09: e1:f0:ff:d4:af:9f:7c:c5:36:c2:9a:9d:65:10:20:38:16:ef: f9:fd:60:2d:71:2e:3b:c1:71:66:e5:bb:5a:13:9b:2a:6a:e3: 3d:98:83:5d:be:51:e8:8f:d8:e3:10:de:f4:95:6a:89:71:34: 89:08:a0:43:07:be:b5:67:6b:f6:46:ae:7d:cb:71:be:09:f2: 61:5d:13:be:92:05:a4:64:a3:70:29:c4:ec:7a:84:07:b1:ce: e8:a5:3c:c2:26:5a:1e:21:a2:7d:19:de:f7:c6:b1:3d:b2:86: 31:00:f9:bc:0b:31:39:91:c8:c2:8f:99:0f:b9:52:8c:f0:bb: 8f:83:8a:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgq1PFz1GI+ViHcO3/p+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1 ZGQ2ZTgwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmJjMTlhODNkY2QyZGJlOGM4MWY5MjFkMzE1NjNhZTU0MWNlZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+hhLz4PxI1T5lgVrcaFsyMcsEDf G3FiyUaTXW8QCZE3QQypPmf7eC7d2sJX1kQQp8FiHg7OfEbKqFhdfuRqgHxdNeEW Q5LFvL2rr8ifJ6kxOzEgnh42cAUWV2HApvhx+jH9WNr0TW0gyBLXXrhfEW1i8NF6 xsuN+rMuq53SVjFPCK9C1IDyE38QKrO3yB3MjXIKBffRNI8KbwEz0YefHkwbKtE6 6yQ9NY7WeU/4M5wvVnH9MKoAPDJYeYaNmaDhnM6CdQ8DJuGDmfP+aH6GZhP+3ykz Ey8L5KBQBxPWmg7QIkzhaeIenrWLVz/KjVcbetCZogvLynkp6UvcuZb2CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLK8Gag9zS2+jIH5IdMVY65UHO6fMB8GA1UdIwQY MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt MjkyNmQyODFiNTE0LzEvc3J3WnFEM05MYjZNZ2ZraDB4VmpybFFjN3A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0 LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXU4MA0G CSqGSIb3DQEBCwUAA4IBAQBMsMHPzWzUWPvO7EX2wO6rbHZWL+DNws5JdQYBa7+D UUGmu0/Rv+6yXzzmo5p9e34bngo8k4Bi1NlJ822n6SXkPDOBNKjWkFqIF3XIQwMM jkal6WrMfZj2GCAkjgi2Ot870X0cbNpA3g7Bb3hJrGSQ3JVb2N/o6wpV3qos5gnh 8P/Ur598xTbCmp1lECA4Fu/5/WAtcS47wXFm5btaE5sqauM9mINdvlHoj9jjEN70 lWqJcTSJCKBDB761Z2v2Rq59y3G+CfJhXRO+kgWkZKNwKcTseoQHsc7opTzCJloe IaJ9Gd73xrE9soYxAPm8CzE5kcjCj5kPuVKM8LuPg4qK -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:25 2026 by rpki-client