This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/RjYqGxuBBpHaJJNpx3xlevA1LAY.roa File: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (raw, json) Hash identifier: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw= Subject key identifier: 46:36:2A:1B:1B:81:06:91:DA:24:93:69:C7:7C:65:7A:F0:35:2C:06 Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Certificate serial: 019B7FF2285FA9C6F99F9F9BE4C4ABB12F78 Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/RjYqGxuBBpHaJJNpx3xlevA1LAY.roa Signing time: Fri 02 Jan 2026 18:22:15 +0000 ROA not before: Fri 02 Jan 2026 18:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1234 IP address blocks: 193.110.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:28:5f:a9:c6:f9:9f:9f:9b:e4:c4:ab:b1:2f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90 Validity Not Before: Jan 2 18:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46362a1b1b810691da249369c77c657af0352c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:0f:a8:86:b7:47:25:4e:e9:28:9e:9a:8d: ca:9b:26:92:e4:ce:8c:5b:77:88:78:2d:50:ae:2f: 43:d5:92:b3:2a:b7:29:4a:53:26:22:d7:8a:22:20: fc:33:bf:b2:49:8a:63:b2:c9:1a:c9:67:95:9d:3d: aa:b2:73:65:8b:53:9a:33:67:f1:83:91:c1:96:8f: 1e:c5:3d:4b:64:c8:6a:71:13:b3:49:4a:a4:02:0a: 71:c0:05:87:7f:ed:1e:b3:a8:dc:e6:4b:c4:03:bf: ac:cc:11:0c:b0:c8:a0:dd:7e:24:26:a2:eb:57:88: ef:19:f0:6c:03:98:b0:7d:af:25:aa:6d:a8:16:4c: 76:65:ca:30:3f:c0:37:a5:89:a8:53:c5:aa:b9:e8: d2:45:d3:29:0e:45:15:06:70:47:b3:ba:b8:a7:f1: ea:72:d5:0e:60:f6:c5:2d:53:02:3e:4c:5c:02:76: 0c:23:3f:99:73:02:a9:30:c1:f8:35:c4:f7:0f:29: 70:39:e3:7c:bb:f4:90:24:62:e3:43:1e:87:c2:c8: 21:4c:2c:f3:be:25:74:1e:21:3e:bb:17:f0:80:eb: b3:77:af:0b:60:c1:f2:ed:e1:8e:86:b1:c8:e9:b8: e0:2b:5f:b1:eb:41:87:4c:70:44:1b:56:b3:b5:df: 33:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:2A:1B:1B:81:06:91:DA:24:93:69:C7:7C:65:7A:F0:35:2C:06 X509v3 Authority Key Identifier: keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/RjYqGxuBBpHaJJNpx3xlevA1LAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.32.0/21 Signature Algorithm: sha256WithRSAEncryption a8:4f:d8:f0:b2:e7:14:4c:16:f7:d8:29:4d:15:ed:6e:47:d7: c6:9c:66:d1:5d:61:a2:55:7e:4b:42:9d:38:f6:db:f1:b7:ec: 10:6a:80:94:af:02:05:f1:92:4c:ae:91:b1:f3:fd:01:c6:99: b8:82:24:31:37:42:60:b0:39:ec:e0:2d:d0:dc:7a:3b:34:61: 99:66:50:da:ad:21:7a:a3:b7:32:a6:3e:79:63:57:a6:58:ce: 15:ff:3d:79:92:3b:c7:dd:dc:97:6f:ee:b5:37:bd:8b:f9:f3: e6:2b:ce:77:a1:64:cc:c6:47:a3:55:1e:61:03:7f:db:7e:01: 55:47:b4:93:53:f1:33:f5:1f:1d:76:a1:2c:0b:44:d7:db:ae: db:55:40:43:d4:1e:7c:4f:2f:88:0b:b6:95:4b:49:0f:00:bb: 4a:5a:32:50:f4:90:3a:a7:f3:bf:c6:65:bd:1b:dd:20:a7:30: 77:35:5b:3f:92:02:f4:63:50:32:66:e6:bb:a4:e1:33:8a:6c: 87:34:b5:8d:ce:12:ef:b7:ae:6a:7a:67:29:7e:ad:76:46:36: f1:6d:74:33:00:4c:5a:3a:e8:ef:7e:de:fd:02:62:70:11:f3: 63:80:04:05:ed:db:c3:44:08:48:06:d8:4b:a1:86:dc:c4:0b: d3:66:00:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ihfqcb5n5+b5MSrsS94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0 YjRkOTAwHhcNMjYwMTAyMTgyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjM2MmExYjFiODEwNjkxZGEyNDkzNjljNzdjNjU3YWYwMzUyYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6wPqIa3RyVO6Siemo3KmyaS5M6M W3eIeC1Qri9D1ZKzKrcpSlMmIteKIiD8M7+ySYpjsskayWeVnT2qsnNli1OaM2fx g5HBlo8exT1LZMhqcROzSUqkAgpxwAWHf+0es6jc5kvEA7+szBEMsMig3X4kJqLr V4jvGfBsA5iwfa8lqm2oFkx2ZcowP8A3pYmoU8WquejSRdMpDkUVBnBHs7q4p/Hq ctUOYPbFLVMCPkxcAnYMIz+ZcwKpMMH4NcT3DylwOeN8u/SQJGLjQx6HwsghTCzz viV0HiE+uxfwgOuzd68LYMHy7eGOhrHI6bjgK1+x60GHTHBEG1aztd8zWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEY2KhsbgQaR2iSTacd8ZXrwNSwGMB8GA1UdIwQY MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt ZDllYjhkNTczNjZjLzEvUmpZcUd4dUJCcEhhSkpOcHgzeGxldkExTEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwW4gMA0G CSqGSIb3DQEBCwUAA4IBAQCoT9jwsucUTBb32ClNFe1uR9fGnGbRXWGiVX5LQp04 9tvxt+wQaoCUrwIF8ZJMrpGx8/0Bxpm4giQxN0JgsDns4C3Q3Ho7NGGZZlDarSF6 o7cypj55Y1emWM4V/z15kjvH3dyXb+61N72L+fPmK853oWTMxkejVR5hA3/bfgFV R7STU/Ez9R8ddqEsC0TX267bVUBD1B58Ty+IC7aVS0kPALtKWjJQ9JA6p/O/xmW9 G90gpzB3NVs/kgL0Y1AyZua7pOEzimyHNLWNzhLvt65qemcpfq12RjbxbXQzAExa Oujvft79AmJwEfNjgAQF7dvDRAhIBthLoYbcxAvTZgDv -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:51 2026 by rpki-client