This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/A-mJzajm6R6rc_fte01cBrdlwGQ.roa File: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (raw, json) Hash identifier: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA= Subject key identifier: 03:E9:89:CD:A8:E6:E9:1E:AB:73:F7:ED:7B:4D:5C:06:B7:65:C0:64 Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Certificate serial: 019B76EAD9632C4727900D55D4F4F83094C7 Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/A-mJzajm6R6rc_fte01cBrdlwGQ.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 193.239.20.0/22 maxlen: 22 193.239.20.0/23 maxlen: 23 193.239.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d9:63:2c:47:27:90:0d:55:d4:f4:f8:30:94:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03e989cda8e6e91eab73f7ed7b4d5c06b765c064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:16:60:0f:4f:55:6e:57:13:b5:61:cc:49: db:76:7c:11:65:05:42:25:5d:01:a2:ca:66:4f:66: 53:ec:a0:01:e7:97:30:94:16:33:cd:ef:b1:84:70: 85:fb:64:27:14:69:97:16:7f:ff:f8:4a:46:a6:f4: ae:8b:8f:7d:14:90:95:bf:47:48:a7:f3:de:f6:14: b6:22:89:79:17:91:b2:6b:69:bc:5e:0a:c2:73:19: a1:9f:47:7e:ba:49:96:9a:eb:e0:6a:25:4a:a2:77: 80:3d:31:2f:5b:d2:25:4b:94:0d:2c:04:04:b9:5f: 20:82:19:31:b3:26:51:84:5b:91:bf:e4:53:2e:40: 77:a1:d4:36:7c:72:c1:6b:9d:40:52:de:d4:43:c7: be:36:7d:99:3c:37:03:d6:f2:3f:cf:87:be:2a:60: 39:a6:63:77:e5:ed:07:75:da:f5:f1:7c:cd:be:a4: 7f:16:73:31:41:9c:15:79:db:cf:8e:3d:82:0c:60: 8e:57:9f:1f:41:a0:65:16:39:bc:8c:4b:ec:ab:5a: 3d:c8:7a:e2:6f:44:cc:48:d7:7e:3e:89:67:82:80: 4c:dd:40:64:42:0f:e5:74:d1:0e:a3:30:b2:b3:ce: 09:79:83:82:bd:10:27:16:18:80:8d:61:07:6c:2b: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:89:CD:A8:E6:E9:1E:AB:73:F7:ED:7B:4D:5C:06:B7:65:C0:64 X509v3 Authority Key Identifier: keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/A-mJzajm6R6rc_fte01cBrdlwGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.20.0/22 Signature Algorithm: sha256WithRSAEncryption a0:bc:30:f5:c6:2d:91:e4:45:81:3a:5c:14:29:d3:d2:d5:15: 2a:33:04:30:66:75:cc:1c:2f:51:d7:bb:2a:3b:58:07:b2:c8: df:38:c3:ce:80:e1:73:41:ea:4a:c2:e8:13:0f:f3:4f:bd:0c: 07:70:69:34:f4:b7:80:d8:de:b1:fd:36:a7:4d:bf:6f:f8:40: 7f:d1:63:41:c4:9b:a8:ed:0a:b7:54:eb:7e:cb:63:a3:53:8a: 1c:78:1e:22:6c:83:8d:42:e3:94:b9:bd:6b:fc:ed:3b:0b:01: 2c:1b:df:93:77:ba:79:1e:1b:f0:bf:f8:f4:62:ca:0b:1e:ca: e8:0a:3b:2a:fe:e7:f8:82:52:24:89:92:4e:56:f9:6f:52:64: cf:00:70:cf:d1:19:8c:40:4f:28:cc:73:5b:ba:98:c9:d1:f1: 87:87:4e:db:4a:b9:9b:63:c3:ae:17:74:41:1c:60:a0:c4:d2: 94:2b:93:74:56:d9:dd:c4:aa:cf:75:ee:90:ab:df:57:e1:63: 3f:8e:5b:9a:08:45:e6:c6:e3:6f:c6:44:f9:2e:a0:9e:7c:4f: df:0f:0d:40:b4:1b:bc:89:3b:ae:a9:34:7b:0d:39:66:a9:95: 43:df:15:5c:aa:8e:63:66:26:94:59:07:a4:cb:4a:c5:49:59: 38:07:0b:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tljLEcnkA1V1PT4MJTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw YjUyZjQwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2U5ODljZGE4ZTZlOTFlYWI3M2Y3ZWQ3YjRkNWMwNmI3NjVjMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1MWYA9PVW5XE7VhzEnbdnwRZQVC JV0BospmT2ZT7KAB55cwlBYzze+xhHCF+2QnFGmXFn//+EpGpvSui499FJCVv0dI p/Pe9hS2Iol5F5Gya2m8XgrCcxmhn0d+ukmWmuvgaiVKoneAPTEvW9IlS5QNLAQE uV8gghkxsyZRhFuRv+RTLkB3odQ2fHLBa51AUt7UQ8e+Nn2ZPDcD1vI/z4e+KmA5 pmN35e0Hddr18XzNvqR/FnMxQZwVedvPjj2CDGCOV58fQaBlFjm8jEvsq1o9yHri b0TMSNd+PolngoBM3UBkQg/ldNEOozCys84JeYOCvRAnFhiAjWEHbCuEvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPpic2o5ukeq3P37XtNXAa3ZcBkMB8GA1UdIwQY MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt NzMxZGRiMWMwN2VkLzEvQS1tSnpham02UjZyY19mdGUwMWNCcmRsd0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe8UMA0G CSqGSIb3DQEBCwUAA4IBAQCgvDD1xi2R5EWBOlwUKdPS1RUqMwQwZnXMHC9R17sq O1gHssjfOMPOgOFzQepKwugTD/NPvQwHcGk09LeA2N6x/TanTb9v+EB/0WNBxJuo 7Qq3VOt+y2OjU4oceB4ibIONQuOUub1r/O07CwEsG9+Td7p5Hhvwv/j0YsoLHsro Cjsq/uf4glIkiZJOVvlvUmTPAHDP0RmMQE8ozHNbupjJ0fGHh07bSrmbY8OuF3RB HGCgxNKUK5N0VtndxKrPde6Qq99X4WM/jluaCEXmxuNvxkT5LqCefE/fDw1AtBu8 iTuuqTR7DTlmqZVD3xVcqo5jZiaUWQeky0rFSVk4Bwtg -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:18 2026 by rpki-client