This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/CNdTcBzMZ55u24gOy0glWWhQMdE.roa File: CNdTcBzMZ55u24gOy0glWWhQMdE.roa (raw, json) Hash identifier: fQE0tHwQADszHQqZQ+JcSAxWLmF+OAK+cl5iGPTYTxg= Subject key identifier: 08:D7:53:70:1C:CC:67:9E:6E:DB:88:0E:CB:48:25:59:68:50:31:D1 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1234732A54AA43E49D9ECDA67CDFDB Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/CNdTcBzMZ55u24gOy0glWWhQMdE.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34478 IP address blocks: 193.140.71.0/24 maxlen: 24 194.27.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:34:73:2a:54:aa:43:e4:9d:9e:cd:a6:7c:df:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08d753701ccc679e6edb880ecb482559685031d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:43:ce:a3:25:0c:2e:e5:26:08:47:03:e1: a5:17:7f:f1:f9:ac:0c:e7:dd:f0:4c:cf:94:cf:5c: 76:7c:2d:e0:41:55:90:3d:4d:bc:d2:08:3d:a8:31: 73:fd:6a:c8:99:5b:e6:b3:52:d1:60:8e:bf:c0:73: 8c:15:23:8a:81:8c:fb:11:bc:56:05:4b:dc:47:60: d4:cc:71:8c:c0:3c:ae:0a:54:83:67:bb:ea:ae:4a: c6:a7:a5:0f:9c:97:69:52:31:0e:51:60:d6:b1:fb: fd:39:5b:a5:6d:2a:27:c2:08:32:11:7e:dc:3a:51: 17:8e:4c:b9:1d:bb:26:ce:59:4d:27:ad:18:14:60: 69:d0:a0:4f:cd:06:f8:97:bb:6d:e9:ef:a0:11:24: 1c:af:0d:1a:24:12:eb:61:40:cc:fc:bc:a4:64:d5: cc:d4:8c:09:6c:87:0c:35:4b:97:b0:52:e8:96:a6: de:2e:66:06:7a:56:1f:04:23:81:1b:07:aa:1f:5e: 54:90:44:7a:ad:55:cf:68:b4:c5:63:e4:2d:57:af: 38:b4:ec:77:1f:66:67:33:27:c6:c5:dd:24:c2:25: 5e:89:49:23:8b:20:36:90:84:69:a0:05:07:34:57: d9:06:39:f6:a6:48:92:8c:9d:10:41:73:3e:50:54: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D7:53:70:1C:CC:67:9E:6E:DB:88:0E:CB:48:25:59:68:50:31:D1 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/CNdTcBzMZ55u24gOy0glWWhQMdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.71.0/24 194.27.148.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b4:9c:ae:f1:08:4b:17:29:be:10:8c:03:07:48:0b:08:35: ee:0d:aa:97:7f:7d:e3:63:f8:b1:cb:7a:14:81:ac:73:ce:06: 17:86:e0:37:e8:92:ed:ae:54:59:d4:49:d8:ec:65:d9:33:57: db:00:0d:55:7c:10:d4:7b:f1:d8:2f:0f:d8:05:8c:96:b0:eb: 7c:92:eb:e2:fb:89:b7:82:54:00:0d:ce:ac:47:2c:43:64:2a: be:d9:d6:83:21:5e:5e:00:7d:ce:0a:c0:b9:a8:ea:73:35:b1: 68:ee:28:86:4e:3b:35:8a:90:c2:d5:c8:3d:a1:47:cb:76:05: 5a:e2:2d:cf:92:39:25:35:74:82:87:d7:3d:99:cf:cf:e8:48: 7c:19:ae:33:50:87:f8:75:9e:fc:3f:3f:54:a6:77:2c:bb:2d: 86:4d:0a:3f:cb:8e:24:d8:a2:42:8f:b2:6f:4b:90:a9:db:5e: 03:33:61:3d:82:39:87:3d:2a:d6:90:fb:01:b1:ba:21:38:18: 32:ca:6c:8c:86:ce:c1:7a:a8:c9:c9:6a:ac:36:66:02:cc:97: bc:df:4e:bd:79:ba:c4:0f:73:8c:a4:20:54:db:84:2c:d9:7a: 74:71:1d:7f:9e:c0:cd:68:8d:95:0a:c3:66:a0:0b:49:52:7b: cb:7b:07:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EjRzKlSqQ+Sdns2mfN/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGQ3NTM3MDFjY2M2NzllNmVkYjg4MGVjYjQ4MjU1OTY4NTAzMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0RDzqMlDC7lJghHA+GlF3/x+awM 593wTM+Uz1x2fC3gQVWQPU280gg9qDFz/WrImVvms1LRYI6/wHOMFSOKgYz7EbxW BUvcR2DUzHGMwDyuClSDZ7vqrkrGp6UPnJdpUjEOUWDWsfv9OVulbSonwggyEX7c OlEXjky5HbsmzllNJ60YFGBp0KBPzQb4l7tt6e+gESQcrw0aJBLrYUDM/LykZNXM 1IwJbIcMNUuXsFLolqbeLmYGelYfBCOBGweqH15UkER6rVXPaLTFY+QtV684tOx3 H2ZnMyfGxd0kwiVeiUkjiyA2kIRpoAUHNFfZBjn2pkiSjJ0QQXM+UFQmBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAjXU3AczGeebtuIDstIJVloUDHRMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvQ05kVGNCek1aNTV1MjRnT3kwZ2xXV2hRTWRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYxHAwQA whuUMA0GCSqGSIb3DQEBCwUAA4IBAQBytJyu8QhLFym+EIwDB0gLCDXuDaqXf33j Y/ixy3oUgaxzzgYXhuA36JLtrlRZ1EnY7GXZM1fbAA1VfBDUe/HYLw/YBYyWsOt8 kuvi+4m3glQADc6sRyxDZCq+2daDIV5eAH3OCsC5qOpzNbFo7iiGTjs1ipDC1cg9 oUfLdgVa4i3PkjklNXSCh9c9mc/P6Eh8Ga4zUIf4dZ78Pz9Upncsuy2GTQo/y44k 2KJCj7JvS5Cp214DM2E9gjmHPSrWkPsBsbohOBgyymyMhs7BeqjJyWqsNmYCzJe8 3069ebrED3OMpCBU24Qs2Xp0cR1/nsDNaI2VCsNmoAtJUnvLewf+ -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:59 2026 by rpki-client