This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/puvvxkuyGGm9hRKcVBF60FM3T20.roa File: puvvxkuyGGm9hRKcVBF60FM3T20.roa (raw, json) Hash identifier: 859vc/MnpuH2XD8iZDZO4+LCLxVjdb1X9+4Sxo2qG9k= Subject key identifier: A6:EB:EF:C6:4B:B2:18:69:BD:85:12:9C:54:11:7A:D0:53:37:4F:6D Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Certificate serial: 019B79EC8C83913093C971D4DDDDCDCFE23F Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/puvvxkuyGGm9hRKcVBF60FM3T20.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 193.34.81.0/24 maxlen: 24 193.38.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8c:83:91:30:93:c9:71:d4:dd:dd:cd:cf:e2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ebefc64bb21869bd85129c54117ad053374f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:e4:b1:52:49:81:ef:9d:40:17:2a:5e:87: 9f:5c:9c:84:f5:1e:51:04:db:a2:6c:ad:dd:80:ad: f7:fd:de:ec:2c:ed:d9:56:65:b8:b7:c5:aa:1a:95: ca:38:7d:32:0f:8f:48:a3:e9:3f:54:7e:e6:e3:82: 4b:98:0d:2b:99:24:26:f4:01:fd:32:3e:b8:db:f9: 99:22:7a:32:3a:47:84:d9:b4:82:0b:a8:df:8d:ad: 5d:a3:c3:83:93:02:7e:54:9e:25:5b:26:01:ce:3c: 56:3f:31:29:4a:65:24:11:de:5c:3e:03:99:18:c7: 3b:7d:a3:61:cf:9b:82:fe:b6:f6:01:ea:ad:d4:d2: f8:58:ca:7e:39:cd:59:46:a3:fd:93:ce:a1:a3:57: cd:55:d2:c8:66:1c:b4:9b:73:14:ca:9e:34:35:dc: 08:a2:5b:33:2f:28:06:04:cb:44:74:bb:8d:1d:08: 3a:18:71:94:34:3e:b6:27:9b:5b:eb:56:18:91:bb: bb:84:60:4b:7b:99:e6:3d:69:89:83:90:54:b9:30: 3f:49:4f:84:ef:da:c7:5c:65:d8:bc:ce:3a:66:a7: a2:44:db:07:81:77:09:ee:7c:22:e1:a9:dd:a1:11: 54:8a:9e:c8:51:bc:d7:84:09:c7:6d:ed:c2:39:78: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:EF:C6:4B:B2:18:69:BD:85:12:9C:54:11:7A:D0:53:37:4F:6D X509v3 Authority Key Identifier: keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/puvvxkuyGGm9hRKcVBF60FM3T20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.81.0/24 193.38.244.0/24 Signature Algorithm: sha256WithRSAEncryption 51:d6:40:71:13:e8:33:91:0d:7a:67:0e:26:96:d4:f9:0e:43: 63:fe:7c:c6:9e:5b:cf:c0:31:0d:70:f1:be:13:dc:e9:5e:f4: f5:37:ea:33:7c:14:95:0c:09:79:56:b7:cb:94:87:e5:10:7c: 34:28:da:8e:b2:b8:85:aa:30:65:58:53:c5:db:08:cf:fd:71: 15:ea:4f:70:ab:ac:a4:22:ae:62:b0:63:94:a2:50:c7:d4:3e: 99:c5:af:b0:f6:31:18:ac:d4:86:0c:bc:69:22:5e:1a:85:4b: e8:3c:de:db:78:4a:73:4e:d6:80:5f:44:9d:43:20:6d:8a:4f: 50:47:91:a0:70:c1:a4:f7:47:57:d2:a7:86:fb:c2:e6:e7:98: c6:88:db:ec:c1:20:c5:bc:1a:f3:73:95:72:62:84:a5:2d:34: 90:76:45:ac:8f:fe:a3:cf:2f:27:57:3e:2a:41:a3:66:aa:5d: 26:19:7a:1c:7f:24:12:17:be:b2:78:5b:33:6e:3e:1c:be:e6: 14:f0:1c:16:18:b1:97:e4:d8:6e:20:ea:84:48:9e:a0:58:d8: 68:ee:64:24:ff:56:cf:ba:b8:17:68:ca:f5:8b:e3:5f:a3:9b: 57:21:bd:87:e0:99:10:5a:17:68:53:23:4c:7e:ff:6b:04:3a: 8a:85:37:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57IyDkTCTyXHU3d3Nz+I/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh NmI0ZDIwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmViZWZjNjRiYjIxODY5YmQ4NTEyOWM1NDExN2FkMDUzMzc0ZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwTksVJJge+dQBcqXoefXJyE9R5R BNuibK3dgK33/d7sLO3ZVmW4t8WqGpXKOH0yD49Io+k/VH7m44JLmA0rmSQm9AH9 Mj642/mZInoyOkeE2bSCC6jfja1do8ODkwJ+VJ4lWyYBzjxWPzEpSmUkEd5cPgOZ GMc7faNhz5uC/rb2Aeqt1NL4WMp+Oc1ZRqP9k86ho1fNVdLIZhy0m3MUyp40NdwI olszLygGBMtEdLuNHQg6GHGUND62J5tb61YYkbu7hGBLe5nmPWmJg5BUuTA/SU+E 79rHXGXYvM46ZqeiRNsHgXcJ7nwi4andoRFUip7IUbzXhAnHbe3COXhFWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKbr78ZLshhpvYUSnFQRetBTN09tMB8GA1UdIwQY MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt ZDU5ODQ1ZmI5YjNkLzEvcHV2dnhrdXlHR205aFJLY1ZCRjYwRk0zVDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSJRAwQA wSb0MA0GCSqGSIb3DQEBCwUAA4IBAQBR1kBxE+gzkQ16Zw4mltT5DkNj/nzGnlvP wDENcPG+E9zpXvT1N+ozfBSVDAl5VrfLlIflEHw0KNqOsriFqjBlWFPF2wjP/XEV 6k9wq6ykIq5isGOUolDH1D6Zxa+w9jEYrNSGDLxpIl4ahUvoPN7beEpzTtaAX0Sd QyBtik9QR5GgcMGk90dX0qeG+8Lm55jGiNvswSDFvBrzc5VyYoSlLTSQdkWsj/6j zy8nVz4qQaNmql0mGXocfyQSF76yeFszbj4cvuYU8BwWGLGX5NhuIOqESJ6gWNho 7mQk/1bPurgXaMr1i+Nfo5tXIb2H4JkQWhdoUyNMfv9rBDqKhTey -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:51 2026 by rpki-client