This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/k1pADmn6GMiQRtZPNSp61p00vu8.roa File: k1pADmn6GMiQRtZPNSp61p00vu8.roa (raw, json) Hash identifier: 1SQM1MMTHspOQ+oTUfXQ2BweUAM4ByW84Vk4jd23GqM= Subject key identifier: 93:5A:40:0E:69:FA:18:C8:90:46:D6:4F:35:2A:7A:D6:9D:34:BE:EF Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033 Certificate serial: 019B7C128A5D1DED254F71E6393F1B3C0B41 Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/k1pADmn6GMiQRtZPNSp61p00vu8.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 193.228.168.0/24 maxlen: 24 193.228.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8a:5d:1d:ed:25:4f:71:e6:39:3f:1b:3c:0b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=935a400e69fa18c89046d64f352a7ad69d34beef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:44:62:1d:4d:11:f1:07:7c:4e:e6:e5:70: cd:44:0d:29:c2:e7:c0:56:bd:62:90:d5:ad:f3:a2: 93:63:02:d3:25:26:8b:e6:29:bd:13:bf:2b:36:2c: 1a:7a:bb:d2:15:fa:bf:a1:7a:7a:39:16:c1:8b:80: a5:56:20:94:8f:7e:69:2c:40:49:08:2b:a9:d8:5c: 1c:01:29:94:cf:45:51:f5:61:89:4d:48:7a:7e:d8: 4d:cd:85:b4:7d:56:42:8e:bd:e4:09:e4:2c:b5:d2: 0d:fc:3f:78:e7:a5:75:c9:1d:53:d4:0f:aa:49:29: fa:1c:81:7d:bb:0d:ee:5e:9b:6a:e7:69:25:46:d6: 72:f3:b9:82:99:ec:51:c2:58:c0:81:18:80:28:46: 45:8e:3d:f5:5a:69:e5:35:80:16:72:c5:1f:4d:27: c1:35:4f:50:71:9a:ac:f8:7f:f6:f0:85:fd:a7:a8: ab:f9:ed:40:d2:2a:2e:a2:03:0e:c9:16:4f:5e:fd: 11:ac:e3:1e:48:c8:7d:74:e5:31:e3:2d:d0:6a:08: 04:a3:d6:6f:a0:91:07:b6:a5:7c:52:c4:8f:5b:95: 43:e4:cf:80:93:af:9e:c9:47:7d:c3:9c:86:4b:bc: de:60:2b:c0:9e:6c:bf:90:45:91:e2:d7:38:1b:70: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:40:0E:69:FA:18:C8:90:46:D6:4F:35:2A:7A:D6:9D:34:BE:EF X509v3 Authority Key Identifier: keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/k1pADmn6GMiQRtZPNSp61p00vu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.168.0/23 Signature Algorithm: sha256WithRSAEncryption 90:44:dd:5b:d8:9e:50:c9:a9:4e:3f:f3:bc:36:3e:b9:59:52: 90:c2:ed:01:a8:39:94:c2:6a:cc:0d:13:d8:5d:e9:02:e0:4d: 31:8e:d7:76:da:54:44:65:99:a2:56:43:b9:14:8c:8e:fd:1d: fd:2e:8a:75:45:6e:c3:eb:0a:0e:48:b6:b0:44:29:60:86:35: ed:5e:9a:c9:3c:11:50:da:4f:c3:e5:89:cc:ba:54:c9:6a:ef: 94:0d:6a:a4:8d:43:20:f1:ad:73:89:8d:d8:d9:d5:d6:08:af: b6:23:e4:15:74:ad:2e:8a:ba:6a:58:1a:43:3b:b7:d8:b5:25: 00:35:42:6c:d3:e3:e5:2c:44:d3:32:c3:2d:30:46:0e:f9:d3: e9:7a:49:fe:4b:ef:75:d3:e7:f4:02:eb:58:30:87:76:4e:fe: 55:00:df:1c:21:9f:04:a8:8f:8b:61:00:1d:cf:f1:66:88:e3: a6:37:69:45:48:73:50:f8:13:a5:ea:11:03:4a:07:9b:d2:e0: f3:30:e2:bc:97:b2:7c:1d:29:a2:62:58:72:2f:fc:7c:0c:3b: de:0c:f1:9f:d6:f4:79:14:3c:82:4c:65:cd:16:fe:f1:6c:74: e0:bc:0e:7b:fc:21:ca:71:85:38:cd:d6:32:0a:8c:44:d7:31: 9f:da:a4:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EopdHe0lT3HmOT8bPAtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1 MjIwMzMwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzVhNDAwZTY5ZmExOGM4OTA0NmQ2NGYzNTJhN2FkNjlkMzRiZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9VEYh1NEfEHfE7m5XDNRA0pwufA Vr1ikNWt86KTYwLTJSaL5im9E78rNiwaervSFfq/oXp6ORbBi4ClViCUj35pLEBJ CCup2FwcASmUz0VR9WGJTUh6fthNzYW0fVZCjr3kCeQstdIN/D9456V1yR1T1A+q SSn6HIF9uw3uXptq52klRtZy87mCmexRwljAgRiAKEZFjj31WmnlNYAWcsUfTSfB NU9QcZqs+H/28IX9p6ir+e1A0iouogMOyRZPXv0RrOMeSMh9dOUx4y3QaggEo9Zv oJEHtqV8UsSPW5VD5M+Ak6+eyUd9w5yGS7zeYCvAnmy/kEWR4tc4G3Bu8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNaQA5p+hjIkEbWTzUqetadNL7vMB8GA1UdIwQY MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt MThlODZmMGIxZDgxLzEvazFwQURtbjZHTWlRUnRaUE5TcDYxcDAwdnU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBweSoMA0G CSqGSIb3DQEBCwUAA4IBAQCQRN1b2J5QyalOP/O8Nj65WVKQwu0BqDmUwmrMDRPY XekC4E0xjtd22lREZZmiVkO5FIyO/R39Lop1RW7D6woOSLawRClghjXtXprJPBFQ 2k/D5YnMulTJau+UDWqkjUMg8a1ziY3Y2dXWCK+2I+QVdK0uirpqWBpDO7fYtSUA NUJs0+PlLETTMsMtMEYO+dPpekn+S+910+f0AutYMId2Tv5VAN8cIZ8EqI+LYQAd z/FmiOOmN2lFSHNQ+BOl6hEDSgeb0uDzMOK8l7J8HSmiYlhyL/x8DDveDPGf1vR5 FDyCTGXNFv7xbHTgvA57/CHKcYU4zdYyCoxE1zGf2qTH -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:07 2026 by rpki-client