This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/u_0x-93wRipLEsiXiJYw22k7HiU.roa File: u_0x-93wRipLEsiXiJYw22k7HiU.roa (raw, json) Hash identifier: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec= Subject key identifier: BB:FD:31:FB:DD:F0:46:2A:4B:12:C8:97:88:96:30:DB:69:3B:1E:25 Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Certificate serial: 019B7B36AFCBD7E7F803D617A093EF554BEF Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/u_0x-93wRipLEsiXiJYw22k7HiU.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 193.84.192.0/19 maxlen: 24 193.84.192.0/20 maxlen: 24 193.84.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:af:cb:d7:e7:f8:03:d6:17:a0:93:ef:55:4b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbfd31fbddf0462a4b12c897889630db693b1e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:d4:02:5d:16:16:63:5d:b8:57:1e:dd:63: ab:43:17:c5:de:fd:b3:f2:01:70:a6:ac:16:76:91: d0:df:1a:60:b1:12:24:ab:a4:30:d8:ae:99:f2:f0: f4:0d:16:8e:dd:ad:ba:66:22:56:c0:7a:58:1d:be: 68:c0:0f:2f:7d:9a:76:2c:cf:59:04:c8:27:39:8c: a7:5d:17:b7:df:4f:5a:ef:52:c8:b2:35:37:22:40: 4d:f1:4f:d0:85:98:1b:16:4d:02:f5:7d:af:50:a3: 9d:dc:7e:c9:26:5c:c1:0d:5f:d7:82:59:d2:ff:5a: 4c:35:98:d7:61:72:b3:d2:12:6f:5f:27:e3:46:0e: 6f:db:2f:88:e6:dd:8d:78:c4:1b:6c:59:4b:a1:0d: f0:d1:fb:a2:cf:92:7a:65:6b:2d:33:bb:12:52:00: 79:9b:9a:f8:78:a9:d5:0b:70:86:31:63:d9:c7:de: f4:de:b9:83:45:30:ef:3a:7a:96:45:69:08:4b:de: 51:39:f2:91:0d:73:a5:10:e2:8c:d6:b8:01:5b:41: 9d:b5:0c:d8:76:4a:a6:ee:b1:54:45:47:7a:66:74: 5a:37:83:d8:32:d0:66:73:f1:4e:70:54:c2:4a:d1: 64:5e:d1:8f:1e:f4:d0:26:d9:9f:9a:30:e2:83:b0: a0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FD:31:FB:DD:F0:46:2A:4B:12:C8:97:88:96:30:DB:69:3B:1E:25 X509v3 Authority Key Identifier: keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/u_0x-93wRipLEsiXiJYw22k7HiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.192.0/19 Signature Algorithm: sha256WithRSAEncryption 62:d5:4c:9d:6d:17:e1:0e:62:ad:81:48:c7:a9:4c:ed:e7:08: 81:ba:1b:d7:e1:51:bb:4b:ff:c9:d6:61:fe:1f:cc:cd:b5:d2: 8e:4a:76:69:ea:10:71:25:cb:d6:cc:e3:6c:36:64:17:00:49: 24:47:ec:29:ff:19:0a:22:36:1c:2d:1e:14:b5:a2:28:e0:25: 98:4f:24:49:c8:01:0c:8d:45:51:6e:14:4f:49:f6:1c:01:6a: eb:ef:4d:f3:49:16:31:23:f0:26:22:0d:d0:5b:c9:7e:5d:9e: 9d:bf:d4:1f:9a:52:f3:f9:09:66:54:80:e6:54:b5:a1:f2:b5: 22:40:55:81:78:57:cc:67:c1:fc:f7:50:52:3f:bb:f3:36:34: d3:ab:69:08:41:69:b3:5f:11:5e:79:31:e9:44:00:2d:02:1f: 3a:40:d4:00:ea:cb:b5:69:fe:ae:cd:62:96:9e:45:94:fd:1a: 5a:5f:01:b8:83:89:26:6e:9a:22:7d:75:ad:65:83:08:72:cd: 3f:a1:8d:fe:fa:5b:8b:d2:a2:3e:4a:16:81:13:81:b0:0e:35: db:43:2c:42:74:33:b6:c2:84:a9:cf:a0:6e:08:b7:01:e5:71: 14:92:62:8e:ca:3a:6f:34:9e:62:73:8e:da:27:f7:6f:f3:c5: bd:25:02:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nq/L1+f4A9YXoJPvVUvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3 NGUxNzAwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmZkMzFmYmRkZjA0NjJhNGIxMmM4OTc4ODk2MzBkYjY5M2IxZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuLUAl0WFmNduFce3WOrQxfF3v2z 8gFwpqwWdpHQ3xpgsRIkq6Qw2K6Z8vD0DRaO3a26ZiJWwHpYHb5owA8vfZp2LM9Z BMgnOYynXRe3309a71LIsjU3IkBN8U/QhZgbFk0C9X2vUKOd3H7JJlzBDV/XglnS /1pMNZjXYXKz0hJvXyfjRg5v2y+I5t2NeMQbbFlLoQ3w0fuiz5J6ZWstM7sSUgB5 m5r4eKnVC3CGMWPZx9703rmDRTDvOnqWRWkIS95ROfKRDXOlEOKM1rgBW0GdtQzY dkqm7rFURUd6ZnRaN4PYMtBmc/FOcFTCStFkXtGPHvTQJtmfmjDig7Cg3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLv9Mfvd8EYqSxLIl4iWMNtpOx4lMB8GA1UdIwQY MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt MmZkZDFmZDk5NjU3LzEvdV8weC05M3dSaXBMRXNpWGlKWXcyMms3SGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3 LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVTAMA0G CSqGSIb3DQEBCwUAA4IBAQBi1UydbRfhDmKtgUjHqUzt5wiBuhvX4VG7S//J1mH+ H8zNtdKOSnZp6hBxJcvWzONsNmQXAEkkR+wp/xkKIjYcLR4UtaIo4CWYTyRJyAEM jUVRbhRPSfYcAWrr703zSRYxI/AmIg3QW8l+XZ6dv9QfmlLz+QlmVIDmVLWh8rUi QFWBeFfMZ8H891BSP7vzNjTTq2kIQWmzXxFeeTHpRAAtAh86QNQA6su1af6uzWKW nkWU/RpaXwG4g4kmbpoifXWtZYMIcs0/oY3++luL0qI+ShaBE4GwDjXbQyxCdDO2 woSpz6BuCLcB5XEUkmKOyjpvNJ5ic47aJ/dv88W9JQLK -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:52 2026 by rpki-client