This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/AWdnvO_fGYURQMiK3WsDBvu78og.roa File: AWdnvO_fGYURQMiK3WsDBvu78og.roa (raw, json) Hash identifier: xYb7mnfBNaWhh8LFpOFQkvNwUNvj1x9GSJ76i4T9ScE= Subject key identifier: 01:67:67:BC:EF:DF:19:85:11:40:C8:8A:DD:6B:03:06:FB:BB:F2:88 Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0 Certificate serial: 019B78A329DA9978FE828DA0FD083DA3A00F Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/AWdnvO_fGYURQMiK3WsDBvu78og.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 193.5.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:29:da:99:78:fe:82:8d:a0:fd:08:3d:a3:a0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016767bcefdf19851140c88add6b0306fbbbf288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:c7:a6:f7:ca:db:b1:e1:36:69:fd:51:5e: 61:88:a1:97:80:c0:8b:ae:c0:67:e1:ae:c7:d0:0e: 3d:26:5c:6e:67:f2:0f:a7:b6:4f:a2:70:ca:1e:45: b9:dc:bf:2b:06:aa:0f:aa:58:86:27:1a:82:01:4b: 1b:5b:4b:bb:84:79:7d:92:12:ab:e5:16:a2:51:c9: 54:d5:ad:ed:57:7a:41:2b:85:66:be:a9:5a:cc:bf: 8b:4a:b9:19:27:d7:bc:94:9f:93:57:d8:a9:b5:aa: 92:2a:29:a0:b7:3e:dd:53:ae:f9:40:f3:84:12:b8: 5f:bf:3e:fb:26:82:99:e4:bf:d0:ca:a9:a0:2b:53: d8:b6:76:44:81:81:e0:6b:4e:aa:77:0f:9b:be:72: b8:f3:9b:cf:2b:49:41:7f:4e:ae:26:d4:e2:45:7d: 09:ac:0d:9b:eb:83:17:2b:f7:f5:d4:47:fb:fe:06: 74:6d:13:17:59:bb:34:ad:d9:79:f5:e0:33:2c:c7: 08:4c:c7:4b:d4:f1:81:ef:82:1b:b2:36:c3:4c:bf: cd:47:ab:8c:32:40:26:bd:83:e9:1e:f0:0c:bd:14: 86:ca:fc:76:ba:b2:59:32:98:e8:28:4b:82:9e:03: a2:a1:31:3f:ed:81:ba:d9:26:91:79:82:30:7f:a3: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:67:67:BC:EF:DF:19:85:11:40:C8:8A:DD:6B:03:06:FB:BB:F2:88 X509v3 Authority Key Identifier: keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/AWdnvO_fGYURQMiK3WsDBvu78og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.53.0/24 Signature Algorithm: sha256WithRSAEncryption 49:92:59:ea:77:8e:75:93:a4:e7:dd:c1:49:95:df:94:00:94: 14:77:a8:2d:b4:e1:a5:95:4a:f7:c0:a4:ef:c0:a6:89:8a:7d: 5e:8e:91:8d:2c:91:fb:6b:77:8b:0d:6a:c2:77:9c:b3:5a:37: c8:37:d7:b1:fc:6e:bd:9e:39:79:71:86:15:bb:15:ed:40:7a: f9:ae:e6:37:ed:cc:3e:a9:07:47:b1:74:48:c7:75:d4:b3:b2: 98:5d:f8:c9:5c:f3:e3:a2:41:72:e0:d9:4f:fe:c0:e3:bd:fe: 2e:4a:91:5e:6d:9b:17:ba:4d:2b:d3:72:c1:49:5f:29:3c:0a: 06:35:fe:1b:64:6f:2f:b2:7c:4a:bc:25:d5:9a:10:86:57:49: 97:a5:7c:02:4b:55:61:fc:bf:97:cc:26:48:1f:59:a9:cc:3e: 4a:26:d2:21:96:b0:ca:a3:91:fa:75:dd:a8:dc:39:21:ed:c2: 95:8d:67:fe:02:63:a2:e0:23:96:53:30:57:33:d6:b0:8d:f4: 98:b3:77:f4:0f:dc:5e:b9:79:c3:d7:43:b7:81:3b:5f:29:b6: f8:f9:b8:0e:d8:b4:da:ee:1a:3b:63:60:f9:7f:c7:e8:f0:12: 37:c2:73:0d:ed:b9:1a:0c:15:61:2d:b5:a0:78:14:ff:7c:39: 4a:18:02:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oynamXj+go2g/Qg9o6APMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNmQyODQwNDA0NDIzOWVmNTgyNDJmMjEwZTBiMTY2Njdl YjQwZDAwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTY3NjdiY2VmZGYxOTg1MTE0MGM4OGFkZDZiMDMwNmZiYmJmMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt3HpvfK27HhNmn9UV5hiKGXgMCL rsBn4a7H0A49JlxuZ/IPp7ZPonDKHkW53L8rBqoPqliGJxqCAUsbW0u7hHl9khKr 5RaiUclU1a3tV3pBK4VmvqlazL+LSrkZJ9e8lJ+TV9iptaqSKimgtz7dU675QPOE Erhfvz77JoKZ5L/QyqmgK1PYtnZEgYHga06qdw+bvnK485vPK0lBf06uJtTiRX0J rA2b64MXK/f11Ef7/gZ0bRMXWbs0rdl59eAzLMcITMdL1PGB74IbsjbDTL/NR6uM MkAmvYPpHvAMvRSGyvx2urJZMpjoKEuCngOioTE/7YG62SaReYIwf6OM1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFnZ7zv3xmFEUDIit1rAwb7u/KIMB8GA1UdIwQY MBaAFHttKEBARCOe9YJC8hDgsWZn60DQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEt YTY1ZmJkODMwMzU4LzEvQVdkbnZPX2ZHWVVSUU1pSzNXc0RCdnU3OG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEtYTY1ZmJkODMwMzU4 LzEvZTIwb1FFQkVJNTcxZ2tMeUVPQ3habWZyUU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQU1MA0G CSqGSIb3DQEBCwUAA4IBAQBJklnqd451k6Tn3cFJld+UAJQUd6gttOGllUr3wKTv wKaJin1ejpGNLJH7a3eLDWrCd5yzWjfIN9ex/G69njl5cYYVuxXtQHr5ruY37cw+ qQdHsXRIx3XUs7KYXfjJXPPjokFy4NlP/sDjvf4uSpFebZsXuk0r03LBSV8pPAoG Nf4bZG8vsnxKvCXVmhCGV0mXpXwCS1Vh/L+XzCZIH1mpzD5KJtIhlrDKo5H6dd2o 3Dkh7cKVjWf+AmOi4COWUzBXM9awjfSYs3f0D9xeuXnD10O3gTtfKbb4+bgO2LTa 7ho7Y2D5f8fo8BI3wnMN7bkaDBVhLbWgeBT/fDlKGAJj -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:20 2026 by rpki-client