This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/io0GvTpo_VyMUyPyaPwaY5qhYQs.roa File: io0GvTpo_VyMUyPyaPwaY5qhYQs.roa (raw, json) Hash identifier: o71eBkqnQim23+RZGUgawhsMcbHLdUbBzsu6ep4SKt8= Subject key identifier: 8A:8D:06:BD:3A:68:FD:5C:8C:53:23:F2:68:FC:1A:63:9A:A1:61:0B Certificate issuer: /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c Certificate serial: 019B7AC8F448A0C10D50A425070891FE7AE3 Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/io0GvTpo_VyMUyPyaPwaY5qhYQs.roa Signing time: Thu 01 Jan 2026 18:19:08 +0000 ROA not before: Thu 01 Jan 2026 18:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197889 IP address blocks: 193.111.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f4:48:a0:c1:0d:50:a4:25:07:08:91:fe:7a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c Validity Not Before: Jan 1 18:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a8d06bd3a68fd5c8c5323f268fc1a639aa1610b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:5c:00:f4:b3:49:ed:10:35:08:76:5d:ef: 63:5e:03:2a:6c:af:db:dd:e8:1c:2f:5e:02:cf:02: cd:67:4f:36:bd:54:8d:60:74:57:f0:32:76:e8:a0: ff:38:d5:17:43:95:fb:a8:c3:0a:28:1b:de:44:b2: ae:5c:62:ef:01:18:19:05:e3:a6:3f:07:3f:23:c6: 81:2a:19:5b:ac:d9:26:6f:a8:79:3c:db:1b:5c:0c: 38:11:52:08:12:c5:cc:3b:7e:29:f1:a4:ad:a6:f0: d4:93:a7:89:36:81:85:a1:d2:ca:3b:db:fd:2c:c4: cb:dc:36:98:25:3d:53:39:72:e7:aa:85:46:0b:63: e9:9b:9e:d3:66:97:9b:c4:c1:28:47:ed:0a:35:34: ad:16:a9:de:3b:b1:00:25:a8:57:63:41:ac:a0:4c: e0:69:74:6c:60:62:5a:a2:13:fb:26:22:a0:7f:83: 26:af:b7:59:84:cf:46:18:f5:6d:91:2b:08:78:8c: 44:f0:93:18:af:d4:a6:90:5e:89:ec:68:10:25:bd: 00:cc:52:6f:37:6e:3a:c9:7f:0c:08:a2:79:3d:5d: a6:a7:a8:14:73:c0:ac:f0:1c:cc:51:c5:a5:3a:b2: 79:10:f7:e9:a9:6a:1c:97:72:e4:ee:74:fb:dc:4a: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:06:BD:3A:68:FD:5C:8C:53:23:F2:68:FC:1A:63:9A:A1:61:0B X509v3 Authority Key Identifier: keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/io0GvTpo_VyMUyPyaPwaY5qhYQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.224.0/24 Signature Algorithm: sha256WithRSAEncryption 23:c8:31:ab:5e:ea:05:24:2c:a5:50:93:5a:f2:c7:ac:9c:64: a7:1c:4a:d8:1b:5e:34:96:1c:1c:5d:4d:84:26:60:7f:95:57: 84:48:4f:a2:fe:c9:52:85:09:3e:7e:10:46:a6:6e:ad:51:33: 48:c7:98:dd:08:60:de:96:a5:d4:30:a4:e7:42:b6:cb:1a:6c: 72:a9:43:17:2f:8f:b6:f5:e0:fb:7b:12:0e:09:90:12:ba:48: 86:eb:00:37:68:68:c2:c1:ce:f0:38:c9:9d:11:78:a6:0e:7a: c7:7e:2f:25:b5:8b:9c:51:2b:9e:c2:32:17:1e:21:ef:0b:10: ba:a3:ea:ef:ae:35:99:1c:67:48:2c:66:cd:5a:6f:6d:2b:59: 8c:e6:2a:9c:45:f8:1e:ac:62:87:f7:5f:99:f6:7b:4c:15:84: 71:0c:ba:23:ac:0c:b6:02:1e:13:9d:cc:35:ea:b4:06:f5:2d: 9f:b8:95:32:7a:d2:92:ba:63:39:7e:f3:90:a1:40:d1:a2:9f: ab:70:e8:91:2f:0a:32:4a:68:ee:10:f2:61:91:39:75:04:1a: 5f:b6:9f:e7:45:7b:c5:aa:02:da:13:59:2b:d9:35:6f:65:b1: 48:9c:53:a9:63:05:ab:67:e2:9b:bb:ad:c7:28:71:78:5f:ef: 1a:d6:c8:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPRIoMENUKQlBwiR/nrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOTA0ZjU0MDlmZTU0MzVmMWZiZjVjZjQ2ZTRjZTk1ODgw YjYxM2MwHhcNMjYwMTAxMTgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YThkMDZiZDNhNjhmZDVjOGM1MzIzZjI2OGZjMWE2MzlhYTE2MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/JcAPSzSe0QNQh2Xe9jXgMqbK/b 3egcL14CzwLNZ082vVSNYHRX8DJ26KD/ONUXQ5X7qMMKKBveRLKuXGLvARgZBeOm Pwc/I8aBKhlbrNkmb6h5PNsbXAw4EVIIEsXMO34p8aStpvDUk6eJNoGFodLKO9v9 LMTL3DaYJT1TOXLnqoVGC2Ppm57TZpebxMEoR+0KNTStFqneO7EAJahXY0GsoEzg aXRsYGJaohP7JiKgf4Mmr7dZhM9GGPVtkSsIeIxE8JMYr9SmkF6J7GgQJb0AzFJv N246yX8MCKJ5PV2mp6gUc8Cs8BzMUcWlOrJ5EPfpqWocl3Lk7nT73EoVFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqNBr06aP1cjFMj8mj8GmOaoWELMB8GA1UdIwQY MBaAFP2QT1QJ/lQ18fv1z0bkzpWIC2E8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTIt NWZmMDdjM2I2Zjg4LzEvaW8wR3ZUcG9fVnlNVXlQeWFQd2FZNXFoWVFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jM2EwMDAtZjIzMy00ZTZkLWJkOTItNWZmMDdjM2I2Zjg4 LzEvX1pCUFZBbi1WRFh4LV9YUFJ1VE9sWWdMWVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW/gMA0G CSqGSIb3DQEBCwUAA4IBAQAjyDGrXuoFJCylUJNa8sesnGSnHErYG140lhwcXU2E JmB/lVeESE+i/slShQk+fhBGpm6tUTNIx5jdCGDelqXUMKTnQrbLGmxyqUMXL4+2 9eD7exIOCZASukiG6wA3aGjCwc7wOMmdEXimDnrHfi8ltYucUSuewjIXHiHvCxC6 o+rvrjWZHGdILGbNWm9tK1mM5iqcRfgerGKH91+Z9ntMFYRxDLojrAy2Ah4Tncw1 6rQG9S2fuJUyetKSumM5fvOQoUDRop+rcOiRLwoySmjuEPJhkTl1BBpftp/nRXvF qgLaE1kr2TVvZbFInFOpYwWrZ+Kbu63HKHF4X+8a1shw -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:22 2026 by rpki-client