This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa File: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (raw, json) Hash identifier: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394= Subject key identifier: B8:97:7B:45:93:77:64:0B:28:25:09:C9:85:CD:8C:FA:62:E3:0A:12 Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001 Certificate serial: 019B77C6610BADF34FED9E920E1AF2DB1DC7 Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12886 IP address blocks: 193.23.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:0b:ad:f3:4f:ed:9e:92:0e:1a:f2:db:1d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8977b459377640b282509c985cd8cfa62e30a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:a3:f8:5e:8a:ea:3d:3d:73:f3:6d:74:18: d7:2b:32:b7:1c:10:01:22:48:2b:d6:07:21:45:af: 5d:9e:ac:9e:3d:47:fe:46:11:db:e4:68:a5:a3:b6: 12:b6:74:77:65:f8:49:59:59:3b:eb:7d:79:ec:96: 5c:56:8a:30:0c:fd:7e:e5:b4:74:ac:a9:c4:a6:cb: 91:72:83:c3:a5:e1:7b:68:ba:ce:e9:27:0d:e4:69: 59:37:6a:d1:b1:82:cc:d5:89:1f:a3:5b:ab:64:81: 4c:a9:b4:fe:f2:6b:1f:a3:71:49:97:06:2c:ad:a9: 0a:de:cb:1c:6d:02:66:af:69:99:bd:b8:2c:c2:c1: 6e:ab:ae:fa:40:49:31:ab:50:88:21:bf:5a:e0:4d: e1:04:8d:09:f1:d5:ef:92:7f:1f:be:37:ad:c1:15: 8c:d6:a4:31:5d:19:10:e5:0d:54:66:1c:1b:66:79: 2e:25:9d:96:77:67:93:57:ec:11:ec:a0:ea:4d:fe: f5:92:9e:a8:3c:44:d4:c8:8c:f3:bf:60:df:6f:30: bd:7d:5e:25:e0:b6:92:3e:8d:bf:1a:e5:95:ad:69: fb:a0:43:72:33:b8:0e:67:7d:5c:0a:25:e1:0e:5f: f5:c9:c4:cf:45:9b:c0:18:72:e3:65:1e:8d:14:12: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:97:7B:45:93:77:64:0B:28:25:09:C9:85:CD:8C:FA:62:E3:0A:12 X509v3 Authority Key Identifier: keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.148.0/22 Signature Algorithm: sha256WithRSAEncryption bf:ff:70:06:9d:81:bd:47:4c:0b:6b:33:93:dc:aa:52:bc:dd: b4:90:ff:5c:69:8b:d8:36:fd:6c:77:93:fd:8e:ea:23:a0:e5: 46:02:9d:88:48:19:45:dd:d1:06:57:6c:19:74:f3:bf:d7:5f: f9:76:58:9b:d1:f2:b6:50:d2:80:62:93:a3:47:6b:c0:a7:65: f3:7e:40:28:49:cd:e6:44:bf:9f:47:6f:7e:ae:a1:6c:a3:6d: 97:96:e8:f8:19:04:38:dd:c3:86:07:4a:f8:bd:bf:d0:eb:6b: c7:0a:51:7c:41:7c:9f:e2:d5:7d:55:64:15:2f:9f:34:19:57: 3b:b5:7f:c4:36:6e:07:13:ec:d2:6b:47:6d:49:b0:84:d9:94: b5:69:28:5c:f0:c8:b0:e5:a2:76:a4:21:af:1e:22:cd:a0:ed: ca:96:5b:e1:ed:2f:45:4b:52:ef:3a:84:66:49:29:c0:6d:bb: 28:b4:4f:61:17:57:a3:a8:1e:e0:2a:f7:a3:d0:ca:22:d3:38: 32:f7:5c:20:f6:d5:39:ca:07:c7:cb:ee:9a:8e:74:5d:cf:12: 96:a9:59:52:56:cb:e0:66:70:2e:9d:20:4e:80:b3:d6:e7:ab: 5e:ca:e0:f3:f2:79:fa:90:d8:f6:04:ff:37:ba:77:9b:14:6e: 6d:2c:ee:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmELrfNP7Z6SDhry2x3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5 ZGUwMDEwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODk3N2I0NTkzNzc2NDBiMjgyNTA5Yzk4NWNkOGNmYTYyZTMwYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6aj+F6K6j09c/NtdBjXKzK3HBAB Ikgr1gchRa9dnqyePUf+RhHb5Gilo7YStnR3ZfhJWVk763157JZcVoowDP1+5bR0 rKnEpsuRcoPDpeF7aLrO6ScN5GlZN2rRsYLM1Ykfo1urZIFMqbT+8msfo3FJlwYs rakK3sscbQJmr2mZvbgswsFuq676QEkxq1CIIb9a4E3hBI0J8dXvkn8fvjetwRWM 1qQxXRkQ5Q1UZhwbZnkuJZ2Wd2eTV+wR7KDqTf71kp6oPETUyIzzv2DfbzC9fV4l 4LaSPo2/GuWVrWn7oENyM7gOZ31cCiXhDl/1ycTPRZvAGHLjZR6NFBJC/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiXe0WTd2QLKCUJyYXNjPpi4woSMB8GA1UdIwQY MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt Yjg1MmJkODEyM2YwLzEvdUpkN1JaTjNaQXNvSlFuSmhjMk0tbUxqQ2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwReUMA0G CSqGSIb3DQEBCwUAA4IBAQC//3AGnYG9R0wLazOT3KpSvN20kP9caYvYNv1sd5P9 juojoOVGAp2ISBlF3dEGV2wZdPO/11/5dlib0fK2UNKAYpOjR2vAp2XzfkAoSc3m RL+fR29+rqFso22Xluj4GQQ43cOGB0r4vb/Q62vHClF8QXyf4tV9VWQVL580GVc7 tX/ENm4HE+zSa0dtSbCE2ZS1aShc8Miw5aJ2pCGvHiLNoO3Kllvh7S9FS1LvOoRm SSnAbbsotE9hF1ejqB7gKvej0Moi0zgy91wg9tU5ygfHy+6ajnRdzxKWqVlSVsvg ZnAunSBOgLPW56teyuDz8nn6kNj2BP83unebFG5tLO5d -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:11 2026 by rpki-client