This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/r93BFIAx7lK03ClWMKEgnNMRy3k.roa File: r93BFIAx7lK03ClWMKEgnNMRy3k.roa (raw, json) Hash identifier: 4jsVxNS7oJ5jGPb+Oqg5cVDnCqMG9rPwVMnyLP528N4= Subject key identifier: AF:DD:C1:14:80:31:EE:52:B4:DC:29:56:30:A1:20:9C:D3:11:CB:79 Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019B77592361C5E0F29E43A5A546F5F5AB10 Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/r93BFIAx7lK03ClWMKEgnNMRy3k.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21267 IP address blocks: 185.168.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:23:61:c5:e0:f2:9e:43:a5:a5:46:f5:f5:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afddc1148031ee52b4dc295630a1209cd311cb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:60:e0:bd:66:e2:b0:5f:30:57:7f:8c:3a: 93:21:84:d1:f8:0a:f1:ce:1c:eb:43:96:83:d2:f0: dd:07:b0:1e:53:7c:01:1e:5b:3e:f4:40:a1:93:69: 4d:c4:ae:9f:99:f2:d5:39:8a:35:1b:3a:af:31:40: c9:3d:3a:9f:fa:ab:4b:8d:d8:0f:15:53:29:b6:b7: bf:66:0b:03:01:c9:e7:87:21:0f:d3:55:a5:f0:2a: 2c:e9:4c:23:35:c3:4f:74:a1:cd:8d:5a:36:b5:bd: 5e:80:d5:80:0d:df:64:5c:4d:7b:bd:3d:9c:71:dd: fc:5f:4b:b8:73:10:aa:2f:d4:72:10:12:ea:35:95: b0:d3:df:9a:27:ee:9d:20:1d:d1:a8:52:e8:53:22: a6:1b:b9:0e:10:ce:49:f6:e8:11:1e:54:6b:9e:a0: 1d:d5:12:e1:20:d0:f8:36:52:5a:70:41:47:cc:f3: 40:90:a6:e2:90:36:35:ed:51:56:5d:bb:58:1d:9d: 2e:71:63:82:e4:2e:82:40:20:8a:3b:7d:5d:1b:fd: 2a:58:9b:99:46:3d:e2:90:cd:5e:62:6d:a5:1f:5b: d8:75:aa:3a:26:13:3a:c7:18:cf:aa:e9:94:00:5c: 44:1e:e6:a0:8f:9a:89:eb:97:0b:a1:6e:73:b9:66: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DD:C1:14:80:31:EE:52:B4:DC:29:56:30:A1:20:9C:D3:11:CB:79 X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/r93BFIAx7lK03ClWMKEgnNMRy3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.10.0/24 Signature Algorithm: sha256WithRSAEncryption 41:5c:00:50:70:4a:e6:1c:dd:b3:a9:40:75:41:ba:0c:55:95: 3e:be:63:af:b6:8d:bf:ae:af:a9:a6:42:9e:51:66:39:8a:f2: 31:5f:a8:3f:38:87:5e:94:05:30:3a:11:14:2c:54:bc:c2:39: e5:ad:13:f9:63:7a:f4:0d:0c:cf:4e:07:d8:6d:c1:e4:a9:fc: d0:ac:45:ae:36:d7:5a:a0:2e:f6:b9:48:0b:71:ec:bc:55:7d: 7b:bd:52:95:41:77:50:7d:a0:38:c3:b3:87:eb:06:7c:71:be: 9e:59:37:10:68:6d:1a:6a:1d:41:f9:cc:5d:1c:ef:89:de:3e: 8e:37:f1:e7:d5:96:c6:7d:69:3c:bb:c9:71:7c:f9:0c:2a:4e: d0:66:38:8a:19:c6:88:18:5c:18:85:62:c6:ec:3e:1c:d5:5c: 5c:60:e7:19:69:84:9c:bc:22:a1:96:59:26:b0:1a:1a:59:16: b3:08:dd:7d:60:15:09:19:30:7d:1c:70:ab:81:dc:e0:32:49: ce:db:1a:5b:a5:b1:bf:68:a3:2a:25:b8:ea:76:53:ef:87:42: 5a:64:9c:f3:12:34:16:f3:42:0f:36:7e:98:d9:3a:2b:0c:4d: 72:93:32:d4:62:37:88:56:b9:87:36:b2:14:0a:bf:c1:e9:2f: f3:64:27:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSNhxeDynkOlpUb19asQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmRkYzExNDgwMzFlZTUyYjRkYzI5NTYzMGExMjA5Y2QzMTFjYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpJg4L1m4rBfMFd/jDqTIYTR+Arx zhzrQ5aD0vDdB7AeU3wBHls+9EChk2lNxK6fmfLVOYo1GzqvMUDJPTqf+qtLjdgP FVMptre/ZgsDAcnnhyEP01Wl8Cos6UwjNcNPdKHNjVo2tb1egNWADd9kXE17vT2c cd38X0u4cxCqL9RyEBLqNZWw09+aJ+6dIB3RqFLoUyKmG7kOEM5J9ugRHlRrnqAd 1RLhIND4NlJacEFHzPNAkKbikDY17VFWXbtYHZ0ucWOC5C6CQCCKO31dG/0qWJuZ Rj3ikM1eYm2lH1vYdao6JhM6xxjPqumUAFxEHuagj5qJ65cLoW5zuWagNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/dwRSAMe5StNwpVjChIJzTEct5MB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvcjkzQkZJQXg3bEswM0NsV01LRWduTk1SeTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuagKMA0G CSqGSIb3DQEBCwUAA4IBAQBBXABQcErmHN2zqUB1QboMVZU+vmOvto2/rq+ppkKe UWY5ivIxX6g/OIdelAUwOhEULFS8wjnlrRP5Y3r0DQzPTgfYbcHkqfzQrEWuNtda oC72uUgLcey8VX17vVKVQXdQfaA4w7OH6wZ8cb6eWTcQaG0aah1B+cxdHO+J3j6O N/Hn1ZbGfWk8u8lxfPkMKk7QZjiKGcaIGFwYhWLG7D4c1VxcYOcZaYScvCKhllkm sBoaWRazCN19YBUJGTB9HHCrgdzgMknO2xpbpbG/aKMqJbjqdlPvh0JaZJzzEjQW 80IPNn6Y2TorDE1ykzLUYjeIVrmHNrIUCr/B6S/zZCdW -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:19 2026 by rpki-client