This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/sNomqYhPBp6rDDVeHeFdEdr80ZI.roa File: sNomqYhPBp6rDDVeHeFdEdr80ZI.roa (raw, json) Hash identifier: 1pVwYT8qFxTi5MPqPxZQvampFIaWAMeAE0MLdFNcgyM= Subject key identifier: B0:DA:26:A9:88:4F:06:9E:AB:0C:35:5E:1D:E1:5D:11:DA:FC:D1:92 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019BC3860681C018215AEF6F1D917B5EC1F9 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/sNomqYhPBp6rDDVeHeFdEdr80ZI.roa Signing time: Thu 15 Jan 2026 21:18:19 +0000 ROA not before: Thu 15 Jan 2026 21:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 93.127.160.0/24 maxlen: 24 93.127.161.0/24 maxlen: 24 93.127.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:86:06:81:c0:18:21:5a:ef:6f:1d:91:7b:5e:c1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 15 21:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0da26a9884f069eab0c355e1de15d11dafcd192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:64:e9:84:40:6a:ba:56:a7:f5:17:30:ab: 81:65:32:ab:24:66:9b:cf:2b:71:71:e7:31:38:9e: 49:94:e9:c9:b8:34:04:4e:9a:63:d8:c4:78:fc:5b: 11:28:2f:cb:96:67:7e:1f:b4:ae:2a:de:47:45:ff: 92:a1:37:f9:20:02:79:8b:77:ce:d3:93:90:2b:8d: 47:eb:ff:39:00:c0:72:19:01:f1:98:5f:dc:1d:35: 6d:1b:59:df:10:ce:4c:cf:af:04:0c:86:b1:c4:60: ea:37:af:3c:83:da:73:cc:36:b2:97:55:b7:e9:fb: 0f:d9:28:c8:ff:b4:a1:c1:67:01:01:cb:14:23:a7: b3:ae:22:7b:17:b6:74:fb:c6:eb:c4:67:7a:59:6a: d4:fd:f6:9b:7b:56:a9:5f:b3:8c:cd:c8:9f:c6:82: 89:08:86:97:a3:04:25:1c:e2:6c:49:07:00:e8:8f: 8e:2d:b8:5c:f7:8b:81:41:d4:e8:8f:7e:5d:05:78: 54:88:29:21:ad:a8:13:ac:c8:7a:f0:56:c5:1a:5d: 95:80:ce:6c:1d:76:30:be:ec:fc:a8:2e:75:31:5a: db:49:1f:2c:49:a4:0e:48:c7:3c:e0:bf:e2:10:16: 97:f8:1e:f0:d2:41:6a:0b:40:fe:59:fa:3e:79:55: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:26:A9:88:4F:06:9E:AB:0C:35:5E:1D:E1:5D:11:DA:FC:D1:92 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/sNomqYhPBp6rDDVeHeFdEdr80ZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.127.160.0/23 93.127.184.0/24 Signature Algorithm: sha256WithRSAEncryption 83:b8:80:8b:9a:6a:c4:47:0e:78:a8:17:84:fd:a8:ce:bd:75: 9c:87:c2:7a:08:94:82:51:c4:65:bc:4c:18:36:45:47:0a:82: df:ac:68:4a:08:2f:0a:67:57:1d:a4:4a:6f:7d:3f:4e:f5:59: 73:c6:d5:ab:39:31:89:5e:6f:5c:6f:9e:88:cd:a4:b6:b9:f4: 2e:f6:7b:01:05:aa:bd:f5:d4:8f:1d:6a:d3:1d:9b:38:44:c2: b0:45:e9:7b:42:dc:03:f9:46:29:fc:e5:d7:d8:52:ae:9c:e4: 39:b4:78:d8:7d:c9:6b:7e:82:82:69:d4:6e:81:2d:1a:c3:0d: 94:88:05:6f:a4:0b:97:33:a5:45:9f:80:4a:6e:96:7e:23:4d: f3:5a:ca:7d:3c:fa:d6:3a:da:e2:02:ef:e5:85:3c:09:79:13: 28:c5:cf:e1:c3:3e:87:57:ab:01:8d:49:98:42:e1:3f:4b:d9: 89:a4:11:3c:68:6d:f8:5c:3a:96:06:51:9a:73:5f:e1:56:27: 6a:c7:e2:51:8f:55:93:25:47:d9:83:0f:f9:93:d5:59:e2:20: 2a:c9:39:1d:74:70:2b:e0:0f:1d:04:06:69:2b:ac:dc:8b:13: 7b:6d:d9:48:eb:40:c9:2a:7e:c1:f3:3e:5e:e9:62:de:50:52: 31:82:97:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvDhgaBwBghWu9vHZF7XsH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTE1MjExODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGRhMjZhOTg4NGYwNjllYWIwYzM1NWUxZGUxNWQxMWRhZmNkMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsBk6YRAarpWp/UXMKuBZTKrJGab zytxcecxOJ5JlOnJuDQETppj2MR4/FsRKC/Llmd+H7SuKt5HRf+SoTf5IAJ5i3fO 05OQK41H6/85AMByGQHxmF/cHTVtG1nfEM5Mz68EDIaxxGDqN688g9pzzDayl1W3 6fsP2SjI/7ShwWcBAcsUI6ezriJ7F7Z0+8brxGd6WWrU/fabe1apX7OMzcifxoKJ CIaXowQlHOJsSQcA6I+OLbhc94uBQdToj35dBXhUiCkhragTrMh68FbFGl2VgM5s HXYwvuz8qC51MVrbSR8sSaQOSMc84L/iEBaX+B7w0kFqC0D+Wfo+eVUMvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLDaJqmITwaeqww1Xh3hXRHa/NGSMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvc05vbXFZaFBCcDZyRERWZUhlRmRFZHI4MFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXX+gAwQA XX+4MA0GCSqGSIb3DQEBCwUAA4IBAQCDuICLmmrERw54qBeE/ajOvXWch8J6CJSC UcRlvEwYNkVHCoLfrGhKCC8KZ1cdpEpvfT9O9VlzxtWrOTGJXm9cb56IzaS2ufQu 9nsBBaq99dSPHWrTHZs4RMKwRel7QtwD+UYp/OXX2FKunOQ5tHjYfclrfoKCadRu gS0aww2UiAVvpAuXM6VFn4BKbpZ+I03zWsp9PPrWOtriAu/lhTwJeRMoxc/hwz6H V6sBjUmYQuE/S9mJpBE8aG34XDqWBlGac1/hVidqx+JRj1WTJUfZgw/5k9VZ4iAq yTkddHAr4A8dBAZpK6zcixN7bdlI60DJKn7B8z5e6WLeUFIxgpfO -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:48 2026 by rpki-client