This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa File: aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa (raw, json) Hash identifier: R1nEMHyCK4EFeYy8SvPh7cZUDUUFnN2AYX39p24Ukns= Subject key identifier: 68:50:F3:56:B5:2F:D4:B8:75:B4:57:2A:1B:1D:A2:51:23:7A:B7:64 Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E6019DD8786D7A039893F51EC80E Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48024 IP address blocks: 192.169.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e6:01:9d:d8:78:6d:7a:03:98:93:f5:1e:c8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6850f356b52fd4b875b4572a1b1da251237ab764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:df:b2:ab:36:98:31:d3:b3:4d:80:1c:e9: 9f:ee:ce:6f:bd:4c:e2:ce:e7:1b:ca:71:8c:3e:4f: c7:0e:1e:62:5b:ff:9d:d9:03:9c:e4:1b:4e:20:ab: d8:bd:c3:c1:c4:ff:d8:d6:0d:97:19:d1:37:fb:fb: 0f:4c:45:80:3d:2f:06:6d:76:67:c7:c7:7d:37:12: d3:2f:ed:46:d2:81:6b:4f:7e:16:29:22:af:99:84: 00:48:be:07:a3:a2:ce:75:92:5a:f4:d9:20:20:89: 30:01:08:8d:36:05:2f:de:23:4c:bf:b8:c1:c8:9a: bf:50:bc:3c:91:31:b3:6b:c9:94:13:c8:9f:2a:df: 61:15:52:e6:79:1e:bf:fa:8b:14:44:d7:7b:85:af: a7:1b:e3:51:b9:af:b0:dd:36:73:20:d1:79:4e:99: 3f:96:19:7c:8c:fa:04:4d:97:29:ab:1d:a1:f4:b3: fc:3a:38:c9:0d:2c:54:c5:83:eb:66:39:4b:31:35: ce:09:49:0d:40:e0:b3:9a:7f:71:23:ca:a6:ab:9c: 0f:d1:d0:35:68:4e:6b:25:83:cc:9c:75:ab:a5:32: 16:7e:9b:ce:03:26:f0:cf:cb:e9:c2:f8:25:1e:a2: ec:09:4e:7b:cc:27:6a:17:84:ab:90:56:83:75:55: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:F3:56:B5:2F:D4:B8:75:B4:57:2A:1B:1D:A2:51:23:7A:B7:64 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/aFDzVrUv1Lh1tFcqGx2iUSN6t2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.169.96.0/24 Signature Algorithm: sha256WithRSAEncryption a1:cf:e4:00:4b:2b:17:2c:7e:ea:93:a1:50:ba:5d:bc:22:09: d7:1f:b2:1a:6c:47:a0:56:e1:c1:ea:80:0c:fa:d2:95:3e:fc: 53:8a:d8:9b:cf:00:03:bb:3e:49:e0:a8:6d:de:ae:25:2d:8b: 3f:c8:47:a5:28:db:92:2e:2a:c0:a1:ba:9e:7b:9d:3d:45:c7: 6c:27:2f:a5:2b:5a:f3:65:82:d6:27:31:24:f5:b4:ae:2a:d0: c0:13:90:1e:87:b7:a9:b6:34:a3:f7:26:40:f1:59:59:93:9a: 60:3a:72:4b:2f:55:5e:66:fc:26:64:10:63:ae:c1:63:12:2c: c8:26:46:16:78:5d:56:e2:97:be:dc:19:e1:93:84:23:2b:7a: d4:dd:16:fc:ce:a3:9c:92:cb:e8:fe:bc:af:eb:7d:0c:0a:25: 7d:54:9b:a6:a9:ee:17:b2:89:0d:27:cc:c4:a8:22:fa:d2:f2: c6:91:41:aa:8c:7e:95:6a:d5:06:a2:48:9d:6f:19:11:dc:fd: a5:b7:b9:46:42:7e:e3:3f:c1:25:09:3f:bd:87:e6:b6:0a:b0: 4a:08:36:f8:67:03:6f:a0:22:d2:63:80:cd:94:f8:b9:5c:70: 32:ea:4a:e4:bd:3f:45:51:b0:d9:a7:6c:c3:e9:c8:44:4d:4a: ab:b3:c9:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yeYBndh4bXoDmJP1HsgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODUwZjM1NmI1MmZkNGI4NzViNDU3MmExYjFkYTI1MTIzN2FiNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Dfsqs2mDHTs02AHOmf7s5vvUzi zucbynGMPk/HDh5iW/+d2QOc5BtOIKvYvcPBxP/Y1g2XGdE3+/sPTEWAPS8GbXZn x8d9NxLTL+1G0oFrT34WKSKvmYQASL4Ho6LOdZJa9NkgIIkwAQiNNgUv3iNMv7jB yJq/ULw8kTGza8mUE8ifKt9hFVLmeR6/+osURNd7ha+nG+NRua+w3TZzINF5Tpk/ lhl8jPoETZcpqx2h9LP8OjjJDSxUxYPrZjlLMTXOCUkNQOCzmn9xI8qmq5wP0dA1 aE5rJYPMnHWrpTIWfpvOAybwz8vpwvglHqLsCU57zCdqF4SrkFaDdVWE6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhQ81a1L9S4dbRXKhsdolEjerdkMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvYUZEelZyVXYxTGgxdEZjcUd4MmlVU042dDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKlgMA0G CSqGSIb3DQEBCwUAA4IBAQChz+QASysXLH7qk6FQul28IgnXH7IabEegVuHB6oAM +tKVPvxTitibzwADuz5J4Kht3q4lLYs/yEelKNuSLirAobqee509RcdsJy+lK1rz ZYLWJzEk9bSuKtDAE5Aeh7eptjSj9yZA8VlZk5pgOnJLL1VeZvwmZBBjrsFjEizI JkYWeF1W4pe+3Bnhk4QjK3rU3Rb8zqOcksvo/ryv630MCiV9VJumqe4XsokNJ8zE qCL60vLGkUGqjH6VatUGokidbxkR3P2lt7lGQn7jP8ElCT+9h+a2CrBKCDb4ZwNv oCLSY4DNlPi5XHAy6krkvT9FUbDZp2zD6chETUqrs8l9 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:43 2026 by rpki-client