This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/sQDcvzwfINZL1YKhOjuNrTumwws.roa File: sQDcvzwfINZL1YKhOjuNrTumwws.roa (raw, json) Hash identifier: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q= Subject key identifier: B1:00:DC:BF:3C:1F:20:D6:4B:D5:82:A1:3A:3B:8D:AD:3B:A6:C3:0B Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Certificate serial: 019B783558801DC709DDE3BA5A2C3A8B216F Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/sQDcvzwfINZL1YKhOjuNrTumwws.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48444 IP address blocks: 193.219.118.0/24 maxlen: 24 2001:67c:788::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:58:80:1d:c7:09:dd:e3:ba:5a:2c:3a:8b:21:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b100dcbf3c1f20d64bd582a13a3b8dad3ba6c30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:c8:13:26:da:0f:7f:dc:43:a5:4b:00:5f: 70:69:d2:45:7c:31:9d:1d:f2:f5:c9:91:36:73:35: eb:4f:ca:07:c2:b4:c5:a1:5a:f3:d7:cd:14:ca:cb: c3:67:b2:ca:04:cd:61:ab:e2:86:4d:e3:17:5a:bb: 4a:89:81:46:c5:e8:59:74:fa:2b:2f:cc:06:8c:f3: 6a:c8:00:da:7c:df:ce:42:dd:57:93:c5:02:0c:58: 88:b3:74:7b:96:82:d4:dc:b2:ed:96:51:27:a4:8f: 55:3c:ac:60:e7:1f:bf:1a:b7:86:69:34:70:db:32: 21:22:31:d6:a8:09:b0:1b:1e:20:27:a6:6d:cf:54: 64:17:79:1a:72:c0:26:34:c4:6f:93:13:59:69:3e: 96:4e:b6:c3:20:17:79:e4:f0:0d:ca:ac:4e:23:54: 9d:c5:32:7f:5b:0b:05:70:64:6d:7d:21:e1:b6:27: 0a:5f:dc:25:af:b9:07:bd:05:2b:62:d2:93:5d:69: d6:b5:40:cc:a8:d8:8a:95:4a:06:bf:fa:92:a8:6c: 10:7f:e0:f2:ed:d4:bb:27:b1:23:28:24:41:af:37: 49:99:0b:82:51:9b:cb:3f:40:0d:73:1d:50:03:28: ae:12:d1:c3:94:24:c7:3d:33:7b:9c:cb:7b:9a:19: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:DC:BF:3C:1F:20:D6:4B:D5:82:A1:3A:3B:8D:AD:3B:A6:C3:0B X509v3 Authority Key Identifier: keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/sQDcvzwfINZL1YKhOjuNrTumwws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.219.118.0/24 IPv6: 2001:67c:788::/48 Signature Algorithm: sha256WithRSAEncryption a3:79:5a:67:77:cc:d9:d9:24:06:ae:8a:a1:4c:f5:ef:4f:b2: 7a:7e:05:fd:5d:6b:db:95:99:81:35:99:ad:0a:57:27:62:e7: 9c:d3:fc:de:bd:28:bb:97:93:6f:df:ea:6d:1d:04:6e:68:f6: ae:d3:74:70:14:7a:b1:2c:70:dc:3d:aa:29:36:e7:c4:a4:09: 63:d3:5a:40:27:8f:7d:36:24:a4:e6:88:fe:a7:80:91:a6:98: 10:12:3d:16:47:79:8c:df:0b:3e:e4:29:60:be:6c:dc:c7:e2: 7a:18:7a:ba:ae:e1:67:fd:41:0c:4a:a8:47:07:36:04:d7:af: 51:65:73:83:fb:91:eb:ce:a4:93:b5:95:6e:30:aa:98:70:7c: 7c:b1:0b:42:a7:79:fb:01:35:cc:25:e5:07:30:7f:3c:26:ac: 69:38:f6:f6:6a:84:01:5c:4c:aa:a7:3e:d9:20:e6:e3:f9:0a: 48:5f:40:b3:1f:06:80:69:60:21:b9:a2:05:e5:22:e7:48:2e: 51:26:98:6a:a8:67:1b:cf:a6:85:51:47:36:d2:d4:cd:90:19: ea:5b:86:8a:c7:b1:94:b6:11:6e:ce:4d:73:02:de:90:fc:19: af:a4:6b:b2:d6:2f:42:64:71:32:b3:80:fb:00:ff:b8:bd:b7: e0:f0:fd:40 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NViAHccJ3eO6Wiw6iyFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk ZTE4YzAwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTAwZGNiZjNjMWYyMGQ2NGJkNTgyYTEzYTNiOGRhZDNiYTZjMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXrIEybaD3/cQ6VLAF9wadJFfDGd HfL1yZE2czXrT8oHwrTFoVrz180UysvDZ7LKBM1hq+KGTeMXWrtKiYFGxehZdPor L8wGjPNqyADafN/OQt1Xk8UCDFiIs3R7loLU3LLtllEnpI9VPKxg5x+/GreGaTRw 2zIhIjHWqAmwGx4gJ6Ztz1RkF3kacsAmNMRvkxNZaT6WTrbDIBd55PANyqxOI1Sd xTJ/WwsFcGRtfSHhticKX9wlr7kHvQUrYtKTXWnWtUDMqNiKlUoGv/qSqGwQf+Dy 7dS7J7EjKCRBrzdJmQuCUZvLP0ANcx1QAyiuEtHDlCTHPTN7nMt7mhmlwwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLEA3L88HyDWS9WCoTo7ja07psMLMB8GA1UdIwQY MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt NTljMTA4N2U0ODU2LzEvc1FEY3Z6d2ZJTlpMMVlLaE9qdU5yVHVtd3dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2 LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwdt2MA8E AgACMAkDBwAgAQZ8B4gwDQYJKoZIhvcNAQELBQADggEBAKN5Wmd3zNnZJAauiqFM 9e9Psnp+Bf1da9uVmYE1ma0KVydi55zT/N69KLuXk2/f6m0dBG5o9q7TdHAUerEs cNw9qik258SkCWPTWkAnj302JKTmiP6ngJGmmBASPRZHeYzfCz7kKWC+bNzH4noY erqu4Wf9QQxKqEcHNgTXr1Flc4P7kevOpJO1lW4wqphwfHyxC0KnefsBNcwl5Qcw fzwmrGk49vZqhAFcTKqnPtkg5uP5CkhfQLMfBoBpYCG5ogXlIudILlEmmGqoZxvP poVRRzbS1M2QGepbhorHsZS2EW7OTXMC3pD8Ga+ka7LWL0JkcTKzgPsA/7i9t+Dw /UA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:35 2026 by rpki-client