This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/tSXjnZHfIFRPkfR23KuWOEzYmso.roa File: tSXjnZHfIFRPkfR23KuWOEzYmso.roa (raw, json) Hash identifier: bT+yAY7ld62QoBr+Sm2VFzdlFNBEOfbRTYnS7F4jOIY= Subject key identifier: B5:25:E3:9D:91:DF:20:54:4F:91:F4:76:DC:AB:96:38:4C:D8:9A:CA Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Certificate serial: 019B76EB51D5FDD22E1CA490A327AB716348 Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/tSXjnZHfIFRPkfR23KuWOEzYmso.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212933 IP address blocks: 193.200.233.0/24 maxlen: 24 2a0f:c1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:51:d5:fd:d2:2e:1c:a4:90:a3:27:ab:71:63:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b525e39d91df20544f91f476dcab96384cd89aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:91:5e:df:df:b5:5a:80:aa:db:3c:a2:71: 81:b4:00:57:88:c3:8f:30:b1:86:8b:4f:dc:72:d0: a6:c1:ff:78:06:c3:c1:05:7f:ac:b8:84:8d:a6:0f: 4f:f8:09:1f:6e:db:f5:9c:6a:95:d7:1a:4a:f1:3e: 7e:3a:fb:43:2e:a3:88:07:4e:37:24:18:9e:c6:77: 6c:a2:38:52:03:88:6c:80:63:49:37:2f:da:50:d6: 31:31:d1:fc:be:a6:b4:d7:51:21:e3:81:eb:75:64: 75:70:b9:76:cd:08:38:9c:e4:c8:40:24:cb:47:9d: 0d:a5:ae:27:d0:82:c3:d7:25:46:8a:56:b8:f7:8f: 14:26:de:4e:a7:e7:6f:65:28:b9:57:6c:f0:ea:c8: a9:29:2a:69:e9:90:91:eb:e6:a6:60:be:70:de:49: 90:34:56:46:27:64:30:52:e3:71:31:6b:c4:e5:b7: 18:79:84:91:be:03:87:db:d8:05:1a:22:df:12:b0: a5:b8:6e:9b:f0:3c:78:9e:6d:ca:76:f4:b1:5a:f4: 66:75:1d:f5:95:19:56:9b:14:45:7a:24:eb:84:f4: d3:c7:ce:9f:a8:bc:49:be:cf:c0:d6:d8:7b:2d:93: 64:04:97:8e:04:a1:77:44:54:a4:5e:8e:49:db:14: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:25:E3:9D:91:DF:20:54:4F:91:F4:76:DC:AB:96:38:4C:D8:9A:CA X509v3 Authority Key Identifier: keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/tSXjnZHfIFRPkfR23KuWOEzYmso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.233.0/24 IPv6: 2a0f:c1c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:af:08:74:53:61:1c:71:97:69:aa:00:ba:d8:6a:db:c0:cd: 25:d6:58:3a:45:ec:ba:73:47:bb:39:0e:26:47:80:b4:1f:6a: 6c:db:4f:da:0d:19:5c:61:53:f6:e9:76:27:9b:51:44:a5:a4: 31:81:4a:3c:24:e9:f5:79:41:52:fb:f9:03:d7:c8:c4:ed:a9: 5f:3d:74:51:6f:3e:a7:f4:c5:4e:61:7d:e9:71:2a:c4:2c:c9: 7f:33:66:04:75:d2:55:94:ba:0d:5f:db:26:7d:0f:64:1e:04: 20:1b:96:15:2e:61:46:a2:e6:b8:04:b0:fe:bf:0d:dd:ae:f3: a4:bc:2b:a5:27:82:f1:36:23:4c:a1:ad:12:e8:6b:aa:88:8a: 1f:dd:fd:50:3e:b0:28:f5:db:65:f2:b8:79:a8:6d:37:21:4e: 96:5e:fd:9c:6a:11:e8:4b:7a:7a:8c:08:2a:15:a5:c3:cf:79: 8f:25:fc:83:75:2f:a2:d7:c7:2a:25:6f:c1:93:8f:6c:85:a5: d5:81:bc:07:76:aa:41:61:fd:f3:a3:98:a3:15:17:7c:41:73: 4b:55:43:13:39:d2:a0:d3:a7:7c:66:cc:31:e9:ef:d6:15:5e: e4:3a:f1:7f:1d:f0:fd:b2:3e:6c:ee:1e:b0:59:c9:b1:a6:24: 29:07:ad:88 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt261HV/dIuHKSQoyercWNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MDM1ZWM5ZGUyNTcwYzFlN2E3ZGI0MGUyNzJlNDU1NDhj OTIwMmIwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTI1ZTM5ZDkxZGYyMDU0NGY5MWY0NzZkY2FiOTYzODRjZDg5YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6CRXt/ftVqAqts8onGBtABXiMOP MLGGi0/cctCmwf94BsPBBX+suISNpg9P+Akfbtv1nGqV1xpK8T5+OvtDLqOIB043 JBiexndsojhSA4hsgGNJNy/aUNYxMdH8vqa011Eh44HrdWR1cLl2zQg4nOTIQCTL R50Npa4n0ILD1yVGila4948UJt5Op+dvZSi5V2zw6sipKSpp6ZCR6+amYL5w3kmQ NFZGJ2QwUuNxMWvE5bcYeYSRvgOH29gFGiLfErCluG6b8Dx4nm3KdvSxWvRmdR31 lRlWmxRFeiTrhPTTx86fqLxJvs/A1th7LZNkBJeOBKF3RFSkXo5J2xS9TwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLUl452R3yBUT5H0dtyrljhM2JrKMB8GA1UdIwQY MBaAFPgDXsneJXDB56fbQOJy5FVIySArMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1BTmV5ZDRsY01IbnA5dEE0bkxrVlVqSklDcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2Zl LTkyMjM4NDZmZjMwYi8xL3RTWGpuWkhmSUZSUGtmUjIzS3VXT0V6WW1zby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2ZlLTkyMjM4NDZmZjMw Yi8xLzEtQU5leWQ0bGNNSG5wOXRBNG5Ma1ZVakpJQ3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADByOkw DQQCAAIwBwMFACoPwcAwDQYJKoZIhvcNAQELBQADggEBAAKvCHRTYRxxl2mqALrY atvAzSXWWDpF7LpzR7s5DiZHgLQfamzbT9oNGVxhU/bpdiebUUSlpDGBSjwk6fV5 QVL7+QPXyMTtqV89dFFvPqf0xU5hfelxKsQsyX8zZgR10lWUug1f2yZ9D2QeBCAb lhUuYUai5rgEsP6/Dd2u86S8K6UngvE2I0yhrRLoa6qIih/d/VA+sCj122XyuHmo bTchTpZe/ZxqEehLenqMCCoVpcPPeY8l/IN1L6LXxyolb8GTj2yFpdWBvAd2qkFh /fOjmKMVF3xBc0tVQxM50qDTp3xmzDHp79YVXuQ68X8d8P2yPmzuHrBZybGmJCkH rYg= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:28 2026 by rpki-client