This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa File: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (raw, json) Hash identifier: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4= Subject key identifier: 3F:47:33:04:B6:F1:14:9F:EF:6D:98:0F:68:1D:83:80:DC:5C:C1:24 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B7EA69E8A5DC646423F55CD1BCFA1972B Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21352 IP address blocks: 193.109.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9e:8a:5d:c6:46:42:3f:55:cd:1b:cf:a1:97:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f473304b6f1149fef6d980f681d8380dc5cc124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:95:ad:98:45:03:da:35:f7:a3:1e:dc:ae: 32:97:1b:e7:f3:de:ca:12:66:98:2c:57:67:76:d9: a0:43:b2:fd:50:1d:83:44:6e:0d:09:1b:2d:b3:fc: c7:36:44:3c:9b:a3:54:26:dc:cd:e3:45:6e:d1:39: 03:49:a9:9c:a3:72:e4:e3:83:91:6c:82:56:9e:f5: fe:f6:86:a8:cc:6a:8b:97:76:3f:bd:e0:54:0e:32: a1:5a:a8:ed:56:0d:21:08:31:a0:b6:e1:b9:8a:70: 04:4e:1e:ef:15:76:2d:67:92:51:a8:dc:08:80:34: ef:46:69:40:93:62:f2:11:8d:0d:57:13:d1:01:3c: 1d:be:ad:d8:36:a5:a6:0a:b3:07:03:3b:32:58:bb: f4:52:45:74:9a:4c:63:a6:00:aa:f4:2a:21:79:20: a1:50:41:95:1d:6f:1d:1b:fc:94:f8:77:bf:01:4d: dc:db:e1:e3:fd:19:32:2e:c7:91:ea:e4:e3:7e:78: b7:48:79:b0:dc:44:2c:d3:05:f4:43:87:82:31:3c: 97:71:cb:e8:e2:81:15:9d:a3:ea:eb:be:c3:19:5c: 54:92:24:40:46:ed:47:dd:52:11:dc:64:8e:23:d7: 2c:5f:50:c5:b0:f1:c3:ae:fa:e1:d8:fe:5f:f7:86: 0a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:47:33:04:B6:F1:14:9F:EF:6D:98:0F:68:1D:83:80:DC:5C:C1:24 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.236.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:1c:07:dd:f7:25:26:4f:ee:3e:9d:7d:9e:c0:49:25:54:60: 9d:24:8b:9d:2f:7f:f3:f3:35:66:7c:88:77:68:8c:92:b6:37: e9:96:9c:cd:c5:26:7e:d9:1a:8f:c1:41:b6:01:7d:d2:b0:b0: 39:16:30:46:bc:de:67:2a:c4:78:c8:5b:2f:c2:15:34:91:33: e4:25:71:32:a9:28:5f:a8:35:6f:94:fc:bc:9b:6b:a5:94:2b: 12:4d:cb:97:a4:a2:2d:4c:b1:33:02:ba:0c:48:9a:b0:37:d3: 30:06:c8:23:d3:f2:91:bd:ba:ef:6e:ce:28:b5:cd:89:ab:65: 12:33:8b:d2:3c:60:31:c2:12:e0:66:ee:74:37:6a:07:0d:b0: db:62:08:a2:a0:a6:ec:94:d4:1b:52:f7:dd:bb:7f:ff:e6:84: a7:ad:da:fa:8f:07:80:f3:92:d1:32:d2:62:5b:7e:99:54:8d: f4:af:c7:78:a4:f0:23:fb:f6:98:f1:84:a3:ba:ca:2e:2d:a5: f9:3d:c8:f2:59:de:ef:44:16:77:07:ac:36:53:a5:8c:ef:45: e5:50:32:9b:65:a5:ea:4d:d1:18:6d:2a:fd:26:6f:70:26:76: 5e:17:e7:a1:50:2b:9a:b8:d5:a9:5a:44:4b:1c:8b:7c:bc:69: ac:9b:dd:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pp6KXcZGQj9VzRvPoZcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjQ3MzMwNGI2ZjExNDlmZWY2ZDk4MGY2ODFkODM4MGRjNWNjMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8uVrZhFA9o196Me3K4ylxvn897K EmaYLFdndtmgQ7L9UB2DRG4NCRsts/zHNkQ8m6NUJtzN40Vu0TkDSamco3Lk44OR bIJWnvX+9oaozGqLl3Y/veBUDjKhWqjtVg0hCDGgtuG5inAETh7vFXYtZ5JRqNwI gDTvRmlAk2LyEY0NVxPRATwdvq3YNqWmCrMHAzsyWLv0UkV0mkxjpgCq9CoheSCh UEGVHW8dG/yU+He/AU3c2+Hj/RkyLseR6uTjfni3SHmw3EQs0wX0Q4eCMTyXccvo 4oEVnaPq677DGVxUkiRARu1H3VIR3GSOI9csX1DFsPHDrvrh2P5f94YK+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9HMwS28RSf722YD2gdg4DcXMEkMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvUDBjekJMYnhGSl92YlpnUGFCMkRnTnhjd1NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3sMA0G CSqGSIb3DQEBCwUAA4IBAQA7HAfd9yUmT+4+nX2ewEklVGCdJIudL3/z8zVmfIh3 aIyStjfplpzNxSZ+2RqPwUG2AX3SsLA5FjBGvN5nKsR4yFsvwhU0kTPkJXEyqShf qDVvlPy8m2ullCsSTcuXpKItTLEzAroMSJqwN9MwBsgj0/KRvbrvbs4otc2Jq2US M4vSPGAxwhLgZu50N2oHDbDbYgiioKbslNQbUvfdu3//5oSnrdr6jweA85LRMtJi W36ZVI30r8d4pPAj+/aY8YSjusouLaX5PcjyWd7vRBZ3B6w2U6WM70XlUDKbZaXq TdEYbSr9Jm9wJnZeF+ehUCuauNWpWkRLHIt8vGmsm93N -----END CERTIFICATE-----Generated at Tue Jan 27 12:40:11 2026 by rpki-client