This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/1-ujLZVA2eD9Q0LVsUuabSgXoS8I.roa File: 1-ujLZVA2eD9Q0LVsUuabSgXoS8I.roa (raw, json) Hash identifier: eGVzw06cOI2ubQS+bEsoP6kSWSoInZkg8QfLxOIOYxE= Subject key identifier: FA:E8:CB:65:50:36:78:3F:50:D0:B5:6C:52:E6:9B:4A:05:E8:4B:C2 Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825 Certificate serial: 019B7CED73B17F85383ED2DCDE97F94535A5 Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/1-ujLZVA2eD9Q0LVsUuabSgXoS8I.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210635 IP address blocks: 193.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:73:b1:7f:85:38:3e:d2:dc:de:97:f9:45:35:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae8cb655036783f50d0b56c52e69b4a05e84bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:93:04:af:22:e8:ac:d8:88:b2:6b:fc:b4: bc:c8:64:23:79:8c:f3:68:75:c3:32:b2:49:36:24: fd:36:c0:6f:a6:3d:c0:c0:4f:47:db:1a:98:4b:5c: f4:f8:c2:eb:d0:13:a6:3e:07:60:08:01:4a:41:3e: 62:bc:1d:23:c1:25:72:55:e3:f5:d1:be:ae:da:c6: b7:49:16:f8:9f:53:8e:bf:84:78:27:0f:0f:82:67: 0d:27:61:6e:41:68:40:35:b8:83:c7:b0:4d:1a:f2: 33:cd:c6:c4:a0:68:40:6e:83:15:19:f3:d1:f6:25: 6d:8e:12:5f:7b:cb:cd:1c:6c:fa:6b:d3:c8:8f:90: dc:91:af:5b:8a:60:7c:d0:8a:1b:f3:ed:a6:33:a7: b7:09:4f:4b:70:c2:cf:93:44:e1:2c:31:1e:ac:9a: 60:4a:ce:97:7e:fd:12:f4:59:89:18:f0:bb:e7:54: 10:e5:a6:ee:c1:f3:57:0d:6e:cd:64:51:58:84:fa: e6:87:e8:80:58:d3:96:31:42:62:c9:b4:38:42:1b: 5c:73:64:7f:73:ec:9d:8e:03:d0:df:02:74:48:df: d8:d1:e4:94:28:a7:ca:96:47:1e:1d:80:14:b5:9a: d0:e3:cc:27:b1:62:09:1d:e4:f2:40:10:df:78:3d: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E8:CB:65:50:36:78:3F:50:D0:B5:6C:52:E6:9B:4A:05:E8:4B:C2 X509v3 Authority Key Identifier: keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/1-ujLZVA2eD9Q0LVsUuabSgXoS8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.28.0/24 Signature Algorithm: sha256WithRSAEncryption 33:f6:bd:1e:46:a9:68:0f:02:2a:97:0c:14:23:60:f8:23:2d: ea:a1:12:54:f6:d8:9a:f4:f5:4e:ff:30:1b:4a:3f:3f:c0:ee: a2:93:34:0c:0e:f0:7e:0c:cf:81:9b:49:45:82:3d:98:24:be: c3:98:4d:1c:c6:91:8f:1a:b3:f7:8a:2d:bd:de:c9:31:a3:a3: 40:c5:fc:23:25:b2:57:b0:44:69:e5:d3:aa:90:23:c8:58:14: e5:bd:24:f1:3b:f2:e3:d3:72:89:74:3b:ba:03:e0:59:ea:ed: 07:8f:d3:24:2c:53:c1:85:a5:6f:25:95:de:76:cc:0e:7d:2b: df:d1:64:55:30:83:f7:de:49:7a:b1:3c:3d:6e:cf:d8:96:05: 1e:fe:53:0b:f7:dd:27:2e:bf:39:71:db:74:7c:8b:b5:85:67: 76:13:ca:4e:bd:2e:fe:51:97:fe:9b:f5:16:9a:99:fe:22:fd: 91:c0:bb:a9:17:24:24:50:97:46:ca:80:4c:d8:67:25:2a:f9: 2c:2f:7d:eb:fa:91:e0:28:b0:8f:a6:62:01:5b:ce:89:a3:f2: 86:f3:68:72:89:e7:df:e7:ec:9d:5f:f8:f5:6c:a1:ab:6b:68: 62:7a:4a:37:7c:72:ca:89:c5:28:f5:f4:63:b2:ae:c4:af:3c: 32:fd:47:7a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87XOxf4U4PtLc3pf5RTWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx YTg4MjUwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWU4Y2I2NTUwMzY3ODNmNTBkMGI1NmM1MmU2OWI0YTA1ZTg0YmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE+TBK8i6KzYiLJr/LS8yGQjeYzz aHXDMrJJNiT9NsBvpj3AwE9H2xqYS1z0+MLr0BOmPgdgCAFKQT5ivB0jwSVyVeP1 0b6u2sa3SRb4n1OOv4R4Jw8PgmcNJ2FuQWhANbiDx7BNGvIzzcbEoGhAboMVGfPR 9iVtjhJfe8vNHGz6a9PIj5Dcka9bimB80Iob8+2mM6e3CU9LcMLPk0ThLDEerJpg Ss6Xfv0S9FmJGPC751QQ5abuwfNXDW7NZFFYhPrmh+iAWNOWMUJiybQ4Qhtcc2R/ c+ydjgPQ3wJ0SN/Y0eSUKKfKlkceHYAUtZrQ48wnsWIJHeTyQBDfeD0t/QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFProy2VQNng/UNC1bFLmm0oF6EvCMB8GA1UdIwQY MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt ZDEyYTkwYmY1MDJlLzEvMS11akxaVkEyZUQ5UTBMVnNVdWFiU2dYb1M4SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDcvYTZjNWY2LTYwNGYtNDM5OS05NDQzLWQxMmE5MGJmNTAy ZS8xL3hLRHpFUW1FelB2MUtaZ0xiVUZ0M1U0YWlDVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEhHDAN BgkqhkiG9w0BAQsFAAOCAQEAM/a9HkapaA8CKpcMFCNg+CMt6qESVPbYmvT1Tv8w G0o/P8DuopM0DA7wfgzPgZtJRYI9mCS+w5hNHMaRjxqz94otvd7JMaOjQMX8IyWy V7BEaeXTqpAjyFgU5b0k8Tvy49NyiXQ7ugPgWertB4/TJCxTwYWlbyWV3nbMDn0r 39FkVTCD995JerE8PW7P2JYFHv5TC/fdJy6/OXHbdHyLtYVndhPKTr0u/lGX/pv1 FpqZ/iL9kcC7qRckJFCXRsqATNhnJSr5LC996/qR4Ciwj6ZiAVvOiaPyhvNoconn 3+fsnV/49Wyhq2toYnpKN3xyyonFKPX0Y7KuxK88Mv1Heg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:50 2026 by rpki-client