This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/IFreR7G3pVUxUHJmvWKSmdyyxV4.roa File: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (raw, json) Hash identifier: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE= Subject key identifier: 20:5A:DE:47:B1:B7:A5:55:31:50:72:66:BD:62:92:99:DC:B2:C5:5E Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019B7B3558BD8D94835E3D6D702A32EDD8A1 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/IFreR7G3pVUxUHJmvWKSmdyyxV4.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 193.17.68.0/24 maxlen: 24 193.30.161.0/24 maxlen: 24 193.200.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 05:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:58:bd:8d:94:83:5e:3d:6d:70:2a:32:ed:d8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=205ade47b1b7a55531507266bd629299dcb2c55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:dd:f8:a5:5e:6e:f8:9e:5d:71:bc:41:66: cb:15:11:be:e4:ae:db:5a:7d:46:89:8c:1c:cc:c3: 7f:a1:9c:f9:86:09:73:d4:f6:8e:fa:2c:82:80:4f: 2a:bf:53:49:00:19:91:eb:19:07:4d:37:5b:79:50: 1c:6d:d8:74:09:fa:51:c6:77:40:f0:d0:b1:4d:0a: f6:97:af:b4:81:29:e5:31:95:15:dc:89:56:9a:b3: b9:9d:c1:73:2a:5d:7f:55:92:7f:12:be:4b:0a:dd: d0:14:c6:5b:71:32:89:5d:45:24:c5:58:eb:9a:2b: 2c:5c:1a:4e:8c:54:d0:ab:d1:2a:56:95:8e:b8:e1: a0:2c:3a:c3:cb:31:a5:ed:af:35:f1:8f:56:20:eb: 5b:6e:7d:86:29:63:9d:2e:f2:69:34:2c:23:49:7c: 22:5d:67:de:9e:f6:74:75:26:0b:5f:68:c7:8c:63: a4:ed:05:b8:a4:5c:14:5b:69:8a:0e:d4:5e:0b:12: b1:df:b0:b0:3b:84:cf:f4:19:0e:69:7e:65:d3:fa: c8:e9:b8:64:3e:13:48:57:85:6b:5a:17:1e:54:b6: 8a:45:0c:4e:3f:49:72:f6:fc:bd:79:04:37:3e:47: 8f:9d:b2:18:57:ab:d2:f7:cc:da:6a:2c:1a:16:de: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:DE:47:B1:B7:A5:55:31:50:72:66:BD:62:92:99:DC:B2:C5:5E X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/IFreR7G3pVUxUHJmvWKSmdyyxV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.68.0/24 193.30.161.0/24 193.200.30.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:b3:5c:ed:64:0a:95:34:5a:e5:90:60:58:2a:37:3c:e5:f9: 95:9a:90:7d:47:64:54:d3:bd:92:c0:1c:82:7c:e4:ec:c4:f8: 58:50:88:1f:69:0e:f8:f6:b5:18:36:97:40:67:0c:8f:dc:fc: 55:fc:2d:37:ec:25:d0:a1:7f:85:e4:a0:4d:c6:19:71:78:50: 5d:c9:f2:ea:ad:07:8f:3b:34:81:b9:11:21:9e:45:51:ec:ca: c3:0f:2f:9b:8b:9a:4f:bc:7d:2c:9c:37:04:b8:61:05:4d:c6: fe:07:36:2f:0d:07:64:b1:c4:2d:f7:aa:ae:25:f2:ad:62:8b: 59:1c:f3:10:9c:2b:72:7c:25:5c:c2:38:ee:2f:08:af:21:44: ef:31:a4:c1:6f:05:9b:71:31:10:a1:d3:99:3d:43:97:d6:22: 5a:3e:58:4e:c7:74:05:f3:12:de:32:a5:83:80:90:64:c1:79: a7:2a:d5:04:fe:d4:c5:17:aa:42:e7:a5:25:be:10:43:d5:08: 1d:7a:28:be:9a:e0:88:8f:39:37:21:bb:25:f5:bf:83:e2:c0: 54:18:9d:62:77:2f:bf:61:08:06:e0:5a:9e:f9:4c:86:db:d7: 0a:8e:5e:93:11:f2:31:bc:b8:99:18:41:08:d2:cc:a3:0b:fd: 01:cc:8e:dc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NVi9jZSDXj1tcCoy7dihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDVhZGU0N2IxYjdhNTU1MzE1MDcyNjZiZDYyOTI5OWRjYjJjNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzd+KVebvieXXG8QWbLFRG+5K7b Wn1GiYwczMN/oZz5hglz1PaO+iyCgE8qv1NJABmR6xkHTTdbeVAcbdh0CfpRxndA 8NCxTQr2l6+0gSnlMZUV3IlWmrO5ncFzKl1/VZJ/Er5LCt3QFMZbcTKJXUUkxVjr missXBpOjFTQq9EqVpWOuOGgLDrDyzGl7a818Y9WIOtbbn2GKWOdLvJpNCwjSXwi XWfenvZ0dSYLX2jHjGOk7QW4pFwUW2mKDtReCxKx37CwO4TP9BkOaX5l0/rI6bhk PhNIV4VrWhceVLaKRQxOP0ly9vy9eQQ3PkePnbIYV6vS98zaaiwaFt517wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCBa3kext6VVMVByZr1ikpncssVeMB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvSUZyZVI3RzNwVlV4VUhKbXZXS1NtZHl5eFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRFEAwQA wR6hAwQAwcgeMA0GCSqGSIb3DQEBCwUAA4IBAQCOs1ztZAqVNFrlkGBYKjc85fmV mpB9R2RU072SwByCfOTsxPhYUIgfaQ749rUYNpdAZwyP3PxV/C037CXQoX+F5KBN xhlxeFBdyfLqrQePOzSBuREhnkVR7MrDDy+bi5pPvH0snDcEuGEFTcb+BzYvDQdk scQt96quJfKtYotZHPMQnCtyfCVcwjjuLwivIUTvMaTBbwWbcTEQodOZPUOX1iJa PlhOx3QF8xLeMqWDgJBkwXmnKtUE/tTFF6pC56UlvhBD1Qgdeii+muCIjzk3Ibsl 9b+D4sBUGJ1idy+/YQgG4Fqe+UyG29cKjl6TEfIxvLiZGEEI0syjC/0BzI7c -----END CERTIFICATE-----Generated at Fri Jan 2 14:22:12 2026 by rpki-client