This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa File: Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa (raw, json) Hash identifier: o7q7JRHvs80nHIVjNQ3bsCLMG4wGtstYaFpsR/bUbvw= Subject key identifier: 09:AD:11:FA:68:6B:15:8E:87:16:81:D2:D5:BE:56:4F:7A:70:8D:88 Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8 Certificate serial: 019B7EA5804FFF244593CCEE2EE3A5D0E781 Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42333 IP address blocks: 193.25.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:80:4f:ff:24:45:93:cc:ee:2e:e3:a5:d0:e7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8 Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ad11fa686b158e871681d2d5be564f7a708d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:3d:eb:80:8f:63:71:a8:73:01:81:41:53: d3:b4:37:78:3c:ef:ec:9a:a0:e2:e1:ed:3c:4a:96: 88:b0:37:75:65:ca:1b:69:e8:d2:0b:65:90:22:c5: c6:f1:02:6a:90:d4:6f:ca:9b:93:b3:d4:7d:77:4c: 86:ac:a7:16:71:32:2d:eb:d0:1c:27:ed:ed:28:e9: a4:87:1b:fc:1e:38:03:8d:6a:90:26:8d:ef:24:8a: ef:c8:21:2e:4f:55:27:0e:fa:b5:18:7d:9a:d0:ad: 21:22:7f:c1:0a:ad:c8:b0:53:d0:33:ca:a4:d5:7a: ba:de:a6:49:be:37:9b:de:2d:dd:e6:55:b8:26:f2: e5:4f:61:77:ca:80:50:77:3b:7d:e9:77:bc:d1:a3: 25:23:57:5c:c2:96:81:60:9d:a7:cf:97:c2:93:2d: 60:d7:ed:de:ce:bc:4a:59:97:17:93:46:0f:3a:a4: f9:be:7b:9c:0e:4b:b2:87:0c:cc:4c:4d:28:68:44: 78:c3:99:63:7b:f1:2f:71:87:65:15:a1:05:6c:b3: ea:05:4e:1c:03:fc:31:fe:b8:cc:49:3c:06:5b:5e: 05:bd:cb:55:6e:2c:b0:a0:48:b9:b3:d9:d8:eb:21: 51:33:af:5c:a7:16:8b:c8:b8:74:43:d1:83:1e:e6: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AD:11:FA:68:6B:15:8E:87:16:81:D2:D5:BE:56:4F:7A:70:8D:88 X509v3 Authority Key Identifier: keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/Ca0R-mhrFY6HFoHS1b5WT3pwjYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.205.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a2:d8:a5:8a:bf:3d:d9:26:f0:94:d4:3d:37:56:f1:64:ff: 7a:cf:3b:86:9d:17:99:9b:4c:ea:1c:35:63:5a:27:18:20:b6: 31:38:0c:d6:c3:8d:98:3d:6f:de:50:61:e2:2c:23:51:d7:f8: 16:3d:33:40:be:55:6c:a5:7d:4e:2f:6b:19:54:ff:0f:8b:46: e3:54:3a:4f:0b:84:99:ad:b2:68:51:f8:6e:21:fc:b9:79:81: af:26:2f:35:c3:53:3b:e7:ec:6a:5b:fe:09:3b:17:8f:a3:0b: 56:bd:98:bd:05:fb:c5:dc:60:71:ab:d5:92:6b:1d:06:88:e2: f0:d7:9a:39:76:50:c7:5c:9c:f1:e5:31:c0:7b:60:6d:cb:61: a3:c2:7b:b2:b9:39:62:51:b5:92:3b:4e:a3:94:24:8e:21:f1: 89:9b:87:8f:2a:28:f3:5b:99:e7:59:f5:f8:26:1b:5a:7a:c3: 07:ef:79:22:d3:d7:40:68:ed:8c:b2:f2:ec:08:7d:57:36:26: d8:90:89:7f:94:a7:92:fc:f4:44:9a:a0:99:d4:89:c7:8e:fb: d2:87:a5:59:6a:de:1d:ec:e3:1f:5f:c5:f2:78:59:8d:49:44: 44:da:de:5d:06:b9:d2:be:54:07:03:fa:a4:07:56:aa:d2:9a: 2c:2f:f6:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pYBP/yRFk8zuLuOl0OeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTEzYWYzZjM2YmI5MmEwZjJmYmRhZmUzYjY3MWY2Yjlm Y2VmYTgwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFkMTFmYTY4NmIxNThlODcxNjgxZDJkNWJlNTY0ZjdhNzA4ZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5k964CPY3GocwGBQVPTtDd4PO/s mqDi4e08SpaIsDd1ZcobaejSC2WQIsXG8QJqkNRvypuTs9R9d0yGrKcWcTIt69Ac J+3tKOmkhxv8HjgDjWqQJo3vJIrvyCEuT1UnDvq1GH2a0K0hIn/BCq3IsFPQM8qk 1Xq63qZJvjeb3i3d5lW4JvLlT2F3yoBQdzt96Xe80aMlI1dcwpaBYJ2nz5fCky1g 1+3ezrxKWZcXk0YPOqT5vnucDkuyhwzMTE0oaER4w5lje/EvcYdlFaEFbLPqBU4c A/wx/rjMSTwGW14FvctVbiywoEi5s9nY6yFRM69cpxaLyLh0Q9GDHuYXhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmtEfpoaxWOhxaB0tW+Vk96cI2IMB8GA1UdIwQY MBaAFNEROvPza7kqDy+9r+O2cfa5/O+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmIt MDBjZTlmMDhhZDgzLzEvQ2EwUi1taHJGWTZIRm9IUzFiNVdUM3B3allnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmItMDBjZTlmMDhhZDgz LzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnNMA0G CSqGSIb3DQEBCwUAA4IBAQAJotilir892SbwlNQ9N1bxZP96zzuGnReZm0zqHDVj WicYILYxOAzWw42YPW/eUGHiLCNR1/gWPTNAvlVspX1OL2sZVP8Pi0bjVDpPC4SZ rbJoUfhuIfy5eYGvJi81w1M75+xqW/4JOxePowtWvZi9BfvF3GBxq9WSax0GiOLw 15o5dlDHXJzx5THAe2Bty2GjwnuyuTliUbWSO06jlCSOIfGJm4ePKijzW5nnWfX4 JhtaesMH73ki09dAaO2MsvLsCH1XNibYkIl/lKeS/PREmqCZ1InHjvvSh6VZat4d 7OMfX8XyeFmNSURE2t5dBrnSvlQHA/qkB1aq0posL/ZV -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:01 2026 by rpki-client