This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa File: DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa (raw, json) Hash identifier: oE4VTfHSNDRDGHt9TR7fUWF8m+BPcMZmJzIcx4TX/hs= Subject key identifier: 0E:C4:ED:30:64:34:2F:C9:8C:E1:BA:C4:9C:B9:14:2A:BA:BE:53:05 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16E74BC4CA0DBDCE448FCEF772F81 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa Signing time: Fri 02 Jan 2026 18:21:27 +0000 ROA not before: Fri 02 Jan 2026 18:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208483 IP address blocks: 193.160.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6e:74:bc:4c:a0:db:dc:e4:48:fc:ef:77:2f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ec4ed3064342fc98ce1bac49cb9142ababe5305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:b1:d6:0b:22:cb:97:3a:7e:07:6d:47:a8: be:6d:30:d3:52:5e:88:fe:79:7c:e5:03:57:a4:f3: 68:34:6e:71:16:31:96:4f:68:2d:36:ce:b2:92:16: 98:f6:fe:d2:07:5f:d2:8b:af:21:d3:62:2d:75:0c: 2d:f9:eb:cf:aa:ff:81:a4:f0:26:b0:2d:5b:5c:f1: 13:73:bf:d2:fb:f2:61:69:c6:1e:33:f9:ac:1f:c7: 39:c3:16:8f:09:68:df:d5:ac:64:f5:72:db:5d:5f: 4f:ab:dc:e4:66:90:0d:c6:6f:59:83:92:35:7d:71: 38:c5:ca:1e:d1:e8:68:78:f0:5b:87:2b:f7:43:28: 8b:d9:d1:34:f3:cd:36:43:f0:25:19:7f:33:59:95: da:38:d3:aa:b9:60:4c:21:da:c0:49:32:88:44:55: 6c:72:75:30:94:ac:c7:d7:75:57:52:52:c6:0b:60: 95:c9:85:d7:35:07:0b:10:79:5e:81:17:ab:ae:fa: e6:e7:1c:cc:f5:55:b1:64:db:b6:09:2c:fd:30:4d: 99:0c:72:2a:c3:fa:94:ba:a3:86:5c:b8:6b:4b:72: d3:52:ce:e7:fe:64:d7:bd:2c:46:af:f4:e8:47:d1: 9b:d6:ea:55:b4:8d:04:47:47:bf:e1:df:a6:f0:a5: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C4:ED:30:64:34:2F:C9:8C:E1:BA:C4:9C:B9:14:2A:BA:BE:53:05 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/DsTtMGQ0L8mM4brEnLkUKrq-UwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.222.0/24 Signature Algorithm: sha256WithRSAEncryption 84:a2:14:50:f8:7e:bb:5f:81:00:49:eb:93:fa:a0:09:ec:b7: 66:fc:32:0d:de:d4:18:ed:b7:e3:b1:67:2e:63:00:d7:a8:22: 03:21:2c:22:4c:53:cc:32:28:e5:16:90:ce:71:30:70:8c:3b: f0:44:2b:b6:36:63:f9:71:c8:01:39:4f:08:d1:4f:2f:2a:5f: 48:63:97:87:29:16:c5:40:54:9e:fa:aa:64:4c:c5:d8:3a:94: 90:1d:b0:1a:8a:ce:c7:93:6c:39:b6:f6:60:88:3a:3a:5c:61: f8:64:a0:90:cd:31:16:00:16:54:e0:06:1c:97:78:a3:03:a3: c8:ba:37:ae:77:b1:1f:42:ab:01:b2:0d:cf:38:b1:1b:e8:b6: 4d:78:e2:6b:ef:66:65:24:0b:23:42:eb:09:dd:aa:ae:32:52: 3e:8c:9e:4b:37:be:4a:6c:f1:90:98:be:21:e6:c0:19:8a:89: f7:b3:60:3a:15:36:89:41:be:85:8d:58:09:0f:e6:9f:3f:86: ef:11:30:35:a1:03:72:3c:3f:1e:aa:75:53:95:ec:cd:c7:50: ca:73:ec:a1:c5:03:80:e2:92:75:ab:40:6b:42:7e:b5:81:cc: f2:27:8e:7b:84:e1:29:ce:f4:53:d7:12:b3:1a:da:e1:40:9e: 68:1a:ca:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8W50vEyg29zkSPzvdy+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWM0ZWQzMDY0MzQyZmM5OGNlMWJhYzQ5Y2I5MTQyYWJhYmU1MzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPex1gsiy5c6fgdtR6i+bTDTUl6I /nl85QNXpPNoNG5xFjGWT2gtNs6ykhaY9v7SB1/Si68h02ItdQwt+evPqv+BpPAm sC1bXPETc7/S+/JhacYeM/msH8c5wxaPCWjf1axk9XLbXV9Pq9zkZpANxm9Zg5I1 fXE4xcoe0ehoePBbhyv3QyiL2dE08802Q/AlGX8zWZXaONOquWBMIdrASTKIRFVs cnUwlKzH13VXUlLGC2CVyYXXNQcLEHlegRerrvrm5xzM9VWxZNu2CSz9ME2ZDHIq w/qUuqOGXLhrS3LTUs7n/mTXvSxGr/ToR9Gb1upVtI0ER0e/4d+m8KUifQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7E7TBkNC/JjOG6xJy5FCq6vlMFMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvRHNUdE1HUTBMOG1NNGJyRW5Ma1VLcnEtVXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaDeMA0G CSqGSIb3DQEBCwUAA4IBAQCEohRQ+H67X4EASeuT+qAJ7Ldm/DIN3tQY7bfjsWcu YwDXqCIDISwiTFPMMijlFpDOcTBwjDvwRCu2NmP5ccgBOU8I0U8vKl9IY5eHKRbF QFSe+qpkTMXYOpSQHbAais7Hk2w5tvZgiDo6XGH4ZKCQzTEWABZU4AYcl3ijA6PI ujeud7EfQqsBsg3POLEb6LZNeOJr72ZlJAsjQusJ3aquMlI+jJ5LN75KbPGQmL4h 5sAZion3s2A6FTaJQb6FjVgJD+afP4bvETA1oQNyPD8eqnVTlezNx1DKc+yhxQOA 4pJ1q0BrQn61gczyJ457hOEpzvRT1xKzGtrhQJ5oGspp -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:07 2026 by rpki-client