This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa File: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (raw, json) Hash identifier: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw= Subject key identifier: 90:3E:86:D8:FA:32:4F:86:3D:84:56:FB:2B:CF:C9:61:0A:9D:E5:F6 Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250 Certificate serial: 019BFA5224116436D4B004EC217FF532A0CF Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa Signing time: Mon 26 Jan 2026 12:40:45 +0000 ROA not before: Mon 26 Jan 2026 12:40:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.22.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:52:24:11:64:36:d4:b0:04:ec:21:7f:f5:32:a0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250 Validity Not Before: Jan 26 12:40:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=903e86d8fa324f863d8456fb2bcfc9610a9de5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:d7:21:14:bc:c0:c3:8f:4d:ce:95:e3:fe: b5:b9:57:d4:45:41:71:98:61:d2:0a:dd:9e:ec:35: 47:b7:29:13:ab:6f:08:a0:7a:91:3c:44:d6:78:1e: 03:93:cf:36:9e:4d:8f:04:7a:5c:9a:eb:31:33:43: 53:1d:c3:64:5e:00:bf:83:f2:bb:3e:a5:52:05:57: 55:cf:fb:64:79:c8:b1:d3:6e:3f:8e:03:f6:8a:b6: d6:e9:7f:db:98:1e:6e:fa:2b:3f:0c:bc:5f:e8:4f: ee:83:15:71:40:62:f5:d6:11:79:0b:85:52:6b:75: c7:80:e2:45:6a:43:80:5e:de:28:db:06:36:97:9b: 02:36:f6:50:d8:80:ea:2c:f8:db:01:03:a3:2c:49: 57:4a:71:ab:dd:d4:a4:9c:9d:20:f5:55:90:8b:ef: 0b:b0:f7:6d:0e:47:47:16:7d:80:c4:5f:ac:76:3d: e0:8e:08:7d:d1:29:98:11:70:25:40:46:87:7b:06: 37:12:ab:ab:b2:b3:d6:d8:f2:62:7e:b7:55:a5:95: e0:fa:04:3f:2c:bc:b7:d6:38:09:92:1e:72:dd:61: b5:8c:11:b9:e4:5b:a8:d9:8c:12:6e:32:43:e8:a3: f1:c5:e9:f4:f5:37:10:68:f8:6a:51:31:ac:37:ff: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:86:D8:FA:32:4F:86:3D:84:56:FB:2B:CF:C9:61:0A:9D:E5:F6 X509v3 Authority Key Identifier: keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.8.0/22 Signature Algorithm: sha256WithRSAEncryption 57:64:2e:55:75:82:33:b3:d9:9e:a9:fd:42:7a:c4:c4:c0:bf: 2a:f1:34:9b:05:65:c1:2f:e6:9a:5f:8c:a9:df:28:67:60:ab: a7:c2:12:48:9b:8d:ab:05:42:d4:dd:e4:ae:a0:f6:b6:65:6d: cf:47:af:70:30:83:06:a1:c4:c6:50:5b:17:9f:cc:63:9c:59: 8e:af:cc:4e:31:2f:e2:48:46:ac:86:59:ba:a3:e2:60:60:de: da:6a:88:72:6d:fd:6c:2b:99:09:41:fe:f4:c9:f4:06:dd:9c: d2:0c:dd:9b:90:b4:33:12:45:57:84:c5:a5:a2:64:4d:69:32: 96:06:33:be:44:0b:a0:f5:19:38:ce:c4:2c:5a:35:f6:47:f3: f5:c1:a1:48:d4:3a:8b:74:19:b6:6e:72:17:8e:aa:ec:eb:3d: 7a:9b:e0:a8:f7:70:6d:55:fa:43:2f:72:f8:4f:b1:09:65:57: 60:84:b0:34:02:10:28:3e:ad:d9:ca:bb:4a:02:e3:16:e9:ce: e6:1a:9b:c3:d4:19:2a:6b:3d:af:c3:8d:66:22:5b:ad:40:1e: ec:85:02:cb:02:b0:aa:6b:73:a2:95:63:64:97:bc:cb:65:c4: fa:f5:97:fd:64:d8:a6:3d:b1:23:5d:67:d4:ef:3d:b2:6f:e5: c5:7d:82:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6UiQRZDbUsATsIX/1MqDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTNkYzIxYTI0MjAyNTQyODIwY2NhODZlMjY1ZjhhODc5 N2QyNTAwHhcNMjYwMTI2MTI0MDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDNlODZkOGZhMzI0Zjg2M2Q4NDU2ZmIyYmNmYzk2MTBhOWRlNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXnXIRS8wMOPTc6V4/61uVfURUFx mGHSCt2e7DVHtykTq28IoHqRPETWeB4Dk882nk2PBHpcmusxM0NTHcNkXgC/g/K7 PqVSBVdVz/tkecix024/jgP2irbW6X/bmB5u+is/DLxf6E/ugxVxQGL11hF5C4VS a3XHgOJFakOAXt4o2wY2l5sCNvZQ2IDqLPjbAQOjLElXSnGr3dSknJ0g9VWQi+8L sPdtDkdHFn2AxF+sdj3gjgh90SmYEXAlQEaHewY3EqursrPW2PJifrdVpZXg+gQ/ LLy31jgJkh5y3WG1jBG55Fuo2YwSbjJD6KPxxen09TcQaPhqUTGsN/82gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJA+htj6Mk+GPYRW+yvPyWEKneX2MB8GA1UdIwQY MBaAFCtT3CGiQgJUKCDMqG4mX4qHl9JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAt ODM1OTNhZmJiNzUzLzEva0Q2RzJQb3lUNFk5aEZiN0s4X0pZUXFkNWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAtODM1OTNhZmJiNzUz LzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRYIMA0G CSqGSIb3DQEBCwUAA4IBAQBXZC5VdYIzs9meqf1CesTEwL8q8TSbBWXBL+aaX4yp 3yhnYKunwhJIm42rBULU3eSuoPa2ZW3PR69wMIMGocTGUFsXn8xjnFmOr8xOMS/i SEashlm6o+JgYN7aaohybf1sK5kJQf70yfQG3ZzSDN2bkLQzEkVXhMWlomRNaTKW BjO+RAug9Rk4zsQsWjX2R/P1waFI1DqLdBm2bnIXjqrs6z16m+Co93BtVfpDL3L4 T7EJZVdghLA0AhAoPq3ZyrtKAuMW6c7mGpvD1Bkqaz2vw41mIlutQB7shQLLArCq a3OilWNkl7zLZcT69Zf9ZNimPbEjXWfU7z2yb+XFfYKD -----END CERTIFICATE-----Generated at Mon Jan 26 21:33:21 2026 by rpki-client