This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/0GdrGUzc31VNEgX3ISoJ_m5myHk.roa File: 0GdrGUzc31VNEgX3ISoJ_m5myHk.roa (raw, json) Hash identifier: vBZ4lfIUKdkANOUf/RGKH/Q46oCYunKaIUyZMS4D7Fs= Subject key identifier: D0:67:6B:19:4C:DC:DF:55:4D:12:05:F7:21:2A:09:FE:6E:66:C8:79 Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Certificate serial: 019B7B364D584609FA87C7CB91B361FCDD52 Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/0GdrGUzc31VNEgX3ISoJ_m5myHk.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34019 IP address blocks: 193.27.0.0/24 maxlen: 24 193.222.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4d:58:46:09:fa:87:c7:cb:91:b3:61:fc:dd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0676b194cdcdf554d1205f7212a09fe6e66c879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:cc:d5:dc:8a:66:7d:8b:24:66:27:0e:db: f1:4e:cc:11:c5:72:78:c4:4f:5c:27:42:52:06:19: 34:2e:53:7f:0f:f0:69:45:b4:ae:f6:a6:63:98:4f: f8:ad:a2:e4:43:44:37:ca:35:d4:27:ce:8e:ce:db: d5:b2:be:2a:70:b3:ad:ad:e6:54:50:0c:a2:3b:af: c3:9a:28:67:8a:dc:f4:98:2f:31:49:fd:1f:9e:7a: 55:ce:1e:b8:24:52:af:9e:30:65:67:0d:56:f7:48: 44:5c:a2:39:92:5a:62:09:07:fe:86:8f:08:d2:7b: 05:a3:ac:c3:92:14:bf:bc:00:98:c6:cf:7c:e9:51: 06:73:76:20:50:fa:65:69:b2:a5:3a:17:cb:c4:91: 5e:79:12:ff:0e:99:45:ff:8d:90:c2:49:c2:ff:e0: c5:df:ce:3b:f7:13:4d:ec:88:d2:4f:71:d3:b5:01: 1a:cc:05:84:d7:71:f2:98:b2:c8:04:1d:8c:82:36: e3:5e:e4:56:80:ed:db:40:62:29:fb:bd:b2:8f:18: 07:e3:e5:94:c3:28:e5:e5:2d:b3:62:02:bf:42:56: 7f:25:2a:a0:cc:c5:16:34:ce:85:4f:9d:55:7e:84: b1:0c:82:e3:03:ac:85:8a:73:13:13:f6:55:d3:c7: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:67:6B:19:4C:DC:DF:55:4D:12:05:F7:21:2A:09:FE:6E:66:C8:79 X509v3 Authority Key Identifier: keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/0GdrGUzc31VNEgX3ISoJ_m5myHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.27.0.0/24 193.222.128.0/24 Signature Algorithm: sha256WithRSAEncryption 37:3c:a8:2f:6c:cc:7d:17:c3:41:be:4d:82:1e:43:86:71:f7: e3:b4:55:36:3b:45:28:00:66:de:30:87:8e:df:79:b5:3f:6f: 6a:c3:d9:ec:13:dd:22:40:33:30:7d:d8:0e:31:33:5a:9b:5c: ac:d9:7c:07:60:5c:85:4b:2c:02:d8:f2:47:1e:d5:a9:f2:48: 2a:f5:b3:8f:72:7b:d9:24:9e:c7:92:3a:3d:2c:7b:d0:85:a0: db:82:9c:a5:2b:fc:31:2c:04:f3:27:21:a4:e6:69:b8:7a:03: 46:08:58:ad:5d:f4:6a:70:65:7a:77:c0:a4:20:af:7f:b8:d4: 26:48:ce:34:11:e0:a2:07:80:45:14:ff:23:41:1b:a9:49:dd: c9:3a:71:aa:b7:80:c1:59:0b:ef:9d:6c:ce:69:0f:35:c4:0e: b4:c8:e5:ae:ce:c5:76:36:2b:0c:0d:56:57:c5:9c:72:85:08: 6c:ab:aa:2c:2d:fe:3f:b2:68:aa:61:a2:23:33:82:ff:34:c8: 10:03:76:42:71:8b:ae:29:15:4b:f5:04:2a:17:55:f8:93:14: 15:c6:e8:fb:b9:12:c5:4f:54:73:16:ba:28:71:fc:53:05:13: cd:ef:94:81:82:69:6a:16:0b:21:80:cf:71:e5:e2:c3:af:79: 5b:82:7f:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nk1YRgn6h8fLkbNh/N1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx NTQ0NGQwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDY3NmIxOTRjZGNkZjU1NGQxMjA1ZjcyMTJhMDlmZTZlNjZjODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wHM1dyKZn2LJGYnDtvxTswRxXJ4 xE9cJ0JSBhk0LlN/D/BpRbSu9qZjmE/4raLkQ0Q3yjXUJ86OztvVsr4qcLOtreZU UAyiO6/Dmihnitz0mC8xSf0fnnpVzh64JFKvnjBlZw1W90hEXKI5klpiCQf+ho8I 0nsFo6zDkhS/vACYxs986VEGc3YgUPplabKlOhfLxJFeeRL/DplF/42QwknC/+DF 38479xNN7IjST3HTtQEazAWE13HymLLIBB2MgjbjXuRWgO3bQGIp+72yjxgH4+WU wyjl5S2zYgK/QlZ/JSqgzMUWNM6FT51VfoSxDILjA6yFinMTE/ZV08chOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNBnaxlM3N9VTRIF9yEqCf5uZsh5MB8GA1UdIwQY MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt ZjBkMmI5NDNjYjUzLzEvMEdkckdVemMzMVZORWdYM0lTb0pfbTVteUhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRsAAwQA wd6AMA0GCSqGSIb3DQEBCwUAA4IBAQA3PKgvbMx9F8NBvk2CHkOGcffjtFU2O0Uo AGbeMIeO33m1P29qw9nsE90iQDMwfdgOMTNam1ys2XwHYFyFSywC2PJHHtWp8kgq 9bOPcnvZJJ7Hkjo9LHvQhaDbgpylK/wxLATzJyGk5mm4egNGCFitXfRqcGV6d8Ck IK9/uNQmSM40EeCiB4BFFP8jQRupSd3JOnGqt4DBWQvvnWzOaQ81xA60yOWuzsV2 NisMDVZXxZxyhQhsq6osLf4/smiqYaIjM4L/NMgQA3ZCcYuuKRVL9QQqF1X4kxQV xuj7uRLFT1RzFroocfxTBRPN75SBgmlqFgshgM9x5eLDr3lbgn8r -----END CERTIFICATE-----Generated at Fri Jan 9 22:36:32 2026 by rpki-client