This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa File: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (raw, json) Hash identifier: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ= Subject key identifier: A7:10:FF:63:CF:31:AD:0B:E7:01:58:D2:46:D3:9A:D2:3B:2B:EC:E4 Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Certificate serial: 019B7BA43BA9EC5AF1630E5E38C6FFA3BBEE Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa Signing time: Thu 01 Jan 2026 22:18:39 +0000 ROA not before: Thu 01 Jan 2026 22:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 193.29.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3b:a9:ec:5a:f1:63:0e:5e:38:c6:ff:a3:bb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a710ff63cf31ad0be70158d246d39ad23b2bece4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:86:53:cb:fc:b0:ba:8b:c7:06:69:94:55:df: 3a:66:ea:a5:77:fd:f8:db:5d:9f:93:a0:ec:7f:e1: ae:b4:ad:be:bb:b7:41:06:61:1d:08:55:29:81:de: 88:b7:4b:7d:cc:2d:c7:66:52:de:46:a8:d2:a3:2a: 8b:48:54:2a:70:22:d6:aa:dc:3a:ff:5c:6f:f6:ef: 35:26:9d:d7:4b:d6:28:9f:53:5d:c3:00:f3:37:9b: d5:46:23:32:f0:03:16:ee:0e:43:52:39:25:15:c6: 20:cc:e7:47:0a:4c:2f:34:fc:6d:30:0c:21:7f:53: ae:83:a8:d1:91:ef:3b:c0:89:57:18:eb:71:bf:e9: b0:26:b9:f7:8e:79:ef:64:73:70:0b:f2:1c:72:7e: ea:cf:f3:72:ce:f6:01:d8:b7:7d:f5:29:a0:18:13: 16:20:20:35:29:a0:b7:2b:23:d0:9f:ce:6b:ab:2b: 9e:ce:2d:a2:6d:d0:f8:6f:e1:d2:8d:2b:84:9c:cc: ba:5e:09:a4:92:93:c8:19:f7:dc:ff:04:28:24:fa: a7:31:3b:2e:91:f3:a8:3d:30:7e:b7:61:b8:6b:3e: d3:c1:a6:78:5a:a2:03:f4:7c:d2:8f:2a:a2:a5:aa: aa:67:98:0f:04:09:09:ae:31:17:19:53:08:28:ad: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:10:FF:63:CF:31:AD:0B:E7:01:58:D2:46:D3:9A:D2:3B:2B:EC:E4 X509v3 Authority Key Identifier: keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.56.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:b2:88:31:1e:a1:87:c9:28:7a:20:03:dd:5d:9b:de:74:f0: ad:36:b1:01:67:79:7b:5a:2e:03:a4:d7:42:b3:e5:2b:75:18: ef:e4:68:6b:70:c9:10:74:cc:f7:b3:4c:bc:f1:c6:da:fa:a8: 07:31:ca:95:57:2a:dc:e0:fb:f7:9f:eb:a0:cc:25:f3:9a:ff: 5b:8c:a8:4c:a3:f0:4f:a6:92:8b:2e:6a:1a:6e:b7:1c:5f:12: 39:15:99:17:a2:d9:d9:27:98:65:f6:95:ff:df:86:c6:84:33: f3:9c:74:1e:75:ee:98:a1:2e:d6:14:14:dc:30:12:e4:d1:96: 0e:62:fa:03:09:69:f0:b2:8b:61:81:c3:d1:50:64:e1:a9:75: d1:88:6f:66:2a:e9:b0:a1:62:b2:22:5d:91:23:7f:28:2e:e6: 92:20:52:99:98:f1:53:f6:cb:ab:fb:31:4d:2c:2a:66:74:c1: c1:b2:65:66:f3:fe:84:5f:09:29:a9:ac:a2:73:17:1f:68:6f: 0b:fb:42:3c:ee:cb:52:2a:6f:6e:26:94:73:4a:11:39:75:79: 31:bf:87:2f:fd:f2:ad:23:cb:10:77:c6:5e:08:63:9d:60:a0: c9:e8:bd:26:ec:84:e1:be:b6:5f:67:52:29:70:5f:4d:19:6d: 93:ba:f1:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDup7FrxYw5eOMb/o7vuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm ODI2ZWYwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzEwZmY2M2NmMzFhZDBiZTcwMTU4ZDI0NmQzOWFkMjNiMmJlY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74ZTy/ywuovHBmmUVd86Zuqld/34 212fk6Dsf+GutK2+u7dBBmEdCFUpgd6It0t9zC3HZlLeRqjSoyqLSFQqcCLWqtw6 /1xv9u81Jp3XS9Yon1NdwwDzN5vVRiMy8AMW7g5DUjklFcYgzOdHCkwvNPxtMAwh f1Oug6jRke87wIlXGOtxv+mwJrn3jnnvZHNwC/Iccn7qz/NyzvYB2Ld99SmgGBMW ICA1KaC3KyPQn85rqyuezi2ibdD4b+HSjSuEnMy6XgmkkpPIGffc/wQoJPqnMTsu kfOoPTB+t2G4az7TwaZ4WqID9HzSjyqipaqqZ5gPBAkJrjEXGVMIKK1kMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcQ/2PPMa0L5wFY0kbTmtI7K+zkMB8GA1UdIwQY MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt NmZjNWZjYTA5NjI5LzEvcHhEX1k4OHhyUXZuQVZqU1J0T2EwanNyN09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5 LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwR04MA0G CSqGSIb3DQEBCwUAA4IBAQAtsogxHqGHySh6IAPdXZvedPCtNrEBZ3l7Wi4DpNdC s+UrdRjv5GhrcMkQdMz3s0y88cba+qgHMcqVVyrc4Pv3n+ugzCXzmv9bjKhMo/BP ppKLLmoabrccXxI5FZkXotnZJ5hl9pX/34bGhDPznHQede6YoS7WFBTcMBLk0ZYO YvoDCWnwsothgcPRUGThqXXRiG9mKumwoWKyIl2RI38oLuaSIFKZmPFT9sur+zFN LCpmdMHBsmVm8/6EXwkpqayicxcfaG8L+0I87stSKm9uJpRzShE5dXkxv4cv/fKt I8sQd8ZeCGOdYKDJ6L0m7IThvrZfZ1IpcF9NGW2TuvGg -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:06 2026 by rpki-client