This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa File: 1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa (raw, json) Hash identifier: Gm5FahEhYqsf3/1qvhcpLeaE1t89Xgh/p3OZKItZTUY= Subject key identifier: D6:4E:8D:C2:BC:C5:29:1A:3F:08:DF:5A:87:0E:BA:66:A6:81:F5:3E Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721 Certificate serial: 019B7AC83E4D31F43ECD66128CE53BA469D7 Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50423 IP address blocks: 193.105.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3e:4d:31:f4:3e:cd:66:12:8c:e5:3b:a4:69:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721 Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d64e8dc2bcc5291a3f08df5a870eba66a681f53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:87:8d:49:aa:e7:5f:21:13:b8:c6:bf:78: 56:ae:86:2a:3f:97:eb:2e:56:57:e5:b1:ae:20:96: 90:55:6f:5b:c7:36:d2:38:b2:9d:b6:59:bc:e5:a3: 03:4a:a9:26:c2:5a:84:fe:eb:dc:ef:d6:39:e9:52: 5a:8c:37:df:e7:20:33:02:d5:93:b0:6c:09:f0:08: d2:90:06:db:91:ac:c1:38:04:11:00:78:36:a6:9a: 65:45:6a:9c:ad:ca:7f:9b:c7:50:73:52:35:8d:da: b9:3e:38:e4:46:64:80:7e:fd:51:fd:8b:8c:c6:6a: 6e:5f:d1:2c:01:9f:42:79:1d:f8:f0:f6:7c:35:2b: 8f:93:d2:c1:51:a8:39:a8:f5:12:6d:81:b1:d4:ed: 5c:a0:99:c4:06:6f:13:0f:56:81:e3:11:76:e2:7c: 19:5d:71:ef:1a:fc:0d:d4:91:4b:77:74:13:3f:69: 72:bd:b5:b1:0c:d6:cc:c4:c5:55:aa:93:6f:f0:7b: ed:f5:84:c2:dd:c8:84:bd:40:b7:10:3b:74:d6:58: 79:0a:09:a8:43:fd:5b:3c:65:7e:aa:24:3a:ad:06: e0:1c:49:9e:47:4b:8c:ac:f7:88:12:2d:6f:58:ab: 2a:d8:6a:cb:68:cf:0a:11:c1:ab:37:e8:47:08:95: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4E:8D:C2:BC:C5:29:1A:3F:08:DF:5A:87:0E:BA:66:A6:81:F5:3E X509v3 Authority Key Identifier: keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/1k6NwrzFKRo_CN9ahw66ZqaB9T4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.20.0/24 Signature Algorithm: sha256WithRSAEncryption 72:8c:49:9c:d2:fb:aa:1b:78:80:a7:93:99:98:5d:a5:b8:c2: 94:61:2c:89:25:94:93:4d:15:5f:b9:70:20:2c:35:27:f9:22: 67:57:ad:8d:37:ee:d1:e2:3e:e8:cf:c9:e0:8f:ab:48:ac:f2: a3:c9:7f:20:50:b0:77:02:62:b9:ad:cf:71:2e:78:9a:1c:41: 79:0a:a7:15:fe:12:94:ef:59:81:e1:b0:a8:1a:af:46:6a:32: 5e:a5:9d:f6:79:78:51:d9:ec:e0:20:8f:28:b0:8d:74:10:a2: 75:bb:2b:0d:17:35:5c:7d:dd:a7:3c:14:67:71:a6:89:db:79: e5:4e:23:a8:f8:07:fb:0b:bf:0f:52:e0:7d:8a:47:77:20:30: 7f:e1:10:cb:f2:15:85:ab:8f:9b:91:b0:d5:f0:61:54:e3:f0: ce:2d:18:1c:e5:7e:b2:ea:cb:99:47:69:49:5f:8a:94:cf:2a: e1:0b:ed:ef:29:91:69:70:5d:22:ee:5d:6e:1c:ec:60:45:f2: 7d:ab:a5:12:e7:e6:9d:3c:ea:ca:e9:6a:41:ef:b4:44:84:52: cc:99:d3:ce:ec:91:dd:fb:a5:92:cd:27:99:18:3d:39:ff:0a: 48:13:74:be:89:de:fc:79:01:a9:f9:af:bf:0b:bb:f7:44:0e: 34:c5:a8:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yD5NMfQ+zWYSjOU7pGnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODJkZDViODZmOTU4ZDViZTczZmRiZTNmMGNjZjZkZmYw MmY3MjEwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjRlOGRjMmJjYzUyOTFhM2YwOGRmNWE4NzBlYmE2NmE2ODFmNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKyHjUmq518hE7jGv3hWroYqP5fr LlZX5bGuIJaQVW9bxzbSOLKdtlm85aMDSqkmwlqE/uvc79Y56VJajDff5yAzAtWT sGwJ8AjSkAbbkazBOAQRAHg2ppplRWqcrcp/m8dQc1I1jdq5PjjkRmSAfv1R/YuM xmpuX9EsAZ9CeR348PZ8NSuPk9LBUag5qPUSbYGx1O1coJnEBm8TD1aB4xF24nwZ XXHvGvwN1JFLd3QTP2lyvbWxDNbMxMVVqpNv8Hvt9YTC3ciEvUC3EDt01lh5Cgmo Q/1bPGV+qiQ6rQbgHEmeR0uMrPeIEi1vWKsq2GrLaM8KEcGrN+hHCJWODQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZOjcK8xSkaPwjfWocOumamgfU+MB8GA1UdIwQY MBaAFKCC3VuG+VjVvnP9vj8Mz23/AvchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYt ZjMwM2RlNGEyZDVlLzEvMWs2TndyekZLUm9fQ045YWh3NjZacWFCOVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83Mjc5ZDYtZjk1Mi00ZTM1LTk3OTYtZjMwM2RlNGEyZDVl LzEvb0lMZFc0YjVXTlctY18yLVB3elBiZjhDOXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkUMA0G CSqGSIb3DQEBCwUAA4IBAQByjEmc0vuqG3iAp5OZmF2luMKUYSyJJZSTTRVfuXAg LDUn+SJnV62NN+7R4j7oz8ngj6tIrPKjyX8gULB3AmK5rc9xLniaHEF5CqcV/hKU 71mB4bCoGq9GajJepZ32eXhR2ezgII8osI10EKJ1uysNFzVcfd2nPBRncaaJ23nl TiOo+Af7C78PUuB9ikd3IDB/4RDL8hWFq4+bkbDV8GFU4/DOLRgc5X6y6suZR2lJ X4qUzyrhC+3vKZFpcF0i7l1uHOxgRfJ9q6US5+adPOrK6WpB77REhFLMmdPO7JHd +6WSzSeZGD05/wpIE3S+id78eQGp+a+/C7v3RA40xais -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:03 2026 by rpki-client