This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/SR83T9ubBhWNaQBPuUQwG8MKuEo.roa File: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (raw, json) Hash identifier: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I= Subject key identifier: 49:1F:37:4F:DB:9B:06:15:8D:69:00:4F:B9:44:30:1B:C3:0A:B8:4A Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B8B41181920A126B741A84D0679DAE11D Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/SR83T9ubBhWNaQBPuUQwG8MKuEo.roa Signing time: Sun 04 Jan 2026 23:04:17 +0000 ROA not before: Sun 04 Jan 2026 23:04:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35478 IP address blocks: 193.47.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:41:18:19:20:a1:26:b7:41:a8:4d:06:79:da:e1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 4 23:04:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491f374fdb9b06158d69004fb944301bc30ab84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:cc:ce:b2:5c:94:c9:38:f2:d2:9f:fe:cb: 81:d1:01:2f:6d:5e:32:7f:b2:a9:6a:58:29:82:48: 98:10:e8:23:33:84:86:8b:94:30:f3:e7:79:15:6f: ee:b6:87:a5:52:ca:6d:da:f7:e9:3c:94:f8:44:a1: 0f:53:db:c6:2c:d6:6e:46:99:a4:b7:cc:cd:a0:7d: e6:e4:f7:ab:be:2f:ab:94:c7:99:49:62:e9:82:95: 2b:cf:c0:66:ca:3c:b0:49:e5:7b:f3:33:8f:6d:aa: 03:16:33:4f:d0:e8:66:84:09:ab:1d:55:6d:6c:34: 7f:78:2f:44:58:61:7c:49:6f:eb:1e:98:31:a2:5b: f9:1c:5d:59:79:40:de:0f:5a:60:f9:93:1a:a2:43: e1:30:7f:4c:fa:f7:c8:d9:85:69:2a:40:6a:c2:61: 7d:c5:42:7f:b6:d5:5a:f3:f6:5c:33:2b:72:7b:2a: 06:88:9e:c9:fc:55:9e:54:56:ac:fe:87:92:c2:b0: 19:06:33:23:6c:09:b7:43:6a:82:3e:87:7e:e8:4a: 8e:e6:bc:c7:ce:4d:e9:e7:f3:60:2c:37:77:44:49: 60:c2:13:47:13:4a:11:79:be:27:47:d1:0f:e8:ee: 51:f7:25:fe:7c:36:c6:2c:b5:bb:75:c2:41:c7:05: 11:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:37:4F:DB:9B:06:15:8D:69:00:4F:B9:44:30:1B:C3:0A:B8:4A X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/SR83T9ubBhWNaQBPuUQwG8MKuEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:6a:69:e1:d6:88:44:f2:7a:9a:f2:93:7c:d7:69:d1:9b:22: 80:3b:ac:7d:96:8e:d4:22:c6:54:3a:ab:8a:e1:89:09:4f:fa: ea:fe:31:cb:03:30:cc:7e:eb:53:22:b2:45:a7:52:a0:e0:91: bd:09:f3:45:ed:be:e7:ac:fb:99:30:70:7c:57:8d:2d:3b:a0: 81:a6:13:fb:58:76:74:29:7e:e4:c0:65:12:03:b3:a7:3f:de: 62:93:3b:45:4c:61:a1:59:b5:72:76:ac:03:67:9e:90:c9:82: 74:dc:ac:e0:70:9a:9c:e7:70:67:62:3d:c5:94:6b:e0:fa:06: 56:d4:98:38:a3:e3:f4:1f:2a:b4:64:0d:e2:6c:ba:1b:6d:3d: d4:18:e3:8c:4a:79:29:8c:57:5b:1c:4d:e1:05:32:ee:ec:09: ea:ef:76:16:c5:51:47:01:fd:5b:f3:e7:bd:80:b0:5b:8f:7f: ce:ea:15:21:2d:5d:9f:36:c9:af:84:ff:e2:53:5b:10:57:d6: 71:61:61:a9:4a:09:2b:b4:ec:7a:3c:5c:39:bb:c3:d5:bc:dd: ac:02:9e:e4:5e:12:5d:c0:03:99:76:b7:9a:8c:99:4f:ac:55: 4f:59:67:cd:24:d6:f4:58:71:16:b2:ca:37:2c:a3:1c:a6:32: 20:8c:c9:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuLQRgZIKEmt0GoTQZ52uEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTA0MjMwNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFmMzc0ZmRiOWIwNjE1OGQ2OTAwNGZiOTQ0MzAxYmMzMGFiODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4LMzrJclMk48tKf/suB0QEvbV4y f7KpalgpgkiYEOgjM4SGi5Qw8+d5FW/utoelUspt2vfpPJT4RKEPU9vGLNZuRpmk t8zNoH3m5Pervi+rlMeZSWLpgpUrz8BmyjywSeV78zOPbaoDFjNP0OhmhAmrHVVt bDR/eC9EWGF8SW/rHpgxolv5HF1ZeUDeD1pg+ZMaokPhMH9M+vfI2YVpKkBqwmF9 xUJ/ttVa8/ZcMytyeyoGiJ7J/FWeVFas/oeSwrAZBjMjbAm3Q2qCPod+6EqO5rzH zk3p5/NgLDd3RElgwhNHE0oReb4nR9EP6O5R9yX+fDbGLLW7dcJBxwUR3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkfN0/bmwYVjWkAT7lEMBvDCrhKMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvU1I4M1Q5dWJCaFdOYVFCUHVVUXdHOE1LdUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS9EMA0G CSqGSIb3DQEBCwUAA4IBAQBcamnh1ohE8nqa8pN812nRmyKAO6x9lo7UIsZUOquK 4YkJT/rq/jHLAzDMfutTIrJFp1Kg4JG9CfNF7b7nrPuZMHB8V40tO6CBphP7WHZ0 KX7kwGUSA7OnP95ikztFTGGhWbVydqwDZ56QyYJ03KzgcJqc53BnYj3FlGvg+gZW 1Jg4o+P0Hyq0ZA3ibLobbT3UGOOMSnkpjFdbHE3hBTLu7Anq73YWxVFHAf1b8+e9 gLBbj3/O6hUhLV2fNsmvhP/iU1sQV9ZxYWGpSgkrtOx6PFw5u8PVvN2sAp7kXhJd wAOZdreajJlPrFVPWWfNJNb0WHEWsso3LKMcpjIgjMmc -----END CERTIFICATE-----Generated at Wed Jan 21 16:11:44 2026 by rpki-client