This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/1cYADgyS9xUjbMqbTO8dbbS_ut0.roa File: 1cYADgyS9xUjbMqbTO8dbbS_ut0.roa (raw, json) Hash identifier: sfBNeCmh7Arfh1u7KBOZ5cOLU6qwGNu6Ll6DwZYAXsQ= Subject key identifier: D5:C6:00:0E:0C:92:F7:15:23:6C:CA:9B:4C:EF:1D:6D:B4:BF:BA:DD Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce Certificate serial: 019B7A5B1E8CCD29630049C65ECDE86CB436 Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/1cYADgyS9xUjbMqbTO8dbbS_ut0.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210755 IP address blocks: 193.200.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1e:8c:cd:29:63:00:49:c6:5e:cd:e8:6c:b4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c6000e0c92f715236cca9b4cef1d6db4bfbadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:fd:61:58:25:b7:06:6c:40:4d:d3:57:97: 42:49:bf:cd:3b:0a:01:86:65:91:29:03:1f:3a:6b: e8:50:34:c6:29:0b:73:f6:9a:c6:f5:c2:3e:42:8e: 6d:b1:d6:8f:25:b4:53:7a:c9:74:21:8f:84:b1:05: e8:f3:cb:a1:3d:83:e4:40:15:ce:88:57:a8:86:36: 99:d5:c1:68:8f:a9:1d:5e:25:a9:4e:63:c1:6a:24: d2:42:96:87:cc:63:c7:cc:27:69:47:bb:93:f3:2c: 98:a1:27:34:0d:e8:76:28:87:74:82:65:5d:c6:c8: 05:30:62:18:1f:44:55:47:88:d0:c3:ba:e1:f6:fb: 6e:01:69:6a:27:c7:1b:66:cb:13:05:e8:ba:20:0b: 87:6c:f2:10:6a:8b:06:fe:15:ad:fd:5e:44:e9:36: 3b:68:14:26:31:f0:a5:8a:71:df:26:f6:fe:6f:c4: 8d:0d:a8:aa:bd:39:2b:7b:0c:6d:d0:99:ba:66:2a: d5:28:77:34:17:3c:29:39:b5:dc:49:58:ab:2e:d2: 29:dd:8e:9c:12:44:4d:03:f5:bd:11:13:4c:94:d2: 44:fb:37:60:96:32:1e:f0:bc:74:e6:77:ce:0b:8a: 7a:c7:3c:dc:66:b3:92:d4:73:0e:60:66:4e:f9:ba: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C6:00:0E:0C:92:F7:15:23:6C:CA:9B:4C:EF:1D:6D:B4:BF:BA:DD X509v3 Authority Key Identifier: keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/1cYADgyS9xUjbMqbTO8dbbS_ut0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.32.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e3:11:08:8a:b9:d8:de:b9:3f:50:95:84:21:d7:db:ee:af: 5b:95:41:de:85:c2:30:3e:28:90:71:77:2b:d4:2f:c8:42:ce: 87:be:f3:05:80:dc:bb:fd:8e:be:30:e3:5c:2c:de:f1:1a:da: 76:fe:d3:cc:54:b6:34:7d:8a:25:e0:ff:2a:cb:4e:7b:06:65: 37:29:d3:14:ce:14:cd:2c:63:f1:42:23:b0:dc:ec:de:70:c9: 06:93:c5:84:f4:29:aa:84:00:1e:01:6e:b1:8b:64:a2:04:c7: 13:3a:e0:ef:cd:d1:22:ea:70:9a:d8:57:3d:d4:a9:6e:da:ee: a0:4e:47:f4:23:37:56:20:54:ed:ad:1e:26:21:1f:92:a0:6e: c4:08:a0:6b:90:aa:fc:5d:e1:81:d6:33:f7:0a:d4:35:64:5b: 0b:e5:86:d4:b8:e5:48:a2:e4:04:d8:fd:2e:d1:30:2b:68:38: ed:78:db:c5:ea:8f:34:8d:13:e1:5b:51:85:5e:b1:a4:88:44: 2d:64:0e:0f:d5:4d:89:8a:61:ae:ea:c0:56:0c:36:41:e5:1d: 3f:3e:59:00:66:d2:59:50:04:be:37:a2:c9:5a:4c:88:60:3b: fa:3c:3f:8e:01:30:99:35:60:75:11:c9:a7:db:49:79:d6:ec: 68:4b:2a:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wx6MzSljAEnGXs3obLQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzQ5NzIwMDQwMGIwZjFhYWU3YTg3ZmNhMzZmMDc3ZTBl ZDYyY2UwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWM2MDAwZTBjOTJmNzE1MjM2Y2NhOWI0Y2VmMWQ2ZGI0YmZiYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/r9YVgltwZsQE3TV5dCSb/NOwoB hmWRKQMfOmvoUDTGKQtz9prG9cI+Qo5tsdaPJbRTesl0IY+EsQXo88uhPYPkQBXO iFeohjaZ1cFoj6kdXiWpTmPBaiTSQpaHzGPHzCdpR7uT8yyYoSc0Deh2KId0gmVd xsgFMGIYH0RVR4jQw7rh9vtuAWlqJ8cbZssTBei6IAuHbPIQaosG/hWt/V5E6TY7 aBQmMfClinHfJvb+b8SNDaiqvTkrewxt0Jm6ZirVKHc0FzwpObXcSVirLtIp3Y6c EkRNA/W9ERNMlNJE+zdgljIe8Lx05nfOC4p6xzzcZrOS1HMOYGZO+bo3mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXGAA4MkvcVI2zKm0zvHW20v7rdMB8GA1UdIwQY MBaAFDY0lyAEALDxqueof8o28Hfg7WLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEt MTlhMTk5OWQ5ZDdlLzEvMWNZQURneVM5eFVqYk1xYlRPOGRiYlNfdXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEtMTlhMTk5OWQ5ZDdl LzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcggMA0G CSqGSIb3DQEBCwUAA4IBAQAi4xEIirnY3rk/UJWEIdfb7q9blUHehcIwPiiQcXcr 1C/IQs6HvvMFgNy7/Y6+MONcLN7xGtp2/tPMVLY0fYol4P8qy057BmU3KdMUzhTN LGPxQiOw3OzecMkGk8WE9CmqhAAeAW6xi2SiBMcTOuDvzdEi6nCa2Fc91Klu2u6g Tkf0IzdWIFTtrR4mIR+SoG7ECKBrkKr8XeGB1jP3CtQ1ZFsL5YbUuOVIouQE2P0u 0TAraDjteNvF6o80jRPhW1GFXrGkiEQtZA4P1U2JimGu6sBWDDZB5R0/PlkAZtJZ UAS+N6LJWkyIYDv6PD+OATCZNWB1Ecmn20l51uxoSyrA -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:25 2026 by rpki-client