This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/aNkPm_ezm0ctJK7MUUoxpovWRR4.roa File: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (raw, json) Hash identifier: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI= Subject key identifier: 68:D9:0F:9B:F7:B3:9B:47:2D:24:AE:CC:51:4A:31:A6:8B:D6:45:1E Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486 Certificate serial: 019B7A5A9496F4F346B1760B5C6E9274A469 Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/aNkPm_ezm0ctJK7MUUoxpovWRR4.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204599 IP address blocks: 193.105.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:94:96:f4:f3:46:b1:76:0b:5c:6e:92:74:a4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68d90f9bf7b39b472d24aecc514a31a68bd6451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:c8:94:43:c6:01:e8:4b:1a:27:71:70:2d: 75:6f:e5:7b:90:1b:8b:37:b4:f1:11:35:59:a3:ef: ed:00:df:82:33:32:94:54:38:66:99:72:a4:f3:bc: 8c:cf:74:dd:22:2e:20:87:e8:df:0e:49:55:80:9a: 89:82:70:ef:35:02:8d:91:40:6c:f6:71:4a:43:c2: 36:7f:09:e8:b3:ff:8f:73:c2:49:81:6a:b7:bd:18: 3e:48:1c:54:2e:8a:eb:af:d8:ce:0d:13:47:a8:03: cd:8b:78:38:02:6b:03:45:11:6c:37:e0:7d:c5:0f: a6:cc:d8:fd:60:7e:04:58:72:e3:8e:e9:2a:af:9a: 0c:56:64:0f:21:ae:d8:86:21:dc:b5:26:11:97:a2: 43:18:1f:9e:6a:ea:e5:8c:82:19:1d:19:00:e4:41: 38:96:22:39:7a:a7:f0:91:a8:e8:c3:d9:ce:7a:2a: 81:91:c1:c5:d5:2c:c1:ce:48:c4:68:55:40:ce:69: 53:0d:45:00:38:6d:9f:20:56:66:02:3b:b0:0b:02: 66:42:4b:3f:55:92:3b:ec:e8:c7:c5:0c:91:4f:c7: f8:c6:b2:89:74:b0:a2:c3:be:b0:83:75:cf:15:7d: c7:91:ac:b5:80:26:89:70:20:38:5d:e9:cc:15:7a: bf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D9:0F:9B:F7:B3:9B:47:2D:24:AE:CC:51:4A:31:A6:8B:D6:45:1E X509v3 Authority Key Identifier: keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/aNkPm_ezm0ctJK7MUUoxpovWRR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.18.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5a:b6:23:ea:e4:64:84:ef:51:30:fc:82:a1:49:a0:33:de: bf:ca:3c:79:b6:aa:a6:6b:b6:ee:a2:64:e5:23:5f:92:fa:6a: 89:ab:74:cc:b8:25:76:c6:6a:51:ac:61:85:9a:f7:e3:1f:7a: 6c:a9:43:e7:8c:6f:ca:aa:bf:c4:8f:65:c0:8b:3b:cb:50:21: 65:cc:b5:95:54:ac:6a:c5:97:38:45:3c:82:81:39:1b:51:5d: 28:cc:a9:1f:5f:4b:18:a0:13:8e:88:30:c0:8f:60:21:d9:ff: db:5d:e9:5f:95:0f:be:69:42:fb:89:f1:18:3c:14:24:f2:ae: 72:77:ff:d2:52:9c:58:3e:15:c8:ca:26:8e:db:84:90:8e:0e: ee:5f:ef:d8:e7:d5:1a:80:07:11:a4:77:92:20:74:0c:fb:86: cd:02:c5:98:74:da:60:91:ce:e6:46:90:db:78:3d:22:4d:5f: 2d:d7:1b:d1:fc:ac:2d:17:86:2e:9b:b9:d5:c6:1d:42:a0:dd: 36:de:78:54:46:b9:31:ef:46:c5:94:cd:65:ca:a0:b5:ae:4f: 8e:f1:ae:72:e9:93:6d:c6:2f:64:6b:e8:65:a6:17:5f:5c:2b: 49:8d:04:49:dc:90:96:c4:e8:19:f2:8d:e7:66:e4:78:5c:0e: a9:a1:6a:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WpSW9PNGsXYLXG6SdKRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNDA5MDlhZWMzMjBhOGMyZWUxY2FiY2UxMzAyY2JiN2Q0 ZTA0ODYwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGQ5MGY5YmY3YjM5YjQ3MmQyNGFlY2M1MTRhMzFhNjhiZDY0NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbXIlEPGAehLGidxcC11b+V7kBuL N7TxETVZo+/tAN+CMzKUVDhmmXKk87yMz3TdIi4gh+jfDklVgJqJgnDvNQKNkUBs 9nFKQ8I2fwnos/+Pc8JJgWq3vRg+SBxULorrr9jODRNHqAPNi3g4AmsDRRFsN+B9 xQ+mzNj9YH4EWHLjjukqr5oMVmQPIa7YhiHctSYRl6JDGB+eaurljIIZHRkA5EE4 liI5eqfwkajow9nOeiqBkcHF1SzBzkjEaFVAzmlTDUUAOG2fIFZmAjuwCwJmQks/ VZI77OjHxQyRT8f4xrKJdLCiw76wg3XPFX3Hkay1gCaJcCA4XenMFXq/1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjZD5v3s5tHLSSuzFFKMaaL1kUeMB8GA1UdIwQY MBaAFMNAkJrsMgqMLuHKvOEwLLt9TgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYt YmNhMGE4ZjJmNzhjLzEvYU5rUG1fZXptMGN0Sks3TVVVb3hwb3ZXUlI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYtYmNhMGE4ZjJmNzhj LzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkSMA0G CSqGSIb3DQEBCwUAA4IBAQAcWrYj6uRkhO9RMPyCoUmgM96/yjx5tqqma7buomTl I1+S+mqJq3TMuCV2xmpRrGGFmvfjH3psqUPnjG/Kqr/Ej2XAizvLUCFlzLWVVKxq xZc4RTyCgTkbUV0ozKkfX0sYoBOOiDDAj2Ah2f/bXelflQ++aUL7ifEYPBQk8q5y d//SUpxYPhXIyiaO24SQjg7uX+/Y59UagAcRpHeSIHQM+4bNAsWYdNpgkc7mRpDb eD0iTV8t1xvR/KwtF4Yum7nVxh1CoN023nhURrkx70bFlM1lyqC1rk+O8a5y6ZNt xi9ka+hlphdfXCtJjQRJ3JCWxOgZ8o3nZuR4XA6poWoH -----END CERTIFICATE-----Generated at Wed Jan 21 14:51:24 2026 by rpki-client