This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0_sA20PwpvlNaZkMADnVSmGAkR8.roa File: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (raw, json) Hash identifier: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40= Subject key identifier: D3:FB:00:DB:43:F0:A6:F9:4D:69:99:0C:00:39:D5:4A:61:80:91:1F Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A9819E9226EBB697505EAF3C6FCD Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0_sA20PwpvlNaZkMADnVSmGAkR8.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211462 IP address blocks: 93.120.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a9:81:9e:92:26:eb:b6:97:50:5e:af:3c:6f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3fb00db43f0a6f94d69990c0039d54a6180911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:f3:ba:54:bf:6e:62:10:7c:80:3b:00:a4: 94:42:6a:1f:fe:62:bf:92:6c:3e:e0:25:15:73:9f: 83:99:e1:1a:cd:f2:90:08:34:2b:ab:39:b5:36:d9: 97:a2:a9:c0:44:76:05:cd:67:1a:82:c8:74:ac:17: d2:4e:ba:74:9e:63:ff:61:bd:73:cc:86:b0:fd:04: f3:b8:f9:81:ca:9f:a9:2d:6c:9b:31:0d:6a:be:c4: 78:73:20:05:09:b7:21:bf:96:b2:4d:52:dd:28:e5: 72:48:e4:15:a6:ca:66:d5:f5:f8:2a:68:9d:68:3c: 72:c0:42:22:f4:c2:58:29:08:2b:95:a2:41:06:90: 49:e1:70:68:8f:62:96:36:8a:e8:37:00:7d:0b:bf: 02:fa:4a:b5:45:69:a1:7f:ae:ae:0a:d8:14:3c:f5: 51:48:14:8d:62:3b:49:49:b1:ae:e8:c1:cb:87:55: a3:08:fa:01:a8:d9:ea:a9:fa:79:58:47:08:b5:05: 47:05:e9:c7:74:a6:87:5a:72:e8:e9:4e:aa:cd:b4: 9a:ab:eb:91:a6:78:a6:2e:f6:f1:d5:e2:78:14:09: 88:5a:2a:b1:12:ca:d8:23:02:9f:57:dd:d8:04:11: fc:6d:66:98:05:be:f5:fb:76:d3:d0:95:c8:64:7e: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FB:00:DB:43:F0:A6:F9:4D:69:99:0C:00:39:D5:4A:61:80:91:1F X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/0_sA20PwpvlNaZkMADnVSmGAkR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.120.84.0/24 Signature Algorithm: sha256WithRSAEncryption 06:83:eb:3b:35:45:eb:bc:3a:76:28:e1:af:0a:eb:56:86:45: 11:cd:0a:a3:03:5a:79:72:73:64:ad:22:31:12:ee:13:ca:ea: d0:97:b0:35:74:49:80:0b:15:d6:64:73:c1:08:97:96:e3:97: 35:2c:da:65:8e:91:f3:70:96:e2:3b:12:f6:43:d2:60:7e:62: 9d:5b:26:a4:8b:58:a0:6d:08:8c:e8:de:f2:c8:9e:c6:36:db: 48:f3:86:8c:85:05:44:79:ad:f2:54:e9:d5:59:9a:d4:03:29: 5a:e3:9f:d5:ca:1c:80:bd:79:8c:46:af:5a:55:2f:1b:79:55: be:c9:ed:d4:5e:41:c6:b6:44:4e:a6:04:64:39:5f:ec:12:c7: de:b4:ab:42:23:28:98:d3:b1:fb:1d:13:a7:bc:db:25:1f:b0: 23:6a:85:94:e4:e1:fc:51:f9:74:ff:e7:ff:3a:b5:34:ab:04: b4:a1:aa:28:fe:2b:39:cb:c5:18:26:af:84:10:ca:e7:40:b7: 91:9c:46:11:c1:83:d7:9f:63:6d:cc:c0:14:33:d2:00:74:39: 7d:37:cd:80:4a:5e:75:1b:cb:f0:e3:74:23:d0:de:ec:50:b8: 6b:e8:94:d1:30:c4:67:08:04:3e:32:b5:cf:8a:c8:5a:db:fd: af:77:aa:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6mBnpIm67aXUF6vPG/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2ZiMDBkYjQzZjBhNmY5NGQ2OTk5MGMwMDM5ZDU0YTYxODA5MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaLzulS/bmIQfIA7AKSUQmof/mK/ kmw+4CUVc5+DmeEazfKQCDQrqzm1NtmXoqnARHYFzWcagsh0rBfSTrp0nmP/Yb1z zIaw/QTzuPmByp+pLWybMQ1qvsR4cyAFCbchv5ayTVLdKOVySOQVpspm1fX4Kmid aDxywEIi9MJYKQgrlaJBBpBJ4XBoj2KWNoroNwB9C78C+kq1RWmhf66uCtgUPPVR SBSNYjtJSbGu6MHLh1WjCPoBqNnqqfp5WEcItQVHBenHdKaHWnLo6U6qzbSaq+uR pnimLvbx1eJ4FAmIWiqxEsrYIwKfV93YBBH8bWaYBb71+3bT0JXIZH6NaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNP7ANtD8Kb5TWmZDAA51UphgJEfMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvMF9zQTIwUHdwdmxOYVprTUFEblZTbUdBa1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXhUMA0G CSqGSIb3DQEBCwUAA4IBAQAGg+s7NUXrvDp2KOGvCutWhkURzQqjA1p5cnNkrSIx Eu4TyurQl7A1dEmACxXWZHPBCJeW45c1LNpljpHzcJbiOxL2Q9JgfmKdWyaki1ig bQiM6N7yyJ7GNttI84aMhQVEea3yVOnVWZrUAyla45/VyhyAvXmMRq9aVS8beVW+ ye3UXkHGtkROpgRkOV/sEsfetKtCIyiY07H7HROnvNslH7AjaoWU5OH8Ufl0/+f/ OrU0qwS0oaoo/is5y8UYJq+EEMrnQLeRnEYRwYPXn2NtzMAUM9IAdDl9N82ASl51 G8vw43Qj0N7sULhr6JTRMMRnCAQ+MrXPisha2/2vd6qO -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:39 2026 by rpki-client