This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa File: csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa (raw, json) Hash identifier: 5QfFyBjLv9B3y4ndXnMzTJt//5iA5RA3jDs8H4cBXBI= Subject key identifier: 72:CC:9A:0E:9C:69:FA:A6:84:9F:F9:7D:AD:52:00:19:F2:86:D0:5B Certificate issuer: /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Certificate serial: 019B7EA7228A40AC7FD62CF99BEA7DAEE388 Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 193.56.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:22:8a:40:ac:7f:d6:2c:f9:9b:ea:7d:ae:e3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72cc9a0e9c69faa6849ff97dad520019f286d05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:7f:2f:71:a2:93:9e:4b:c5:70:a1:ca:f2: 74:dd:64:68:78:66:7f:5d:bc:b1:45:ed:a1:05:61: cd:f3:81:f8:70:03:c9:91:94:35:29:e8:f2:40:bb: e3:30:63:51:ab:7c:e3:5b:e0:0f:af:ca:99:06:e0: e1:02:98:e0:1d:5c:be:76:92:be:20:8d:e5:3c:9c: 27:bc:1e:0c:d4:b0:b0:19:c0:51:33:b6:d4:da:58: a2:9d:df:f8:38:d8:78:12:e9:74:28:f6:30:38:cd: ca:fc:99:7b:3d:e8:8e:6e:01:8a:09:76:37:7d:36: 70:49:a5:e1:d2:4c:52:5a:c7:d8:b2:21:9d:e4:67: 66:55:4d:9b:38:f2:a5:40:59:83:ee:67:80:b5:fa: 24:01:0b:9e:23:75:5e:fd:6c:c3:e1:5d:91:15:47: 57:82:3d:8c:76:24:28:02:aa:de:03:ce:a4:09:72: 99:da:bf:b0:b1:2c:ab:fa:2a:31:8e:ad:d5:48:69: 65:9b:50:e1:ac:15:2d:35:a6:f7:22:f9:4c:16:6f: 2e:61:86:bb:0c:21:02:74:6f:03:fd:97:9c:2c:f5: 1e:4f:0b:f2:3b:e9:74:58:e0:6e:88:f9:72:2a:47: 22:14:76:77:bc:04:cf:b1:4f:1c:78:55:7b:99:a7: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CC:9A:0E:9C:69:FA:A6:84:9F:F9:7D:AD:52:00:19:F2:86:D0:5B X509v3 Authority Key Identifier: keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.33.0/24 Signature Algorithm: sha256WithRSAEncryption b5:9f:13:46:43:71:9f:e1:18:9a:f1:62:6e:e3:08:d6:76:83: f7:be:f0:f0:0c:11:d7:ce:86:f7:89:8b:4b:a4:2b:86:35:ca: 7a:56:96:cb:ab:ce:40:18:32:84:f0:71:83:26:a1:7a:00:7a: eb:c8:c2:75:3b:86:61:3f:60:29:0a:c1:88:4e:9e:ef:c0:c7: 20:ed:a5:27:28:73:36:30:0c:3d:56:86:a4:bf:a2:cf:0a:59: 2f:6e:43:6c:b0:6b:4c:b9:27:68:14:d9:d5:b0:07:b2:52:ac: a8:70:67:c9:c4:2b:20:59:69:58:4f:a6:8f:f5:dd:fc:9f:a1: 42:b7:9b:63:e8:2c:09:4c:41:33:56:a3:c4:c4:ec:45:06:8a: 21:ea:c7:e8:fa:b8:24:c3:e1:a5:54:49:90:cc:d0:58:28:1b: d5:16:ee:0b:56:fa:f6:9c:d7:4a:36:23:ef:37:32:19:f1:50: 63:85:7f:4a:2a:6f:96:97:40:74:ac:a3:7b:b0:3a:06:2d:8c: a5:b6:dc:0f:dc:01:a6:ed:65:32:44:68:7d:d1:89:5a:57:01: 41:f5:e3:08:99:8e:31:7e:b6:36:45:85:3e:c6:60:6d:6d:c2: 0f:04:46:85:4e:5f:14:8b:4a:51:1d:dd:29:e4:13:ed:d6:b7: e5:39:d7:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyKKQKx/1iz5m+p9ruOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzQ4ZjdhNTkxMjA1ODhkNDE3MGVhMjgxNWU2YWU1MWJl NmJjZmYwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmNjOWEwZTljNjlmYWE2ODQ5ZmY5N2RhZDUyMDAxOWYyODZkMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+x/L3Gik55LxXChyvJ03WRoeGZ/ XbyxRe2hBWHN84H4cAPJkZQ1KejyQLvjMGNRq3zjW+APr8qZBuDhApjgHVy+dpK+ II3lPJwnvB4M1LCwGcBRM7bU2liind/4ONh4Eul0KPYwOM3K/Jl7PeiObgGKCXY3 fTZwSaXh0kxSWsfYsiGd5GdmVU2bOPKlQFmD7meAtfokAQueI3Ve/WzD4V2RFUdX gj2MdiQoAqreA86kCXKZ2r+wsSyr+ioxjq3VSGllm1DhrBUtNab3IvlMFm8uYYa7 DCECdG8D/ZecLPUeTwvyO+l0WOBuiPlyKkciFHZ3vATPsU8ceFV7mace/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLMmg6cafqmhJ/5fa1SABnyhtBbMB8GA1UdIwQY MBaAFKzEj3pZEgWI1BcOooFeauUb5rz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTIt YjUyYjNhMjM2ZmE3LzEvY3N5YURweHAtcWFFbl9sOXJWSUFHZktHMEZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTItYjUyYjNhMjM2ZmE3 LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTghMA0G CSqGSIb3DQEBCwUAA4IBAQC1nxNGQ3Gf4Ria8WJu4wjWdoP3vvDwDBHXzob3iYtL pCuGNcp6VpbLq85AGDKE8HGDJqF6AHrryMJ1O4ZhP2ApCsGITp7vwMcg7aUnKHM2 MAw9Voakv6LPClkvbkNssGtMuSdoFNnVsAeyUqyocGfJxCsgWWlYT6aP9d38n6FC t5tj6CwJTEEzVqPExOxFBooh6sfo+rgkw+GlVEmQzNBYKBvVFu4LVvr2nNdKNiPv NzIZ8VBjhX9KKm+Wl0B0rKN7sDoGLYylttwP3AGm7WUyRGh90YlaVwFB9eMImY4x frY2RYU+xmBtbcIPBEaFTl8Ui0pRHd0p5BPt1rflOddc -----END CERTIFICATE-----Generated at Wed Jan 21 14:31:03 2026 by rpki-client