This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/i5c6APAQbgFsu6nm48O6UWVFYT4.roa File: i5c6APAQbgFsu6nm48O6UWVFYT4.roa (raw, json) Hash identifier: ZAolUlxg2dnxY02aKMKDXlvl6R7q63Rjwyr4KEJt+D8= Subject key identifier: 8B:97:3A:00:F0:10:6E:01:6C:BB:A9:E6:E3:C3:BA:51:65:45:61:3E Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Certificate serial: 019B30446E61EE3ACCC8C77F783BC5C94215 Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/i5c6APAQbgFsu6nm48O6UWVFYT4.roa Signing time: Thu 18 Dec 2025 07:02:29 +0000 ROA not before: Thu 18 Dec 2025 07:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 193.104.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:44:6e:61:ee:3a:cc:c8:c7:7f:78:3b:c5:c9:42:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96 Validity Not Before: Dec 18 07:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b973a00f0106e016cbba9e6e3c3ba516545613e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ce:f7:ca:bf:b8:e1:58:79:e8:4f:c7:e9:29: 91:76:24:49:f3:57:57:62:3d:60:bb:0d:30:f3:0b: a8:f1:fb:d7:50:d4:0e:68:64:57:b6:d6:e8:83:ea: fe:98:52:2d:0f:8a:6b:45:40:03:12:09:0e:31:61: af:f7:6f:15:82:b5:04:5a:ba:77:7a:62:88:fe:19: a7:d9:a3:ca:6a:49:45:3b:f6:20:28:0a:fd:0c:f1: 14:07:e2:d5:0e:42:73:53:9f:0d:3b:fb:88:37:82: 39:28:b7:8a:b7:ce:35:9b:1e:43:c8:dc:4a:0c:54: 0a:50:d6:8b:ef:15:66:4d:20:55:ab:1e:71:4b:a2: 3e:99:ea:19:f8:f7:a5:04:71:3e:07:34:32:dd:f5: bf:16:4a:29:dc:52:66:d4:02:2f:f2:75:3a:f5:af: 4f:55:34:de:d7:00:5f:ed:50:e0:46:9b:61:9f:65: 85:d3:14:a3:90:d3:b4:74:e7:ef:0f:3a:0e:55:ac: ff:ce:e2:fc:c9:25:aa:c7:8e:1f:cf:c6:94:81:8c: 9a:32:f0:ff:6e:f9:f5:d1:61:80:15:cd:be:82:51: 42:89:8e:db:07:3c:92:39:82:9d:92:55:ed:04:0b: dc:27:85:28:c5:51:80:de:4f:95:a1:cc:7e:97:67: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:97:3A:00:F0:10:6E:01:6C:BB:A9:E6:E3:C3:BA:51:65:45:61:3E X509v3 Authority Key Identifier: keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/i5c6APAQbgFsu6nm48O6UWVFYT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.33.0/24 Signature Algorithm: sha256WithRSAEncryption 50:13:36:fa:ba:c0:d6:f6:d1:46:43:d1:2a:d0:db:6c:d2:9f: 74:e5:08:be:8f:f6:5f:5d:0e:93:f2:c4:30:c1:c1:5b:53:b7: 1c:0d:a5:bb:f7:3c:91:08:50:2b:4a:10:92:e4:83:f3:ae:3b: cf:14:68:59:ee:80:83:05:a6:76:ad:30:e6:b1:62:f9:71:88: 33:f9:9c:76:49:01:94:5a:52:d3:77:16:e1:9a:55:50:ab:6e: fe:8f:ee:93:a2:69:02:15:b4:40:02:95:cc:63:96:e5:f0:8a: 83:04:80:61:10:a1:38:f5:43:fc:95:f9:a1:08:6c:d1:cb:47: fb:88:de:4c:c4:4a:f8:13:8d:67:21:a0:e3:be:13:f8:cb:75: 0c:bb:cc:3b:ce:40:f4:85:d6:e5:c6:25:43:d9:17:26:ca:a2: f0:17:7c:e7:f3:95:ba:7e:cd:ff:ea:7e:2c:a1:66:94:d6:96: 0f:34:a4:f1:91:36:40:b5:ae:d2:ef:b1:84:7b:9f:0e:3c:00: 5b:70:5c:d9:6a:e2:b8:c0:f9:1a:70:7c:f5:91:e7:be:68:0c: ea:c1:52:75:36:fb:b2:27:c8:3f:25:70:7f:76:64:f0:24:d3: ec:d9:71:a0:f8:bf:b5:7c:a5:c6:ec:08:98:8b:47:fa:d0:8a: 7e:f6:92:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZswRG5h7jrMyMd/eDvFyUIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm MDJkOTYwHhcNMjUxMjE4MDcwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjk3M2EwMGYwMTA2ZTAxNmNiYmE5ZTZlM2MzYmE1MTY1NDU2MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4873yr+44Vh56E/H6SmRdiRJ81dX Yj1guw0w8wuo8fvXUNQOaGRXttbog+r+mFItD4prRUADEgkOMWGv928VgrUEWrp3 emKI/hmn2aPKaklFO/YgKAr9DPEUB+LVDkJzU58NO/uIN4I5KLeKt841mx5DyNxK DFQKUNaL7xVmTSBVqx5xS6I+meoZ+PelBHE+BzQy3fW/Fkop3FJm1AIv8nU69a9P VTTe1wBf7VDgRpthn2WF0xSjkNO0dOfvDzoOVaz/zuL8ySWqx44fz8aUgYyaMvD/ bvn10WGAFc2+glFCiY7bBzySOYKdklXtBAvcJ4UoxVGA3k+Vocx+l2diFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIuXOgDwEG4BbLup5uPDulFlRWE+MB8GA1UdIwQY MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt MzViZmY5NmRhNGM1LzEvaTVjNkFQQVFiZ0ZzdTZubTQ4TzZVV1ZGWVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1 LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWghMA0G CSqGSIb3DQEBCwUAA4IBAQBQEzb6usDW9tFGQ9Eq0Nts0p905Qi+j/ZfXQ6T8sQw wcFbU7ccDaW79zyRCFArShCS5IPzrjvPFGhZ7oCDBaZ2rTDmsWL5cYgz+Zx2SQGU WlLTdxbhmlVQq27+j+6TomkCFbRAApXMY5bl8IqDBIBhEKE49UP8lfmhCGzRy0f7 iN5MxEr4E41nIaDjvhP4y3UMu8w7zkD0hdblxiVD2RcmyqLwF3zn85W6fs3/6n4s oWaU1pYPNKTxkTZAta7S77GEe58OPABbcFzZauK4wPkacHz1kee+aAzqwVJ1Nvuy J8g/JXB/dmTwJNPs2XGg+L+1fKXG7AiYi0f60Ip+9pL6 -----END CERTIFICATE-----Generated at Fri Dec 19 09:25:22 2025 by rpki-client