This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/isbgVHj3TmGYN0uwFkd2CdHyHMU.roa File: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (raw, json) Hash identifier: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg= Subject key identifier: 8A:C6:E0:54:78:F7:4E:61:98:37:4B:B0:16:47:76:09:D1:F2:1C:C5 Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Certificate serial: 019B7D5CF55CA6173709DAFFE68380E508C8 Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/isbgVHj3TmGYN0uwFkd2CdHyHMU.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.164.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:5c:a6:17:37:09:da:ff:e6:83:80:e5:08:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac6e05478f74e6198374bb016477609d1f21cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:bd:60:05:3d:b9:b8:34:05:46:6d:bd:9f: d9:ca:a2:61:08:ee:f5:d5:60:67:77:06:0e:de:6e: a2:7c:a1:9f:9b:5d:fe:7b:ea:22:81:ab:07:f3:35: f0:c2:2d:35:d4:ef:d2:f2:b2:67:22:19:d9:a1:8d: 27:26:51:f9:34:81:cc:b4:0d:c8:32:bf:1d:d2:ee: 1f:e6:59:a2:30:2b:cc:34:33:71:0e:6e:d6:b7:d0: ba:d6:f4:35:82:23:4e:b9:56:29:ef:0b:cd:ab:b4: 81:cd:6a:d9:ea:d8:fb:b7:e0:23:37:38:66:d0:45: 76:1f:0a:d8:f8:c7:f3:b3:85:10:83:f3:99:f3:a1: 7c:ff:74:f7:df:0b:34:be:7e:7f:f7:ac:30:19:8e: ae:4f:7a:00:35:cd:5d:e4:5f:df:fa:99:74:d2:10: 4f:93:c2:4e:2e:a3:8d:a4:f5:03:c2:82:ff:dc:30: 8b:c2:96:3c:59:52:67:d7:90:8f:39:d2:20:06:24: b5:17:31:df:1b:1a:63:6e:e0:dc:6f:bb:85:46:43: 34:5f:aa:bd:83:d6:c4:71:c4:29:0c:56:00:48:fb: ad:5a:30:93:dd:5f:a8:4d:6a:fa:b8:da:cd:3a:8c: f9:55:6c:c1:21:3d:3a:01:d4:09:f9:a9:03:46:51: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C6:E0:54:78:F7:4E:61:98:37:4B:B0:16:47:76:09:D1:F2:1C:C5 X509v3 Authority Key Identifier: keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/isbgVHj3TmGYN0uwFkd2CdHyHMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.197.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c5:b2:aa:10:1d:34:54:47:99:18:38:e5:f8:28:ba:ce:66: 2a:8a:32:4e:8d:f6:88:25:61:cc:3e:60:e5:0a:7e:2b:b0:38: 5e:c2:a6:b3:6f:b3:3b:f5:be:b7:43:ac:20:4f:91:53:9c:85: 98:54:a6:d8:d1:f3:11:31:47:cb:86:3c:3f:71:bb:eb:71:bd: f6:bc:26:57:15:d5:c9:10:aa:0c:61:99:d3:c0:22:f0:b7:61: 79:d2:4d:2d:77:1c:c3:b9:41:04:67:64:a1:7c:59:12:6b:76: 2b:c0:2b:66:4b:07:35:34:a8:a5:6b:25:51:53:97:ef:37:34: c4:a2:fc:e9:80:87:22:74:8f:c1:a5:12:32:1c:86:89:ea:82: 35:0b:7e:f8:e3:1f:6d:42:d2:a1:f5:f7:96:9e:a1:6f:ef:70: e5:dd:c6:2b:07:59:17:06:d2:48:7a:67:c2:66:a7:a1:56:66: b3:f4:00:c4:31:42:56:32:ad:db:5b:ad:6e:62:fb:3f:83:c0: c8:a5:b4:ef:0f:ac:f9:28:d9:c4:ad:ff:9a:6b:ee:1d:df:2e: e5:af:59:c5:75:a4:e6:98:b2:84:5a:29:69:0e:43:dd:c8:97: 58:54:3d:29:ff:53:20:90:30:cc:fb:53:72:eb:b1:10:ed:38: 24:9e:90:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPVcphc3Cdr/5oOA5QjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx M2RiZTQwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWM2ZTA1NDc4Zjc0ZTYxOTgzNzRiYjAxNjQ3NzYwOWQxZjIxY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMK9YAU9ubg0BUZtvZ/ZyqJhCO71 1WBndwYO3m6ifKGfm13+e+oigasH8zXwwi011O/S8rJnIhnZoY0nJlH5NIHMtA3I Mr8d0u4f5lmiMCvMNDNxDm7Wt9C61vQ1giNOuVYp7wvNq7SBzWrZ6tj7t+AjNzhm 0EV2HwrY+Mfzs4UQg/OZ86F8/3T33ws0vn5/96wwGY6uT3oANc1d5F/f+pl00hBP k8JOLqONpPUDwoL/3DCLwpY8WVJn15CPOdIgBiS1FzHfGxpjbuDcb7uFRkM0X6q9 g9bEccQpDFYASPutWjCT3V+oTWr6uNrNOoz5VWzBIT06AdQJ+akDRlFiRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrG4FR4905hmDdLsBZHdgnR8hzFMB8GA1UdIwQY MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt MTBmZGNhMzg1ZWE0LzEvaXNiZ1ZIajNUbUdZTjB1d0ZrZDJDZEh5SE1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0 LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaTFMA0G CSqGSIb3DQEBCwUAA4IBAQAQxbKqEB00VEeZGDjl+Ci6zmYqijJOjfaIJWHMPmDl Cn4rsDhewqazb7M79b63Q6wgT5FTnIWYVKbY0fMRMUfLhjw/cbvrcb32vCZXFdXJ EKoMYZnTwCLwt2F50k0tdxzDuUEEZ2ShfFkSa3YrwCtmSwc1NKilayVRU5fvNzTE ovzpgIcidI/BpRIyHIaJ6oI1C3744x9tQtKh9feWnqFv73Dl3cYrB1kXBtJIemfC ZqehVmaz9ADEMUJWMq3bW61uYvs/g8DIpbTvD6z5KNnErf+aa+4d3y7lr1nFdaTm mLKEWilpDkPdyJdYVD0p/1MgkDDM+1Ny67EQ7TgknpAs -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:48 2026 by rpki-client