This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/rTSOfv72iKS4Od2LIB0_G10Sm1g.roa File: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (raw, json) Hash identifier: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU= Subject key identifier: AD:34:8E:7E:FE:F6:88:A4:B8:39:DD:8B:20:1D:3F:1B:5D:12:9B:58 Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Certificate serial: 019B8E74D02738812238BFAB11CA6F545253 Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/rTSOfv72iKS4Od2LIB0_G10Sm1g.roa Signing time: Mon 05 Jan 2026 13:59:38 +0000 ROA not before: Mon 05 Jan 2026 13:59:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 193.53.174.0/24 maxlen: 24 193.53.185.0/24 maxlen: 24 193.53.186.0/24 maxlen: 24 193.53.188.0/24 maxlen: 24 193.53.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:74:d0:27:38:81:22:38:bf:ab:11:ca:6f:54:52:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Validity Not Before: Jan 5 13:59:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad348e7efef688a4b839dd8b201d3f1b5d129b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:6d:0e:10:6c:28:3f:64:8c:c5:ab:82:45: fa:31:07:95:58:3e:be:8f:78:29:50:46:bc:2f:18: b6:dc:8a:d0:59:87:c9:02:81:51:07:da:b0:5b:9c: d3:3f:42:81:60:a3:8d:d0:72:96:20:a9:0d:a1:eb: b8:9f:fc:d0:b8:81:d3:b1:85:e2:47:69:9a:57:02: b1:f2:e0:87:fd:59:68:a5:4e:51:fe:10:47:c2:53: c5:a8:8c:96:90:71:3e:04:e1:0d:6c:4f:c8:85:69: 75:13:a2:d8:12:f0:e2:24:96:37:3d:35:b0:e5:34: 0e:5d:87:a3:a2:bd:2e:ef:bb:34:fc:13:d7:2a:ca: 10:95:c1:1f:24:e0:bd:bd:b8:fa:bc:83:03:0c:68: 92:d0:e1:f6:98:d3:f4:2a:33:f8:5f:8a:91:85:78: 92:41:e0:9b:5f:74:e4:cb:12:2c:1a:bd:3b:cd:61: 90:c3:45:9b:29:32:f0:cc:12:6c:6d:27:44:20:45: 04:6d:42:94:08:8f:e2:9a:85:1e:c4:c7:3f:8c:59: 69:96:12:62:52:70:ff:5d:45:1f:07:fe:6e:45:26: c9:2b:46:d3:e7:59:bc:a0:a7:2f:09:84:ec:8f:9c: 37:0e:43:4b:60:06:8d:ac:5e:40:e1:f4:80:b1:c9: 5e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:8E:7E:FE:F6:88:A4:B8:39:DD:8B:20:1D:3F:1B:5D:12:9B:58 X509v3 Authority Key Identifier: keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/rTSOfv72iKS4Od2LIB0_G10Sm1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.174.0/24 193.53.185.0-193.53.186.255 193.53.188.0/24 193.53.190.0/24 Signature Algorithm: sha256WithRSAEncryption 61:32:6e:67:96:8a:bd:2c:75:6e:a5:e8:61:ab:8f:a0:78:86: 04:d7:ad:0b:62:6c:d9:f9:58:79:8d:f6:ab:af:19:37:70:c6: 5b:4f:6d:13:ed:55:95:fb:1c:ee:7d:64:d7:3c:f2:ee:bd:6a: a1:ec:9a:0f:68:0c:90:5e:f5:60:b2:60:e6:1c:85:a6:dc:79: 20:96:6f:a6:ba:ad:ca:cc:b6:ec:0a:8d:5a:3c:41:59:ca:2b: e5:45:5c:34:ad:93:84:e7:23:96:89:02:f0:80:d4:58:04:41: 45:bc:11:81:f7:9f:e2:1d:1e:62:e6:59:be:af:21:d1:48:19: 53:89:a4:6a:0f:ce:b7:5b:96:33:88:14:1e:1e:81:88:40:44: a5:c9:83:28:ce:48:51:2d:ec:d3:e8:28:b7:4a:44:9f:e3:4e: ff:85:32:30:59:be:9e:38:4d:ed:66:d0:c1:c3:47:fe:12:74: 94:bf:da:6c:28:b9:b4:97:28:93:04:d9:13:67:a1:97:de:ed: 33:6a:6f:b5:8b:fe:a9:24:e0:f6:9b:29:09:af:cd:9c:34:d7: 1c:7c:2b:f3:0c:27:a1:87:18:3c:a0:9f:6c:64:84:13:fb:9f: 8f:36:57:cc:fd:7f:b2:43:ef:cc:bf:be:7c:fb:56:cf:50:39: fb:b5:c3:53 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZuOdNAnOIEiOL+rEcpvVFJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1 YmJjZGQwHhcNMjYwMTA1MTM1OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDM0OGU3ZWZlZjY4OGE0YjgzOWRkOGIyMDFkM2YxYjVkMTI5YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NdtDhBsKD9kjMWrgkX6MQeVWD6+ j3gpUEa8Lxi23IrQWYfJAoFRB9qwW5zTP0KBYKON0HKWIKkNoeu4n/zQuIHTsYXi R2maVwKx8uCH/VlopU5R/hBHwlPFqIyWkHE+BOENbE/IhWl1E6LYEvDiJJY3PTWw 5TQOXYejor0u77s0/BPXKsoQlcEfJOC9vbj6vIMDDGiS0OH2mNP0KjP4X4qRhXiS QeCbX3TkyxIsGr07zWGQw0WbKTLwzBJsbSdEIEUEbUKUCI/imoUexMc/jFlplhJi UnD/XUUfB/5uRSbJK0bT51m8oKcvCYTsj5w3DkNLYAaNrF5A4fSAsclepQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFK00jn7+9oikuDndiyAdPxtdEptYMB8GA1UdIwQY MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt YmM1YWI4MTk4N2YwLzEvclRTT2Z2NzJpS1M0T2QyTElCMF9HMTBTbTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwTWuMAwD BADBNbkDBADBNboDBADBNbwDBADBNb4wDQYJKoZIhvcNAQELBQADggEBAGEybmeW ir0sdW6l6GGrj6B4hgTXrQtibNn5WHmN9quvGTdwxltPbRPtVZX7HO59ZNc88u69 aqHsmg9oDJBe9WCyYOYchabceSCWb6a6rcrMtuwKjVo8QVnKK+VFXDStk4TnI5aJ AvCA1FgEQUW8EYH3n+IdHmLmWb6vIdFIGVOJpGoPzrdbljOIFB4egYhARKXJgyjO SFEt7NPoKLdKRJ/jTv+FMjBZvp44Te1m0MHDR/4SdJS/2mwoubSXKJME2RNnoZfe 7TNqb7WL/qkk4PabKQmvzZw01xx8K/MMJ6GHGDygn2xkhBP7n482V8z9f7JD78y/ vnz7Vs9QOfu1w1M= -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:31 2026 by rpki-client