This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/9yUNTQu4D8dEJY0vZu2yaAiRefU.roa File: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (raw, json) Hash identifier: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74= Subject key identifier: F7:25:0D:4D:0B:B8:0F:C7:44:25:8D:2F:66:ED:B2:68:08:91:79:F5 Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692 Certificate serial: 019B78354AF0CF6219C0FC51AA42A2080ADE Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/9yUNTQu4D8dEJY0vZu2yaAiRefU.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 193.56.233.0/24 maxlen: 24 193.56.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4a:f0:cf:62:19:c0:fc:51:aa:42:a2:08:0a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7250d4d0bb80fc744258d2f66edb268089179f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:dd:f7:2d:59:74:7e:c6:0f:de:62:e2:10: b7:72:cb:2b:46:5e:e1:24:54:f0:cb:84:c0:e3:8b: aa:a0:ee:cf:29:af:3f:4e:29:3e:2f:51:b0:99:25: ed:18:b7:0c:a8:1a:0c:8e:72:7e:6f:26:d1:c1:f6: 26:e8:17:ac:b0:5a:81:74:77:ea:c5:8c:58:10:df: 98:cf:3a:f0:3c:0a:6d:1d:19:43:2d:3f:20:bf:df: 30:b4:3e:d4:1a:e7:dc:4a:96:68:b0:41:89:b4:fb: ba:b6:c4:0d:87:e1:4c:f1:b7:86:9d:a9:d1:35:2b: fa:05:96:00:08:c8:9c:d5:ef:96:99:c1:ed:e1:eb: 02:37:e5:11:46:a6:7a:6a:eb:90:84:58:42:9d:8b: aa:b7:2d:5e:82:1b:8a:fb:b9:61:6c:19:d2:49:d2: f8:c5:92:88:8b:d3:1c:70:d2:1a:d4:56:18:65:91: f0:88:54:77:8c:68:60:20:bb:f9:d5:d9:60:15:a4: 9b:00:0c:bd:21:28:0f:f0:4b:a9:8d:00:a5:fd:2d: 32:35:7a:ea:3a:de:7b:81:57:47:ca:1f:fb:c2:37: 61:f6:9b:95:ce:19:16:e1:6e:c6:5b:42:42:23:a0: 54:12:8b:02:8b:51:b7:b0:77:f9:9e:2d:e7:bc:8c: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:0D:4D:0B:B8:0F:C7:44:25:8D:2F:66:ED:B2:68:08:91:79:F5 X509v3 Authority Key Identifier: keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/9yUNTQu4D8dEJY0vZu2yaAiRefU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.233.0/24 193.56.237.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:57:32:9f:b0:bb:16:c4:59:fc:22:7f:0c:dd:6c:e3:b4:53: 26:7f:a8:05:7e:89:04:c8:44:4c:f9:c5:db:5f:a1:3b:18:3a: 48:fa:79:48:d5:2c:aa:8c:5b:3e:70:36:e8:27:b7:d2:a1:d8: 08:86:09:de:85:81:a3:d1:7b:e8:db:6d:a4:4e:26:61:cc:a9: f0:4d:fd:df:02:39:e5:d2:36:ca:30:b2:bd:ca:d4:59:b4:b1: 1d:ee:bc:44:d5:4a:35:21:b5:bd:f5:4c:2d:55:8d:33:2c:59: 40:d1:22:f8:e0:be:7b:86:ea:e2:72:a9:ee:d7:bd:5d:e2:f1: 59:3d:02:8a:92:dd:2b:a5:82:9e:b5:a1:d1:ca:94:c9:ac:d2: 5e:95:e4:bf:37:6a:16:69:b7:67:8f:fe:88:8c:e0:14:80:b7: 97:54:81:99:20:5c:b7:75:99:05:ba:c8:71:80:24:48:57:de: f2:16:9e:f0:59:d6:a9:2e:e4:20:9b:4b:df:d2:20:ca:06:fd: cc:b2:a1:42:a5:eb:1b:6d:d1:3a:55:30:fc:cf:c8:8d:66:9b: 5a:44:a1:2e:50:4a:3d:43:c1:14:0f:c3:79:e9:cd:51:ea:27: c4:5f:25:9d:ba:b8:8d:6b:6b:10:6d:2b:87:3d:5b:be:1a:e8: db:81:fb:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NUrwz2IZwPxRqkKiCAreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl ZjE2OTIwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzI1MGQ0ZDBiYjgwZmM3NDQyNThkMmY2NmVkYjI2ODA4OTE3OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL7d9y1ZdH7GD95i4hC3cssrRl7h JFTwy4TA44uqoO7PKa8/Tik+L1GwmSXtGLcMqBoMjnJ+bybRwfYm6BessFqBdHfq xYxYEN+YzzrwPAptHRlDLT8gv98wtD7UGufcSpZosEGJtPu6tsQNh+FM8beGnanR NSv6BZYACMic1e+WmcHt4esCN+URRqZ6auuQhFhCnYuqty1eghuK+7lhbBnSSdL4 xZKIi9MccNIa1FYYZZHwiFR3jGhgILv51dlgFaSbAAy9ISgP8EupjQCl/S0yNXrq Ot57gVdHyh/7wjdh9puVzhkW4W7GW0JCI6BUEosCi1G3sHf5ni3nvIz+mQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPclDU0LuA/HRCWNL2btsmgIkXn1MB8GA1UdIwQY MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt NTI1MjMwZTIwNjgxLzEvOXlVTlRRdTREOGRFSlkwdlp1MnlhQWlSZWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwTjpAwQA wTjtMA0GCSqGSIb3DQEBCwUAA4IBAQALVzKfsLsWxFn8In8M3WzjtFMmf6gFfokE yERM+cXbX6E7GDpI+nlI1SyqjFs+cDboJ7fSodgIhgnehYGj0Xvo222kTiZhzKnw Tf3fAjnl0jbKMLK9ytRZtLEd7rxE1Uo1IbW99UwtVY0zLFlA0SL44L57huricqnu 171d4vFZPQKKkt0rpYKetaHRypTJrNJeleS/N2oWabdnj/6IjOAUgLeXVIGZIFy3 dZkFushxgCRIV97yFp7wWdapLuQgm0vf0iDKBv3MsqFCpesbbdE6VTD8z8iNZpta RKEuUEo9Q8EUD8N56c1R6ifEXyWduriNa2sQbSuHPVu+Gujbgfvf -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:33 2026 by rpki-client