This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa File: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (raw, json) Hash identifier: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU= Subject key identifier: 0B:46:B5:DC:96:74:45:23:EB:90:C4:9D:E6:81:2A:B5:CA:B8:AF:09 Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Certificate serial: 019B7EA44DA1AEC1AB68FF71D283ACDA3831 Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa Signing time: Fri 02 Jan 2026 12:17:35 +0000 ROA not before: Fri 02 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.33.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:4d:a1:ae:c1:ab:68:ff:71:d2:83:ac:da:38:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599 Validity Not Before: Jan 2 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b46b5dc96744523eb90c49de6812ab5cab8af09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:29:eb:b3:fb:b9:56:a0:bc:6f:83:2b:ee: 0a:5e:bb:2c:27:20:8a:21:e0:d0:8c:19:01:e7:31: 75:62:39:24:48:b5:7f:ad:23:ca:4e:ef:7f:00:00: b7:0f:ed:45:9d:89:a7:ba:4b:eb:a7:94:3f:30:7e: 4f:71:5e:89:45:ee:7e:49:3d:fd:0e:d3:45:3e:47: a9:33:56:30:69:cb:37:d0:fb:df:ee:6e:9c:e5:9f: c4:2d:2a:81:7c:75:a6:e6:f7:c5:24:5e:34:34:d5: 17:2b:12:a9:9e:ff:b8:d4:09:b9:30:86:33:86:62: a8:83:2a:8e:8a:0e:16:ba:41:29:da:04:77:5e:ce: 02:3c:aa:9f:89:ed:86:bb:4f:38:f6:37:9e:a1:2e: 35:f5:57:f9:58:ad:c3:82:50:0e:06:d4:75:dc:81: 57:52:2f:63:23:ec:45:15:fe:96:70:af:57:72:00: fb:55:b5:bb:93:f1:2e:b3:4c:2b:a1:df:bd:2f:ac: 04:1e:af:a3:c3:35:5e:0c:ff:d0:97:1f:de:75:91: c6:14:48:3b:10:a4:e1:f5:cf:ba:3f:73:78:52:a8: 47:3d:d5:32:bf:57:6f:20:0a:54:ae:d4:0e:f8:c3: e6:c6:9d:64:cd:d5:9c:6d:c5:eb:51:6d:fe:9a:f9: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:46:B5:DC:96:74:45:23:EB:90:C4:9D:E6:81:2A:B5:CA:B8:AF:09 X509v3 Authority Key Identifier: keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.184.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b1:23:b4:3e:eb:70:e9:e0:b4:4f:1a:da:cb:a2:b3:70:59: d6:05:0b:26:e3:7b:fc:66:3d:ec:1c:c1:45:27:b3:80:7d:d0: b0:44:08:eb:aa:20:7a:da:82:94:ff:76:ee:ee:a9:7e:a9:3a: c3:b7:18:1d:0f:45:bd:d9:5f:4a:9b:1b:a5:f7:5f:d3:c0:f7: 40:d7:9c:a7:e0:1b:1a:33:12:8c:e1:c3:e3:df:ec:aa:7b:95: 63:3e:07:60:8c:a6:ce:9e:7b:5e:3d:89:c6:9b:15:28:1a:ec: 5a:b5:de:ac:af:76:8b:81:13:c1:8b:0d:8a:1e:42:a2:5a:f2: 2e:7e:3a:c4:9e:fd:6b:71:83:e4:ea:93:95:1e:c3:fc:a1:b3: 0d:d4:31:8a:2c:b0:50:07:d4:e9:f6:a6:c8:30:19:fd:5e:4c: 67:b6:93:6f:f7:21:c3:39:26:34:94:e3:47:d9:3c:7b:b0:d9: 11:76:34:e2:95:24:0a:1b:4e:a7:ed:6d:f6:47:b2:08:78:5c: 1f:84:07:00:bb:13:3b:b7:72:73:2a:44:53:df:c2:68:85:af: 87:af:04:79:c8:20:b3:c3:72:31:b8:c2:e2:17:57:57:92:3d: 7d:25:b7:f9:50:fb:28:ef:ad:25:b0:56:37:92:99:e2:4e:d9: 97:87:31:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pE2hrsGraP9x0oOs2jgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx MjU1OTkwHhcNMjYwMTAyMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQ2YjVkYzk2NzQ0NTIzZWI5MGM0OWRlNjgxMmFiNWNhYjhhZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9op67P7uVagvG+DK+4KXrssJyCK IeDQjBkB5zF1YjkkSLV/rSPKTu9/AAC3D+1FnYmnukvrp5Q/MH5PcV6JRe5+ST39 DtNFPkepM1Ywacs30Pvf7m6c5Z/ELSqBfHWm5vfFJF40NNUXKxKpnv+41Am5MIYz hmKogyqOig4WukEp2gR3Xs4CPKqfie2Gu0849jeeoS419Vf5WK3DglAOBtR13IFX Ui9jI+xFFf6WcK9XcgD7VbW7k/Eus0wrod+9L6wEHq+jwzVeDP/Qlx/edZHGFEg7 EKTh9c+6P3N4UqhHPdUyv1dvIApUrtQO+MPmxp1kzdWcbcXrUW3+mvms2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAtGtdyWdEUj65DEneaBKrXKuK8JMB8GA1UdIwQY MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct OTA4NDE5ZDM5NDAxLzEvQzBhMTNKWjBSU1Bya01TZDVvRXF0Y3E0cndrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiG4MA0G CSqGSIb3DQEBCwUAA4IBAQA5sSO0Putw6eC0Txray6KzcFnWBQsm43v8Zj3sHMFF J7OAfdCwRAjrqiB62oKU/3bu7ql+qTrDtxgdD0W92V9Kmxul91/TwPdA15yn4Bsa MxKM4cPj3+yqe5VjPgdgjKbOnntePYnGmxUoGuxatd6sr3aLgRPBiw2KHkKiWvIu fjrEnv1rcYPk6pOVHsP8obMN1DGKLLBQB9Tp9qbIMBn9XkxntpNv9yHDOSY0lONH 2Tx7sNkRdjTilSQKG06n7W32R7IIeFwfhAcAuxM7t3JzKkRT38Joha+HrwR5yCCz w3IxuMLiF1dXkj19Jbf5UPso760lsFY3kpniTtmXhzFN -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:59 2026 by rpki-client