This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/dNajQCUoGaoowLS9HpOXxA6vUe8.roa File: dNajQCUoGaoowLS9HpOXxA6vUe8.roa (raw, json) Hash identifier: hhwbI1QROgF/W8q/u8jmMb63ziVKKIX34GLWc4neSDQ= Subject key identifier: 74:D6:A3:40:25:28:19:AA:28:C0:B4:BD:1E:93:97:C4:0E:AF:51:EF Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Certificate serial: 019B7CEE12BF08F9EB9875C81A602ED0D69A Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/dNajQCUoGaoowLS9HpOXxA6vUe8.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34600 IP address blocks: 193.29.254.0/24 maxlen: 24 193.30.1.0/24 maxlen: 24 193.30.2.0/24 maxlen: 24 193.30.5.0/24 maxlen: 24 2a0f:7c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:12:bf:08:f9:eb:98:75:c8:1a:60:2e:d0:d6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d6a340252819aa28c0b4bd1e9397c40eaf51ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:05:70:e4:be:46:c8:82:c2:8a:f6:3a:4f: 90:cb:07:1d:57:98:eb:eb:a6:49:cf:e0:77:4a:7c: 76:39:11:84:ab:71:3b:9d:85:65:82:62:99:00:d5: 29:3a:a1:fc:bd:03:a2:b0:c6:7c:13:c6:c8:fa:87: c6:0d:02:40:aa:6c:31:82:83:6d:91:c1:d1:6c:51: 0e:26:e0:70:24:b9:99:b4:40:95:75:9b:78:e6:3f: f0:5b:16:22:17:f8:15:11:20:f2:3f:e4:2c:9f:de: aa:cd:53:24:0a:08:c3:da:fe:f4:c0:5a:7e:14:c5: be:65:d8:11:32:a0:79:5e:36:f0:a7:76:a6:41:94: 0f:7e:02:05:bd:56:48:75:dc:39:32:5a:4b:11:e6: 86:4d:bd:24:1d:c6:b6:30:94:5e:f7:eb:a7:f8:cb: 23:56:bc:b8:a5:c7:09:49:92:69:50:77:03:98:d0: 2b:70:2d:20:41:88:bb:32:0d:67:4e:7d:02:a4:7f: c6:ff:7a:47:85:77:ff:a7:46:52:59:21:f4:16:e7: 97:75:15:2e:cb:10:2d:b3:8e:f6:7c:c0:1f:b2:bc: 8e:63:51:bf:a8:90:25:4e:2e:60:5a:30:27:a6:44: a1:3e:23:27:d9:fe:1f:8c:01:ba:29:01:0c:cb:ca: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:A3:40:25:28:19:AA:28:C0:B4:BD:1E:93:97:C4:0E:AF:51:EF X509v3 Authority Key Identifier: keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/dNajQCUoGaoowLS9HpOXxA6vUe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.254.0/24 193.30.1.0-193.30.2.255 193.30.5.0/24 IPv6: 2a0f:7c40::/29 Signature Algorithm: sha256WithRSAEncryption 8c:19:4a:b7:85:79:28:a4:54:0a:31:57:2a:1d:c7:0c:6e:d4: 0a:f5:17:c2:92:d3:24:b9:d6:94:ef:84:78:5e:93:7d:dd:5d: f0:2c:22:d9:01:46:52:26:6c:56:35:cf:6f:c6:c5:3a:05:12: dd:b8:fd:27:81:14:26:4b:f4:44:ec:78:87:81:f6:71:55:83: dd:25:a0:e3:70:50:de:c4:0e:44:f3:27:ea:4c:db:d1:5b:3e: 08:68:c1:1e:b0:a0:71:ee:77:c7:a4:cd:00:1b:e5:5c:e0:74: 94:d0:e4:f7:55:6a:15:c8:99:2d:00:ce:b5:9f:54:46:30:6b: ea:9a:b1:a3:65:16:35:76:ee:35:8b:71:42:79:ee:68:f4:78: dd:90:34:e8:2f:5a:7f:9f:7a:cf:82:b7:17:29:15:d8:37:68: 5f:dd:1d:3f:61:cd:58:2d:ea:ee:9f:05:5a:e3:45:d2:74:e8: 48:26:fb:6a:24:ef:37:c4:a3:98:b2:8d:91:0e:07:8c:51:aa: f6:1a:e8:06:91:92:ce:3d:45:63:4d:be:8a:0d:57:96:f6:00: ac:33:73:01:25:03:fc:95:65:6e:9a:8c:ab:7f:8c:b4:21:af: c0:d0:23:9b:06:af:18:f4:79:34:5e:b6:ce:cc:4a:03:bf:1f: a5:5a:f5:f1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt87hK/CPnrmHXIGmAu0NaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl NWNhM2UwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ2YTM0MDI1MjgxOWFhMjhjMGI0YmQxZTkzOTdjNDBlYWY1MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMAFcOS+RsiCwor2Ok+QywcdV5jr 66ZJz+B3Snx2ORGEq3E7nYVlgmKZANUpOqH8vQOisMZ8E8bI+ofGDQJAqmwxgoNt kcHRbFEOJuBwJLmZtECVdZt45j/wWxYiF/gVESDyP+Qsn96qzVMkCgjD2v70wFp+ FMW+ZdgRMqB5Xjbwp3amQZQPfgIFvVZIddw5MlpLEeaGTb0kHca2MJRe9+un+Msj Vry4pccJSZJpUHcDmNArcC0gQYi7Mg1nTn0CpH/G/3pHhXf/p0ZSWSH0FueXdRUu yxAts472fMAfsryOY1G/qJAlTi5gWjAnpkShPiMn2f4fjAG6KQEMy8qk6wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHTWo0AlKBmqKMC0vR6Tl8QOr1HvMB8GA1UdIwQY MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt ZmQ3Yjk3MzljYTI2LzEvZE5halFDVW9HYW9vd0xTOUhwT1h4QTZ2VWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2 LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQAwR3+MAwD BADBHgEDBADBHgIDBADBHgUwDQQCAAIwBwMFAyoPfEAwDQYJKoZIhvcNAQELBQAD ggEBAIwZSreFeSikVAoxVyodxwxu1Ar1F8KS0yS51pTvhHhek33dXfAsItkBRlIm bFY1z2/GxToFEt24/SeBFCZL9ETseIeB9nFVg90loONwUN7EDkTzJ+pM29FbPgho wR6woHHud8ekzQAb5VzgdJTQ5PdVahXImS0AzrWfVEYwa+qasaNlFjV27jWLcUJ5 7mj0eN2QNOgvWn+fes+CtxcpFdg3aF/dHT9hzVgt6u6fBVrjRdJ06Egm+2ok7zfE o5iyjZEOB4xRqvYa6AaRks49RWNNvooNV5b2AKwzcwElA/yVZW6ajKt/jLQhr8DQ I5sGrxj0eTRets7MSgO/H6Va9fE= -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:54 2026 by rpki-client