This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/sNWqTxun9B8T5a1nVHtvNEr4TKw.roa File: sNWqTxun9B8T5a1nVHtvNEr4TKw.roa (raw, json) Hash identifier: z/D95gZg33TdNSMDHOhYm62OJIqU2YgKuCi7L08cx3U= Subject key identifier: B0:D5:AA:4F:1B:A7:F4:1F:13:E5:AD:67:54:7B:6F:34:4A:F8:4C:AC Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Certificate serial: 019B7B368EF0B22661142E457A9B66903EC2 Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/sNWqTxun9B8T5a1nVHtvNEr4TKw.roa Signing time: Thu 01 Jan 2026 20:18:51 +0000 ROA not before: Thu 01 Jan 2026 20:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51412 IP address blocks: 193.150.152.0/21 maxlen: 21 193.150.156.0/22 maxlen: 22 193.150.156.0/24 maxlen: 24 193.150.160.0/22 maxlen: 22 193.150.160.0/24 maxlen: 24 193.150.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8e:f0:b2:26:61:14:2e:45:7a:9b:66:90:3e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51 Validity Not Before: Jan 1 20:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0d5aa4f1ba7f41f13e5ad67547b6f344af84cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:c2:e6:65:a8:14:f9:ab:4f:03:13:9f:65: 21:68:60:fd:68:1f:13:46:f4:e0:47:f3:78:0e:38: 25:58:bc:28:b9:54:2b:36:90:55:56:c7:b5:bb:28: 63:4e:fd:b9:ad:a6:9c:8d:21:08:08:ef:9f:2d:02: 90:7d:02:ba:ed:c8:c4:2e:5d:71:3f:65:0b:59:fc: 7f:33:40:59:6f:b5:83:5d:47:66:7a:af:0c:dd:24: 7f:b1:fc:b3:76:0e:35:be:72:94:f7:7e:87:e2:57: 11:fe:79:50:8a:1f:08:53:9b:d0:8a:64:bb:af:1a: 26:a8:96:20:f8:25:be:de:bf:f5:70:84:f3:d0:d6: 27:4a:75:bc:d8:e0:8a:df:d3:f5:bf:56:ca:7f:37: b5:9f:4c:af:46:eb:8a:50:22:55:ae:d1:11:d4:48: 5b:cc:0a:64:35:0b:2c:ec:61:71:42:b9:5c:b0:96: 05:34:38:00:5e:ca:db:22:f8:c6:b7:c1:3f:f0:38: 8f:08:97:7d:fd:16:b6:9a:23:af:6a:d7:f6:ee:ac: c4:da:58:e2:6c:57:41:29:59:f7:c6:0b:89:df:4a: 1b:02:d8:48:26:ac:09:ed:19:eb:f0:2e:a4:85:71: a2:20:3d:5e:34:d9:bd:b4:d2:05:ed:18:d9:81:9c: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D5:AA:4F:1B:A7:F4:1F:13:E5:AD:67:54:7B:6F:34:4A:F8:4C:AC X509v3 Authority Key Identifier: keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/sNWqTxun9B8T5a1nVHtvNEr4TKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.152.0-193.150.164.255 Signature Algorithm: sha256WithRSAEncryption 8c:b7:33:21:05:42:41:85:f1:b8:a9:88:61:f8:47:f8:56:68: 8b:dd:38:01:f7:b8:73:60:f6:ee:c4:0c:41:87:28:d9:2e:d2: be:40:4b:2a:0f:b8:0a:1d:a1:2b:fc:cd:fb:0a:e8:25:1c:0e: 29:6a:ac:0d:9a:5b:08:ed:69:61:01:55:ee:34:c1:a6:5b:e4: 4f:c6:35:7b:c9:69:d6:f0:95:47:26:63:46:c6:bc:ef:5f:73: 34:14:d9:bf:96:62:c3:92:dd:0b:e8:72:82:c2:c3:98:c9:0a: 00:4e:d2:d1:07:d9:72:51:5b:12:4a:33:69:cc:0f:c6:5c:93: c6:df:8b:4b:36:15:52:77:4f:27:11:41:95:26:6e:0f:bc:0f: e0:e4:16:a2:4d:51:ed:30:40:76:92:96:d4:5b:8d:f5:61:b6: 66:c0:d8:2a:3e:db:94:37:9c:d4:5c:3a:f0:bd:5c:28:3f:1f: 09:96:f5:d5:96:e4:cd:2f:d4:52:44:f3:24:c7:b7:3a:95:ef: cd:4b:6d:ea:c3:54:80:1c:ed:49:d2:91:45:b5:d2:32:df:3d: 61:e0:44:e2:ea:00:0e:9b:68:33:02:20:ef:49:fe:39:19:1c: 7b:5d:04:e6:6a:42:fc:32:b3:74:89:0b:36:b7:c1:6b:31:ea: 9a:33:53:28 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7No7wsiZhFC5FeptmkD7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0 NzVjNTEwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGQ1YWE0ZjFiYTdmNDFmMTNlNWFkNjc1NDdiNmYzNDRhZjg0Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTC5mWoFPmrTwMTn2UhaGD9aB8T RvTgR/N4DjglWLwouVQrNpBVVse1uyhjTv25raacjSEICO+fLQKQfQK67cjELl1x P2ULWfx/M0BZb7WDXUdmeq8M3SR/sfyzdg41vnKU936H4lcR/nlQih8IU5vQimS7 rxomqJYg+CW+3r/1cITz0NYnSnW82OCK39P1v1bKfze1n0yvRuuKUCJVrtER1Ehb zApkNQss7GFxQrlcsJYFNDgAXsrbIvjGt8E/8DiPCJd9/Ra2miOvatf27qzE2lji bFdBKVn3xguJ30obAthIJqwJ7Rnr8C6khXGiID1eNNm9tNIF7RjZgZwXPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLDVqk8bp/QfE+WtZ1R7bzRK+EysMB8GA1UdIwQY MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt NTAyYjc3Y2U5MmY4LzEvc05XcVR4dW45QjhUNWExblZIdHZORXI0VEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4 LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPBlpgD BADBlqQwDQYJKoZIhvcNAQELBQADggEBAIy3MyEFQkGF8bipiGH4R/hWaIvdOAH3 uHNg9u7EDEGHKNku0r5ASyoPuAodoSv8zfsK6CUcDilqrA2aWwjtaWEBVe40waZb 5E/GNXvJadbwlUcmY0bGvO9fczQU2b+WYsOS3QvocoLCw5jJCgBO0tEH2XJRWxJK M2nMD8Zck8bfi0s2FVJ3TycRQZUmbg+8D+DkFqJNUe0wQHaSltRbjfVhtmbA2Co+ 25Q3nNRcOvC9XCg/HwmW9dWW5M0v1FJE8yTHtzqV781LberDVIAc7UnSkUW10jLf PWHgROLqAA6baDMCIO9J/jkZHHtdBOZqQvwys3SJCza3wWsx6pozUyg= -----END CERTIFICATE-----Generated at Sat Jan 10 13:36:59 2026 by rpki-client