This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/aXJznUL0xUln13cBfkJIhsiborQ.roa File: aXJznUL0xUln13cBfkJIhsiborQ.roa (raw, json) Hash identifier: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE= Subject key identifier: 69:72:73:9D:42:F4:C5:49:67:D7:77:01:7E:42:48:86:C8:9B:A2:B4 Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Certificate serial: 019B7835457CFD013D9B5BD506E8C6FB7738 Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/aXJznUL0xUln13cBfkJIhsiborQ.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 193.22.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:45:7c:fd:01:3d:9b:5b:d5:06:e8:c6:fb:77:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6972739d42f4c54967d777017e424886c89ba2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:53:cd:99:43:d7:38:c3:94:da:46:bb:10: 78:e0:a5:7d:0e:8c:56:6b:0f:a9:b9:9f:12:0e:8f: ff:9a:f8:99:c8:e4:e9:c3:13:5f:60:6e:c4:23:ce: 2c:04:9f:df:95:d4:19:50:42:a9:5c:c8:60:79:4d: ef:19:07:4d:13:31:eb:d7:d8:d2:ad:28:8e:b4:2f: c0:a4:c0:cb:62:3b:af:94:22:d5:b4:f8:6c:77:ba: 0b:ba:9b:ce:0d:e7:17:c2:5e:15:96:e7:e5:8c:66: b3:07:21:12:b0:e2:b7:dc:71:c9:d3:ee:38:6e:f4: cd:77:58:21:28:5a:a3:89:2b:13:6e:dd:f8:30:a1: 9b:88:b8:d3:c7:c1:40:28:43:02:07:1c:7a:69:cd: ac:d6:4b:25:a5:93:32:ab:de:72:64:33:de:c0:b5: 1f:bb:37:d6:25:26:90:dd:0d:23:12:2f:6a:3a:3a: 31:29:65:81:bf:8a:03:c8:e3:c6:c4:ef:d4:fa:f3: 83:28:d3:64:ce:30:dc:5b:93:e0:cc:6e:86:8a:ba: b1:9f:e3:f4:4a:8e:3c:13:b5:20:c4:e9:96:d3:67: f0:ce:51:2f:fc:a1:c9:ef:cc:a1:68:37:d5:64:38: 71:3e:88:19:0f:84:20:e2:ac:36:29:51:8b:0d:54: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:73:9D:42:F4:C5:49:67:D7:77:01:7E:42:48:86:C8:9B:A2:B4 X509v3 Authority Key Identifier: keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/aXJznUL0xUln13cBfkJIhsiborQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.173.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e2:da:39:7c:5e:c4:69:af:0c:e9:c7:0d:fb:5c:fc:e9:66: 0d:5e:33:99:54:f6:99:7a:5a:d7:60:eb:4a:4b:e6:de:2c:f8: f1:b0:0b:08:0c:72:6b:02:4c:c5:8d:97:e0:a8:1b:6d:25:7b: d5:cf:f5:ff:98:82:9d:7c:f6:66:37:fc:4c:fe:5c:8b:2c:d9: 79:d6:6f:07:ee:83:49:c0:9d:fc:b4:35:d6:74:d8:fa:0d:25: d2:c8:50:2e:ca:03:1f:a7:1a:cb:14:eb:3b:9a:cd:01:3b:a8: bf:9f:9a:0f:50:f3:fd:c0:76:eb:2c:72:09:d5:4a:b3:ea:df: e7:18:7c:00:fa:db:f4:14:8e:13:cf:21:c9:2c:bf:db:fb:9b: 7f:68:75:0f:7c:43:18:9c:63:df:f2:86:59:50:14:e6:95:80: 5d:f4:95:55:26:03:5a:7c:35:66:a7:eb:45:2f:cf:4c:40:b9: 51:92:1e:24:e0:1f:b7:45:b2:47:c6:41:8b:fa:41:24:f9:42: 64:16:88:07:3a:21:59:f7:97:e8:86:e1:9a:50:9f:50:ce:84: 0a:3b:9a:a4:09:79:83:d5:05:b2:39:d5:d2:f8:42:fb:a7:b9: 0c:03:8a:91:7f:a1:9f:bb:25:c9:74:0a:aa:05:60:94:45:0b: 41:ee:e7:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUV8/QE9m1vVBujG+3c4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk ODFhYTAwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTcyNzM5ZDQyZjRjNTQ5NjdkNzc3MDE3ZTQyNDg4NmM4OWJhMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWdTzZlD1zjDlNpGuxB44KV9DoxW aw+puZ8SDo//mviZyOTpwxNfYG7EI84sBJ/fldQZUEKpXMhgeU3vGQdNEzHr19jS rSiOtC/ApMDLYjuvlCLVtPhsd7oLupvODecXwl4VlufljGazByESsOK33HHJ0+44 bvTNd1ghKFqjiSsTbt34MKGbiLjTx8FAKEMCBxx6ac2s1kslpZMyq95yZDPewLUf uzfWJSaQ3Q0jEi9qOjoxKWWBv4oDyOPGxO/U+vODKNNkzjDcW5PgzG6Girqxn+P0 So48E7UgxOmW02fwzlEv/KHJ78yhaDfVZDhxPogZD4Qg4qw2KVGLDVR3awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGlyc51C9MVJZ9d3AX5CSIbIm6K0MB8GA1UdIwQY MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt NWQxYjFlY2I5OWJmLzEvYVhKem5VTDB4VWxuMTNjQmZrSkloc2lib3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRatMA0G CSqGSIb3DQEBCwUAA4IBAQBm4to5fF7Eaa8M6ccN+1z86WYNXjOZVPaZelrXYOtK S+beLPjxsAsIDHJrAkzFjZfgqBttJXvVz/X/mIKdfPZmN/xM/lyLLNl51m8H7oNJ wJ38tDXWdNj6DSXSyFAuygMfpxrLFOs7ms0BO6i/n5oPUPP9wHbrLHIJ1Uqz6t/n GHwA+tv0FI4TzyHJLL/b+5t/aHUPfEMYnGPf8oZZUBTmlYBd9JVVJgNafDVmp+tF L89MQLlRkh4k4B+3RbJHxkGL+kEk+UJkFogHOiFZ95fohuGaUJ9QzoQKO5qkCXmD 1QWyOdXS+EL7p7kMA4qRf6GfuyXJdAqqBWCURQtB7udM -----END CERTIFICATE-----Generated at Mon Jan 26 14:13:30 2026 by rpki-client