This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/CLIoybonm404BMxqfMu0fHHdCn4.roa File: CLIoybonm404BMxqfMu0fHHdCn4.roa (raw, json) Hash identifier: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ= Subject key identifier: 08:B2:28:C9:BA:27:9B:8D:38:04:CC:6A:7C:CB:B4:7C:71:DD:0A:7E Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019B7F82EBE02B809B1D36D95563B006F431 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/CLIoybonm404BMxqfMu0fHHdCn4.roa Signing time: Fri 02 Jan 2026 16:20:45 +0000 ROA not before: Fri 02 Jan 2026 16:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12833 IP address blocks: 193.236.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:eb:e0:2b:80:9b:1d:36:d9:55:63:b0:06:f4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Jan 2 16:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b228c9ba279b8d3804cc6a7ccbb47c71dd0a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:63:61:a9:31:85:f8:40:0e:0e:f4:8e:06: 76:0d:c1:4c:ea:5b:90:16:ad:03:65:aa:b7:8f:cb: 49:99:38:f7:d4:7a:7c:31:66:b4:6c:34:3c:04:63: 9d:0e:d6:90:4d:54:24:cc:fd:8d:95:68:e7:12:99: d0:fb:d1:fb:cd:a6:31:c1:68:d8:6b:36:7e:7e:85: 3d:21:40:1b:8c:b7:ba:1e:ed:74:9d:c3:0e:50:c2: 7b:45:b2:07:2c:57:5a:a0:7a:d6:ee:9a:19:91:e0: b2:9a:75:1f:7b:60:95:3e:6a:87:f6:24:12:89:66: bb:b7:5d:1a:2a:93:d7:72:e6:29:43:4d:64:b9:a3: 64:95:30:3c:08:fc:0a:e4:91:dc:30:34:b3:46:b0: fa:d1:89:e6:61:03:60:dd:93:99:6c:09:c8:8f:32: 8b:18:de:e4:1c:15:85:19:e8:13:a7:95:1d:5a:c4: 1a:e1:04:f2:c6:bf:05:1a:ff:d4:c0:d5:7d:34:a6: 1c:cd:b3:7b:c5:ea:ff:ba:b0:b1:81:25:1a:77:ce: b8:ef:fc:a7:f3:00:6e:55:e7:35:a0:c1:b0:42:77: 49:a9:84:c2:23:91:ab:d6:90:20:a6:66:dc:ba:be: 43:5a:9f:fa:26:fa:eb:29:ac:28:5b:d0:55:f1:ac: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B2:28:C9:BA:27:9B:8D:38:04:CC:6A:7C:CB:B4:7C:71:DD:0A:7E X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/CLIoybonm404BMxqfMu0fHHdCn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.236.100.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:81:97:b8:a7:a8:f5:86:67:ad:e5:95:0d:bf:80:d0:53:ed: 78:bd:0e:cd:5d:3f:60:5b:c1:71:47:7b:fc:b4:27:95:58:53: 3a:c3:5b:c5:af:ab:37:08:33:7f:3a:a8:78:12:88:69:cf:bf: c9:db:58:44:2a:db:dd:74:6c:f2:87:af:fe:8e:09:20:3c:be: dc:79:75:7a:9d:5d:df:92:5a:d3:3a:b6:5e:71:9f:45:3b:b6: 39:4d:87:b0:1e:b6:b4:38:00:7d:e3:12:7f:23:75:27:4a:9b: 93:e9:94:0b:4c:e9:bf:f7:78:ee:19:83:ac:25:5a:2d:d9:35: 54:23:b6:08:8b:87:c7:14:6e:a2:a5:24:88:c6:5a:a9:5a:43: 56:0f:ad:fe:96:1d:ac:48:54:6e:82:b1:68:66:83:5b:c2:6e: af:b4:4b:38:e8:a0:20:a7:bc:ba:b6:84:12:cd:6b:71:8b:f3: 1a:77:ac:bb:e6:67:1d:1b:9e:cf:06:7b:16:e0:02:d4:c6:13: 19:e1:2d:65:13:10:8b:ea:21:82:9e:31:12:12:84:f8:82:c4: 8e:86:5c:28:dd:da:c0:73:e7:de:53:87:4a:72:b8:4e:4c:74: c7:59:f9:fa:a8:f9:b3:ef:69:e3:16:f6:c6:3a:b1:30:3e:04: 27:b5:d4:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/guvgK4CbHTbZVWOwBvQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGIyMjhjOWJhMjc5YjhkMzgwNGNjNmE3Y2NiYjQ3YzcxZGQwYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qRjYakxhfhADg70jgZ2DcFM6luQ Fq0DZaq3j8tJmTj31Hp8MWa0bDQ8BGOdDtaQTVQkzP2NlWjnEpnQ+9H7zaYxwWjY azZ+foU9IUAbjLe6Hu10ncMOUMJ7RbIHLFdaoHrW7poZkeCymnUfe2CVPmqH9iQS iWa7t10aKpPXcuYpQ01kuaNklTA8CPwK5JHcMDSzRrD60YnmYQNg3ZOZbAnIjzKL GN7kHBWFGegTp5UdWsQa4QTyxr8FGv/UwNV9NKYczbN7xer/urCxgSUad8647/yn 8wBuVec1oMGwQndJqYTCI5Gr1pAgpmbcur5DWp/6JvrrKawoW9BV8ayHxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiyKMm6J5uNOATManzLtHxx3Qp+MB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvQ0xJb3lib25tNDA0Qk14cWZNdTBmSEhkQ240LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwexkMA0G CSqGSIb3DQEBCwUAA4IBAQAsgZe4p6j1hmet5ZUNv4DQU+14vQ7NXT9gW8FxR3v8 tCeVWFM6w1vFr6s3CDN/Oqh4Eohpz7/J21hEKtvddGzyh6/+jgkgPL7ceXV6nV3f klrTOrZecZ9FO7Y5TYewHra0OAB94xJ/I3UnSpuT6ZQLTOm/93juGYOsJVot2TVU I7YIi4fHFG6ipSSIxlqpWkNWD63+lh2sSFRugrFoZoNbwm6vtEs46KAgp7y6toQS zWtxi/Mad6y75mcdG57PBnsW4ALUxhMZ4S1lExCL6iGCnjESEoT4gsSOhlwo3drA c+feU4dKcrhOTHTHWfn6qPmz72njFvbGOrEwPgQntdRj -----END CERTIFICATE-----Generated at Tue Jan 27 01:51:31 2026 by rpki-client