This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/avC4TDy0YNmu43wu3PPZQnyz3tY.roa File: avC4TDy0YNmu43wu3PPZQnyz3tY.roa (raw, json) Hash identifier: SjlTG6q/Qs6sxucjwFRvD4MugPMGQX1MddPjbQLIX8o= Subject key identifier: 6A:F0:B8:4C:3C:B4:60:D9:AE:E3:7C:2E:DC:F3:D9:42:7C:B3:DE:D6 Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790 Certificate serial: 019B7AC932B33F15758EA38DAFE6EF06402C Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/avC4TDy0YNmu43wu3PPZQnyz3tY.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44211 IP address blocks: 195.93.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:32:b3:3f:15:75:8e:a3:8d:af:e6:ef:06:40:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af0b84c3cb460d9aee37c2edcf3d9427cb3ded6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:54:87:f5:17:39:51:d3:6e:e5:37:e9:ba: a0:bf:af:08:a7:4b:fa:53:e2:b9:49:4b:22:3c:ed: 4d:21:3c:03:b0:e8:25:52:32:0e:85:62:00:a8:8f: 28:7e:a7:9e:7b:9f:63:47:41:a8:e1:bf:70:38:5c: da:a8:ba:b5:34:9f:03:77:8c:54:77:36:55:b3:30: 07:18:88:76:ea:30:70:e2:2a:fe:37:c3:a8:68:55: 1c:ea:f9:25:7d:4a:77:1e:55:d0:7e:df:d7:95:ac: 75:a4:6d:9c:1e:17:a6:d9:87:b9:09:bf:ea:7b:90: a5:61:30:f2:0f:05:38:29:f5:78:df:f6:cd:81:36: 46:d0:48:42:f3:f1:39:de:ca:5c:19:ee:27:6f:a7: aa:91:12:11:51:14:48:c2:c8:00:cf:30:f5:cd:b2: 36:76:d6:82:40:b5:f5:51:bb:c3:c9:c7:c4:83:9b: 03:12:d7:76:72:b5:34:3b:0b:04:65:00:80:b5:86: b0:57:ce:27:ba:99:cc:42:6d:bf:4c:fb:05:2d:19: 22:04:58:a5:34:33:58:5f:52:9c:25:1e:48:bb:77: 8a:c8:35:6d:ce:a5:75:99:1c:15:2f:78:85:80:ab: 86:21:a1:e1:bb:c4:a5:c5:9d:5c:56:06:83:74:f9: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:B8:4C:3C:B4:60:D9:AE:E3:7C:2E:DC:F3:D9:42:7C:B3:DE:D6 X509v3 Authority Key Identifier: keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/avC4TDy0YNmu43wu3PPZQnyz3tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.136.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:da:ab:8b:c8:d8:3b:eb:20:77:c2:61:e6:65:d3:46:50:c9: ed:73:87:50:24:39:24:91:1e:26:b0:f2:69:56:70:9b:94:a6: 5c:bf:e7:1c:6d:8e:83:02:05:b9:cc:1e:73:3d:b2:e6:8a:79: e4:ec:ba:4e:a1:3e:f4:21:ce:e5:d3:88:08:58:6e:b8:8e:22: 7c:67:13:8d:30:10:ed:5f:2d:c6:35:9b:d8:67:bf:18:fb:0a: 97:ce:d2:1f:d5:c4:15:76:aa:23:5b:88:31:bd:d0:c6:ef:41: b4:7f:b8:ec:6b:99:8c:43:d6:64:d5:5c:5c:fe:5b:42:39:67: 44:71:7b:77:07:33:48:eb:52:ad:e2:55:0b:b5:3b:72:8a:98: 13:43:25:dc:14:80:02:cc:f6:1b:4c:1d:9d:94:6f:2c:dc:77: 1d:0f:29:81:bb:87:5b:12:1b:c6:ad:8f:e2:f7:d0:f3:4c:51: c2:74:c7:5d:ab:54:1d:d4:ac:a1:8e:77:0f:dc:be:bf:ad:fb: f2:e1:7c:29:30:2b:88:3b:75:32:0f:61:cd:d6:2a:ce:41:69: 46:a8:94:4d:ed:2f:ee:c9:85:9f:4b:04:3c:6c:34:e4:11:97: 4d:98:83:7e:12:16:7e:6c:86:d1:96:b6:f0:c0:9a:44:9f:ae: 69:32:f4:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTKzPxV1jqONr+bvBkAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk N2E3OTAwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWYwYjg0YzNjYjQ2MGQ5YWVlMzdjMmVkY2YzZDk0MjdjYjNkZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qdUh/UXOVHTbuU36bqgv68Ip0v6 U+K5SUsiPO1NITwDsOglUjIOhWIAqI8ofqeee59jR0Go4b9wOFzaqLq1NJ8Dd4xU dzZVszAHGIh26jBw4ir+N8OoaFUc6vklfUp3HlXQft/Xlax1pG2cHhem2Ye5Cb/q e5ClYTDyDwU4KfV43/bNgTZG0EhC8/E53spcGe4nb6eqkRIRURRIwsgAzzD1zbI2 dtaCQLX1UbvDycfEg5sDEtd2crU0OwsEZQCAtYawV84nupnMQm2/TPsFLRkiBFil NDNYX1KcJR5Iu3eKyDVtzqV1mRwVL3iFgKuGIaHhu8SlxZ1cVgaDdPlbQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrwuEw8tGDZruN8Ltzz2UJ8s97WMB8GA1UdIwQY MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt Yjc5NTUyZTcwMGM1LzEvYXZDNFREeTBZTm11NDN3dTNQUFpRbnl6M3RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1 LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw12IMA0G CSqGSIb3DQEBCwUAA4IBAQAM2quLyNg76yB3wmHmZdNGUMntc4dQJDkkkR4msPJp VnCblKZcv+ccbY6DAgW5zB5zPbLminnk7LpOoT70Ic7l04gIWG64jiJ8ZxONMBDt Xy3GNZvYZ78Y+wqXztIf1cQVdqojW4gxvdDG70G0f7jsa5mMQ9Zk1Vxc/ltCOWdE cXt3BzNI61Kt4lULtTtyipgTQyXcFIACzPYbTB2dlG8s3HcdDymBu4dbEhvGrY/i 99DzTFHCdMddq1Qd1KyhjncP3L6/rfvy4XwpMCuIO3UyD2HN1irOQWlGqJRN7S/u yYWfSwQ8bDTkEZdNmIN+EhZ+bIbRlrbwwJpEn65pMvQk -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:40 2026 by rpki-client