This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/1-KOkWOaQ8TOsTMFwMFLisSfYRxc.roa File: 1-KOkWOaQ8TOsTMFwMFLisSfYRxc.roa (raw, json) Hash identifier: 4qMgExjvtBoaAgy7IxXM+b9rk+ulCL/b8iFfK1Kf3yE= Subject key identifier: F8:A3:A4:58:E6:90:F1:33:AC:4C:C1:70:30:52:E2:B1:27:D8:47:17 Certificate issuer: /CN=8a400c117b367b9231b3052fa5157c39a5e0c49b Certificate serial: 019B2BB53108F5082DC47863738CA39EB8D5 Authority key identifier: 8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/1-KOkWOaQ8TOsTMFwMFLisSfYRxc.roa Signing time: Wed 17 Dec 2025 09:47:33 +0000 ROA not before: Wed 17 Dec 2025 09:47:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203127 IP address blocks: 193.30.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.mft rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:b5:31:08:f5:08:2d:c4:78:63:73:8c:a3:9e:b8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a400c117b367b9231b3052fa5157c39a5e0c49b Validity Not Before: Dec 17 09:47:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8a3a458e690f133ac4cc1703052e2b127d84717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:d6:6c:bd:35:24:d7:2d:0b:06:1b:69:43: 77:95:3e:d5:f5:e4:b0:d5:c0:7d:b2:0d:af:2b:ff: 51:6e:17:80:46:a2:ab:5b:02:53:7c:8c:0a:d8:b5: 48:19:f8:8e:4b:0a:22:7c:5a:1a:76:33:f8:aa:39: 58:9f:95:02:4f:8b:e0:70:f1:81:00:1b:7d:bf:71: 24:b2:43:06:43:38:b7:d9:90:10:b1:c0:d9:8c:09: db:aa:f4:8b:9f:fd:4c:67:cb:59:38:23:73:81:42: ad:26:cf:02:e6:2c:90:ba:a0:07:f4:59:7a:9b:3e: 5b:7c:0e:6e:58:2c:0e:33:8f:9a:dc:34:06:b9:3d: 99:99:65:44:8e:aa:1f:41:ce:24:2e:47:3b:5f:41: 80:ba:14:3e:95:d0:80:7f:5c:0e:8c:f2:50:e5:a2: 9f:c4:37:bf:fa:71:9c:04:01:7a:71:ae:c8:69:f4: c1:e6:36:b4:6e:dd:0d:8c:ad:2b:2f:6f:cf:c0:00: c6:e8:29:87:2a:a5:3b:2e:9c:6b:1d:f3:1b:32:10: e1:4b:a6:9f:44:da:3c:fa:96:01:86:8b:6e:dd:f9: 97:50:cd:5c:73:12:47:64:bb:ab:66:2a:e1:f6:30: de:1a:7a:ae:0e:82:2a:b3:2e:b0:d7:77:c1:50:d9: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A3:A4:58:E6:90:F1:33:AC:4C:C1:70:30:52:E2:B1:27:D8:47:17 X509v3 Authority Key Identifier: keyid:8A:40:0C:11:7B:36:7B:92:31:B3:05:2F:A5:15:7C:39:A5:E0:C4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAMEXs2e5IxswUvpRV8OaXgxJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/1-KOkWOaQ8TOsTMFwMFLisSfYRxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7586db-5d61-478d-a4b8-6ae3254432b3/1/ikAMEXs2e5IxswUvpRV8OaXgxJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.92.0/24 Signature Algorithm: sha256WithRSAEncryption c6:48:48:95:54:28:a9:cd:29:e8:fe:55:60:33:b2:d9:45:50: 70:c5:92:e4:61:8a:87:54:3d:b6:c4:28:b7:18:81:ca:57:d5: e2:97:78:bf:18:fa:83:4e:69:b0:5f:76:5e:01:f9:53:a8:09: 8e:e1:ad:5e:9c:02:b7:55:a2:6a:d3:4c:24:f6:c7:73:cb:1c: 8d:f8:d8:0f:50:a5:52:fd:30:0f:fa:28:14:6d:db:f4:33:da: ef:8a:ce:cd:07:e2:24:f9:48:2c:4b:d1:c8:b7:7c:53:63:2a: 0a:15:96:e4:fc:71:c1:5a:62:12:ad:8a:01:a3:c0:e2:48:e7: 70:2c:31:bd:05:4b:4e:99:6f:6d:ca:27:c8:89:93:39:7e:15: 14:0f:69:b7:bb:c5:24:82:02:9a:e2:e4:62:79:17:b4:e9:88: e8:fd:28:4b:88:a8:90:09:f2:43:e4:11:8b:8a:df:95:2c:f0: 7a:4f:78:1b:3b:bd:89:ea:8b:d7:69:96:f0:26:f3:c2:56:29: 28:4d:8f:32:71:96:58:12:7c:a9:11:f0:b2:bc:89:62:59:7e: 05:70:85:80:32:1d:80:ac:0b:b7:7e:90:7e:0c:e9:42:71:86: 41:8e:53:d0:e9:64:85:b1:c2:b2:d9:08:6b:88:0b:09:fa:41: 59:1c:90:65 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsrtTEI9QgtxHhjc4yjnrjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNDAwYzExN2IzNjdiOTIzMWIzMDUyZmE1MTU3YzM5YTVl MGM0OWIwHhcNMjUxMjE3MDk0NzMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGEzYTQ1OGU2OTBmMTMzYWM0Y2MxNzAzMDUyZTJiMTI3ZDg0NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4jWbL01JNctCwYbaUN3lT7V9eSw 1cB9sg2vK/9RbheARqKrWwJTfIwK2LVIGfiOSwoifFoadjP4qjlYn5UCT4vgcPGB ABt9v3EkskMGQzi32ZAQscDZjAnbqvSLn/1MZ8tZOCNzgUKtJs8C5iyQuqAH9Fl6 mz5bfA5uWCwOM4+a3DQGuT2ZmWVEjqofQc4kLkc7X0GAuhQ+ldCAf1wOjPJQ5aKf xDe/+nGcBAF6ca7IafTB5ja0bt0NjK0rL2/PwADG6CmHKqU7LpxrHfMbMhDhS6af RNo8+pYBhotu3fmXUM1ccxJHZLurZirh9jDeGnquDoIqsy6w13fBUNlGGQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPijpFjmkPEzrEzBcDBS4rEn2EcXMB8GA1UdIwQY MBaAFIpADBF7NnuSMbMFL6UVfDml4MSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWtBTUVYczJlNUl4c3dVdnBSVjhPYVhneEpzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83NTg2ZGItNWQ2MS00NzhkLWE0Yjgt NmFlMzI1NDQzMmIzLzEvMS1LT2tXT2FROFRPc1RNRndNRkxpc1NmWVJ4Yy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmYvNzU4NmRiLTVkNjEtNDc4ZC1hNGI4LTZhZTMyNTQ0MzJi My8xL2lrQU1FWHMyZTVJeHN3VXZwUlY4T2FYZ3hKcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEeXDAN BgkqhkiG9w0BAQsFAAOCAQEAxkhIlVQoqc0p6P5VYDOy2UVQcMWS5GGKh1Q9tsQo txiBylfV4pd4vxj6g05psF92XgH5U6gJjuGtXpwCt1WiatNMJPbHc8scjfjYD1Cl Uv0wD/ooFG3b9DPa74rOzQfiJPlILEvRyLd8U2MqChWW5PxxwVpiEq2KAaPA4kjn cCwxvQVLTplvbconyImTOX4VFA9pt7vFJIICmuLkYnkXtOmI6P0oS4iokAnyQ+QR i4rflSzwek94Gzu9ieqL12mW8CbzwlYpKE2PMnGWWBJ8qRHwsryJYll+BXCFgDId gKwLt36QfgzpQnGGQY5T0OlkhbHCstkIa4gLCfpBWRyQZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:35 2025 by rpki-client