This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/avu8Q3Omr--tF4tpRu9jq83ydCc.roa File: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (raw, json) Hash identifier: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg= Subject key identifier: 6A:FB:BC:43:73:A6:AF:EF:AD:17:8B:69:46:EF:63:AB:CD:F2:74:27 Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a Certificate serial: 019B79ED144454B37F37BDB9D1213EFCC916 Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/avu8Q3Omr--tF4tpRu9jq83ydCc.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.3.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:14:44:54:b3:7f:37:bd:b9:d1:21:3e:fc:c9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6afbbc4373a6afefad178b6946ef63abcdf27427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:66:78:80:96:d2:79:36:51:31:2e:f6:26: 0c:d1:b0:cb:48:ca:4d:ad:13:22:42:ca:3b:f2:b1: 9f:ed:33:37:1f:fe:2d:6c:fe:e4:1f:b6:df:13:47: 76:b7:f4:68:c1:d6:4d:c6:15:72:fa:10:c8:91:52: 85:1f:0f:e7:db:a0:f7:08:58:a3:00:67:ef:23:4e: 75:4c:8e:cc:8e:89:8b:97:8e:ed:1b:e2:77:cc:79: 10:58:ff:ae:a7:89:a1:be:65:29:f7:f7:93:7c:13: 2d:c6:51:fa:db:4e:68:09:12:d9:6d:87:86:f1:a3: 30:54:4b:ba:23:0d:b9:a2:de:7f:dd:86:40:9a:16: fb:36:94:01:64:0c:70:51:81:40:81:b0:03:41:0e: 38:51:f0:c8:3e:8a:3e:c0:eb:3c:d7:b3:a1:dd:dc: c9:0e:b7:16:fe:eb:94:4d:ae:b1:5b:30:43:f7:6c: 5a:de:cb:db:f1:6d:b0:ec:09:a6:81:fd:09:3c:be: 82:b4:03:35:6b:71:20:80:84:e0:d6:88:0e:ee:6a: be:ad:12:f7:61:6e:eb:ca:25:c5:b3:e2:0e:5b:14: 3e:c9:0f:ac:a2:8b:3d:aa:bf:75:41:c4:b9:b8:7c: 5f:cd:78:0f:9f:ae:f4:f2:43:7e:8e:90:e1:51:fd: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FB:BC:43:73:A6:AF:EF:AD:17:8B:69:46:EF:63:AB:CD:F2:74:27 X509v3 Authority Key Identifier: keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/avu8Q3Omr--tF4tpRu9jq83ydCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.160.0/24 Signature Algorithm: sha256WithRSAEncryption 63:81:ad:1f:e3:79:6b:de:c5:8b:a8:8e:2b:bc:da:bf:84:12: 46:d6:ba:a1:87:4c:48:07:04:bc:dd:b3:a5:03:af:ce:b2:b0: 60:e3:63:24:8d:69:dd:c5:7c:9a:4c:d8:6a:7a:f1:16:93:f4: 70:f9:e3:73:7a:d7:5c:75:0c:e6:ba:8d:3d:91:ee:7f:31:7d: b4:4c:88:2e:2a:23:1f:22:b6:1e:f6:f0:9c:c7:92:8b:63:f6: 87:a3:d8:01:c8:52:91:4b:9d:08:da:cb:90:7c:94:eb:ec:0b: 70:5d:8c:c6:c9:58:23:18:d7:fe:58:6f:e3:8c:98:ce:8f:6c: 5e:4e:5e:2f:99:ac:e4:c3:43:d3:82:57:c4:ac:19:a4:c8:6b: e1:98:67:86:e5:b3:45:19:2a:5a:0d:3d:25:9d:1c:e7:cb:39: 2b:70:08:3e:1b:46:a0:e3:91:f5:ef:0b:6a:e0:47:45:43:79: d2:63:f1:55:e3:bd:0f:49:94:d0:64:02:96:76:04:d0:79:48: c0:f5:7a:1e:6f:e5:76:23:49:f5:5d:e4:03:cb:e9:7f:b0:9e: 4d:87:1c:5d:2a:b8:59:6a:0f:1a:3b:2c:bc:e8:74:6e:4f:21: 16:fa:8f:1b:67:59:d2:df:c7:08:25:69:63:ce:2d:95:82:f4: 15:e7:a8:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RREVLN/N7250SE+/MkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0 YTU1NGEwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWZiYmM0MzczYTZhZmVmYWQxNzhiNjk0NmVmNjNhYmNkZjI3NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJVmeICW0nk2UTEu9iYM0bDLSMpN rRMiQso78rGf7TM3H/4tbP7kH7bfE0d2t/RowdZNxhVy+hDIkVKFHw/n26D3CFij AGfvI051TI7MjomLl47tG+J3zHkQWP+up4mhvmUp9/eTfBMtxlH6205oCRLZbYeG 8aMwVEu6Iw25ot5/3YZAmhb7NpQBZAxwUYFAgbADQQ44UfDIPoo+wOs817Oh3dzJ DrcW/uuUTa6xWzBD92xa3svb8W2w7Ammgf0JPL6CtAM1a3EggITg1ogO7mq+rRL3 YW7ryiXFs+IOWxQ+yQ+soos9qr91QcS5uHxfzXgPn6708kN+jpDhUf2h3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGr7vENzpq/vrReLaUbvY6vN8nQnMB8GA1UdIwQY MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt ZjQyOGI5OTU0YWIyLzEvYXZ1OFEzT21yLS10RjR0cFJ1OWpxODN5ZENjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOgMA0G CSqGSIb3DQEBCwUAA4IBAQBjga0f43lr3sWLqI4rvNq/hBJG1rqhh0xIBwS83bOl A6/OsrBg42MkjWndxXyaTNhqevEWk/Rw+eNzetdcdQzmuo09ke5/MX20TIguKiMf IrYe9vCcx5KLY/aHo9gByFKRS50I2suQfJTr7AtwXYzGyVgjGNf+WG/jjJjOj2xe Tl4vmazkw0PTglfErBmkyGvhmGeG5bNFGSpaDT0lnRznyzkrcAg+G0ag45H17wtq 4EdFQ3nSY/FV470PSZTQZAKWdgTQeUjA9Xoeb+V2I0n1XeQDy+l/sJ5NhxxdKrhZ ag8aOyy86HRuTyEW+o8bZ1nS38cIJWljzi2VgvQV56iH -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:06 2026 by rpki-client