This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/at5a5rELRNEAw0rbmlFozDBKmf0.roa File: at5a5rELRNEAw0rbmlFozDBKmf0.roa (raw, json) Hash identifier: fph6BRKPR1DclmnZB61WzWIE1l0c6loKAE1iu+Pb6gg= Subject key identifier: 6A:DE:5A:E6:B1:0B:44:D1:00:C3:4A:DB:9A:51:68:CC:30:4A:99:FD Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Certificate serial: 019B7F158539FA7C13171EB70033E1A3BDE7 Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/at5a5rELRNEAw0rbmlFozDBKmf0.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397651 IP address blocks: 193.46.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:85:39:fa:7c:13:17:1e:b7:00:33:e1:a3:bd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ade5ae6b10b44d100c34adb9a5168cc304a99fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:dd:9c:82:1f:9f:b4:20:f9:08:a1:36:a4: 34:dc:1b:63:b1:d8:80:b6:a6:cc:27:4e:e7:0e:6c: 50:7a:28:c4:7b:cb:88:f5:08:0c:c7:19:77:be:fb: c8:cd:34:b8:d3:4a:39:a6:b7:b5:17:b7:e9:4e:89: 19:9d:46:42:8c:3f:53:f5:de:7b:7b:1d:66:ee:2f: 50:80:fc:d3:5a:68:d2:e1:bd:4d:94:5d:d2:64:cd: 85:a1:05:68:23:0b:b7:61:59:68:8e:59:84:28:df: 97:2a:06:71:7a:65:5a:c2:e8:45:92:7d:b8:c6:af: da:5b:c7:c5:ed:a2:33:1f:0d:41:49:c4:35:1e:30: 65:c9:e9:8d:a2:7b:d9:1e:94:2b:d8:43:9d:45:5f: 48:38:ef:58:7f:41:0e:11:a5:76:3d:65:31:5b:9c: 6a:84:a6:87:9a:cb:09:b7:eb:a4:d6:85:40:c4:71: ad:c9:61:2a:50:e1:09:8c:7c:21:05:c1:4e:78:06: 1c:b3:f6:ba:42:f6:a8:97:13:61:c4:4a:2d:56:94: 0c:37:08:4f:85:f4:4c:d8:03:85:7e:3e:8a:91:ff: 45:10:4a:3d:50:78:4b:4c:de:40:45:a5:2e:15:a4: 1f:de:3b:2d:55:c4:f9:5e:dc:87:5f:7b:67:64:15: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DE:5A:E6:B1:0B:44:D1:00:C3:4A:DB:9A:51:68:CC:30:4A:99:FD X509v3 Authority Key Identifier: keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/at5a5rELRNEAw0rbmlFozDBKmf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.67.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c8:f3:21:ee:ad:4d:5f:4f:4a:8d:07:a9:20:07:bd:e6:c5: 4c:68:a4:54:b3:47:49:6c:36:79:91:5c:6a:c2:88:7d:a2:f7: 98:18:ba:1c:03:8b:0a:ba:ca:f1:08:ef:da:ec:7f:22:f6:1a: b4:5a:b8:e9:51:58:1a:a2:ef:02:ac:94:94:6e:ba:02:f8:2e: 20:0d:d9:9f:1f:2e:ca:4f:3c:69:eb:89:bb:db:85:ea:10:83: 5c:37:8f:ae:3f:2b:d1:b9:9b:45:e2:bf:38:17:a4:d7:82:80: e7:ac:e1:18:99:60:32:11:94:74:28:43:c1:12:81:b6:db:7a: 22:29:a2:46:d4:d2:56:2a:d7:4b:2e:b5:19:34:01:27:b4:3c: 9b:08:93:57:8f:62:06:b6:6e:e8:07:5c:78:df:89:da:85:b9: c4:10:51:2d:f7:74:89:55:7f:9a:ae:fd:d1:e9:3f:ff:18:42: 68:6e:b9:76:9f:5e:08:5e:05:57:4c:29:6a:94:58:30:b4:ca: d1:39:aa:5c:95:1b:3a:7e:11:70:88:e6:c4:00:85:1e:34:98: f8:c7:ec:7c:35:f7:2d:bf:20:44:d4:9b:c6:16:eb:7d:c0:ed: b8:67:aa:fc:27:5d:28:dc:36:4b:b1:3d:9b:03:f0:c7:8e:b0: b0:aa:3c:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYU5+nwTFx63ADPho73nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmE2MjU1ZGVkYWExYTFiNmIxN2NiOGVhOTFlMDJkNDEy Yjg3MTgwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWRlNWFlNmIxMGI0NGQxMDBjMzRhZGI5YTUxNjhjYzMwNGE5OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweTdnIIfn7Qg+QihNqQ03BtjsdiA tqbMJ07nDmxQeijEe8uI9QgMxxl3vvvIzTS400o5pre1F7fpTokZnUZCjD9T9d57 ex1m7i9QgPzTWmjS4b1NlF3SZM2FoQVoIwu3YVlojlmEKN+XKgZxemVawuhFkn24 xq/aW8fF7aIzHw1BScQ1HjBlyemNonvZHpQr2EOdRV9IOO9Yf0EOEaV2PWUxW5xq hKaHmssJt+uk1oVAxHGtyWEqUOEJjHwhBcFOeAYcs/a6QvaolxNhxEotVpQMNwhP hfRM2AOFfj6Kkf9FEEo9UHhLTN5ARaUuFaQf3jstVcT5XtyHX3tnZBWcjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGreWuaxC0TRAMNK25pRaMwwSpn9MB8GA1UdIwQY MBaAFF+6YlXe2qGhtrF8uOqR4C1BK4cYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEt NjFlNTEyYmEyNWI3LzEvYXQ1YTVyRUxSTkVBdzByYm1sRm96REJLbWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS85MWE3NzAtODI4ZC00ZTJiLWJkODEtNjFlNTEyYmEyNWI3 LzEvWDdwaVZkN2FvYUcyc1h5NDZwSGdMVUVyaHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5DMA0G CSqGSIb3DQEBCwUAA4IBAQAJyPMh7q1NX09KjQepIAe95sVMaKRUs0dJbDZ5kVxq woh9oveYGLocA4sKusrxCO/a7H8i9hq0WrjpUVgaou8CrJSUbroC+C4gDdmfHy7K Tzxp64m724XqEINcN4+uPyvRuZtF4r84F6TXgoDnrOEYmWAyEZR0KEPBEoG223oi KaJG1NJWKtdLLrUZNAEntDybCJNXj2IGtm7oB1x434nahbnEEFEt93SJVX+arv3R 6T//GEJobrl2n14IXgVXTClqlFgwtMrROapclRs6fhFwiObEAIUeNJj4x+x8Nfct vyBE1JvGFut9wO24Z6r8J10o3DZLsT2bA/DHjrCwqjyS -----END CERTIFICATE-----Generated at Wed Jan 21 18:20:22 2026 by rpki-client