This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/sRud-O0GgcMtbgli7v3Ms1IG0T0.roa File: sRud-O0GgcMtbgli7v3Ms1IG0T0.roa (raw, json) Hash identifier: 7IhaNuqMqxLZK4Y/tiaIu29EU9zivSv+n2cnQWClRj0= Subject key identifier: B1:1B:9D:F8:ED:06:81:C3:2D:6E:09:62:EE:FD:CC:B3:52:06:D1:3D Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA66A851D4B53D21465967DD6A8BD14 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/sRud-O0GgcMtbgli7v3Ms1IG0T0.roa Signing time: Fri 02 Jan 2026 12:19:54 +0000 ROA not before: Fri 02 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5543 IP address blocks: 193.22.6.0/24 maxlen: 32 2a02:e840:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6a:85:1d:4b:53:d2:14:65:96:7d:d6:a8:bd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11b9df8ed0681c32d6e0962eefdccb35206d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:c8:65:b4:e1:7a:7d:94:76:24:1c:88:66: 0b:c7:6b:69:8e:65:7e:6b:26:eb:a7:7d:6b:dd:79: b2:41:2d:99:ff:07:ac:e5:2d:ef:b2:70:65:69:ad: 69:c3:c6:89:73:7a:ac:3e:40:9b:e4:c3:ff:a9:ae: f2:63:b2:65:38:4d:cd:e7:a7:10:65:7f:83:a0:61: 93:f8:86:d2:3e:3b:94:b8:53:ff:31:5a:6d:bb:bd: 70:8b:35:a2:6e:0a:f3:75:d6:33:98:7c:56:d6:7f: 38:8f:f7:1c:a7:ee:2a:45:56:28:b8:97:65:02:6e: 8e:ec:3d:18:27:a0:71:e6:c3:bd:1f:62:8a:07:ab: 60:91:d4:51:59:e3:d5:01:09:55:0d:3d:a7:8f:d3: 37:7f:aa:92:0f:36:3c:fe:54:1f:37:4e:c3:59:47: 4a:75:be:62:76:73:86:74:23:bf:5d:30:02:67:cb: 57:af:c8:f5:0e:6a:dd:96:19:2a:89:42:ae:58:dc: 68:cb:70:0f:46:5e:ee:8a:7e:53:96:14:31:81:02: f4:a3:a9:06:c0:e6:13:f7:e9:dc:9c:0a:43:0d:14: 99:72:b0:ca:d8:5e:80:1b:a7:f0:8c:ec:26:a0:ab: 13:0b:bf:6e:9f:29:ac:00:a5:ac:a5:27:f8:ae:30: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:9D:F8:ED:06:81:C3:2D:6E:09:62:EE:FD:CC:B3:52:06:D1:3D X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/sRud-O0GgcMtbgli7v3Ms1IG0T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.6.0/24 IPv6: 2a02:e840:1001::/48 Signature Algorithm: sha256WithRSAEncryption 28:c2:65:e5:ef:46:5c:28:ab:b9:fb:dc:4e:44:87:49:12:f5: 60:01:78:b7:e8:a6:16:94:df:20:5e:f9:2c:af:4f:8c:4b:fc: 5e:be:69:c0:49:2f:eb:75:56:42:33:f6:28:47:79:4c:07:36: 94:47:9d:4f:be:0e:71:5c:db:8d:2d:58:11:39:00:9d:88:28: 2f:31:08:e2:78:06:c3:f8:a7:59:36:2e:df:e5:bf:af:00:4e: b8:46:61:d2:85:05:86:79:f6:02:fb:ee:86:8b:9c:48:ac:ae: 74:c3:61:ca:29:b6:8d:19:f0:00:3c:9c:bc:07:bc:c0:c9:bb: 37:00:fd:b6:20:3b:7d:3b:43:d3:8f:a9:77:fe:c3:87:b7:02: 75:76:3a:ae:aa:3a:69:57:7b:e4:45:88:8b:38:64:40:ca:5a: 9e:4b:46:1f:5c:fb:a7:98:69:87:2a:de:7a:f0:fa:b0:a9:c9: 21:b3:01:59:d8:ac:55:e7:a1:8a:8f:53:db:e0:cb:15:d9:9f: d2:8e:6c:10:ac:d1:9a:ac:fc:3e:4e:4d:7e:40:07:ec:5f:fa: 46:e2:0d:6b:ae:49:ab:6c:bb:fc:6d:c6:8c:e2:26:81:0d:7a: c9:ab:73:06:98:23:bf:84:9e:08:e5:ee:54:97:7e:87:68:2d: 18:9f:62:30 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pmqFHUtT0hRlln3WqL0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTFiOWRmOGVkMDY4MWMzMmQ2ZTA5NjJlZWZkY2NiMzUyMDZkMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOrIZbThen2UdiQciGYLx2tpjmV+ aybrp31r3XmyQS2Z/wes5S3vsnBlaa1pw8aJc3qsPkCb5MP/qa7yY7JlOE3N56cQ ZX+DoGGT+IbSPjuUuFP/MVptu71wizWibgrzddYzmHxW1n84j/ccp+4qRVYouJdl Am6O7D0YJ6Bx5sO9H2KKB6tgkdRRWePVAQlVDT2nj9M3f6qSDzY8/lQfN07DWUdK db5idnOGdCO/XTACZ8tXr8j1DmrdlhkqiUKuWNxoy3APRl7uin5TlhQxgQL0o6kG wOYT9+ncnApDDRSZcrDK2F6AG6fwjOwmoKsTC79unymsAKWspSf4rjCmRQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLEbnfjtBoHDLW4JYu79zLNSBtE9MB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvc1J1ZC1PMEdnY010YmdsaTd2M01zMUlHMFQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRYGMA8E AgACMAkDBwAqAuhAEAEwDQYJKoZIhvcNAQELBQADggEBACjCZeXvRlwoq7n73E5E h0kS9WABeLfophaU3yBe+SyvT4xL/F6+acBJL+t1VkIz9ihHeUwHNpRHnU++DnFc 240tWBE5AJ2IKC8xCOJ4BsP4p1k2Lt/lv68ATrhGYdKFBYZ59gL77oaLnEisrnTD Ycopto0Z8AA8nLwHvMDJuzcA/bYgO307Q9OPqXf+w4e3AnV2Oq6qOmlXe+RFiIs4 ZEDKWp5LRh9c+6eYaYcq3nrw+rCpySGzAVnYrFXnoYqPU9vgyxXZn9KObBCs0Zqs /D5OTX5AB+xf+kbiDWuuSatsu/xtxoziJoENesmrcwaYI7+Engjl7lSXfodoLRif YjA= -----END CERTIFICATE-----Generated at Sat Jan 31 05:37:55 2026 by rpki-client