This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/ci6tN1QYoZrZv06rGimHLD0X5JE.roa File: ci6tN1QYoZrZv06rGimHLD0X5JE.roa (raw, json) Hash identifier: WnzalM5cF/dIA1v+fSMQnZMN9WMkUhH0XGHms4w38Jc= Subject key identifier: 72:2E:AD:37:54:18:A1:9A:D9:BF:4E:AB:1A:29:87:2C:3D:17:E4:91 Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Certificate serial: 019B7EA4C27B50F39B0DD7C72605D393441B Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/ci6tN1QYoZrZv06rGimHLD0X5JE.roa Signing time: Fri 02 Jan 2026 12:18:05 +0000 ROA not before: Fri 02 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 193.238.232.0/24 maxlen: 24 193.238.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c2:7b:50:f3:9b:0d:d7:c7:26:05:d3:93:44:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937 Validity Not Before: Jan 2 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722ead375418a19ad9bf4eab1a29872c3d17e491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:77:dc:8c:f9:26:85:9f:1a:e9:1c:4b:b1: 26:ad:89:05:c2:fa:fd:a1:ed:bf:15:6b:49:d7:44: c8:90:02:3e:a5:e3:6c:b6:8d:f3:72:f4:3d:66:97: 12:26:2e:0f:76:42:07:dc:b4:74:f9:56:04:8d:62: cb:7d:f7:1f:dd:b4:07:17:6a:fd:b7:87:16:af:bf: ca:3c:8d:dd:f5:3d:6a:f2:94:6c:a6:25:20:8d:fb: ee:64:a0:e3:d2:b4:eb:f4:93:5b:2b:1b:39:86:69: 38:02:81:66:3f:88:49:b8:6a:b4:17:63:85:a5:a9: 02:e2:12:07:2d:56:3f:b8:bb:8e:7c:88:54:72:97: 29:60:f4:62:65:1c:17:a3:29:bb:87:bb:38:c0:90: 05:d5:0b:fc:44:70:f0:e9:a7:1e:9c:93:18:f7:6a: fd:af:85:36:33:79:bf:3b:b4:df:5e:ac:3f:b4:03: 1b:a6:9c:44:8c:12:d2:62:b8:57:2e:8b:6c:68:69: 02:ae:ec:0f:35:72:8c:5f:71:9f:36:cd:7f:e3:6b: 85:0b:21:57:7d:b8:97:ab:42:a1:55:19:69:ac:10: bc:f7:19:35:6b:22:e5:3f:bd:e0:e1:5b:49:28:6c: be:21:37:93:2c:88:52:c9:12:60:4c:72:cb:81:ac: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2E:AD:37:54:18:A1:9A:D9:BF:4E:AB:1A:29:87:2C:3D:17:E4:91 X509v3 Authority Key Identifier: keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/ci6tN1QYoZrZv06rGimHLD0X5JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.232.0/23 Signature Algorithm: sha256WithRSAEncryption 65:f5:82:c9:b6:ee:70:01:42:22:f2:b7:d9:c5:ba:75:84:42: 58:96:7d:a4:2b:09:1d:b2:05:8b:81:9b:62:88:7c:79:cf:cf: 21:f6:c9:fa:11:86:4c:f0:50:bd:cf:7b:d4:ad:c4:08:5b:b5: f6:54:d7:cc:96:fb:f4:d7:b2:f5:6f:c5:58:2e:66:da:fe:54: 63:da:f0:e9:66:a2:55:f5:bf:e6:3a:22:88:43:e7:e0:52:a0: c3:07:62:64:47:1c:f2:96:b2:53:f7:43:63:9d:a9:69:87:2a: c5:bb:03:ea:6b:e0:6c:5d:9a:7a:9b:36:42:89:c8:a4:2d:39: 54:25:6c:7e:bc:d5:0b:69:7b:d8:ee:c6:cd:3c:92:98:d4:98: de:78:e2:48:03:42:8e:f7:a0:46:6c:b4:10:2f:6f:b3:1b:bc: 89:9b:98:9f:a3:02:f7:9c:45:ff:87:be:b4:69:5e:50:99:a3: c2:49:8a:4e:8e:dd:52:44:21:a7:53:c6:55:92:a1:0d:19:a9: 45:98:4d:03:36:cc:2c:f6:ca:f6:9d:d6:ab:05:d0:80:e1:d2: 19:5b:87:5e:6c:f0:56:b4:d0:6d:c8:e5:8e:85:10:c1:14:7a: e5:5d:dd:6d:34:e2:fa:0c:81:39:b2:ce:da:1b:cf:1f:2c:7f: 70:69:97:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pMJ7UPObDdfHJgXTk0QbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDI3NjM3M2IwNDBmYTlhYzc3ZTU2NmM1YjZjZGYzNWI1 M2I5MzcwHhcNMjYwMTAyMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJlYWQzNzU0MThhMTlhZDliZjRlYWIxYTI5ODcyYzNkMTdlNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8B33Iz5JoWfGukcS7EmrYkFwvr9 oe2/FWtJ10TIkAI+peNsto3zcvQ9ZpcSJi4PdkIH3LR0+VYEjWLLffcf3bQHF2r9 t4cWr7/KPI3d9T1q8pRspiUgjfvuZKDj0rTr9JNbKxs5hmk4AoFmP4hJuGq0F2OF pakC4hIHLVY/uLuOfIhUcpcpYPRiZRwXoym7h7s4wJAF1Qv8RHDw6acenJMY92r9 r4U2M3m/O7TfXqw/tAMbppxEjBLSYrhXLotsaGkCruwPNXKMX3GfNs1/42uFCyFX fbiXq0KhVRlprBC89xk1ayLlP73g4VtJKGy+ITeTLIhSyRJgTHLLgawNFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIurTdUGKGa2b9Oqxophyw9F+SRMB8GA1UdIwQY MBaAFD1Cdjc7BA+prHflZsW2zfNbU7k3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUt NjZkMzE5OGJmMWEyLzEvY2k2dE4xUVlvWnJadjA2ckdpbUhMRDBYNUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUtNjZkMzE5OGJmMWEy LzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe7oMA0G CSqGSIb3DQEBCwUAA4IBAQBl9YLJtu5wAUIi8rfZxbp1hEJYln2kKwkdsgWLgZti iHx5z88h9sn6EYZM8FC9z3vUrcQIW7X2VNfMlvv017L1b8VYLmba/lRj2vDpZqJV 9b/mOiKIQ+fgUqDDB2JkRxzylrJT90NjnalphyrFuwPqa+BsXZp6mzZCicikLTlU JWx+vNULaXvY7sbNPJKY1JjeeOJIA0KO96BGbLQQL2+zG7yJm5ifowL3nEX/h760 aV5QmaPCSYpOjt1SRCGnU8ZVkqENGalFmE0DNsws9sr2ndarBdCA4dIZW4debPBW tNBtyOWOhRDBFHrlXd1tNOL6DIE5ss7aG88fLH9waZeX -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:31 2026 by rpki-client