This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/cH1uhcXR4yA_j8slffa5H1Hj5PM.roa File: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (raw, json) Hash identifier: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8= Subject key identifier: 70:7D:6E:85:C5:D1:E3:20:3F:8F:CB:25:7D:F6:B9:1F:51:E3:E4:F3 Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551 Certificate serial: 019B79ED3BFF085A9834481D98115473064A Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/cH1uhcXR4yA_j8slffa5H1Hj5PM.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50251 IP address blocks: 193.106.48.0/22 maxlen: 24 2a0b:d7c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3b:ff:08:5a:98:34:48:1d:98:11:54:73:06:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=707d6e85c5d1e3203f8fcb257df6b91f51e3e4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a3:d8:bb:a1:60:23:ac:0f:9e:42:f2:83:c6: 93:d3:e5:8c:49:80:0d:df:85:49:99:98:e9:d0:4c: 98:67:a5:97:52:91:c1:b1:1b:f1:db:42:28:7e:ec: 8a:33:6d:62:2c:79:be:51:f1:c7:4f:2d:75:74:45: 04:cf:55:18:2c:c5:1b:00:d2:f4:7b:bb:8c:4e:ae: 2d:34:4d:f9:57:dd:31:e4:e1:13:6a:73:c7:32:f8: 33:62:78:7e:19:77:96:c7:8e:7d:13:6c:96:2b:71: 6d:f5:b4:49:c2:8e:0c:5d:e7:c1:80:34:c9:3f:b7: c2:b6:df:4f:45:22:3b:dc:1d:e5:31:ef:1d:82:75: 7b:d0:13:5c:ba:6a:19:be:cc:a3:83:22:df:6c:a2: 11:03:ea:44:25:f6:e4:c3:e3:8d:79:47:b3:09:7c: f8:33:29:e6:d9:c4:c7:e6:15:e6:db:c8:e1:bf:a3: f7:47:79:bb:36:ae:3b:6d:39:7b:e9:41:fb:8b:b7: 87:bf:73:57:fa:99:45:b0:c0:29:b6:38:a1:1d:1c: cc:b7:65:84:8c:77:58:bb:ef:cd:98:40:32:0b:15: ed:15:95:fd:98:69:d4:9f:3f:e8:67:55:dc:e3:9e: f1:0c:de:bf:86:ea:fc:c4:b6:cd:9a:42:21:80:1d: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7D:6E:85:C5:D1:E3:20:3F:8F:CB:25:7D:F6:B9:1F:51:E3:E4:F3 X509v3 Authority Key Identifier: keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/cH1uhcXR4yA_j8slffa5H1Hj5PM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.48.0/22 IPv6: 2a0b:d7c4::/30 Signature Algorithm: sha256WithRSAEncryption 4f:d1:0d:39:c2:19:a6:ca:6b:c2:6a:f8:be:73:76:0c:b5:8e: c5:70:03:47:ad:57:ae:45:ac:97:f6:1c:91:f7:7b:d1:bc:03: 73:36:80:fa:48:18:a2:bb:ca:c5:96:81:21:d6:c8:7f:2c:b2: 48:f7:2f:2c:93:0e:99:5c:9b:82:b8:ee:fd:f6:39:4c:71:35: 99:cd:a2:b3:73:02:00:f4:06:11:a6:7d:3f:20:ee:d6:3e:c5: 36:e6:97:fd:87:8e:76:46:25:db:d0:79:30:b1:15:8c:9e:1a: 75:c8:d7:b4:80:fe:2a:df:f2:2d:5f:aa:ff:51:b6:99:fd:54: be:51:8e:0b:41:4d:fb:f1:55:fa:23:a8:22:fe:c1:40:ad:95: 32:e7:d7:ed:01:ab:ce:a3:9b:f6:d1:0d:c3:4b:87:17:5a:df: 75:88:d9:aa:c5:68:34:72:69:fc:dc:d5:bd:0a:2e:b8:50:c6: c6:e6:2d:2a:e9:19:0e:a9:75:e3:27:2c:3b:1c:98:ba:47:9a: db:45:3c:ab:b9:32:60:66:d3:05:59:14:fe:8a:7c:5c:e7:92: 0a:13:88:15:80:03:77:c6:9a:60:26:2c:39:bc:db:f0:a5:40: b9:f4:05:82:94:e9:f8:a1:ff:02:80:3c:ef:82:a8:d1:68:3f: 73:75:70:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Tv/CFqYNEgdmBFUcwZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm NjI1NTEwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDdkNmU4NWM1ZDFlMzIwM2Y4ZmNiMjU3ZGY2YjkxZjUxZTNlNGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKPYu6FgI6wPnkLyg8aT0+WMSYAN 34VJmZjp0EyYZ6WXUpHBsRvx20IofuyKM21iLHm+UfHHTy11dEUEz1UYLMUbANL0 e7uMTq4tNE35V90x5OETanPHMvgzYnh+GXeWx459E2yWK3Ft9bRJwo4MXefBgDTJ P7fCtt9PRSI73B3lMe8dgnV70BNcumoZvsyjgyLfbKIRA+pEJfbkw+ONeUezCXz4 Mynm2cTH5hXm28jhv6P3R3m7Nq47bTl76UH7i7eHv3NX+plFsMAptjihHRzMt2WE jHdYu+/NmEAyCxXtFZX9mGnUnz/oZ1Xc457xDN6/hur8xLbNmkIhgB2d7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHB9boXF0eMgP4/LJX32uR9R4+TzMB8GA1UdIwQY MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt YzRjZTNlODA3M2RiLzEvY0gxdWhjWFI0eUFfajhzbGZmYTVIMUhqNVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwWowMA0E AgACMAcDBQIqC9fEMA0GCSqGSIb3DQEBCwUAA4IBAQBP0Q05whmmymvCavi+c3YM tY7FcANHrVeuRayX9hyR93vRvANzNoD6SBiiu8rFloEh1sh/LLJI9y8skw6ZXJuC uO799jlMcTWZzaKzcwIA9AYRpn0/IO7WPsU25pf9h452RiXb0HkwsRWMnhp1yNe0 gP4q3/ItX6r/UbaZ/VS+UY4LQU378VX6I6gi/sFArZUy59ftAavOo5v20Q3DS4cX Wt91iNmqxWg0cmn83NW9Ci64UMbG5i0q6RkOqXXjJyw7HJi6R5rbRTyruTJgZtMF WRT+inxc55IKE4gVgAN3xppgJiw5vNvwpUC59AWClOn4of8CgDzvgqjRaD9zdXCP -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:01 2026 by rpki-client