This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/0eAROzpm6uCvXC9n0Dz62lsi3LU.roa File: 0eAROzpm6uCvXC9n0Dz62lsi3LU.roa (raw, json) Hash identifier: Ei3iDDLRtSjFP0M+gyfY2FSts+TJaqWB4uuLlvSNAQw= Subject key identifier: D1:E0:11:3B:3A:66:EA:E0:AF:5C:2F:67:D0:3C:FA:DA:5B:22:DC:B5 Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8 Certificate serial: 019B78A27B48FD89973E1CD46FAAFC0F49E4 Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/0eAROzpm6uCvXC9n0Dz62lsi3LU.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.93.64.0/24 maxlen: 24 193.93.65.0/24 maxlen: 24 193.93.66.0/24 maxlen: 24 193.93.67.0/24 maxlen: 24 2001:678:890::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7b:48:fd:89:97:3e:1c:d4:6f:aa:fc:0f:49:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1e0113b3a66eae0af5c2f67d03cfada5b22dcb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:fd:02:f1:78:c5:ad:67:92:ec:76:4b:70: 83:08:90:00:f4:70:ad:ba:94:08:e7:98:d9:cf:04: 35:8d:7e:90:5c:50:2c:a0:b8:7f:bb:d6:a7:79:07: 86:b6:51:14:b3:3d:a3:34:83:e7:14:be:c0:e2:bd: 35:77:d8:a1:d4:bc:9b:ef:04:45:73:0f:46:3c:2d: 9a:64:f3:88:60:70:2a:18:2d:7c:42:a1:d4:16:0d: b4:52:d1:6f:ef:7e:95:e0:8a:d8:3b:89:5f:51:3b: 66:1d:a8:d0:b9:92:c2:54:37:32:62:fc:19:fc:2b: 7e:bb:b0:7b:53:77:03:d4:b3:0e:25:42:b2:40:8a: cf:b8:f7:31:6c:f8:c7:3b:c1:20:ec:d4:12:06:55: 74:77:58:51:ba:3e:a7:1b:29:1e:ca:32:e0:13:c2: f1:1f:ab:c0:65:e2:4b:29:0e:f3:c0:9c:1a:44:21: 24:28:3f:25:f1:03:db:6e:ee:b8:72:b7:1a:07:a4: 58:c7:3a:1d:97:e8:69:bc:95:40:ee:a2:4a:f5:61: 3b:8a:b3:93:f7:71:31:72:33:a6:4e:45:53:4d:1a: 1c:74:97:0b:ff:b9:23:e7:dd:fe:c2:db:94:fb:8a: 4a:7d:80:27:eb:79:6b:86:4c:4d:17:ef:f4:83:85: 55:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:11:3B:3A:66:EA:E0:AF:5C:2F:67:D0:3C:FA:DA:5B:22:DC:B5 X509v3 Authority Key Identifier: keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/0eAROzpm6uCvXC9n0Dz62lsi3LU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.64.0/22 IPv6: 2001:678:890::/48 Signature Algorithm: sha256WithRSAEncryption 67:23:16:20:a5:54:5d:30:1d:1d:ad:a3:04:31:46:5c:c6:18: 9a:d0:81:da:1e:e9:35:b4:b9:3f:90:7b:7e:bc:0c:17:76:40: 88:68:b2:74:8a:1c:36:ce:68:a7:f0:1c:33:70:41:44:04:d4: ca:eb:a8:15:b5:cf:76:8c:c9:1a:0f:68:33:2d:19:e1:55:a4: 1b:af:60:d0:f2:98:06:46:ee:b2:f9:1c:3e:6e:96:74:c2:64: 7c:2b:9b:4a:45:6d:fd:6e:ab:b5:a7:32:53:73:08:ed:07:b8: 39:e1:15:dc:4d:0a:23:63:c3:57:f1:f9:3d:c3:b3:18:ef:f9: 3b:09:46:ae:03:a1:e7:a6:aa:b6:48:3f:48:6b:7f:f8:f5:ef: 25:a1:2d:4b:50:42:b6:43:c3:a1:f4:99:5d:53:12:8f:42:c7: 3d:15:ed:ef:a1:32:6c:78:b7:cd:55:ed:a9:53:01:27:96:33: 4c:b1:7e:40:f4:fa:f2:47:74:fb:97:dc:d7:f8:a5:3a:b8:a6: b9:fe:83:90:11:3f:1e:5f:e0:c7:0d:ef:b5:23:c5:f5:45:9a: b1:b0:73:6e:61:e5:ba:a3:a4:2d:3d:15:95:bd:df:89:10:5e: 66:3b:06:68:5b:9f:20:04:d9:7c:25:ce:9b:1f:78:bc:7d:37: 30:dd:2d:a0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4ontI/YmXPhzUb6r8D0nkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3 OTAwYTgwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWUwMTEzYjNhNjZlYWUwYWY1YzJmNjdkMDNjZmFkYTViMjJkY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHX9AvF4xa1nkux2S3CDCJAA9HCt upQI55jZzwQ1jX6QXFAsoLh/u9aneQeGtlEUsz2jNIPnFL7A4r01d9ih1Lyb7wRF cw9GPC2aZPOIYHAqGC18QqHUFg20UtFv736V4IrYO4lfUTtmHajQuZLCVDcyYvwZ /Ct+u7B7U3cD1LMOJUKyQIrPuPcxbPjHO8Eg7NQSBlV0d1hRuj6nGykeyjLgE8Lx H6vAZeJLKQ7zwJwaRCEkKD8l8QPbbu64crcaB6RYxzodl+hpvJVA7qJK9WE7irOT 93ExcjOmTkVTTRocdJcL/7kj593+wtuU+4pKfYAn63lrhkxNF+/0g4VVOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNHgETs6Zurgr1wvZ9A8+tpbIty1MB8GA1UdIwQY MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt NTY2M2RlMTZkNjZmLzEvMGVBUk96cG02dUN2WEM5bjBEejYybHNpM0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwV1AMA8E AgACMAkDBwAgAQZ4CJAwDQYJKoZIhvcNAQELBQADggEBAGcjFiClVF0wHR2towQx RlzGGJrQgdoe6TW0uT+Qe368DBd2QIhosnSKHDbOaKfwHDNwQUQE1MrrqBW1z3aM yRoPaDMtGeFVpBuvYNDymAZG7rL5HD5ulnTCZHwrm0pFbf1uq7WnMlNzCO0HuDnh FdxNCiNjw1fx+T3Dsxjv+TsJRq4DoeemqrZIP0hrf/j17yWhLUtQQrZDw6H0mV1T Eo9Cxz0V7e+hMmx4t81V7alTASeWM0yxfkD0+vJHdPuX3Nf4pTq4prn+g5ARPx5f 4McN77UjxfVFmrGwc25h5bqjpC09FZW934kQXmY7BmhbnyAE2XwlzpsfeLx9NzDd LaA= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:20 2026 by rpki-client