This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/rRKv9CxGyUCT4BR0ojzvLolgqHY.roa File: rRKv9CxGyUCT4BR0ojzvLolgqHY.roa (raw, json) Hash identifier: PKrbbfUo5w96wJrjh8BIjySL4ib4nKQRw9UtDNlC4HU= Subject key identifier: AD:12:AF:F4:2C:46:C9:40:93:E0:14:74:A2:3C:EF:2E:89:60:A8:76 Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08 Certificate serial: 019B78A30C96DC6FC89CB6C0BDF7CC47F169 Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/rRKv9CxGyUCT4BR0ojzvLolgqHY.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34950 IP address blocks: 193.242.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0c:96:dc:6f:c8:9c:b6:c0:bd:f7:cc:47:f1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad12aff42c46c94093e01474a23cef2e8960a876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:1d:0e:10:29:2f:fc:b8:de:a1:e2:21:21: a2:ad:ec:7e:d1:40:ec:63:22:81:40:e7:ff:86:98: c6:d3:2a:6c:8d:26:5c:21:87:69:54:63:06:af:e8: 0c:15:ea:bc:a7:19:ed:f8:1d:bd:f9:5a:78:2f:36: 00:f6:83:36:0c:cc:98:9f:b9:7a:f2:fc:5b:3a:f4: 7f:35:b5:b9:9c:62:f3:4a:52:6b:c6:52:d4:89:2e: 39:05:ef:55:87:a9:50:dc:30:34:7e:02:86:ea:72: 17:40:08:cc:f4:92:38:d1:18:3b:e3:18:ad:89:f9: 79:13:8e:d6:30:d4:ff:a9:b2:1d:81:16:b3:80:76: df:a2:ec:4c:1e:03:76:01:52:7f:90:dc:df:df:cc: 3a:d8:45:79:69:8c:1f:8f:bf:0d:98:54:54:50:0d: af:11:84:ff:f1:00:23:99:10:e3:ba:8e:1d:63:dc: b1:d6:00:0d:c7:26:da:54:56:89:a2:e9:b3:ca:13: 6a:8b:d4:a9:5b:9d:01:3c:f2:20:8e:55:5e:29:4f: 98:e5:69:d9:45:77:d6:b4:ec:37:b2:38:dd:f4:13: 0e:01:fc:74:56:ea:71:56:83:4e:51:b4:d8:a0:94: 9c:ae:6c:a9:c0:f1:e5:c4:0c:6d:88:13:a5:11:5f: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:12:AF:F4:2C:46:C9:40:93:E0:14:74:A2:3C:EF:2E:89:60:A8:76 X509v3 Authority Key Identifier: keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/rRKv9CxGyUCT4BR0ojzvLolgqHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.103.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:4d:d7:93:3d:7b:74:1e:72:ab:52:57:b9:bf:fe:94:22:3f: 0d:cc:77:5f:58:23:07:38:4d:2a:5f:d5:8e:0e:87:8f:f7:6c: 5b:d9:8f:b8:59:63:bc:01:53:8b:77:26:6c:f4:f0:b6:db:cc: a5:21:e6:1b:6c:1b:55:47:0c:79:a0:bc:09:ef:e2:24:2a:4b: 47:9b:4b:75:14:2b:21:81:51:f7:2b:25:65:06:b8:0e:5e:7b: bf:99:f2:73:c4:24:70:92:03:dd:6c:00:00:a3:63:18:10:58: 89:4b:2f:3f:1a:70:7e:77:a3:61:78:69:81:eb:8a:05:0d:2a: aa:dd:82:41:71:b3:93:03:da:73:a0:72:5a:2f:61:bf:43:13: 29:a8:47:2a:b1:65:ec:1c:11:29:21:92:70:22:30:64:23:cd: b0:fb:0c:b1:63:cd:8b:84:d3:b3:46:ef:d2:27:50:ee:ce:fa: d5:81:b2:85:50:38:46:e3:d8:e2:01:dc:35:d1:9c:b4:e4:07: 2f:4c:08:79:d5:cc:4f:50:e6:f4:b8:7f:9d:fa:4b:59:45:47: 67:06:3d:57:81:30:e1:6b:8b:5d:ab:27:55:b7:15:6d:34:2b: 50:e1:33:af:35:9d:34:10:26:98:2d:fa:56:d5:33:07:71:6a: 73:8b:57:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owyW3G/InLbAvffMR/FpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNGM3ODcwMTkzZGRmY2RiODkwYjY2NDdjYzhiNTZjMTE5 NmZmMDgwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDEyYWZmNDJjNDZjOTQwOTNlMDE0NzRhMjNjZWYyZTg5NjBhODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxYdDhApL/y43qHiISGirex+0UDs YyKBQOf/hpjG0ypsjSZcIYdpVGMGr+gMFeq8pxnt+B29+Vp4LzYA9oM2DMyYn7l6 8vxbOvR/NbW5nGLzSlJrxlLUiS45Be9Vh6lQ3DA0fgKG6nIXQAjM9JI40Rg74xit ifl5E47WMNT/qbIdgRazgHbfouxMHgN2AVJ/kNzf38w62EV5aYwfj78NmFRUUA2v EYT/8QAjmRDjuo4dY9yx1gANxybaVFaJoumzyhNqi9SpW50BPPIgjlVeKU+Y5WnZ RXfWtOw3sjjd9BMOAfx0VupxVoNOUbTYoJScrmypwPHlxAxtiBOlEV/VPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK0Sr/QsRslAk+AUdKI87y6JYKh2MB8GA1UdIwQY MBaAFD1MeHAZPd/NuJC2ZHzItWwRlv8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEt MWViYTZmZjc3ZWFjLzEvclJLdjlDeEd5VUNUNEJSMG9qenZMb2xncUhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEtMWViYTZmZjc3ZWFj LzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfJnMA0G CSqGSIb3DQEBCwUAA4IBAQBcTdeTPXt0HnKrUle5v/6UIj8NzHdfWCMHOE0qX9WO DoeP92xb2Y+4WWO8AVOLdyZs9PC228ylIeYbbBtVRwx5oLwJ7+IkKktHm0t1FCsh gVH3KyVlBrgOXnu/mfJzxCRwkgPdbAAAo2MYEFiJSy8/GnB+d6NheGmB64oFDSqq 3YJBcbOTA9pzoHJaL2G/QxMpqEcqsWXsHBEpIZJwIjBkI82w+wyxY82LhNOzRu/S J1DuzvrVgbKFUDhG49jiAdw10Zy05AcvTAh51cxPUOb0uH+d+ktZRUdnBj1XgTDh a4tdqydVtxVtNCtQ4TOvNZ00ECaYLfpW1TMHcWpzi1fu -----END CERTIFICATE-----Generated at Tue Feb 10 07:30:49 2026 by rpki-client