This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/kW4drk2LDPNcQ18FgzKd9iSfVfo.roa File: kW4drk2LDPNcQ18FgzKd9iSfVfo.roa (raw, json) Hash identifier: wnwxedVG+s68D4H1gWYhMG2g4d0oAegzbZPXw3fMM7c= Subject key identifier: 91:6E:1D:AE:4D:8B:0C:F3:5C:43:5F:05:83:32:9D:F6:24:9F:55:FA Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772 Certificate serial: 019B7AC844958EF27E96EDAD4F93C267A9BC Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/kW4drk2LDPNcQ18FgzKd9iSfVfo.roa Signing time: Thu 01 Jan 2026 18:18:23 +0000 ROA not before: Thu 01 Jan 2026 18:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43528 IP address blocks: 193.201.192.0/22 maxlen: 27 193.201.192.0/24 maxlen: 24 193.201.193.0/24 maxlen: 24 193.201.194.0/24 maxlen: 24 193.201.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:44:95:8e:f2:7e:96:ed:ad:4f:93:c2:67:a9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772 Validity Not Before: Jan 1 18:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=916e1dae4d8b0cf35c435f0583329df6249f55fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:2f:f2:80:17:db:b8:4e:b2:94:d2:0a:f0: d7:5a:0b:52:bc:ad:34:ef:c2:26:03:ca:7d:3b:72: 42:9d:e8:1c:77:46:6c:8d:0f:43:dd:a9:18:a5:6d: 5c:18:e0:b8:d5:0d:87:5d:e0:9a:77:94:5c:e1:65: 2d:d4:f3:6c:9e:03:04:45:ca:df:92:21:d4:82:e2: b9:55:15:fd:61:e4:06:6c:78:73:a8:f9:87:c6:e5: 70:fc:ff:98:2b:dd:00:0a:bc:8c:d3:47:7b:62:38: 0d:f1:94:3d:9b:7a:d8:15:7b:2a:63:90:e8:52:32: c6:f6:a4:dc:0c:63:94:31:97:84:39:3e:5e:f8:0d: 75:99:a0:1d:98:06:46:90:ea:f3:e1:0c:a0:05:81: 33:5a:56:9d:02:00:db:5e:d7:9b:38:50:af:2e:cb: 04:7a:0c:da:eb:16:b2:df:29:48:7c:df:da:6d:6d: af:87:76:dd:51:d8:13:a5:22:f9:31:8a:5d:8b:44: 85:bd:c4:25:bb:a4:75:7c:0e:7a:dd:5f:0e:ac:69: 01:2c:eb:ad:cb:b2:a7:8f:c8:71:b4:29:9e:1a:ae: 0c:d1:02:09:9d:1b:da:d4:85:f0:8c:f3:04:d0:1a: 17:1a:7c:f1:54:68:bf:f0:18:e2:34:91:91:ff:0e: 8e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6E:1D:AE:4D:8B:0C:F3:5C:43:5F:05:83:32:9D:F6:24:9F:55:FA X509v3 Authority Key Identifier: keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/kW4drk2LDPNcQ18FgzKd9iSfVfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.192.0/22 Signature Algorithm: sha256WithRSAEncryption 56:f6:69:78:27:5d:89:3f:26:dd:0d:7d:c3:98:8b:8c:75:af: b9:ec:fe:61:81:15:fb:8e:46:f5:86:5f:88:87:6b:90:1f:db: e9:c8:b9:93:dd:c4:dd:ce:75:45:07:00:57:0f:21:2c:e6:cc: 91:ed:b4:3d:d6:12:08:37:a8:cf:8f:15:e0:b2:50:88:d4:cc: 5c:89:5f:38:02:23:ce:81:10:e6:7d:e3:23:95:82:c1:2f:8e: e9:e0:b3:69:f2:a4:11:91:10:eb:e7:94:61:7f:e9:44:c1:e8: 8f:05:7b:06:2e:88:e4:3f:60:d5:5b:c1:0b:c2:dc:6b:be:f1: e6:d2:85:21:d8:5c:35:81:07:02:f5:36:8f:81:1b:d3:cd:b5: 80:16:c4:cc:73:14:1b:77:f8:9f:e5:8b:8c:c6:df:66:d8:37: e0:87:39:9e:a4:53:33:48:cf:0d:7f:20:b7:a7:13:1d:43:92: f4:2f:dc:a1:b5:2d:b5:10:ea:7f:d9:56:7d:5d:57:62:6c:10: 4e:ff:37:f0:3c:0d:40:75:be:bd:d4:07:39:e6:2f:2f:a9:fe: 6e:7b:22:aa:2e:7d:7c:6f:5f:44:57:5a:63:e0:2f:04:eb:5e: 35:a0:bb:f8:6e:73:28:cd:5c:89:6a:10:a1:d2:d7:d4:79:a3: a7:04:f3:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yESVjvJ+lu2tT5PCZ6m8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjFkN2MzYjRlZTg3MjMzMzZhNjU4NTM5YWE3MzQ2ZjIz ZDY3NzIwHhcNMjYwMTAxMTgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTZlMWRhZTRkOGIwY2YzNWM0MzVmMDU4MzMyOWRmNjI0OWY1NWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDUv8oAX27hOspTSCvDXWgtSvK00 78ImA8p9O3JCnegcd0ZsjQ9D3akYpW1cGOC41Q2HXeCad5Rc4WUt1PNsngMERcrf kiHUguK5VRX9YeQGbHhzqPmHxuVw/P+YK90ACryM00d7YjgN8ZQ9m3rYFXsqY5Do UjLG9qTcDGOUMZeEOT5e+A11maAdmAZGkOrz4QygBYEzWladAgDbXtebOFCvLssE egza6xay3ylIfN/abW2vh3bdUdgTpSL5MYpdi0SFvcQlu6R1fA563V8OrGkBLOut y7Knj8hxtCmeGq4M0QIJnRva1IXwjPME0BoXGnzxVGi/8BjiNJGR/w6O7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFuHa5NiwzzXENfBYMynfYkn1X6MB8GA1UdIwQY MBaAFMmx18O07ocjM2plhTmqc0byPWdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgt MTY0Y2M2YTRlZDFlLzEva1c0ZHJrMkxEUE5jUTE4Rmd6S2Q5aVNmVmZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgtMTY0Y2M2YTRlZDFl LzEveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwcnAMA0G CSqGSIb3DQEBCwUAA4IBAQBW9ml4J12JPybdDX3DmIuMda+57P5hgRX7jkb1hl+I h2uQH9vpyLmT3cTdznVFBwBXDyEs5syR7bQ91hIIN6jPjxXgslCI1MxciV84AiPO gRDmfeMjlYLBL47p4LNp8qQRkRDr55Rhf+lEweiPBXsGLojkP2DVW8ELwtxrvvHm 0oUh2Fw1gQcC9TaPgRvTzbWAFsTMcxQbd/if5YuMxt9m2DfghzmepFMzSM8NfyC3 pxMdQ5L0L9yhtS21EOp/2VZ9XVdibBBO/zfwPA1Adb691Ac55i8vqf5ueyKqLn18 b19EV1pj4C8E6141oLv4bnMozVyJahCh0tfUeaOnBPNK -----END CERTIFICATE-----Generated at Thu Jan 29 13:05:51 2026 by rpki-client