This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/0SyND4Sf6FWPac9ewDSQ_5ruK7s.roa File: 0SyND4Sf6FWPac9ewDSQ_5ruK7s.roa (raw, json) Hash identifier: uXqH69dDSIWJzyxx0fDzquq4oK/+5ZopLJS3+FhxlOE= Subject key identifier: D1:2C:8D:0F:84:9F:E8:55:8F:69:CF:5E:C0:34:90:FF:9A:EE:2B:BB Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239 Certificate serial: 019B77C6DDB1FE2E19653CA2BF917FA95622 Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/0SyND4Sf6FWPac9ewDSQ_5ruK7s.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50343 IP address blocks: 109.233.152.0/21 maxlen: 24 185.169.112.0/22 maxlen: 24 2a01:8780::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dd:b1:fe:2e:19:65:3c:a2:bf:91:7f:a9:56:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d12c8d0f849fe8558f69cf5ec03490ff9aee2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:a2:e2:5d:3e:2a:72:cd:dd:c5:5e:e9:df: a3:55:6a:bc:5c:54:6f:86:ab:68:7a:03:19:07:a8: c5:89:34:ff:80:ef:a3:e6:eb:0b:23:05:74:e1:ef: b2:82:0e:92:f9:07:5c:bf:9b:44:35:e1:b4:8a:7b: 45:0d:3b:43:84:2b:ad:e1:37:7a:d7:55:6d:56:c2: 80:08:d2:76:02:54:f2:62:f5:51:6d:08:6a:b5:45: 7b:4a:79:d2:f7:13:d5:0e:ac:a0:b4:e3:73:9c:66: 6b:0d:38:37:c2:de:0a:eb:e3:93:51:c8:72:87:62: 8c:5f:7d:84:e0:59:52:0b:b9:6d:48:2f:cb:1e:fa: 88:e9:68:3e:d5:ab:5f:bd:06:11:0d:9b:f9:8a:34: 41:f2:99:c5:d9:54:a5:33:30:97:1c:05:bc:03:a9: 71:42:40:6e:5a:6b:2e:71:c4:6e:54:ea:74:94:27: 3d:b0:b6:8b:4d:f2:f5:76:8a:e1:af:18:a2:e5:ad: 5d:5e:7d:23:5b:0e:a9:5e:6e:70:cc:e1:be:fb:71: df:b4:ab:1c:bc:52:cf:f4:40:25:d3:64:a6:17:ad: dc:b8:32:80:64:f0:b1:65:07:14:35:95:2f:8b:66: 09:59:fd:7e:ee:8a:5c:75:d0:47:7b:d0:e8:ff:da: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2C:8D:0F:84:9F:E8:55:8F:69:CF:5E:C0:34:90:FF:9A:EE:2B:BB X509v3 Authority Key Identifier: keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/0SyND4Sf6FWPac9ewDSQ_5ruK7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.233.152.0/21 185.169.112.0/22 IPv6: 2a01:8780::/29 Signature Algorithm: sha256WithRSAEncryption 96:e8:90:88:33:a5:16:18:89:56:99:68:f9:da:3d:11:16:b9: ce:8b:64:29:38:5e:09:fc:5b:17:99:e1:bf:a5:35:89:c3:be: e0:07:e3:d6:fa:ca:a6:5f:2b:45:18:cf:27:92:12:fd:ca:55: c7:a5:fd:d1:8d:98:a3:77:da:0d:f6:f3:00:5d:f3:fd:84:4a: f7:98:68:6e:e2:8c:62:26:5a:8a:66:19:c1:94:de:5e:2b:f3: 52:c2:82:ec:01:da:8f:5c:d3:88:f0:1c:d8:50:68:81:1c:9d: 1e:1b:7b:89:4a:dc:a3:2f:5e:85:c0:99:c2:f1:cf:35:42:d0: b5:91:2c:6d:82:e1:2f:ab:5f:a1:b2:54:a3:de:f5:da:2c:64: a0:1a:99:58:75:fd:54:e5:6a:e1:33:9f:1d:78:56:dd:5d:7a: a1:13:e4:33:b5:2f:96:59:3f:5f:97:89:0e:17:14:a2:22:de: c1:4f:29:a8:de:11:f7:ce:60:02:fe:49:c4:f3:bf:11:df:84: 1d:06:e5:d5:cc:09:25:4a:cd:ce:8d:28:c4:23:62:11:ee:c4: ad:ae:bb:ab:0a:75:ff:93:6f:59:a0:3b:73:3f:7b:3f:22:3b: c9:38:98:90:18:6a:c3:05:8c:21:4c:ed:80:86:3f:52:b6:bd: 62:8a:a2:d9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xt2x/i4ZZTyiv5F/qVYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx NWIyMzkwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTJjOGQwZjg0OWZlODU1OGY2OWNmNWVjMDM0OTBmZjlhZWUyYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo2i4l0+KnLN3cVe6d+jVWq8XFRv hqtoegMZB6jFiTT/gO+j5usLIwV04e+ygg6S+Qdcv5tENeG0intFDTtDhCut4Td6 11VtVsKACNJ2AlTyYvVRbQhqtUV7SnnS9xPVDqygtONznGZrDTg3wt4K6+OTUchy h2KMX32E4FlSC7ltSC/LHvqI6Wg+1atfvQYRDZv5ijRB8pnF2VSlMzCXHAW8A6lx QkBuWmsuccRuVOp0lCc9sLaLTfL1dorhrxii5a1dXn0jWw6pXm5wzOG++3HftKsc vFLP9EAl02SmF63cuDKAZPCxZQcUNZUvi2YJWf1+7opcddBHe9Do/9qsowIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNEsjQ+En+hVj2nPXsA0kP+a7iu7MB8GA1UdIwQY MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt NWY0Yjg3YWRhNGI1LzEvMFN5TkQ0U2Y2RldQYWM5ZXdEU1FfNXJ1SzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1 LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDbemYAwQC ualwMA0EAgACMAcDBQMqAYeAMA0GCSqGSIb3DQEBCwUAA4IBAQCW6JCIM6UWGIlW mWj52j0RFrnOi2QpOF4J/FsXmeG/pTWJw77gB+PW+sqmXytFGM8nkhL9ylXHpf3R jZijd9oN9vMAXfP9hEr3mGhu4oxiJlqKZhnBlN5eK/NSwoLsAdqPXNOI8BzYUGiB HJ0eG3uJStyjL16FwJnC8c81QtC1kSxtguEvq1+hslSj3vXaLGSgGplYdf1U5Wrh M58deFbdXXqhE+QztS+WWT9fl4kOFxSiIt7BTymo3hH3zmAC/knE878R34QdBuXV zAklSs3OjSjEI2IR7sStrrurCnX/k29ZoDtzP3s/IjvJOJiQGGrDBYwhTO2Ahj9S tr1iiqLZ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:34 2026 by rpki-client