This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/0NVXEBts1GHVv4B_kf_qMYKFrjQ.roa File: 0NVXEBts1GHVv4B_kf_qMYKFrjQ.roa (raw, json) Hash identifier: ymJ9E5zFJtO9E2bSduD+yGW92ZhZcRsYdjAIFiD2QPs= Subject key identifier: D0:D5:57:10:1B:6C:D4:61:D5:BF:80:7F:91:FF:EA:31:82:85:AE:34 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C733E9FA982348659F7CC504B81781 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/0NVXEBts1GHVv4B_kf_qMYKFrjQ.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42728 IP address blocks: 193.232.241.0/24 maxlen: 24 2a0c:a9c7:241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:e9:fa:98:23:48:65:9f:7c:c5:04:b8:17:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0d557101b6cd461d5bf807f91ffea318285ae34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:b8:b1:18:f6:84:f1:97:7c:0e:d8:1b:1f: 62:32:c9:13:b6:00:7e:62:29:b0:da:36:b4:02:f7: 1d:9e:44:06:5a:79:52:8a:3e:89:69:a6:04:0d:0c: 94:0c:8f:53:b3:16:d6:8d:a3:42:1a:dd:c3:05:56: ea:77:16:48:36:f3:52:62:06:61:17:1a:a6:32:6d: 7d:51:ca:a8:2b:fe:9a:b1:3f:79:66:f8:de:8c:3f: 4b:3c:9a:3c:2b:4a:4b:c0:18:f8:c1:2f:74:2b:e8: 22:5c:9c:cb:3b:f1:4a:d2:96:43:e8:64:d4:60:f4: de:49:a5:ec:22:6d:cf:c0:aa:21:9c:28:09:12:fd: e6:d3:63:3b:5b:4c:84:d4:a9:fa:06:ca:dc:6c:1d: 4c:ec:ca:c0:4f:93:c2:d2:33:5a:fa:d8:af:d1:51: 7d:88:68:c9:a1:0c:ee:fa:03:cb:90:31:e4:89:46: 84:78:e1:fc:99:ad:cf:a2:05:d2:25:bf:5d:b3:16: 51:f0:ad:2d:f0:c9:0f:bd:a8:c1:17:cf:b5:11:61: 55:37:6b:fb:9d:86:a9:a0:15:db:63:76:83:e3:52: 53:6b:74:52:b0:1d:2c:27:a8:1d:ce:91:ae:11:cd: fd:fe:87:ea:c5:05:eb:da:a9:b4:37:5c:e0:c5:05: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D5:57:10:1B:6C:D4:61:D5:BF:80:7F:91:FF:EA:31:82:85:AE:34 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/0NVXEBts1GHVv4B_kf_qMYKFrjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.241.0/24 IPv6: 2a0c:a9c7:241::/48 Signature Algorithm: sha256WithRSAEncryption bb:6e:ab:47:ba:ef:e7:a3:32:5d:98:7b:dc:8c:11:35:ad:aa: 0d:9b:e6:86:14:c9:79:82:2a:aa:32:38:e6:01:46:d5:c0:1c: 38:40:a9:51:78:73:c8:2d:89:c3:c0:f8:e3:7f:12:0b:14:7d: 30:cf:50:63:db:fc:aa:bb:ad:65:ff:60:d1:c1:40:d6:55:62: 70:70:f3:36:c0:ab:a1:45:90:83:4c:1e:bf:46:ce:ce:07:22: d5:04:74:14:dc:35:41:00:e1:ed:cf:53:3c:05:51:ea:45:1b: 6a:50:6a:5c:37:ba:13:f3:78:25:b0:88:a0:f1:ea:e9:a5:94: ec:83:2a:5f:ee:63:c6:09:aa:0c:9b:a5:af:92:a5:6c:5d:8f: 40:81:83:29:92:9d:3f:97:ff:9f:71:f8:56:94:04:ef:9c:d4: 14:1f:37:fa:e1:e8:0e:4b:be:f4:db:77:7c:88:a7:c9:7b:39: 25:7a:79:15:72:f7:52:89:1b:30:ee:e7:9c:4f:41:27:21:6d: 6e:ad:55:b7:eb:8b:02:0b:58:d3:8c:ff:4d:e5:51:50:fc:0a: 98:28:a2:88:8a:77:33:b2:1e:da:4b:9c:20:e6:d7:2e:43:40: e2:37:22:a0:34:aa:54:e1:a0:d8:1d:c3:4e:0a:69:ac:cb:b7: 76:3f:ca:ee -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xzPp+pgjSGWffMUEuBeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGQ1NTcxMDFiNmNkNDYxZDViZjgwN2Y5MWZmZWEzMTgyODVhZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudq4sRj2hPGXfA7YGx9iMskTtgB+ Yimw2ja0AvcdnkQGWnlSij6JaaYEDQyUDI9TsxbWjaNCGt3DBVbqdxZINvNSYgZh FxqmMm19UcqoK/6asT95ZvjejD9LPJo8K0pLwBj4wS90K+giXJzLO/FK0pZD6GTU YPTeSaXsIm3PwKohnCgJEv3m02M7W0yE1Kn6BsrcbB1M7MrAT5PC0jNa+tiv0VF9 iGjJoQzu+gPLkDHkiUaEeOH8ma3PogXSJb9dsxZR8K0t8MkPvajBF8+1EWFVN2v7 nYapoBXbY3aD41JTa3RSsB0sJ6gdzpGuEc39/ofqxQXr2qm0N1zgxQUhOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNDVVxAbbNRh1b+Af5H/6jGCha40MB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvME5WWEVCdHMxR0hWdjRCX2tmX3FNWUtGcmpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwejxMA8E AgACMAkDBwAqDKnHAkEwDQYJKoZIhvcNAQELBQADggEBALtuq0e67+ejMl2Ye9yM ETWtqg2b5oYUyXmCKqoyOOYBRtXAHDhAqVF4c8gticPA+ON/EgsUfTDPUGPb/Kq7 rWX/YNHBQNZVYnBw8zbAq6FFkINMHr9Gzs4HItUEdBTcNUEA4e3PUzwFUepFG2pQ alw3uhPzeCWwiKDx6umllOyDKl/uY8YJqgybpa+SpWxdj0CBgymSnT+X/59x+FaU BO+c1BQfN/rh6A5LvvTbd3yIp8l7OSV6eRVy91KJGzDu55xPQSchbW6tVbfriwIL WNOM/03lUVD8CpgoooiKdzOyHtpLnCDm1y5DQOI3IqA0qlThoNgdw04KaazLt3Y/ yu4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:18 2026 by rpki-client