This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s1mTD9Rddiy89QAF1AtOmO8EmNw.roa File: s1mTD9Rddiy89QAF1AtOmO8EmNw.roa (raw, json) Hash identifier: cfZ3H6/jn9OftoW/9a/g+4fCFaBAxSLakZsiEgkr34M= Subject key identifier: B3:59:93:0F:D4:5D:76:2C:BC:F5:00:05:D4:0B:4E:98:EF:04:98:DC Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81 Certificate serial: 019B7DCA8F2DD9CC63B6C5072C48EC5A361F Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s1mTD9Rddiy89QAF1AtOmO8EmNw.roa Signing time: Fri 02 Jan 2026 08:19:45 +0000 ROA not before: Fri 02 Jan 2026 08:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25111 IP address blocks: 193.0.56.0/24 maxlen: 24 193.0.57.0/24 maxlen: 24 193.0.58.0/24 maxlen: 24 193.0.59.0/24 maxlen: 24 193.0.60.0/24 maxlen: 24 2001:67c:184::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8f:2d:d9:cc:63:b6:c5:07:2c:48:ec:5a:36:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81 Validity Not Before: Jan 2 08:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b359930fd45d762cbcf50005d40b4e98ef0498dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:ee:6a:b1:c7:fd:5e:b9:88:a9:5c:3b:f0: 51:22:dd:95:34:c7:a7:9a:93:50:fd:d7:ba:3e:a8: f9:c7:0f:86:20:ed:d9:7a:10:df:38:20:42:ce:eb: 15:75:f5:17:5b:66:f6:43:2e:52:0f:85:a9:47:a5: e9:08:4b:79:43:f7:4b:e5:35:a3:12:2f:fc:28:12: 4e:73:30:09:cf:c8:34:34:67:4b:f9:9a:27:00:b9: ed:85:2a:72:dc:37:37:fc:5c:ab:86:a7:07:9b:92: 6d:00:f7:f4:cf:07:08:09:23:9b:e6:e2:82:01:5f: 7a:64:1c:52:7e:84:dc:16:65:6b:a0:94:ba:0b:7e: f5:00:73:c5:d9:f5:72:87:51:b5:46:1d:78:e5:a3: a6:bc:47:4e:bd:cd:0f:f9:04:64:6f:76:27:9b:51: 62:06:4a:80:64:ef:f9:a2:0b:db:7a:02:bf:c1:52: be:3c:66:31:76:10:ce:05:a5:63:8a:ff:d6:66:99: 87:fd:cd:99:bb:e3:e8:b1:37:70:93:49:58:05:42: f3:3f:e3:09:f4:e3:38:31:a8:44:d4:af:d4:65:01: ec:16:22:2b:93:15:4b:2c:f1:25:62:1f:53:68:31: 09:dc:87:f0:6a:b3:b9:60:86:5c:ca:fc:c6:a2:ee: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:59:93:0F:D4:5D:76:2C:BC:F5:00:05:D4:0B:4E:98:EF:04:98:DC X509v3 Authority Key Identifier: keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s1mTD9Rddiy89QAF1AtOmO8EmNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.56.0-193.0.60.255 IPv6: 2001:67c:184::/48 Signature Algorithm: sha256WithRSAEncryption 77:02:e9:2b:c5:9a:cd:81:75:6f:f9:d4:76:99:07:1c:12:22: 53:d2:a1:ea:69:4d:52:47:92:c7:89:b2:95:8d:7a:88:f4:87: 32:c5:5c:75:ea:d5:f8:a0:2f:7c:c8:69:25:65:46:86:bb:a1: d1:88:94:d5:36:85:f7:25:4d:16:07:2b:07:c4:0d:00:9d:14: fd:af:27:c1:d0:16:2f:dd:3f:06:4a:16:c8:7b:91:ef:3f:a7: db:26:a5:bb:18:5b:b6:28:c4:58:d1:22:9c:48:89:74:79:6d: 1d:c6:7a:96:4b:90:6e:4d:e5:51:7b:9e:35:54:cb:cc:32:ce: 49:0d:d2:ed:eb:e9:df:1f:2d:6e:00:a4:39:0f:3f:ef:63:24: 9a:4a:87:aa:56:8e:72:16:14:a4:f0:df:da:81:47:86:a6:67: 4f:8b:40:57:7c:5d:d8:e7:fd:09:d1:5e:80:25:ff:f7:32:d5: d1:e3:01:68:42:5c:45:7c:82:c8:85:c2:4b:b4:29:2d:a0:c1: b1:6f:02:a1:cd:28:57:a2:19:aa:97:51:b5:e7:41:45:ce:55: c4:10:08:1c:de:d3:b2:eb:ee:d9:e1:9d:0b:e8:00:d9:cc:18: 53:0d:93:ea:bd:9c:75:7b:b4:32:2c:e3:fd:a4:94:2e:65:ca: e2:ca:cd:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9yo8t2cxjtsUHLEjsWjYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzODU5NDE0NjIwMmUyZjZjMzQ1NmIwNjk2ZmYxODU2MmYx YjlmODEwHhcNMjYwMTAyMDgxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzU5OTMwZmQ0NWQ3NjJjYmNmNTAwMDVkNDBiNGU5OGVmMDQ5OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+HuarHH/V65iKlcO/BRIt2VNMen mpNQ/de6Pqj5xw+GIO3ZehDfOCBCzusVdfUXW2b2Qy5SD4WpR6XpCEt5Q/dL5TWj Ei/8KBJOczAJz8g0NGdL+ZonALnthSpy3Dc3/FyrhqcHm5JtAPf0zwcICSOb5uKC AV96ZBxSfoTcFmVroJS6C371AHPF2fVyh1G1Rh145aOmvEdOvc0P+QRkb3Ynm1Fi BkqAZO/5ogvbegK/wVK+PGYxdhDOBaVjiv/WZpmH/c2Zu+PosTdwk0lYBULzP+MJ 9OM4MahE1K/UZQHsFiIrkxVLLPElYh9TaDEJ3IfwarO5YIZcyvzGou7BLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNZkw/UXXYsvPUABdQLTpjvBJjcMB8GA1UdIwQY MBaAFLOFlBRiAuL2w0VrBpb/GFYvG5+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQt NDNiYjE5ZjJlNTNiLzEvczFtVEQ5UmRkaXk4OVFBRjFBdE9tTzhFbU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQtNDNiYjE5ZjJlNTNi LzEvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAPBADgD BADBADwwDwQCAAIwCQMHACABBnwBhDANBgkqhkiG9w0BAQsFAAOCAQEAdwLpK8Wa zYF1b/nUdpkHHBIiU9Kh6mlNUkeSx4mylY16iPSHMsVcderV+KAvfMhpJWVGhruh 0YiU1TaF9yVNFgcrB8QNAJ0U/a8nwdAWL90/BkoWyHuR7z+n2yaluxhbtijEWNEi nEiJdHltHcZ6lkuQbk3lUXueNVTLzDLOSQ3S7evp3x8tbgCkOQ8/72MkmkqHqlaO chYUpPDf2oFHhqZnT4tAV3xd2Of9CdFegCX/9zLV0eMBaEJcRXyCyIXCS7QpLaDB sW8Coc0oV6IZqpdRtedBRc5VxBAIHN7Tsuvu2eGdC+gA2cwYUw2T6r2cdXu0Mizj /aSULmXK4srNfA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:16 2026 by rpki-client