This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa File: I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa (raw, json) Hash identifier: CvvU8QwgatBH8M1Cq+F7WmSuoj+U0VtrnMnDWpsz+50= Subject key identifier: 23:FF:99:0D:19:F0:21:ED:D8:C6:D2:12:05:F5:DD:EE:E4:ED:37:3A Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d Certificate serial: 019B78A2F0477B97C42E978F40A4216A82AC Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24675 IP address blocks: 193.178.1.0/24 maxlen: 24 193.178.2.0/24 maxlen: 24 193.178.3.0/24 maxlen: 24 193.178.4.0/24 maxlen: 24 193.178.5.0/24 maxlen: 24 193.178.6.0/24 maxlen: 24 193.178.7.0/24 maxlen: 24 193.178.8.0/24 maxlen: 24 193.178.9.0/24 maxlen: 24 193.178.10.0/24 maxlen: 24 193.178.11.0/24 maxlen: 24 193.178.12.0/24 maxlen: 24 193.178.13.0/24 maxlen: 24 193.178.14.0/24 maxlen: 24 193.178.15.0/24 maxlen: 24 193.178.16.0/22 maxlen: 22 193.178.20.0/24 maxlen: 24 193.178.21.0/24 maxlen: 24 193.178.29.0/24 maxlen: 24 193.178.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:47:7b:97:c4:2e:97:8f:40:a4:21:6a:82:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23ff990d19f021edd8c6d21205f5ddeee4ed373a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:73:76:fb:fa:7e:cb:ea:d0:9c:f4:3a:06: 38:de:f6:62:3e:a0:6e:fe:92:d1:29:ad:bd:63:b5: ad:90:b8:70:36:09:78:24:fe:43:79:80:d1:a7:97: 9a:af:e2:58:2c:75:d1:a1:77:e9:2b:36:d6:cc:1c: fb:75:22:b2:1a:39:59:16:ab:5e:b7:66:c8:71:5f: 91:b1:cd:4d:4e:0b:67:e2:5d:57:c6:f3:fe:8f:25: ef:df:24:2f:17:14:2b:c4:cc:46:de:a5:36:53:67: 4b:25:3f:80:7c:d2:e1:91:8d:30:69:a1:aa:b7:2a: 41:83:0b:ea:d8:f2:ff:1a:e8:f4:23:fa:3c:c5:4b: 30:21:72:e7:2d:50:fe:7f:01:a8:ab:e8:cc:d9:54: 70:a0:b6:ed:78:92:84:2f:e6:bb:ad:85:2b:36:55: 2f:39:90:5e:1b:89:44:5c:69:4c:b2:d4:7a:2b:65: 67:07:2a:fc:03:56:0b:f5:0e:9f:26:9f:59:18:f7: ea:9e:9b:f9:88:e6:1d:6d:29:2d:b0:a2:ba:6a:c2: 1b:16:12:84:60:04:c5:e2:f7:68:58:86:6d:9a:f2: 21:7a:30:64:dc:98:d5:49:51:71:09:17:5b:78:c2: 06:8f:d9:47:5e:54:41:26:d8:a1:b8:ab:77:14:20: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:99:0D:19:F0:21:ED:D8:C6:D2:12:05:F5:DD:EE:E4:ED:37:3A X509v3 Authority Key Identifier: keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.1.0-193.178.21.255 193.178.29.0-193.178.30.255 Signature Algorithm: sha256WithRSAEncryption 09:94:a1:6d:be:bb:d9:b8:45:62:2f:6a:01:20:1d:92:8e:4b: dc:a9:69:d2:7b:59:b6:c3:91:ad:b2:71:cb:47:13:cb:54:01: 25:b1:8f:28:a7:dc:64:cd:91:67:08:67:e8:aa:d8:2b:4a:ed: dc:c6:02:70:ad:a7:e9:1a:2f:3c:79:cb:57:f8:f5:f0:e8:44: 17:3b:db:1b:4e:44:25:cc:31:9a:8c:6f:69:fb:91:6d:c7:2d: 07:a2:3a:69:3f:75:78:f4:85:8f:9f:84:b9:98:d7:1b:b4:b2: 2f:0d:2f:e5:db:85:37:4f:5f:59:20:ec:b8:71:0a:b5:6b:f4: ff:43:2d:c6:70:25:57:01:24:9d:08:eb:c5:51:01:7b:95:78: 18:b8:65:9a:c4:fc:f6:62:14:30:e1:12:0d:30:5f:d9:c0:31: fe:0f:38:9d:c0:e8:64:f9:8d:29:4f:9c:df:d3:5e:8f:e7:1c: be:b3:84:66:92:71:85:26:64:a1:b7:7b:7b:9d:3f:01:54:d1: f0:fd:5a:44:95:eb:04:a5:e6:8d:09:b0:40:cf:ab:a1:17:22: af:a6:74:dc:65:a0:2b:84:bc:2a:57:cc:5e:da:56:d8:91:52: ec:a1:d4:6a:52:5d:b0:2f:bb:5f:34:f3:17:90:00:dd:fd:8a: ab:b1:38:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4ovBHe5fELpePQKQhaoKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj ODg1M2QwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2ZmOTkwZDE5ZjAyMWVkZDhjNmQyMTIwNWY1ZGRlZWU0ZWQzNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfxzdvv6fsvq0Jz0OgY43vZiPqBu /pLRKa29Y7WtkLhwNgl4JP5DeYDRp5ear+JYLHXRoXfpKzbWzBz7dSKyGjlZFqte t2bIcV+Rsc1NTgtn4l1XxvP+jyXv3yQvFxQrxMxG3qU2U2dLJT+AfNLhkY0waaGq typBgwvq2PL/Guj0I/o8xUswIXLnLVD+fwGoq+jM2VRwoLbteJKEL+a7rYUrNlUv OZBeG4lEXGlMstR6K2VnByr8A1YL9Q6fJp9ZGPfqnpv5iOYdbSktsKK6asIbFhKE YATF4vdoWIZtmvIhejBk3JjVSVFxCRdbeMIGj9lHXlRBJtihuKt3FCBhGQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFCP/mQ0Z8CHt2MbSEgX13e7k7Tc6MB8GA1UdIwQY MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt Zjk2MzMyOTJjOTc3LzEvSV8tWkRSbndJZTNZeHRJU0JmWGQ3dVR0TnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3 LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADBsgED BAHBshQwDAMEAMGyHQMEAMGyHjANBgkqhkiG9w0BAQsFAAOCAQEACZShbb672bhF Yi9qASAdko5L3Klp0ntZtsORrbJxy0cTy1QBJbGPKKfcZM2RZwhn6KrYK0rt3MYC cK2n6RovPHnLV/j18OhEFzvbG05EJcwxmoxvafuRbcctB6I6aT91ePSFj5+EuZjX G7SyLw0v5duFN09fWSDsuHEKtWv0/0MtxnAlVwEknQjrxVEBe5V4GLhlmsT89mIU MOESDTBf2cAx/g84ncDoZPmNKU+c39Nej+ccvrOEZpJxhSZkobd7e50/AVTR8P1a RJXrBKXmjQmwQM+roRcir6Z03GWgK4S8KlfMXtpW2JFS7KHUalJdsC+7XzTzF5AA 3f2Kq7E4uw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:27 2026 by rpki-client