This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa File: DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa (raw, json) Hash identifier: 1IKdEVdxinUDX4GEoCU9iDa0wsb9FYEO+VbnWoVZHRQ= Subject key identifier: 0C:C6:23:19:55:C5:D3:84:45:C1:49:FA:50:25:97:93:E9:A0:AE:74 Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e Certificate serial: 019BD643BCDD4C657B85F0B6344DFC4A916A Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa Signing time: Mon 19 Jan 2026 12:38:41 +0000 ROA not before: Mon 19 Jan 2026 12:38:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202225 IP address blocks: 193.93.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:43:bc:dd:4c:65:7b:85:f0:b6:34:4d:fc:4a:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e Validity Not Before: Jan 19 12:38:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cc6231955c5d38445c149fa50259793e9a0ae74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:cb:87:3b:1d:bb:2f:0d:e8:2e:ef:5e:d0: 05:af:ea:51:af:87:4a:f8:5d:5a:f5:96:ba:76:42: 25:3d:01:0c:db:e6:48:6a:f4:35:c0:db:81:f9:bc: b7:80:8f:b7:6e:f2:68:b6:70:83:5b:9d:b0:ee:c1: 4f:09:83:a2:e8:ec:43:e1:5f:df:2c:3d:9b:50:42: 6a:6a:5b:94:7d:c8:00:c5:00:b5:06:95:bc:4a:30: 22:a6:b4:12:50:60:85:8c:65:a2:d1:ec:c2:c3:dd: 49:36:30:77:9b:85:8a:7d:cc:cf:4b:99:17:e3:64: c1:42:0d:d5:26:f8:8f:20:93:b5:8f:a6:a1:0c:a2: 1d:b0:a0:c6:c7:e3:e2:cb:4f:ba:91:b9:a6:3f:50: 19:b7:b3:d7:89:b1:95:fb:2f:68:9c:fc:62:91:c5: 2a:1d:d8:c6:2d:ab:2a:b1:bf:0e:17:2b:c7:d1:7d: 7d:9f:6e:0d:d8:0f:82:27:5c:48:1c:ea:97:df:a0: e9:5a:c2:9e:2a:81:74:10:87:7e:66:68:af:8a:2b: ef:02:08:6d:84:98:8d:8c:ae:de:5d:44:70:b3:8b: 2e:f4:ab:34:95:cd:d8:3c:4d:a8:d3:17:63:5a:e1: 84:1a:72:2b:9a:f1:b4:bd:ec:18:84:81:cd:56:1e: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:23:19:55:C5:D3:84:45:C1:49:FA:50:25:97:93:E9:A0:AE:74 X509v3 Authority Key Identifier: keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.252.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:27:b0:c3:07:1a:bd:26:0b:79:0c:85:dc:f7:92:d4:fa:bf: cd:51:69:14:f6:31:ec:78:87:bc:1b:16:45:3c:c9:28:72:ba: 4b:7d:45:b3:0a:23:21:67:0c:75:fc:ad:73:6a:a7:48:c0:82: 34:d2:b2:29:7f:2b:74:96:dc:96:a1:16:da:48:80:40:1e:61: ee:fc:95:fa:a4:99:53:25:3d:82:0c:0f:59:97:06:96:3d:50: 66:be:fb:84:9d:ce:4f:77:ff:a4:ff:03:d3:d6:d2:2c:36:6b: e9:b2:74:02:f4:98:13:ae:5f:31:06:ca:44:89:23:ec:9d:2b: c9:4e:8e:62:24:86:9a:02:41:39:13:75:d4:b0:7b:2e:d2:f6: 85:48:9c:9b:82:e3:39:9b:84:69:71:6b:42:93:03:60:c0:a9: d1:ec:66:bd:53:9b:c6:8f:72:de:70:40:40:bc:85:ea:1e:f4: 08:3b:85:74:91:34:14:d4:8c:59:5d:b1:4a:a7:2f:9c:47:6c: 38:10:cb:1d:fe:0f:7f:50:a2:c7:6f:40:fb:b3:51:23:15:fe: cd:8f:de:3d:19:4c:97:c4:c1:10:d9:9d:99:00:e4:2c:92:aa: dd:89:dc:a1:c2:fc:cf:83:7f:e4:64:06:3e:79:a0:7a:50:17: 1b:1c:4c:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvWQ7zdTGV7hfC2NE38SpFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODllZTdkYzdhNGJlYThkMjY5Yzg3NDZjZmU3ZDM2MTk4 ZDIyMWUwHhcNMjYwMTE5MTIzODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2M2MjMxOTU1YzVkMzg0NDVjMTQ5ZmE1MDI1OTc5M2U5YTBhZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLLLhzsduy8N6C7vXtAFr+pRr4dK +F1a9Za6dkIlPQEM2+ZIavQ1wNuB+by3gI+3bvJotnCDW52w7sFPCYOi6OxD4V/f LD2bUEJqaluUfcgAxQC1BpW8SjAiprQSUGCFjGWi0ezCw91JNjB3m4WKfczPS5kX 42TBQg3VJviPIJO1j6ahDKIdsKDGx+Piy0+6kbmmP1AZt7PXibGV+y9onPxikcUq HdjGLasqsb8OFyvH0X19n24N2A+CJ1xIHOqX36DpWsKeKoF0EId+ZmiviivvAght hJiNjK7eXURws4su9Ks0lc3YPE2o0xdjWuGEGnIrmvG0vewYhIHNVh6ToQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzGIxlVxdOERcFJ+lAll5PpoK50MB8GA1UdIwQY MBaAFNOJ7n3HpL6o0mnIdGz+fTYZjSIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQt MjFiMDM0YzJmOGRjLzEvRE1ZakdWWEYwNFJGd1VuNlVDV1hrLW1ncm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQtMjFiMDM0YzJmOGRj LzEvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV38MA0G CSqGSIb3DQEBCwUAA4IBAQB+J7DDBxq9Jgt5DIXc95LU+r/NUWkU9jHseIe8GxZF PMkocrpLfUWzCiMhZwx1/K1zaqdIwII00rIpfyt0ltyWoRbaSIBAHmHu/JX6pJlT JT2CDA9ZlwaWPVBmvvuEnc5Pd/+k/wPT1tIsNmvpsnQC9JgTrl8xBspEiSPsnSvJ To5iJIaaAkE5E3XUsHsu0vaFSJybguM5m4RpcWtCkwNgwKnR7Ga9U5vGj3LecEBA vIXqHvQIO4V0kTQU1IxZXbFKpy+cR2w4EMsd/g9/UKLHb0D7s1EjFf7Nj949GUyX xMEQ2Z2ZAOQskqrdidyhwvzPg3/kZAY+eaB6UBcbHEzK -----END CERTIFICATE-----Generated at Mon Feb 2 07:54:48 2026 by rpki-client