This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/APVxqKMvg7zk562Taso55LCZ43Y.roa File: APVxqKMvg7zk562Taso55LCZ43Y.roa (raw, json) Hash identifier: K7kMK7uyiBjgsAZ37sxGRIvYHh9oEyISagZHLGa6SXw= Subject key identifier: 00:F5:71:A8:A3:2F:83:BC:E4:E7:AD:93:6A:CA:39:E4:B0:99:E3:76 Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670 Certificate serial: 019B7EA6416159A1B4D29F47CB1497FDA92E Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/APVxqKMvg7zk562Taso55LCZ43Y.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207864 IP address blocks: 193.22.108.0/24 maxlen: 24 193.22.168.0/24 maxlen: 24 193.22.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:41:61:59:a1:b4:d2:9f:47:cb:14:97:fd:a9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40254d4a767ad099606e442e092f91241a363670 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00f571a8a32f83bce4e7ad936aca39e4b099e376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:d2:5e:d9:1a:23:05:12:15:60:8a:db:6e: 51:b6:c5:eb:91:e0:e7:ca:56:ac:01:cb:08:cb:e6: e4:1f:8d:36:31:02:40:75:30:fa:ec:1e:a4:6e:5d: f0:fd:2f:5a:94:29:15:a3:b4:c3:be:50:16:4b:68: 8e:de:86:d5:35:2f:92:ad:ba:73:a1:a9:0e:c9:8f: 82:f9:d2:38:70:7e:79:23:6d:cf:1a:f6:bb:38:21: b6:a3:16:a8:95:bc:48:b2:eb:1a:fa:90:b0:0f:78: 56:2f:cf:77:d3:65:cb:36:c1:61:2f:04:b3:f9:8b: db:75:cd:b2:d8:57:a6:d8:10:21:74:f5:eb:5d:58: 02:21:cf:d6:09:f6:ef:e1:7b:f1:48:9d:ce:e7:23: d0:ea:01:8f:03:c6:e3:b3:ff:6e:82:32:4b:c6:55: 48:f8:cf:de:76:17:9a:87:95:7c:50:f1:17:7e:4b: f5:dc:07:59:22:36:db:97:db:a6:aa:bd:43:60:f8: 9c:d4:c2:b6:df:fb:b2:d0:12:5f:28:33:17:cb:b3: 54:c9:fc:f8:dc:5e:47:53:6d:89:41:e8:87:0d:c8: 54:b7:e0:70:2b:07:18:fe:a6:d3:60:f8:64:2a:5f: fe:0c:a2:4c:0e:8a:4f:b1:d2:34:e2:ff:9b:4f:73: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F5:71:A8:A3:2F:83:BC:E4:E7:AD:93:6A:CA:39:E4:B0:99:E3:76 X509v3 Authority Key Identifier: keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/APVxqKMvg7zk562Taso55LCZ43Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.108.0/24 193.22.168.0/24 193.22.170.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b1:62:3f:97:f9:da:da:8e:3d:37:43:34:a8:c6:48:fe:35: 2f:1f:53:ea:35:b6:8e:9f:ed:a1:9b:3e:41:64:8d:69:91:bf: cb:67:8d:ac:b3:35:76:d0:99:42:64:b6:ca:27:f1:a4:7e:06: 72:a4:26:f5:2d:72:29:57:0c:c7:fb:d2:d2:66:4c:b3:64:93: 45:e9:e2:3e:e4:a1:12:14:61:21:50:77:37:a2:89:bb:5f:0a: 33:d5:ff:96:3a:17:b1:ee:65:bd:58:62:cc:00:13:d9:d4:f2: 40:b0:32:1a:b3:e0:93:62:35:84:ff:5e:ad:13:56:4b:84:02: e0:66:39:5f:8d:91:38:f5:d4:76:7d:30:3d:f5:57:ff:ea:26: 34:e0:cd:1b:cf:40:60:92:41:57:da:9e:85:c2:d9:bf:af:8d: 19:c8:0a:8c:3c:6a:61:82:a4:30:96:c0:48:71:ad:c6:62:fd: 57:a8:29:61:22:c6:fe:5e:67:54:b3:e9:39:5a:76:c3:d2:bd: 17:f1:97:e7:5f:d5:80:c2:91:6d:3c:31:fa:51:42:d3:a1:9d: 74:fd:e3:e3:57:b8:b9:6d:83:14:aa:15:eb:bf:29:a7:33:3c: 35:52:13:7e:56:63:12:22:34:0f:6c:94:2e:74:13:04:80:62: 2a:9e:18:50 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pkFhWaG00p9HyxSX/akuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz NjM2NzAwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGY1NzFhOGEzMmY4M2JjZTRlN2FkOTM2YWNhMzllNGIwOTllMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptLSXtkaIwUSFWCK225RtsXrkeDn ylasAcsIy+bkH402MQJAdTD67B6kbl3w/S9alCkVo7TDvlAWS2iO3obVNS+Srbpz oakOyY+C+dI4cH55I23PGva7OCG2oxaolbxIsusa+pCwD3hWL89302XLNsFhLwSz +Yvbdc2y2Fem2BAhdPXrXVgCIc/WCfbv4XvxSJ3O5yPQ6gGPA8bjs/9ugjJLxlVI +M/edheah5V8UPEXfkv13AdZIjbbl9umqr1DYPic1MK23/uy0BJfKDMXy7NUyfz4 3F5HU22JQeiHDchUt+BwKwcY/qbTYPhkKl/+DKJMDopPsdI04v+bT3Ph2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAD1caijL4O85Oetk2rKOeSwmeN2MB8GA1UdIwQY MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut YmJlOTEyZWVjNzNlLzEvQVBWeHFLTXZnN3prNTYyVGFzbzU1TENaNDNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRZsAwQA wRaoAwQAwRaqMA0GCSqGSIb3DQEBCwUAA4IBAQBFsWI/l/na2o49N0M0qMZI/jUv H1PqNbaOn+2hmz5BZI1pkb/LZ42sszV20JlCZLbKJ/GkfgZypCb1LXIpVwzH+9LS ZkyzZJNF6eI+5KESFGEhUHc3oom7Xwoz1f+WOhex7mW9WGLMABPZ1PJAsDIas+CT YjWE/16tE1ZLhALgZjlfjZE49dR2fTA99Vf/6iY04M0bz0BgkkFX2p6Fwtm/r40Z yAqMPGphgqQwlsBIca3GYv1XqClhIsb+XmdUs+k5WnbD0r0X8ZfnX9WAwpFtPDH6 UULToZ10/ePjV7i5bYMUqhXrvymnMzw1UhN+VmMSIjQPbJQudBMEgGIqnhhQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:34 2026 by rpki-client