This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa File: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (raw, json) Hash identifier: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI= Subject key identifier: 0F:F5:DA:55:D4:80:A3:D3:0E:F7:59:52:DA:F0:E3:C8:8D:CF:E9:8B Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA84AF16179854C215A9B8FD8D1DAA Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208814 IP address blocks: 193.138.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:84:af:16:17:98:54:c2:15:a9:b8:fd:8d:1d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ff5da55d480a3d30ef75952daf0e3c88dcfe98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:45:48:39:9e:65:30:cd:b8:39:29:20:25: 96:a2:7c:ec:b3:3a:e1:d5:53:09:74:2b:8d:9b:a6: 71:d9:7c:f3:53:b2:2a:a9:f0:8e:3e:9f:b1:db:39: 63:a7:eb:30:18:ae:94:73:18:70:ea:18:3e:fd:c3: 76:96:bd:9f:88:7e:f1:24:a7:06:10:35:ca:3f:a1: b7:7a:84:ac:16:d1:fb:2b:25:c6:4a:17:70:82:7c: 65:e9:eb:e7:c8:64:ab:98:57:6f:08:15:a6:c9:73: e6:16:31:ad:f6:02:1c:86:84:f6:ae:3f:49:73:34: 68:2c:d5:fb:73:97:1d:19:5a:bc:7c:5a:fd:ab:4d: 84:cd:e7:b8:27:d2:27:f3:80:b6:3d:58:59:01:74: 26:89:e8:2e:87:42:fb:76:ca:a7:9d:dc:94:e1:f6: 43:66:9a:25:51:53:85:22:f1:e7:c7:d9:b3:ed:50: ca:21:66:ee:9f:46:fd:3a:c3:f9:be:66:e7:1e:4e: 79:a2:54:52:55:24:d2:ac:65:e6:0c:06:0e:6e:6a: 44:26:9d:a6:dd:c4:b3:4b:87:f7:87:4a:c5:48:d6: 10:f6:c6:a6:ed:34:00:46:27:47:30:99:5e:b3:da: b6:5b:96:a0:ac:2a:da:69:6f:a3:14:c3:89:01:97: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:DA:55:D4:80:A3:D3:0E:F7:59:52:DA:F0:E3:C8:8D:CF:E9:8B X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.81.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:71:cf:1b:30:9d:8c:97:24:94:1e:6b:2f:29:8a:53:06:bb: 7b:cf:c4:a0:fc:4d:7b:ac:95:ef:65:66:1f:25:88:a4:8c:1e: bf:dd:36:1b:b1:c4:0a:5a:98:0f:04:13:ee:52:65:e2:2d:5e: be:79:23:4f:45:ca:e6:79:61:8c:e3:e6:ce:1c:8c:5f:db:c3: ce:b5:06:18:d1:10:3c:01:cb:4b:6f:c8:38:2f:69:39:d5:81: 00:ee:df:22:fb:e6:7d:f5:e4:f4:6e:12:e9:24:69:21:57:21: 15:0c:96:e5:74:02:23:34:61:35:01:42:4c:1d:58:a6:c6:2e: a1:42:f0:d3:83:20:c4:dc:34:b5:22:a4:7e:03:1e:64:3e:ba: 41:8e:0d:31:47:12:84:48:ff:80:03:8c:45:59:5a:cc:98:4b: 07:db:0b:34:c4:0a:62:58:70:57:f7:5a:8f:54:24:68:a9:ad: 42:f3:61:68:72:f5:d0:05:bb:11:48:5e:74:1d:e6:e1:b8:5e: f7:b3:ec:2e:b2:d7:31:e0:74:f1:7b:00:14:b7:64:83:a9:06: a7:84:6e:07:c9:84:f7:f6:58:84:cf:17:4e:df:81:50:6e:e3: 31:b0:0a:55:4f:28:c8:5a:e7:13:d7:08:1c:fe:6d:90:37:39: ec:d0:12:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoSvFheYVMIVqbj9jR2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmY1ZGE1NWQ0ODBhM2QzMGVmNzU5NTJkYWYwZTNjODhkY2ZlOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/1FSDmeZTDNuDkpICWWonzsszrh 1VMJdCuNm6Zx2XzzU7IqqfCOPp+x2zljp+swGK6Ucxhw6hg+/cN2lr2fiH7xJKcG EDXKP6G3eoSsFtH7KyXGShdwgnxl6evnyGSrmFdvCBWmyXPmFjGt9gIchoT2rj9J czRoLNX7c5cdGVq8fFr9q02Ezee4J9In84C2PVhZAXQmieguh0L7dsqnndyU4fZD ZpolUVOFIvHnx9mz7VDKIWbun0b9OsP5vmbnHk55olRSVSTSrGXmDAYObmpEJp2m 3cSzS4f3h0rFSNYQ9sam7TQARidHMJles9q2W5agrCraaW+jFMOJAZcvIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/12lXUgKPTDvdZUtrw48iNz+mLMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvRF9YYVZkU0FvOU1POTFsUzJ2RGp5STNQNllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpRMA0G CSqGSIb3DQEBCwUAA4IBAQCecc8bMJ2MlySUHmsvKYpTBrt7z8Sg/E17rJXvZWYf JYikjB6/3TYbscQKWpgPBBPuUmXiLV6+eSNPRcrmeWGM4+bOHIxf28POtQYY0RA8 ActLb8g4L2k51YEA7t8i++Z99eT0bhLpJGkhVyEVDJbldAIjNGE1AUJMHVimxi6h QvDTgyDE3DS1IqR+Ax5kPrpBjg0xRxKESP+AA4xFWVrMmEsH2ws0xApiWHBX91qP VCRoqa1C82FocvXQBbsRSF50HebhuF73s+wustcx4HTxewAUt2SDqQanhG4HyYT3 9liEzxdO34FQbuMxsApVTyjIWucT1wgc/m2QNzns0BIz -----END CERTIFICATE-----Generated at Wed Jan 21 18:21:47 2026 by rpki-client