This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/r1owUcHIHUNrR_fArdJ-3GEuqbk.roa File: r1owUcHIHUNrR_fArdJ-3GEuqbk.roa (raw, json) Hash identifier: zJDM6tfQVuv+cogBgNYX5vbZST7r1hIuZqSJ4ODXwnc= Subject key identifier: AF:5A:30:51:C1:C8:1D:43:6B:47:F7:C0:AD:D2:7E:DC:61:2E:A9:B9 Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c Certificate serial: 019B797E9F25F2861A233B08DABEAE99EB6B Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/r1owUcHIHUNrR_fArdJ-3GEuqbk.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29273 IP address blocks: 193.41.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9f:25:f2:86:1a:23:3b:08:da:be:ae:99:eb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af5a3051c1c81d436b47f7c0add27edc612ea9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:db:3d:50:95:f2:71:e6:52:f4:5e:4b:e7: 3e:16:ea:aa:49:bb:74:1a:39:56:89:83:4a:07:5c: 61:ce:2f:8f:d8:ee:84:51:6b:4a:99:55:a5:e8:7b: 22:c3:dc:c1:95:16:7e:d3:50:c3:31:c9:0b:a9:94: d2:21:30:a8:77:3e:1c:85:0f:e8:5d:8d:98:3b:24: 38:41:c3:f2:55:96:c3:a1:86:97:6e:2c:95:35:43: af:a7:32:31:60:41:78:bc:85:b3:7d:3e:0c:6f:81: 59:eb:22:70:02:ea:b3:8e:d9:6e:fd:39:bd:0c:ad: c7:d9:6b:7a:aa:fb:8b:61:49:09:11:71:7e:5f:71: 10:1d:b0:af:89:58:15:7d:76:7c:d6:55:89:d9:b0: 62:3c:57:d7:b0:1a:3e:8b:a3:e5:ff:16:92:0d:21: e3:3a:ad:6e:f0:39:26:8c:56:fe:00:c2:b4:d4:e4: 35:a6:76:0a:e9:b3:a0:4e:47:94:2c:4e:c6:87:51: 68:1e:69:46:fa:6d:ca:9a:ab:3b:66:15:b0:d0:51: d9:de:ee:84:67:79:27:cd:00:c2:b5:95:cf:1d:19: a7:a5:8d:e7:bf:5b:25:05:d6:12:e6:f8:b7:2e:1d: 2a:69:67:92:9b:56:3b:17:de:3a:e0:ac:52:b8:1d: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:30:51:C1:C8:1D:43:6B:47:F7:C0:AD:D2:7E:DC:61:2E:A9:B9 X509v3 Authority Key Identifier: keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/r1owUcHIHUNrR_fArdJ-3GEuqbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.36.0/24 Signature Algorithm: sha256WithRSAEncryption 99:54:7f:f0:97:6c:93:c2:02:06:18:01:ca:bc:e6:e3:26:39: 45:11:1b:ad:12:64:78:30:95:c2:21:7a:fe:9b:d4:bc:ce:02: b2:70:ef:d1:f9:d4:ff:89:6a:c7:e1:f2:0a:be:60:ad:45:44: 5a:13:ce:4d:8d:1d:42:25:26:60:cb:e4:44:62:91:da:ab:9f: 8f:ed:7f:30:fd:fb:5f:0e:5a:a7:6c:1a:d8:75:ad:4a:43:ae: 9c:e5:3d:c6:dd:c7:1f:45:c1:4c:1b:82:0a:e0:d2:3d:60:b0: ea:22:a5:49:cb:de:b2:50:8f:a4:e5:41:83:27:4e:86:d3:ca: d0:ff:63:88:33:fe:2e:e5:5d:0e:ec:76:ee:f6:6e:c1:1f:1b: 5e:57:8b:88:85:db:6c:4c:55:81:b1:60:96:63:eb:10:0d:bc: 23:8d:bf:a4:37:0e:96:df:63:f8:a0:af:ca:83:1a:5a:0a:63: d8:bd:15:84:09:a7:55:46:fb:5b:13:40:03:91:92:d1:fe:b4: 36:5f:93:25:d0:74:6d:62:e3:a8:8c:cc:ee:6a:ff:10:88:4c: 31:94:3b:ea:2f:c1:d9:35:c4:da:6e:1f:ef:5f:e8:13:de:8f: 9e:c5:41:e2:81:86:57:1e:07:34:82:01:3c:e2:2b:94:1d:71: a2:2f:9d:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fp8l8oYaIzsI2r6umetrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDcwMDJiZjNhMmVhY2ZjODgxZDVlMWEwMjExMDk4YzY2 OTk1NmMwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjVhMzA1MWMxYzgxZDQzNmI0N2Y3YzBhZGQyN2VkYzYxMmVhOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3bPVCV8nHmUvReS+c+FuqqSbt0 GjlWiYNKB1xhzi+P2O6EUWtKmVWl6Hsiw9zBlRZ+01DDMckLqZTSITCodz4chQ/o XY2YOyQ4QcPyVZbDoYaXbiyVNUOvpzIxYEF4vIWzfT4Mb4FZ6yJwAuqzjtlu/Tm9 DK3H2Wt6qvuLYUkJEXF+X3EQHbCviVgVfXZ81lWJ2bBiPFfXsBo+i6Pl/xaSDSHj Oq1u8DkmjFb+AMK01OQ1pnYK6bOgTkeULE7Gh1FoHmlG+m3Kmqs7ZhWw0FHZ3u6E Z3knzQDCtZXPHRmnpY3nv1slBdYS5vi3Lh0qaWeSm1Y7F9464KxSuB249wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9aMFHByB1Da0f3wK3SftxhLqm5MB8GA1UdIwQY MBaAFP3XACvzourPyIHV4aAhEJjGaZVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWIt MjE2MWZmNDc4ODFjLzEvcjFvd1VjSElIVU5yUl9mQXJkSi0zR0V1cWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWItMjE2MWZmNDc4ODFj LzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSkkMA0G CSqGSIb3DQEBCwUAA4IBAQCZVH/wl2yTwgIGGAHKvObjJjlFERutEmR4MJXCIXr+ m9S8zgKycO/R+dT/iWrH4fIKvmCtRURaE85NjR1CJSZgy+REYpHaq5+P7X8w/ftf DlqnbBrYda1KQ66c5T3G3ccfRcFMG4IK4NI9YLDqIqVJy96yUI+k5UGDJ06G08rQ /2OIM/4u5V0O7Hbu9m7BHxteV4uIhdtsTFWBsWCWY+sQDbwjjb+kNw6W32P4oK/K gxpaCmPYvRWECadVRvtbE0ADkZLR/rQ2X5Ml0HRtYuOojMzuav8QiEwxlDvqL8HZ NcTabh/vX+gT3o+exUHigYZXHgc0ggE84iuUHXGiL50w -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:01 2026 by rpki-client