This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/CaF9jDRtHy3skgKS7QCnXm4PI7A.roa File: CaF9jDRtHy3skgKS7QCnXm4PI7A.roa (raw, json) Hash identifier: V9ZLClAO25ZfSnTZeTYg00I4twtSynvhNaSIPSAPlv0= Subject key identifier: 09:A1:7D:8C:34:6D:1F:2D:EC:92:02:92:ED:00:A7:5E:6E:0F:23:B0 Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Certificate serial: 019B79EC8BF41EFF55E71B1DE1838A4000C2 Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/CaF9jDRtHy3skgKS7QCnXm4PI7A.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 193.34.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8b:f4:1e:ff:55:e7:1b:1d:e1:83:8a:40:00:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a17d8c346d1f2dec920292ed00a75e6e0f23b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:73:7a:db:0f:d6:2c:21:40:34:84:ab:69: 15:cc:61:e4:9a:14:6f:42:05:be:d2:7a:26:4a:3c: 7a:a9:78:bd:24:ef:b1:6a:35:52:18:56:c9:b8:02: 22:ba:dc:16:fd:a9:29:a1:fc:75:b4:ca:9a:dd:c5: 43:f2:af:49:a3:91:4b:04:7d:54:7f:b2:d0:e9:fe: ef:11:15:ec:4b:a1:b9:6c:10:ff:45:93:ae:18:fa: ee:7c:20:7c:82:e7:99:5b:14:5a:d2:ba:70:70:0a: f8:2a:79:65:e5:d8:82:d1:5d:7a:96:ea:4d:ff:9e: b5:ab:2c:d0:1c:1b:69:13:56:9a:af:a9:98:79:e7: e4:0c:30:2b:c5:8b:97:4c:c1:04:4b:60:3e:e5:43: 2c:2c:72:7b:44:51:32:3b:b7:99:d3:3c:35:82:63: 8f:95:83:19:7c:36:2d:a8:d7:30:fb:24:b0:9c:78: 57:fb:18:e0:a1:e6:0e:e2:66:43:bb:62:b1:c9:0f: b5:c4:f3:73:9b:a5:6c:f4:c5:57:77:f8:69:82:1d: 02:14:20:d5:51:48:17:a3:bb:c8:5d:7c:e3:9a:5e: 96:85:a6:94:fd:43:49:bb:9d:ba:72:8c:8e:52:e9: 7b:26:4f:09:ab:66:ac:79:b4:41:b4:0c:1f:f8:51: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:7D:8C:34:6D:1F:2D:EC:92:02:92:ED:00:A7:5E:6E:0F:23:B0 X509v3 Authority Key Identifier: keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/CaF9jDRtHy3skgKS7QCnXm4PI7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.82.0/24 Signature Algorithm: sha256WithRSAEncryption 83:6f:9b:d1:07:c0:bc:8f:ad:13:2a:c4:85:73:01:44:12:20: 56:72:06:87:84:bb:dd:b4:20:c9:39:1f:5a:67:56:e5:7a:3f: 0b:d4:92:5c:c9:0f:83:8b:5f:36:dd:6f:9e:f0:e1:19:47:bf: e5:4b:59:d7:5f:6c:cd:73:80:dc:8e:27:f4:f1:a7:bd:6b:bc: 9b:b8:f2:c1:aa:d7:dc:f5:0b:72:b8:ad:a6:8a:e7:32:37:1a: e2:20:aa:6b:9a:b4:07:9c:de:b7:fb:b5:00:ee:b4:8c:6f:b9: 83:b5:35:6c:af:8b:da:b4:d6:21:9b:b6:d8:60:be:3d:04:94: 74:d2:06:76:f5:a1:2f:91:cc:02:fa:34:c9:3f:44:8f:fa:db: 5e:37:b8:15:14:d1:f3:28:b2:e7:7b:5e:ec:d2:92:53:dd:e0: 16:d9:64:3a:61:20:0a:0d:5c:71:d5:37:f7:38:0a:bd:8d:f7: 5d:4b:b6:3c:04:29:b7:42:c7:c5:aa:0a:35:d5:0f:eb:61:5b: 92:c4:6f:77:7a:11:e1:cf:34:8d:5a:12:1c:2a:e9:b7:a4:2f: 06:2b:f9:53:b2:42:df:f6:e7:d0:62:71:35:5a:77:38:7a:73: da:fe:00:ab:0a:1d:dc:9f:92:7d:62:d1:8c:af:0c:10:ee:b9: c7:e6:5e:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Iv0Hv9V5xsd4YOKQADCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh NmI0ZDIwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWExN2Q4YzM0NmQxZjJkZWM5MjAyOTJlZDAwYTc1ZTZlMGYyM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAxzetsP1iwhQDSEq2kVzGHkmhRv QgW+0nomSjx6qXi9JO+xajVSGFbJuAIiutwW/akpofx1tMqa3cVD8q9Jo5FLBH1U f7LQ6f7vERXsS6G5bBD/RZOuGPrufCB8gueZWxRa0rpwcAr4Knll5diC0V16lupN /561qyzQHBtpE1aar6mYeefkDDArxYuXTMEES2A+5UMsLHJ7RFEyO7eZ0zw1gmOP lYMZfDYtqNcw+ySwnHhX+xjgoeYO4mZDu2KxyQ+1xPNzm6Vs9MVXd/hpgh0CFCDV UUgXo7vIXXzjml6WhaaU/UNJu526coyOUul7Jk8Jq2asebRBtAwf+FHM3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmhfYw0bR8t7JICku0Ap15uDyOwMB8GA1UdIwQY MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt ZDU5ODQ1ZmI5YjNkLzEvQ2FGOWpEUnRIeTNza2dLUzdRQ25YbTRQSTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSJSMA0G CSqGSIb3DQEBCwUAA4IBAQCDb5vRB8C8j60TKsSFcwFEEiBWcgaHhLvdtCDJOR9a Z1blej8L1JJcyQ+Di1823W+e8OEZR7/lS1nXX2zNc4Dcjif08ae9a7ybuPLBqtfc 9QtyuK2miucyNxriIKprmrQHnN63+7UA7rSMb7mDtTVsr4vatNYhm7bYYL49BJR0 0gZ29aEvkcwC+jTJP0SP+tteN7gVFNHzKLLne17s0pJT3eAW2WQ6YSAKDVxx1Tf3 OAq9jfddS7Y8BCm3QsfFqgo11Q/rYVuSxG93ehHhzzSNWhIcKum3pC8GK/lTskLf 9ufQYnE1Wnc4enPa/gCrCh3cn5J9YtGMrwwQ7rnH5l5U -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:31 2026 by rpki-client