This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/bSfoqAesrmojtDNBxt2VZHxOHqI.roa File: bSfoqAesrmojtDNBxt2VZHxOHqI.roa (raw, json) Hash identifier: Z7b9r8p1AdR9DmR8LmSnmnhIJm2T4hKdRLt3c111qtg= Subject key identifier: 6D:27:E8:A8:07:AC:AE:6A:23:B4:33:41:C6:DD:95:64:7C:4E:1E:A2 Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Certificate serial: 019B79EC8AF331BD51204C7C58748A5373E7 Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/bSfoqAesrmojtDNBxt2VZHxOHqI.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 193.43.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8a:f3:31:bd:51:20:4c:7c:58:74:8a:53:73:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d27e8a807acae6a23b43341c6dd95647c4e1ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:d6:14:6c:97:b4:d5:d9:31:c0:8e:09:9b: 55:41:09:7a:9e:d9:05:94:73:f4:c5:be:5f:54:f6: 79:9f:2d:a3:d0:10:60:2d:22:ef:d6:3b:32:df:f7: 27:91:de:9f:11:55:73:12:cf:86:88:a7:ba:f1:58: 5e:f5:68:e7:fb:f7:9c:cf:2f:c7:e4:98:a8:c3:fa: 49:6b:0e:d4:f2:db:98:eb:09:31:ce:8f:34:ee:22: bb:5a:81:0a:3c:41:72:99:21:90:22:b1:10:85:b7: 09:8a:11:6c:b6:b5:3e:f9:3c:8e:ac:69:9f:f5:0b: 2d:f4:92:0c:0d:ae:21:4b:ce:38:7e:6e:8f:15:d6: 5a:12:65:48:58:d3:f6:a6:a9:64:a7:4e:bd:55:5c: 96:0f:fc:cb:aa:dc:20:50:c6:c7:41:94:ef:07:86: 5d:4a:36:18:40:5f:10:a3:2a:a1:a5:7e:cf:37:a2: 15:f7:98:f4:41:41:f0:06:11:b1:ce:0c:65:a4:62: 0b:b3:41:33:39:af:e9:b8:d3:62:f8:d9:7b:ce:42: f7:a1:7f:be:6a:a9:73:6f:52:07:aa:d0:fa:71:d3: a2:a3:03:56:ef:12:65:e0:2c:82:14:66:0f:ef:c2: ce:47:15:87:de:06:b9:99:c4:49:ce:f7:b9:e1:e6: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:27:E8:A8:07:AC:AE:6A:23:B4:33:41:C6:DD:95:64:7C:4E:1E:A2 X509v3 Authority Key Identifier: keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/bSfoqAesrmojtDNBxt2VZHxOHqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.42.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:8d:fb:56:83:67:84:a4:7e:32:53:40:39:69:04:b5:fc:07: bb:79:1e:8a:19:8c:ef:d7:6e:0e:11:18:4c:66:76:28:37:8e: 1e:5c:e1:0e:15:bc:a3:14:69:90:d6:a9:c6:9b:e1:51:87:bc: 3d:0a:35:d3:df:01:9f:e8:7b:73:05:12:51:72:70:fa:bf:0e: 28:84:62:f0:c4:77:36:50:35:e8:fb:85:34:bf:49:ba:f9:41: 93:32:6a:19:dc:e4:bd:ee:6b:9b:07:8a:cb:37:9f:1d:4a:ce: e8:e6:e6:66:6b:80:04:45:91:5b:ed:84:6e:8f:e8:ba:6a:47: aa:51:2f:62:cd:f3:44:b2:2d:82:93:83:77:5e:ca:53:c5:3b: d5:e2:1b:24:1d:e7:5b:56:ac:21:b4:8a:24:52:9f:1e:79:99: f0:94:a2:3e:93:29:87:3b:08:4d:e9:38:f9:49:d1:68:cd:48: 4f:3d:6d:ff:a9:53:ce:3e:42:34:fd:6f:10:64:13:29:52:da: 68:7b:2f:55:3a:1d:eb:c2:c4:cc:76:87:7b:49:a1:33:41:0b: 8b:a3:6c:d6:15:ce:a3:d7:c3:8c:18:1c:0a:e1:6d:3d:ff:1a: da:6d:63:46:36:fc:0d:fc:e0:f8:6d:1f:0f:b1:b8:63:b0:d1: 75:1a:51:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57IrzMb1RIEx8WHSKU3PnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh NmI0ZDIwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDI3ZThhODA3YWNhZTZhMjNiNDMzNDFjNmRkOTU2NDdjNGUxZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVbWFGyXtNXZMcCOCZtVQQl6ntkF lHP0xb5fVPZ5ny2j0BBgLSLv1jsy3/cnkd6fEVVzEs+GiKe68Vhe9Wjn+/eczy/H 5Jiow/pJaw7U8tuY6wkxzo807iK7WoEKPEFymSGQIrEQhbcJihFstrU++TyOrGmf 9Qst9JIMDa4hS844fm6PFdZaEmVIWNP2pqlkp069VVyWD/zLqtwgUMbHQZTvB4Zd SjYYQF8QoyqhpX7PN6IV95j0QUHwBhGxzgxlpGILs0EzOa/puNNi+Nl7zkL3oX++ aqlzb1IHqtD6cdOiowNW7xJl4CyCFGYP78LORxWH3ga5mcRJzve54eaC/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0n6KgHrK5qI7QzQcbdlWR8Th6iMB8GA1UdIwQY MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt ZDU5ODQ1ZmI5YjNkLzEvYlNmb3FBZXNybW9qdEROQnh0MlZaSHhPSHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSsqMA0G CSqGSIb3DQEBCwUAA4IBAQB8jftWg2eEpH4yU0A5aQS1/Ae7eR6KGYzv124OERhM ZnYoN44eXOEOFbyjFGmQ1qnGm+FRh7w9CjXT3wGf6HtzBRJRcnD6vw4ohGLwxHc2 UDXo+4U0v0m6+UGTMmoZ3OS97mubB4rLN58dSs7o5uZma4AERZFb7YRuj+i6akeq US9izfNEsi2Ck4N3XspTxTvV4hskHedbVqwhtIokUp8eeZnwlKI+kymHOwhN6Tj5 SdFozUhPPW3/qVPOPkI0/W8QZBMpUtpoey9VOh3rwsTMdod7SaEzQQuLo2zWFc6j 18OMGBwK4W09/xrabWNGNvwN/OD4bR8PsbhjsNF1GlEH -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:12 2026 by rpki-client