This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa File: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (raw, json) Hash identifier: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA= Subject key identifier: 34:34:F2:8E:E5:F4:77:44:AA:99:E0:C2:EE:7A:F1:45:FC:F2:6C:44 Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc Certificate serial: 019B7C134B8DA772042A5DC4739765F77DA0 Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 193.17.53.0/24 maxlen: 24 193.203.24.0/24 maxlen: 24 193.203.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4b:8d:a7:72:04:2a:5d:c4:73:97:65:f7:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3434f28ee5f47744aa99e0c2ee7af145fcf26c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:e0:52:96:c4:bb:c6:cc:16:b5:15:b3:74: bf:a3:bd:0f:73:99:f6:c6:f5:40:09:37:fd:87:74: d8:02:18:04:5d:af:44:a7:a6:51:d2:88:8b:80:ca: f3:12:05:c8:a3:27:36:f5:2b:2e:f9:cf:fa:df:74: 3c:d2:17:48:e9:52:89:ba:85:e5:73:0f:86:97:42: 5c:1e:6f:f7:6a:ec:30:80:0c:16:8a:8d:4a:cd:f7: e0:5f:15:ee:96:98:2a:f8:5b:2b:3d:65:06:18:68: 12:a7:9e:55:e8:6c:af:2f:7d:0a:d5:54:63:3f:c8: de:ad:75:36:a0:a4:4b:a4:26:9d:ee:a1:a7:0a:2f: 76:2a:b1:68:05:09:50:90:d0:65:53:42:27:ed:3d: 5c:c0:06:bc:9d:a7:87:24:23:f2:26:ba:78:ba:4a: 53:20:16:f8:98:df:b8:8f:5b:1a:fe:8c:ee:83:a1: 05:97:da:b5:9f:21:80:83:10:06:31:35:20:5e:0e: 43:e5:65:a6:ae:ad:ee:59:e6:ca:d9:99:08:cb:2b: 25:da:9e:2c:81:d0:f8:09:b2:76:3d:9e:85:a7:16: 3a:59:b5:3a:c8:ae:b7:0d:38:44:f9:d2:b8:7c:2f: e1:17:d3:6f:ed:2d:9f:40:ba:d5:8a:a2:a2:31:73: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:34:F2:8E:E5:F4:77:44:AA:99:E0:C2:EE:7A:F1:45:FC:F2:6C:44 X509v3 Authority Key Identifier: keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.53.0/24 193.203.24.0/24 193.203.110.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:da:a0:b5:56:28:fa:9d:2e:c9:0f:f8:32:81:35:b2:a4:e5: a3:14:6c:41:8e:76:61:76:d7:59:94:c9:01:75:c5:8c:6a:4d: f5:db:69:60:f7:c4:07:42:f8:0d:f1:2f:0d:45:f3:19:21:12: 80:02:1b:e5:ed:7e:f5:9d:72:e6:cf:61:e4:66:d6:bf:e2:01: 81:95:55:a5:ca:8c:d7:20:b0:8b:64:f5:a5:b6:6b:95:a9:90: cb:ab:ea:9e:68:ce:a1:16:7d:5a:9d:e2:19:6a:43:65:24:75: 4e:58:4e:3a:f9:17:74:0a:49:9b:14:78:f7:13:09:a9:08:55: 1c:2e:75:4e:e6:b4:9e:2d:89:80:2f:27:76:39:d2:90:12:e2: ab:bf:45:6a:f3:92:03:0c:49:19:01:4f:7c:a6:e9:29:01:51: b2:a3:0d:ff:ac:b3:8b:29:9a:97:12:98:1b:a4:e4:4a:8d:dd: 1d:c0:93:9e:8e:10:f9:45:8c:2b:95:db:25:20:5d:26:84:da: 6f:6d:25:eb:1b:74:d9:38:ce:09:36:e4:3a:85:e9:23:34:fd: d1:20:76:5e:6d:7d:6e:4a:dc:54:af:46:3e:34:03:a4:22:1f: 60:b0:ab:83:bb:83:68:a8:4b:5f:53:62:e5:08:f6:1c:3f:07: 00:a0:39:be -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E0uNp3IEKl3Ec5dl932gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2 OWU0ZmMwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDM0ZjI4ZWU1ZjQ3NzQ0YWE5OWUwYzJlZTdhZjE0NWZjZjI2YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0PgUpbEu8bMFrUVs3S/o70Pc5n2 xvVACTf9h3TYAhgEXa9Ep6ZR0oiLgMrzEgXIoyc29Ssu+c/633Q80hdI6VKJuoXl cw+Gl0JcHm/3auwwgAwWio1KzffgXxXulpgq+FsrPWUGGGgSp55V6GyvL30K1VRj P8jerXU2oKRLpCad7qGnCi92KrFoBQlQkNBlU0In7T1cwAa8naeHJCPyJrp4ukpT IBb4mN+4j1sa/ozug6EFl9q1nyGAgxAGMTUgXg5D5WWmrq3uWebK2ZkIyysl2p4s gdD4CbJ2PZ6FpxY6WbU6yK63DThE+dK4fC/hF9Nv7S2fQLrViqKiMXNx7wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDQ08o7l9HdEqpngwu568UX88mxEMB8GA1UdIwQY MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt MDlkYmQwOGNiZTJkLzEvTkRUeWp1WDBkMFNxbWVEQzducnhSZnp5YkVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRE1AwQA wcsYAwQAwctuMA0GCSqGSIb3DQEBCwUAA4IBAQCf2qC1Vij6nS7JD/gygTWypOWj FGxBjnZhdtdZlMkBdcWMak3122lg98QHQvgN8S8NRfMZIRKAAhvl7X71nXLmz2Hk Zta/4gGBlVWlyozXILCLZPWltmuVqZDLq+qeaM6hFn1aneIZakNlJHVOWE46+Rd0 CkmbFHj3EwmpCFUcLnVO5rSeLYmALyd2OdKQEuKrv0Vq85IDDEkZAU98pukpAVGy ow3/rLOLKZqXEpgbpORKjd0dwJOejhD5RYwrldslIF0mhNpvbSXrG3TZOM4JNuQ6 hekjNP3RIHZebX1uStxUr0Y+NAOkIh9gsKuDu4NoqEtfU2LlCPYcPwcAoDm+ -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:47 2026 by rpki-client