This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sz2jpC4z3QoEnu64vfTL6H8PV8s.roa File: Sz2jpC4z3QoEnu64vfTL6H8PV8s.roa (raw, json) Hash identifier: U8O8Lp+NCteaS0qeDemZKcJHo4mQZgsNj2HqYiKXN6E= Subject key identifier: 4B:3D:A3:A4:2E:33:DD:0A:04:9E:EE:B8:BD:F4:CB:E8:7F:0F:57:CB Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136F5AA0C530D38A36F3E53A6D6705 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sz2jpC4z3QoEnu64vfTL6H8PV8s.roa Signing time: Fri 02 Jan 2026 00:20:07 +0000 ROA not before: Fri 02 Jan 2026 00:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47585 IP address blocks: 193.8.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:6f:5a:a0:c5:30:d3:8a:36:f3:e5:3a:6d:67:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b3da3a42e33dd0a049eeeb8bdf4cbe87f0f57cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:8e:f3:5f:87:88:cc:f6:00:b8:79:65:10: e8:a4:c3:a6:82:42:a7:e3:49:3e:c7:ed:16:23:8b: 10:fc:86:10:56:c0:c8:a2:e7:65:12:0b:e4:bd:31: a0:89:6a:45:a8:c1:01:af:99:14:f3:e4:b1:08:bd: 0e:d7:2c:4d:d6:5f:ef:8a:91:c2:14:38:4b:82:f5: dc:92:f0:fe:24:06:73:47:59:d3:5c:5e:3a:19:99: d4:63:55:31:ae:dd:da:f7:a9:ec:46:50:01:58:75: 2e:c2:e8:51:9e:10:01:8b:f7:e1:0c:61:7a:81:63: 6c:b4:b9:39:1f:f4:01:ca:ee:ba:72:6e:3b:cb:40: e8:cd:06:47:38:25:92:25:5e:5e:b7:37:63:eb:49: 39:00:fe:e1:b5:7c:3f:c3:d1:98:d5:2d:09:e6:c4: 91:bb:ab:52:83:c1:11:1a:6d:23:b8:ad:95:d4:06: c7:0f:9d:0f:2a:92:72:47:1b:9b:79:45:47:fb:b9: 72:50:43:f1:67:6b:ab:7a:30:b5:9f:c8:b0:35:9e: 1b:08:19:f3:65:9a:13:38:4e:cd:9c:0e:9a:8f:2f: f1:fb:3c:0c:c0:c1:2e:79:44:a9:6b:df:90:ee:72: b2:fe:12:81:fb:d8:b0:46:97:c5:d0:8f:2c:98:a1: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3D:A3:A4:2E:33:DD:0A:04:9E:EE:B8:BD:F4:CB:E8:7F:0F:57:CB X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sz2jpC4z3QoEnu64vfTL6H8PV8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.113.0/24 Signature Algorithm: sha256WithRSAEncryption 40:09:23:fa:8f:cd:ca:48:70:43:82:f1:40:28:9b:e7:63:bb: aa:6f:0a:f7:d8:cb:79:6a:3b:0e:f4:ee:4c:6e:c3:23:89:2b: 81:34:ee:6f:ec:9f:a4:18:dd:01:17:77:8b:ef:9b:9b:97:8d: ff:50:1c:d7:0a:0c:8c:52:67:c3:3e:6e:06:ee:74:13:cc:a6: b1:31:e5:9a:51:97:ef:c2:a8:45:55:c3:a3:25:19:55:21:e6: d7:2d:8d:12:b8:86:c2:25:97:a5:2a:12:8e:67:0f:18:bf:9f: d4:9f:13:33:12:a7:01:56:43:ac:cc:b8:63:8a:a2:4a:e9:66: 77:c5:5d:3f:32:81:36:2b:b9:cd:cd:c2:e3:da:98:1a:2c:05: bc:c4:3d:52:cc:1a:be:c1:1a:c4:52:aa:f3:f1:83:38:48:a7: e8:cc:68:da:cb:f8:c5:ff:f0:24:9c:c9:0b:e8:9d:4d:b8:bb: a1:11:af:1c:89:b2:81:cd:c8:bd:b9:ec:60:9a:b9:00:72:32: e9:52:77:98:70:88:ef:6b:e8:14:e2:72:12:fe:a4:ed:7c:85: 7e:cc:3b:15:d8:27:b3:3f:0a:7a:77:e9:d1:79:62:b6:ce:f5: 65:2a:05:17:d2:74:a0:9d:56:14:32:c9:92:ee:82:9f:07:5e: 46:4c:5b:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E29aoMUw04o28+U6bWcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNkYTNhNDJlMzNkZDBhMDQ5ZWVlYjhiZGY0Y2JlODdmMGY1N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM+O81+HiMz2ALh5ZRDopMOmgkKn 40k+x+0WI4sQ/IYQVsDIoudlEgvkvTGgiWpFqMEBr5kU8+SxCL0O1yxN1l/vipHC FDhLgvXckvD+JAZzR1nTXF46GZnUY1Uxrt3a96nsRlABWHUuwuhRnhABi/fhDGF6 gWNstLk5H/QByu66cm47y0DozQZHOCWSJV5etzdj60k5AP7htXw/w9GY1S0J5sSR u6tSg8ERGm0juK2V1AbHD50PKpJyRxubeUVH+7lyUEPxZ2urejC1n8iwNZ4bCBnz ZZoTOE7NnA6ajy/x+zwMwMEueUSpa9+Q7nKy/hKB+9iwRpfF0I8smKFW6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEs9o6QuM90KBJ7uuL30y+h/D1fLMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvU3oyanBDNHozUW9FbnU2NHZmVEw2SDhQVjhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhxMA0G CSqGSIb3DQEBCwUAA4IBAQBACSP6j83KSHBDgvFAKJvnY7uqbwr32Mt5ajsO9O5M bsMjiSuBNO5v7J+kGN0BF3eL75ubl43/UBzXCgyMUmfDPm4G7nQTzKaxMeWaUZfv wqhFVcOjJRlVIebXLY0SuIbCJZelKhKOZw8Yv5/UnxMzEqcBVkOszLhjiqJK6WZ3 xV0/MoE2K7nNzcLj2pgaLAW8xD1SzBq+wRrEUqrz8YM4SKfozGjay/jF//AknMkL 6J1NuLuhEa8cibKBzci9uexgmrkAcjLpUneYcIjva+gU4nIS/qTtfIV+zDsV2Cez Pwp6d+nReWK2zvVlKgUX0nSgnVYUMsmS7oKfB15GTFvq -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:16 2026 by rpki-client