This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aTiUDZFxYzFPbKMFytIqKXYsVLA.roa File: aTiUDZFxYzFPbKMFytIqKXYsVLA.roa (raw, json) Hash identifier: mah6682+jfxyCv47ppRMnwkEFapkoLoOvKyjZjS/Njs= Subject key identifier: 69:38:94:0D:91:71:63:31:4F:6C:A3:05:CA:D2:2A:29:76:2C:54:B0 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136E4A1474F26D3682F48E01C7E373 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aTiUDZFxYzFPbKMFytIqKXYsVLA.roa Signing time: Fri 02 Jan 2026 00:20:06 +0000 ROA not before: Fri 02 Jan 2026 00:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43618 IP address blocks: 193.37.66.0/24 maxlen: 24 193.37.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:6e:4a:14:74:f2:6d:36:82:f4:8e:01:c7:e3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6938940d917163314f6ca305cad22a29762c54b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4d:94:30:b1:e6:6e:7d:3b:fb:5c:be:8d:f0: a9:5a:9c:e1:49:a6:f0:55:b6:6f:a0:4e:48:bb:42: 61:f6:9d:4b:87:db:20:96:82:5b:80:5a:23:fa:e9: 19:d0:62:3a:47:c0:42:4d:62:08:0f:99:1f:4f:b7: ce:60:c1:9d:00:32:81:2e:6b:87:53:01:15:0b:cc: 6e:d9:f3:9c:bc:56:27:91:1e:64:03:7e:56:b4:84: 4c:57:bc:2e:9e:9c:47:71:c5:b0:b9:60:53:9a:47: e6:c8:c2:cf:47:54:8e:9a:66:a2:8b:f3:7f:78:ec: cd:22:8c:13:3e:61:50:b5:2c:d0:9b:e2:40:b4:c5: 2d:4b:1c:6b:81:34:0a:17:bd:79:97:43:03:06:76: 3e:3d:5c:55:bb:00:d2:5d:54:bd:b1:75:41:ba:86: c6:1e:b9:5f:39:f9:2a:66:a0:2a:c2:31:c5:66:1c: a7:61:39:a7:51:61:18:ad:59:c2:bf:4e:85:70:da: 29:43:d8:73:4f:78:e1:4d:31:42:9f:b8:ad:dd:06: 3d:40:0d:f6:88:3a:9f:41:dd:06:d3:dd:70:71:c1: 41:33:bb:30:90:39:97:40:9f:de:e7:62:e6:72:65: ae:dd:63:94:be:fc:cc:52:0b:a7:57:46:93:21:c1: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:94:0D:91:71:63:31:4F:6C:A3:05:CA:D2:2A:29:76:2C:54:B0 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/aTiUDZFxYzFPbKMFytIqKXYsVLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.66.0/23 Signature Algorithm: sha256WithRSAEncryption 14:be:d8:f4:91:d7:a0:23:ce:65:eb:d0:57:e7:19:69:7e:7f: 23:c4:81:01:55:5f:b0:fe:f9:51:6f:2e:61:12:e3:8c:8c:84: cb:3e:a1:d1:c1:f1:1f:18:4c:5f:08:3a:df:a7:6b:b0:c2:5d: dc:d9:18:b1:ad:d2:b8:40:ed:e5:23:5f:f2:2d:55:7d:ad:eb: e3:72:a5:96:08:d7:46:00:dc:6d:32:7f:f7:2d:64:0d:42:21: d1:f4:c2:9a:3c:aa:7c:d5:fa:22:5f:19:9f:bb:73:03:4b:58: 93:e2:c5:65:9e:7b:3a:d6:19:37:dc:aa:5c:ad:31:20:06:6c: cb:8b:09:77:84:d7:4b:a6:6c:f6:96:85:8b:01:45:57:8b:50: db:a7:cd:b7:8b:32:e3:56:56:2b:9d:37:ae:09:48:1e:b9:bc: 9d:c8:63:5f:84:28:a5:c3:04:a7:1b:db:af:40:3a:ea:d2:fa: 24:82:11:06:0e:d6:40:21:b3:3a:3c:49:bc:10:f1:c6:03:32: 70:d1:cb:e0:6b:31:ef:2b:45:1e:56:66:58:cc:e9:5b:9a:db: fa:18:09:f0:87:81:bb:bd:f4:a2:c6:cf:5e:e9:29:f7:04:a5: 0c:2f:fe:61:5e:75:c7:b1:89:01:39:00:82:5a:89:f5:8a:0b: 6b:d4:2e:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E25KFHTybTaC9I4Bx+NzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTM4OTQwZDkxNzE2MzMxNGY2Y2EzMDVjYWQyMmEyOTc2MmM1NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA802UMLHmbn07+1y+jfCpWpzhSabw VbZvoE5Iu0Jh9p1Lh9sgloJbgFoj+ukZ0GI6R8BCTWIID5kfT7fOYMGdADKBLmuH UwEVC8xu2fOcvFYnkR5kA35WtIRMV7wunpxHccWwuWBTmkfmyMLPR1SOmmaii/N/ eOzNIowTPmFQtSzQm+JAtMUtSxxrgTQKF715l0MDBnY+PVxVuwDSXVS9sXVBuobG HrlfOfkqZqAqwjHFZhynYTmnUWEYrVnCv06FcNopQ9hzT3jhTTFCn7it3QY9QA32 iDqfQd0G091wccFBM7swkDmXQJ/e52LmcmWu3WOUvvzMUgunV0aTIcF6BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGk4lA2RcWMxT2yjBcrSKil2LFSwMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvYVRpVURaRnhZekZQYktNRnl0SXFLWFlzVkxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSVCMA0G CSqGSIb3DQEBCwUAA4IBAQAUvtj0kdegI85l69BX5xlpfn8jxIEBVV+w/vlRby5h EuOMjITLPqHRwfEfGExfCDrfp2uwwl3c2RixrdK4QO3lI1/yLVV9revjcqWWCNdG ANxtMn/3LWQNQiHR9MKaPKp81foiXxmfu3MDS1iT4sVlnns61hk33KpcrTEgBmzL iwl3hNdLpmz2loWLAUVXi1Dbp823izLjVlYrnTeuCUgeubydyGNfhCilwwSnG9uv QDrq0vokghEGDtZAIbM6PEm8EPHGAzJw0cvgazHvK0UeVmZYzOlbmtv6GAnwh4G7 vfSixs9e6Sn3BKUML/5hXnXHsYkBOQCCWon1igtr1C7v -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:27 2026 by rpki-client