This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/sAIO_MWUbGWxy0ejjFhZrGzjwYE.roa File: sAIO_MWUbGWxy0ejjFhZrGzjwYE.roa (raw, json) Hash identifier: 59vuLy/DBthumMO0fIPh8IDMHcczhFPPgcfUlSNwyd4= Subject key identifier: B0:02:0E:FC:C5:94:6C:65:B1:CB:47:A3:8C:58:59:AC:6C:E3:C1:81 Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63 Certificate serial: 019B7910829C17FAE3FBAB5351771464ED08 Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/sAIO_MWUbGWxy0ejjFhZrGzjwYE.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28889 IP address blocks: 193.46.100.0/22 maxlen: 22 193.46.101.0/24 maxlen: 24 193.46.102.0/23 maxlen: 23 193.187.252.0/23 maxlen: 23 193.187.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:9c:17:fa:e3:fb:ab:53:51:77:14:64:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63 Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0020efcc5946c65b1cb47a38c5859ac6ce3c181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:3d:de:7e:72:67:a8:d3:b1:a1:f5:93:5c: 0e:32:9e:44:ba:ce:62:ab:72:de:a4:d6:20:01:f1: 93:cd:03:06:0a:a5:c8:47:85:0e:c8:27:5e:39:7a: 8f:c8:2f:86:67:cf:a4:b8:26:55:19:9b:78:b9:99: 7e:2c:87:83:27:50:53:c9:e9:76:a1:0e:03:7c:6a: 96:a0:4e:cd:f7:18:3c:f2:2a:bc:77:d7:17:d5:b5: e2:c5:63:75:f0:09:6d:2e:74:05:63:fb:c1:44:cb: ad:ab:81:9c:ed:32:67:e7:7e:ec:81:f0:70:b5:67: 80:f5:ad:da:06:2b:65:4a:b7:87:b7:86:aa:07:cc: 98:46:27:32:97:fb:91:7b:48:26:74:db:d0:fc:2d: af:89:37:42:f0:b8:ff:ca:d3:e6:63:f1:7b:a3:ef: 69:58:6a:a4:da:3c:5a:b1:06:89:e5:cb:da:62:5e: 26:fe:1f:9d:c5:76:47:08:8b:8d:fd:09:87:85:97: d5:fc:e7:b3:50:d9:94:78:7e:7b:72:84:70:7c:aa: a2:49:b2:6f:9f:2f:42:16:f4:00:f5:bf:db:5c:52: 21:28:51:71:cc:bf:b4:d1:84:67:f6:4f:74:55:aa: 00:e3:e0:4c:40:a0:b7:e1:84:1a:86:43:b1:3f:52: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:02:0E:FC:C5:94:6C:65:B1:CB:47:A3:8C:58:59:AC:6C:E3:C1:81 X509v3 Authority Key Identifier: keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/sAIO_MWUbGWxy0ejjFhZrGzjwYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.100.0/22 193.187.252.0-193.187.254.255 Signature Algorithm: sha256WithRSAEncryption 89:96:ac:8f:54:bc:2f:db:96:ea:23:d1:36:af:a3:9c:dc:75: 01:a8:e1:f3:93:9e:9d:c6:6d:6d:49:7c:9b:7f:19:f2:3e:17: 5e:e6:14:0b:13:4f:a0:8c:ef:bd:90:c0:e7:48:6a:3d:26:6a: a1:9a:68:b4:bf:b3:66:fd:a1:de:2f:33:87:34:49:68:55:55: 45:a9:49:c2:d9:02:af:39:9b:29:05:c5:5a:68:7d:43:96:5d: 6f:b7:8d:ed:27:45:c4:8a:b5:cf:55:ca:fd:c1:35:11:15:fd: 7f:70:df:f0:7c:b3:87:8c:b0:c4:31:e0:24:1b:49:9b:57:5a: ff:a5:b5:c7:7d:39:0d:44:88:2f:90:d7:f5:1d:96:05:ee:84: 01:59:cb:f7:f7:92:09:4a:ce:f9:7e:0d:ff:68:92:3c:bd:fc: 80:65:6e:ee:67:52:4a:72:31:96:b7:29:3b:8d:b9:00:ee:c0: b9:73:49:d5:4f:b8:66:6c:96:26:60:f7:6e:7f:3d:f1:62:58: 37:3e:b8:1e:e5:cb:33:fe:d4:e0:92:dc:b9:a4:75:86:02:0b: 02:99:f3:b7:aa:08:36:50:96:28:99:d1:b0:56:92:d1:96:88: 69:65:7b:98:b4:57:d0:96:ca:98:1b:f2:78:3b:e5:6d:e6:c8: b2:4c:7e:e3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EIKcF/rj+6tTUXcUZO0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNGJkZmY4OGU4ZTg5ODk4NzFlMTM0MDgxMTFhZDE0MzNi MzBjNjMwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDAyMGVmY2M1OTQ2YzY1YjFjYjQ3YTM4YzU4NTlhYzZjZTNjMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHg93n5yZ6jTsaH1k1wOMp5Eus5i q3LepNYgAfGTzQMGCqXIR4UOyCdeOXqPyC+GZ8+kuCZVGZt4uZl+LIeDJ1BTyel2 oQ4DfGqWoE7N9xg88iq8d9cX1bXixWN18AltLnQFY/vBRMutq4Gc7TJn537sgfBw tWeA9a3aBitlSreHt4aqB8yYRicyl/uRe0gmdNvQ/C2viTdC8Lj/ytPmY/F7o+9p WGqk2jxasQaJ5cvaYl4m/h+dxXZHCIuN/QmHhZfV/OezUNmUeH57coRwfKqiSbJv ny9CFvQA9b/bXFIhKFFxzL+00YRn9k90VaoA4+BMQKC34YQahkOxP1LYyQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLACDvzFlGxlsctHo4xYWaxs48GBMB8GA1UdIwQY MBaAFMNL3/iOjomJhx4TQIERrRQzswxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMt NmFjMWQxNTU1NGFiLzEvc0FJT19NV1ViR1d4eTBlampGaFpyR3pqd1lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMtNmFjMWQxNTU1NGFi LzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCwS5kMAwD BALBu/wDBADBu/4wDQYJKoZIhvcNAQELBQADggEBAImWrI9UvC/bluoj0Tavo5zc dQGo4fOTnp3GbW1JfJt/GfI+F17mFAsTT6CM772QwOdIaj0maqGaaLS/s2b9od4v M4c0SWhVVUWpScLZAq85mykFxVpofUOWXW+3je0nRcSKtc9Vyv3BNREV/X9w3/B8 s4eMsMQx4CQbSZtXWv+ltcd9OQ1EiC+Q1/UdlgXuhAFZy/f3kglKzvl+Df9okjy9 /IBlbu5nUkpyMZa3KTuNuQDuwLlzSdVPuGZsliZg925/PfFiWDc+uB7lyzP+1OCS 3LmkdYYCCwKZ87eqCDZQliiZ0bBWktGWiGlle5i0V9CWypgb8ng75W3myLJMfuM= -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:14 2026 by rpki-client