This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa File: 0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa (raw, json) Hash identifier: u3BDMBzVoIVq/H0Z4B77BSL8kjz5TDlPAlMIn/QKiB8= Subject key identifier: D2:D0:6F:CC:72:81:33:D0:85:5E:85:2F:5A:16:7C:A0:02:31:21:84 Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516 Certificate serial: 019B7C1264F0A02F26D9A157DEB66422DF97 Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa Signing time: Fri 02 Jan 2026 00:18:58 +0000 ROA not before: Fri 02 Jan 2026 00:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34019 IP address blocks: 193.17.192.0/24 maxlen: 24 193.106.116.0/22 maxlen: 22 193.164.153.0/24 maxlen: 24 193.200.42.0/23 maxlen: 23 2001:67c:1740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:64:f0:a0:2f:26:d9:a1:57:de:b6:64:22:df:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d06fcc728133d0855e852f5a167ca002312184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:0a:a3:5d:12:58:ec:c9:7f:2e:b7:81:1e: 98:70:ee:d0:3c:69:59:05:81:46:7f:6f:af:a1:2f: 7f:14:6d:bf:e1:64:62:88:1f:a0:8e:fd:ae:e4:dc: d9:3b:62:52:30:ec:a8:58:17:ea:f2:f0:2d:d7:5b: a6:85:29:2e:41:0a:9c:b7:5c:7c:8f:0d:44:44:62: 96:72:b3:97:5a:2a:ed:40:3b:1a:cf:9d:f6:94:9f: 81:5c:d0:c2:13:33:93:d9:b5:76:06:ef:f5:b0:a7: e8:b2:d4:00:3b:71:d8:ca:d8:0c:0e:7e:5f:fd:ac: b7:c2:5c:08:9b:d3:c6:9f:0f:1d:2f:85:7c:ae:5a: 6f:b0:ae:88:2c:ca:48:d8:ff:8b:6e:1b:2d:c4:e4: 55:45:de:ee:e5:ae:ec:89:a3:82:8f:29:8a:5f:bb: 0c:ea:c3:9a:3d:4c:0a:82:fc:c1:bd:5a:1b:03:83: e6:cc:97:51:af:73:b9:ee:27:e0:03:6e:08:ad:0a: 4e:03:a0:c2:96:3d:bf:d5:60:6a:ba:ad:94:c1:1b: 45:18:8a:ec:2b:d2:31:70:af:a0:84:63:bf:e4:21: 59:13:de:bd:01:f1:ee:1a:c3:1c:e4:40:0b:e1:5d: 9a:3a:0b:a4:15:35:12:21:92:3a:49:86:f9:db:48: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D0:6F:CC:72:81:33:D0:85:5E:85:2F:5A:16:7C:A0:02:31:21:84 X509v3 Authority Key Identifier: keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/0tBvzHKBM9CFXoUvWhZ8oAIxIYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.192.0/24 193.106.116.0/22 193.164.153.0/24 193.200.42.0/23 IPv6: 2001:67c:1740::/48 Signature Algorithm: sha256WithRSAEncryption 29:dd:c6:10:fb:85:9d:76:4a:e1:ff:31:f1:80:f1:3e:36:ff: 8d:3f:01:9a:d7:0f:75:ec:6b:13:e5:d7:8d:06:1e:92:97:8f: 3a:99:9a:30:cf:c4:12:21:c5:91:a4:b0:9f:51:a8:e3:f5:2d: 5f:92:b2:4b:d0:ed:6e:b9:57:85:da:76:3a:61:c5:20:bc:7b: 89:28:3a:15:ac:d7:5e:c8:76:c9:8d:a9:74:71:f8:f0:25:7a: 39:27:ac:44:77:9e:45:b1:27:5f:c7:b2:cb:c2:c4:47:56:e1: 9f:2c:41:ad:46:99:5a:50:95:64:15:8b:e4:b9:fc:a6:46:01: e7:58:56:4e:ac:ab:f7:12:38:10:d4:32:a6:01:1b:26:d8:99: 3e:57:4f:78:4d:0f:90:a8:8a:74:4b:95:bf:dc:d9:0f:1c:e7: 6a:82:e4:19:3d:81:34:7c:2f:e9:db:d9:63:29:1b:16:e1:a9: 19:f4:01:85:3d:9b:d4:51:b3:35:27:66:5a:0c:8b:62:b5:6d: 7b:55:0e:15:ac:3a:93:38:93:d1:63:5a:0d:e3:ae:a7:32:81: 4e:e9:81:11:2e:f5:61:d1:14:62:e8:18:f7:0f:4c:70:e4:f2: 9d:30:a4:4f:3d:fe:dc:49:aa:ae:38:12:44:2f:67:bc:4c:6a: c9:62:1d:12 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8EmTwoC8m2aFX3rZkIt+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2 MDA1MTYwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQwNmZjYzcyODEzM2QwODU1ZTg1MmY1YTE2N2NhMDAyMzEyMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzwKo10SWOzJfy63gR6YcO7QPGlZ BYFGf2+voS9/FG2/4WRiiB+gjv2u5NzZO2JSMOyoWBfq8vAt11umhSkuQQqct1x8 jw1ERGKWcrOXWirtQDsaz532lJ+BXNDCEzOT2bV2Bu/1sKfostQAO3HYytgMDn5f /ay3wlwIm9PGnw8dL4V8rlpvsK6ILMpI2P+LbhstxORVRd7u5a7siaOCjymKX7sM 6sOaPUwKgvzBvVobA4PmzJdRr3O57ifgA24IrQpOA6DClj2/1WBquq2UwRtFGIrs K9IxcK+ghGO/5CFZE969AfHuGsMc5EAL4V2aOgukFTUSIZI6SYb520hsvQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNLQb8xygTPQhV6FL1oWfKACMSGEMB8GA1UdIwQY MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt OGFmYTc0ZDg3NjlmLzEvMHRCdnpIS0JNOUNGWG9VdldoWjhvQUl4SVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAwRHAAwQC wWp0AwQAwaSZAwQBwcgqMA8EAgACMAkDBwAgAQZ8F0AwDQYJKoZIhvcNAQELBQAD ggEBACndxhD7hZ12SuH/MfGA8T42/40/AZrXD3XsaxPl140GHpKXjzqZmjDPxBIh xZGksJ9RqOP1LV+SskvQ7W65V4XadjphxSC8e4koOhWs117IdsmNqXRx+PAlejkn rER3nkWxJ1/HssvCxEdW4Z8sQa1GmVpQlWQVi+S5/KZGAedYVk6sq/cSOBDUMqYB GybYmT5XT3hND5CoinRLlb/c2Q8c52qC5Bk9gTR8L+nb2WMpGxbhqRn0AYU9m9RR szUnZloMi2K1bXtVDhWsOpM4k9FjWg3jrqcygU7pgREu9WHRFGLoGPcPTHDk8p0w pE89/txJqq44EkQvZ7xMasliHRI= -----END CERTIFICATE-----Generated at Fri Jan 9 22:38:38 2026 by rpki-client