This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa File: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (raw, json) Hash identifier: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I= Subject key identifier: 5F:78:CD:07:0F:0B:87:8C:0C:FE:79:41:AC:A0:B2:67:F0:A2:2A:90 Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Certificate serial: 019B7F159402C63C1DC4EBD43B2B8BE114C7 Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 193.16.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:94:02:c6:3c:1d:c4:eb:d4:3b:2b:8b:e1:14:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f78cd070f0b878c0cfe7941aca0b267f0a22a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:e6:87:0c:7a:e5:2d:3a:af:cf:eb:75:09: 6f:28:97:14:e5:e1:4e:6a:e2:f6:01:20:6c:1f:b3: 24:c7:89:cb:e2:d3:1d:f5:3d:5b:bc:f9:95:9d:3b: 64:db:1f:67:09:99:31:28:07:ee:1a:41:53:d4:c0: 70:39:5e:72:f8:49:9b:a0:d5:16:b6:25:6e:f6:8c: 37:6d:26:b2:74:9d:cc:7a:5a:40:62:8e:6c:08:5a: b1:44:85:ad:05:99:67:78:39:28:9f:92:f0:1b:e4: 90:40:7d:28:83:7d:4c:bb:8b:66:48:ef:a1:56:51: 55:d1:7c:e2:70:0c:90:a9:83:3d:f2:b4:87:d9:8d: d9:0e:71:82:2e:0b:61:b1:2e:53:ac:63:39:a5:8d: 8d:0f:ec:6a:c3:bf:b1:ef:3e:6e:8e:4d:5f:dc:3a: ce:4f:0c:82:21:40:c7:73:32:8d:03:87:89:7c:02: 9e:b0:82:9d:ed:6c:59:38:f4:c5:96:17:9b:91:d2: 06:e6:c3:24:40:c5:b6:91:d3:07:28:48:c4:96:7b: 72:61:75:13:8a:dc:14:48:d6:16:9b:c7:da:e2:89: ae:b1:59:dd:65:25:3f:15:78:29:4a:9b:4c:9b:09: b8:82:2a:9c:c3:a3:22:06:b8:91:12:71:8f:ad:bf: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:78:CD:07:0F:0B:87:8C:0C:FE:79:41:AC:A0:B2:67:F0:A2:2A:90 X509v3 Authority Key Identifier: keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.112.0/20 Signature Algorithm: sha256WithRSAEncryption 03:48:27:38:f6:fc:8a:4a:37:4f:f7:bf:22:ef:12:70:d4:2d: b0:cd:bd:f0:18:3c:49:33:70:5b:7d:3c:62:ce:9d:67:db:99: 76:14:28:5c:61:cf:b1:3a:31:bb:f1:54:9a:bc:5f:31:0c:3a: 27:35:00:0b:7c:b8:a9:7f:d1:59:16:d8:8f:7e:29:73:72:7e: 77:d5:c5:8d:28:3a:3b:64:7f:19:96:43:fa:7f:14:c5:80:67: 61:1f:9f:88:c9:91:05:c1:22:1c:8b:91:74:25:09:5b:0f:97: 74:31:0a:f1:b4:1f:14:87:b2:ba:c7:be:fc:c4:cf:b9:4e:3b: 92:c7:8e:90:40:a3:46:76:61:a5:ad:c0:f3:9b:4b:31:dd:87: f5:e9:99:12:23:67:be:b7:66:c7:95:fa:c5:77:35:e3:b1:25: f2:eb:0e:f1:ed:9a:97:fe:8a:bc:ac:dc:90:8c:c8:59:30:42: cd:1b:61:95:f4:2b:fa:a5:6b:03:10:49:8b:46:19:c0:b0:87: 52:6e:d3:e3:bd:e3:bd:9b:34:d5:50:7d:62:51:45:3a:fe:d1: fd:f9:d3:9f:dc:d7:c1:08:c9:a8:2c:0c:a9:20:02:ef:57:77: 0c:6f:06:c1:a3:f2:f1:e9:cd:a1:18:57:9c:49:2a:6d:0b:d8: d1:a6:f1:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZQCxjwdxOvUOyuL4RTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzRlYzNlYzUzZjUyZjdmNTI4MzViYjUxMGFiNmJlZGFh MDBhM2QwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Zjc4Y2QwNzBmMGI4NzhjMGNmZTc5NDFhY2EwYjI2N2YwYTIyYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWTmhwx65S06r8/rdQlvKJcU5eFO auL2ASBsH7Mkx4nL4tMd9T1bvPmVnTtk2x9nCZkxKAfuGkFT1MBwOV5y+EmboNUW tiVu9ow3bSaydJ3MelpAYo5sCFqxRIWtBZlneDkon5LwG+SQQH0og31Mu4tmSO+h VlFV0XzicAyQqYM98rSH2Y3ZDnGCLgthsS5TrGM5pY2ND+xqw7+x7z5ujk1f3DrO TwyCIUDHczKNA4eJfAKesIKd7WxZOPTFlhebkdIG5sMkQMW2kdMHKEjElntyYXUT itwUSNYWm8fa4omusVndZSU/FXgpSptMmwm4giqcw6MiBriREnGPrb8+nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF94zQcPC4eMDP55QaygsmfwoiqQMB8GA1UdIwQY MBaAFAB07D7FP1L39Sg1u1EKtr7aoAo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUt MWFjMmVkZGE4ZTJhLzEvWDNqTkJ3OExoNHdNX25sQnJLQ3laX0NpS3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUtMWFjMmVkZGE4ZTJh LzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwRBwMA0G CSqGSIb3DQEBCwUAA4IBAQADSCc49vyKSjdP978i7xJw1C2wzb3wGDxJM3BbfTxi zp1n25l2FChcYc+xOjG78VSavF8xDDonNQALfLipf9FZFtiPfilzcn531cWNKDo7 ZH8ZlkP6fxTFgGdhH5+IyZEFwSIci5F0JQlbD5d0MQrxtB8Uh7K6x778xM+5TjuS x46QQKNGdmGlrcDzm0sx3Yf16ZkSI2e+t2bHlfrFdzXjsSXy6w7x7ZqX/oq8rNyQ jMhZMELNG2GV9Cv6pWsDEEmLRhnAsIdSbtPjveO9mzTVUH1iUUU6/tH9+dOf3NfB CMmoLAypIALvV3cMbwbBo/Lx6c2hGFecSSptC9jRpvEa -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:55 2026 by rpki-client