This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/_aX_04oA-sEKgu-zFqSKB5o59IU.roa File: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (raw, json) Hash identifier: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80= Subject key identifier: FD:A5:FF:D3:8A:00:FA:C1:0A:82:EF:B3:16:A4:8A:07:9A:39:F4:85 Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B7EA6BD4400322EF695957AAE46CD0E7C Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/_aX_04oA-sEKgu-zFqSKB5o59IU.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4601 IP address blocks: 147.189.216.0/21 maxlen: 21 193.5.16.0/22 maxlen: 22 2a0d:3dc0::/29 maxlen: 29 2a0d:3dc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bd:44:00:32:2e:f6:95:95:7a:ae:46:cd:0e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fda5ffd38a00fac10a82efb316a48a079a39f485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:0e:6c:9f:83:5d:e6:86:6c:f3:b9:eb:0f: 39:e7:36:21:a1:3a:5c:05:52:97:82:2d:60:48:cf: e4:f8:61:b6:d1:ef:b6:89:f3:36:e2:ea:b5:35:9d: 88:43:fa:93:6c:43:40:b1:40:ea:3e:fd:77:0d:a8: b7:87:68:ab:0f:54:e5:e3:a9:2e:5b:d8:57:ca:9d: 87:49:1e:23:2d:7f:5f:44:b1:de:b9:bd:6e:47:9d: 09:72:d2:22:0b:c1:cd:76:37:36:77:84:ef:6e:e2: 07:23:20:01:31:cf:53:6c:a1:45:ad:a6:b1:e2:77: e7:f4:f7:5e:51:b0:47:51:9d:92:30:3c:86:d2:43: d5:2e:58:e6:fd:ce:a8:90:85:5b:0a:5b:69:bb:42: 34:a5:cc:cb:5f:2e:2f:fb:5a:66:0f:5b:61:6d:3a: 89:9c:51:81:4e:74:14:6e:1b:c5:44:2b:58:97:19: a8:3b:f4:f0:4d:c5:e8:2f:82:8f:41:23:a9:a0:ff: d9:9e:a0:8f:2e:1f:fe:10:7f:c2:3d:ab:29:70:57: be:35:42:24:58:b9:06:64:a0:ba:c0:49:f0:b1:7e: 45:11:b2:fb:17:72:1d:e0:1e:b9:ac:38:82:23:62: d3:6e:28:55:af:8d:23:03:58:d3:23:8a:de:f7:55: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:FF:D3:8A:00:FA:C1:0A:82:EF:B3:16:A4:8A:07:9A:39:F4:85 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/_aX_04oA-sEKgu-zFqSKB5o59IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.216.0/21 193.5.16.0/22 IPv6: 2a0d:3dc0::/29 Signature Algorithm: sha256WithRSAEncryption 4f:51:bf:fb:f2:e9:a1:76:5d:b8:6a:46:8c:03:79:2a:a6:90: ea:5b:b3:d3:8a:0f:70:4e:e8:92:9f:ea:95:b6:f2:ab:02:24: 2f:ce:bf:74:1b:30:a9:c4:d2:dd:b7:e8:94:bb:49:e4:5d:59: dd:03:b0:fc:e9:ad:2d:9a:5a:9e:e7:52:69:b5:47:31:cd:5c: 6b:72:44:4b:7b:13:e0:d6:ff:db:9e:ed:ea:29:5d:1d:48:95: 1d:b9:e1:4d:7f:30:2c:ef:c3:3b:46:6b:78:60:57:a3:93:61: b9:49:aa:38:45:0e:3f:bd:a3:61:79:47:cd:15:a1:e4:67:00: 7b:5d:5d:35:35:fb:88:f4:67:81:92:38:d9:6c:45:4e:53:20: fd:94:1e:a0:9d:58:1e:3a:85:6a:9e:88:27:ce:89:50:ff:13: a3:3d:ce:20:2d:26:17:a3:8c:ab:74:c8:6a:30:ca:03:76:77: 5c:9b:25:42:8d:09:6d:eb:d2:2a:ff:1f:8e:78:5a:df:13:8f: b7:c7:c2:50:fc:e8:9a:92:36:ea:ac:1e:54:a2:c5:c4:53:5c: 63:10:ba:62:3f:80:bf:e6:df:1d:81:19:49:44:7b:c9:3b:6c: 2d:68:31:05:63:c3:e3:26:d4:7c:6a:5b:ac:19:e2:4e:e0:bd: 73:bd:3b:3f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pr1EADIu9pWVeq5GzQ58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGE1ZmZkMzhhMDBmYWMxMGE4MmVmYjMxNmE0OGEwNzlhMzlmNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQObJ+DXeaGbPO56w855zYhoTpc BVKXgi1gSM/k+GG20e+2ifM24uq1NZ2IQ/qTbENAsUDqPv13Dai3h2irD1Tl46ku W9hXyp2HSR4jLX9fRLHeub1uR50JctIiC8HNdjc2d4TvbuIHIyABMc9TbKFFraax 4nfn9PdeUbBHUZ2SMDyG0kPVLljm/c6okIVbCltpu0I0pczLXy4v+1pmD1thbTqJ nFGBTnQUbhvFRCtYlxmoO/TwTcXoL4KPQSOpoP/ZnqCPLh/+EH/CPaspcFe+NUIk WLkGZKC6wEnwsX5FEbL7F3Id4B65rDiCI2LTbihVr40jA1jTI4re91UGfwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFP2l/9OKAPrBCoLvsxakigeaOfSFMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvX2FYXzA0b0Etc0VLZ3UtekZxU0tCNW81OUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDk73YAwQC wQUQMA0EAgACMAcDBQMqDT3AMA0GCSqGSIb3DQEBCwUAA4IBAQBPUb/78umhdl24 akaMA3kqppDqW7PTig9wTuiSn+qVtvKrAiQvzr90GzCpxNLdt+iUu0nkXVndA7D8 6a0tmlqe51JptUcxzVxrckRLexPg1v/bnu3qKV0dSJUdueFNfzAs78M7Rmt4YFej k2G5Sao4RQ4/vaNheUfNFaHkZwB7XV01NfuI9GeBkjjZbEVOUyD9lB6gnVgeOoVq nognzolQ/xOjPc4gLSYXo4yrdMhqMMoDdndcmyVCjQlt69Iq/x+OeFrfE4+3x8JQ /OiakjbqrB5UosXEU1xjELpiP4C/5t8dgRlJRHvJO2wtaDEFY8PjJtR8alusGeJO 4L1zvTs/ -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:29 2026 by rpki-client