This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa File: s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa (raw, json) Hash identifier: DVgyuxaELvhEOBhDUYXg4JM856u4ROpCMZfu6veKFDA= Subject key identifier: B3:87:75:58:A6:0F:E0:9C:62:8F:6E:81:8F:FD:8F:88:8E:88:CC:B5 Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Certificate serial: 019B77C7696A179003AD9D1987FB7EC9B508 Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 93.191.217.0/24 maxlen: 24 93.191.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:6a:17:90:03:ad:9d:19:87:fb:7e:c9:b5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3877558a60fe09c628f6e818ffd8f888e88ccb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:ff:3c:b5:78:d8:29:78:ea:0f:58:a8:12: 73:71:13:06:89:3d:ea:e7:32:25:c1:d2:8a:d4:8c: e7:0e:36:82:9c:4b:db:5a:d4:79:af:4c:f0:b8:fc: 40:4b:68:30:9b:64:50:48:9f:a3:2f:b3:fb:1f:14: 92:e9:86:40:96:aa:9d:d4:93:c3:b3:ca:b8:9e:f4: e3:44:e9:56:7c:22:08:5c:ab:a8:ee:a9:48:ad:4d: f5:5e:63:43:b7:04:0b:51:6f:ef:a9:0c:e8:57:fe: eb:33:18:9f:bf:ca:6f:26:2a:02:99:12:cc:24:82: 22:fb:75:35:e7:5a:51:d5:c2:72:91:71:77:20:de: df:cb:03:68:ac:fe:0f:43:e1:73:37:c5:ac:e0:85: 97:3e:44:4b:af:77:74:c7:82:86:3d:7c:3c:5a:43: 9f:a2:82:48:39:6d:7a:cd:2f:52:81:2e:b1:46:9f: 5f:86:25:dd:f2:79:d7:e6:2b:7b:cf:78:4f:80:ca: fe:c4:63:07:e6:3d:ab:99:77:99:79:91:fa:2e:bc: 88:d4:3a:67:81:b1:7f:b6:4e:af:60:99:a8:30:b9: 6e:d4:e1:8f:0d:61:37:5c:e4:a7:a2:d4:15:4a:86: 8a:44:48:eb:db:da:21:e4:a2:c6:34:7b:01:d6:b8: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:75:58:A6:0F:E0:9C:62:8F:6E:81:8F:FD:8F:88:8E:88:CC:B5 X509v3 Authority Key Identifier: keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.191.217.0/24 93.191.219.0/24 Signature Algorithm: sha256WithRSAEncryption 56:1b:02:dc:3a:6d:e1:17:10:0e:e6:ab:95:d0:a6:80:24:fb: cf:fb:a4:ba:a2:80:37:14:3c:d9:c5:5b:de:51:9e:b5:d6:42: 9c:f1:45:05:c0:27:7c:84:53:c5:d1:fe:7f:55:e9:8f:7e:97: 04:fc:89:b3:e9:a9:3b:62:bc:80:6c:47:ec:83:3e:37:47:74: cb:58:63:b1:94:28:57:1e:ab:e6:e4:d7:d1:ba:03:c4:c4:0d: f9:73:4b:bf:bc:1a:41:b0:bf:f7:93:af:a7:86:7d:85:44:14: 0c:ed:fa:d9:4c:2b:7a:29:47:e8:09:f0:10:b6:b5:dd:f0:75: cb:86:d5:a2:e1:14:0b:66:f8:b6:57:cd:62:94:b8:d1:6c:ac: c6:ea:e0:fc:a5:3f:f8:97:eb:ce:51:19:29:d1:c6:2a:d2:c1: 3b:75:69:dc:39:b9:70:ec:60:cc:4e:1e:39:f0:67:9e:f8:d6: 37:56:1c:d4:1a:94:a8:c8:17:c4:86:13:ef:89:6f:5c:32:d0: 98:fc:ee:bb:b1:51:40:19:e9:f5:e1:c5:b0:e6:a6:72:55:a6: b8:08:8e:9f:40:8f:0b:1f:34:48:d6:4d:61:f2:55:2d:c7:af: 8c:71:b2:77:af:a0:8c:7e:bb:c6:31:48:c2:84:db:df:6d:3a: 02:df:55:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2lqF5ADrZ0Zh/t+ybUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw Njc1MGYwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg3NzU1OGE2MGZlMDljNjI4ZjZlODE4ZmZkOGY4ODhlODhjY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu7/PLV42Cl46g9YqBJzcRMGiT3q 5zIlwdKK1IznDjaCnEvbWtR5r0zwuPxAS2gwm2RQSJ+jL7P7HxSS6YZAlqqd1JPD s8q4nvTjROlWfCIIXKuo7qlIrU31XmNDtwQLUW/vqQzoV/7rMxifv8pvJioCmRLM JIIi+3U151pR1cJykXF3IN7fywNorP4PQ+FzN8Ws4IWXPkRLr3d0x4KGPXw8WkOf ooJIOW16zS9SgS6xRp9fhiXd8nnX5it7z3hPgMr+xGMH5j2rmXeZeZH6LryI1Dpn gbF/tk6vYJmoMLlu1OGPDWE3XOSnotQVSoaKREjr29oh5KLGNHsB1rhebwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLOHdVimD+CcYo9ugY/9j4iOiMy1MB8GA1UdIwQY MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt NmVjOTgyOTUxY2Y3LzEvczRkMVdLWVA0SnhpajI2QmpfMlBpSTZJekxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3 LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXb/ZAwQA Xb/bMA0GCSqGSIb3DQEBCwUAA4IBAQBWGwLcOm3hFxAO5quV0KaAJPvP+6S6ooA3 FDzZxVveUZ611kKc8UUFwCd8hFPF0f5/VemPfpcE/Imz6ak7YryAbEfsgz43R3TL WGOxlChXHqvm5NfRugPExA35c0u/vBpBsL/3k6+nhn2FRBQM7frZTCt6KUfoCfAQ trXd8HXLhtWi4RQLZvi2V81ilLjRbKzG6uD8pT/4l+vOURkp0cYq0sE7dWncOblw 7GDMTh458Gee+NY3VhzUGpSoyBfEhhPviW9cMtCY/O67sVFAGen14cWw5qZyVaa4 CI6fQI8LHzRI1k1h8lUtx6+McbJ3r6CMfrvGMUjChNvfbToC31WS -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:25 2026 by rpki-client