This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa File: aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa (raw, json) Hash identifier: nuhL9NfNeMCM3Rnpe5bSoUeqEl5NVyDAwtG7Usr9Q4g= Subject key identifier: 69:9C:31:9C:A7:C7:AA:65:B1:25:3E:4B:08:E4:1A:1B:3C:53:61:F1 Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Certificate serial: 019B7D5C5DCB9CA04C72F298C888A5D68732 Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15375 IP address blocks: 193.108.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5d:cb:9c:a0:4c:72:f2:98:c8:88:a5:d6:87:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=699c319ca7c7aa65b1253e4b08e41a1b3c5361f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:8e:ab:60:48:50:77:7c:d6:fc:e4:a3:42: 80:99:61:44:bf:c5:26:0e:db:f4:9d:2b:2e:9c:7f: e5:47:56:c6:a0:71:e8:34:c7:cb:b6:61:b6:cc:fc: fd:94:60:66:08:62:54:bc:ce:89:04:f7:fa:07:ec: 72:0c:d0:fd:cf:49:35:50:26:5f:a1:fa:e7:d2:4b: b0:ca:2c:72:05:8a:c7:71:33:17:c8:cc:5e:8e:f5: b9:a9:f6:a1:ca:c0:1c:03:9f:5b:1e:2c:1c:6f:51: 1f:ee:b4:8f:ee:10:2e:66:17:22:d1:69:4c:11:ba: da:73:c8:d3:e8:c5:30:f7:8c:85:bf:bd:37:de:a7: ed:90:dd:69:4a:fd:c3:9d:45:35:3e:7f:c1:7c:bf: 72:fa:2e:60:53:d2:5f:98:ff:18:5c:5f:1a:5a:1c: a7:70:a4:23:83:fc:ca:02:2a:1e:b4:d5:ed:31:39: 2b:94:4a:28:c7:15:f0:10:c2:8e:28:6e:06:70:2f: 80:d9:38:d0:e4:d0:db:8e:d5:a9:26:ec:d7:e1:2f: 3a:2d:1f:5d:1e:48:1b:e3:54:e1:f2:c4:af:57:d8: 39:98:90:4b:0f:92:ed:88:c7:6e:33:0b:58:3c:8f: 76:72:d5:05:0e:5d:89:4e:bb:07:11:b0:fe:61:b8: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9C:31:9C:A7:C7:AA:65:B1:25:3E:4B:08:E4:1A:1B:3C:53:61:F1 X509v3 Authority Key Identifier: keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/aZwxnKfHqmWxJT5LCOQaGzxTYfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.159.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:3b:9e:a2:32:6b:7f:a1:7b:28:98:d2:e0:9d:f9:84:bc:47: ab:13:ea:a3:87:f6:68:f8:65:71:b9:6a:b8:17:e7:84:45:b4: bb:3e:67:0b:a6:18:32:75:c4:a4:19:d4:8c:eb:5f:83:d0:03: 47:7a:1d:33:0c:7d:b4:f3:b6:69:cf:06:8d:09:4e:43:db:43: e8:90:39:6b:4c:4f:35:04:0c:e9:49:0c:db:a1:22:74:17:e8: 5e:f9:a3:f9:fd:2c:89:be:52:eb:ba:81:84:0b:90:9c:6a:a9: e6:5c:91:6d:78:a0:46:14:0c:02:14:59:dd:2c:a6:d8:fe:d5: 49:c5:79:15:2f:56:8f:dd:a2:df:78:56:cb:dd:c8:6f:94:ae: 1f:5c:b2:27:0d:d7:5d:34:09:ee:d0:bc:6f:93:b4:9f:79:ab: 03:5a:7f:fe:0b:da:37:c0:d3:a0:c9:0b:01:44:fb:c2:31:02: bc:62:b5:fb:f8:8e:31:21:75:6e:49:62:60:92:0b:92:65:c2: e1:5d:b2:58:1d:1a:91:de:4f:24:5e:78:8a:dc:7b:87:32:b3: 7a:5d:bd:0b:66:6d:3a:c1:ea:6a:70:63:0a:0d:57:d1:a8:cb: e5:7d:b9:32:ba:c3:4d:81:1c:48:da:34:bd:89:89:dd:7a:6a: de:3b:b6:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XF3LnKBMcvKYyIil1ocyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx ODI1ZWYwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTljMzE5Y2E3YzdhYTY1YjEyNTNlNGIwOGU0MWExYjNjNTM2MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uuOq2BIUHd81vzko0KAmWFEv8Um Dtv0nSsunH/lR1bGoHHoNMfLtmG2zPz9lGBmCGJUvM6JBPf6B+xyDND9z0k1UCZf ofrn0kuwyixyBYrHcTMXyMxejvW5qfahysAcA59bHiwcb1Ef7rSP7hAuZhci0WlM Ebrac8jT6MUw94yFv7033qftkN1pSv3DnUU1Pn/BfL9y+i5gU9JfmP8YXF8aWhyn cKQjg/zKAioetNXtMTkrlEooxxXwEMKOKG4GcC+A2TjQ5NDbjtWpJuzX4S86LR9d Hkgb41Th8sSvV9g5mJBLD5LtiMduMwtYPI92ctUFDl2JTrsHEbD+YbjJyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGmcMZynx6plsSU+SwjkGhs8U2HxMB8GA1UdIwQY MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt NzU0YjYwYzViNTY4LzEvYVp3eG5LZkhxbVd4SlQ1TENPUWFHenhUWWZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4 LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWyfMA0G CSqGSIb3DQEBCwUAA4IBAQAtO56iMmt/oXsomNLgnfmEvEerE+qjh/Zo+GVxuWq4 F+eERbS7PmcLphgydcSkGdSM61+D0ANHeh0zDH2087ZpzwaNCU5D20PokDlrTE81 BAzpSQzboSJ0F+he+aP5/SyJvlLruoGEC5CcaqnmXJFteKBGFAwCFFndLKbY/tVJ xXkVL1aP3aLfeFbL3chvlK4fXLInDdddNAnu0Lxvk7SfeasDWn/+C9o3wNOgyQsB RPvCMQK8YrX7+I4xIXVuSWJgkguSZcLhXbJYHRqR3k8kXniK3HuHMrN6Xb0LZm06 wepqcGMKDVfRqMvlfbkyusNNgRxI2jS9iYndemreO7Yt -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:18 2026 by rpki-client