This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/83u4srH8ACpTsU951VXyIZw_p80.roa File: 83u4srH8ACpTsU951VXyIZw_p80.roa (raw, json) Hash identifier: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I= Subject key identifier: F3:7B:B8:B2:B1:FC:00:2A:53:B1:4F:79:D5:55:F2:21:9C:3F:A7:CD Certificate issuer: /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce Certificate serial: 019BFA41C55950ED8BB393D5A023143CE133 Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/83u4srH8ACpTsU951VXyIZw_p80.roa Signing time: Mon 26 Jan 2026 12:22:52 +0000 ROA not before: Mon 26 Jan 2026 12:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 193.23.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:41:c5:59:50:ed:8b:b3:93:d5:a0:23:14:3c:e1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce Validity Not Before: Jan 26 12:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f37bb8b2b1fc002a53b14f79d555f2219c3fa7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:e0:f0:4c:bf:84:20:89:c5:27:63:67:2d: d2:c7:52:80:d4:f2:9b:99:5b:86:00:58:ff:02:17: 6e:29:34:95:3e:53:3e:dc:8c:27:7f:72:fa:2c:d2: fb:dc:db:4a:91:c3:7a:e6:aa:f6:bf:96:e5:eb:66: 49:75:b7:cd:ee:73:a5:90:06:5c:eb:46:ff:3e:de: ac:54:88:76:af:2e:e6:c0:0a:d0:72:63:83:eb:a5: ba:47:b4:02:75:42:ab:93:52:c0:21:e2:d2:ff:2c: d7:58:02:c0:7c:40:ee:7c:5f:67:a0:be:d0:a8:d3: f6:88:93:6a:93:d8:4d:f3:85:f4:7b:c2:86:b3:5b: cb:e1:d9:fa:09:56:36:d5:7a:81:98:86:ef:99:6c: 4b:33:a9:c4:b8:ab:d1:c0:0d:7d:28:a8:a4:23:00: 62:d3:e1:40:c1:d6:d6:48:7a:f6:a2:61:7a:ea:1b: f1:8e:32:86:e5:ea:be:c6:c1:94:9b:73:75:8a:0a: 62:44:8e:a6:bb:b9:99:2f:87:c7:14:03:84:0a:50: 50:5c:a5:ca:0e:bf:b6:8e:90:28:40:c1:fa:b5:f5: 16:87:54:c3:8c:41:d5:88:b1:a6:1f:a9:9d:2c:2f: ae:04:3f:f5:bd:f5:c2:c4:28:05:47:db:d7:4f:4d: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7B:B8:B2:B1:FC:00:2A:53:B1:4F:79:D5:55:F2:21:9C:3F:A7:CD X509v3 Authority Key Identifier: keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/83u4srH8ACpTsU951VXyIZw_p80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.2.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:e5:f0:a1:89:bb:78:8e:23:84:9a:4f:a6:2a:df:4d:eb:43: 10:a0:d6:29:e5:b9:f6:ac:a3:0c:b2:f1:30:37:7b:87:3f:51: 47:c5:f1:e2:9e:78:28:14:22:c0:fc:ac:94:18:27:12:37:02: 37:91:27:cb:37:86:69:58:e3:cb:f7:9d:3f:1c:3c:4f:d0:56: 8f:c2:65:a0:72:b5:cb:60:07:15:ed:c8:d9:01:84:91:ff:8e: 88:b3:cb:de:1c:c0:e5:e2:61:c9:06:97:ff:b3:3b:64:52:04: c7:24:29:0e:fd:0c:0d:eb:ee:6f:39:7e:22:c3:b1:de:d5:2d: 5c:9a:ac:a1:e3:af:dc:e0:97:40:22:ee:3d:19:8b:a2:cd:57: e1:94:bd:f7:63:72:37:77:6a:28:7b:08:3a:3e:fc:32:97:b8: 5f:95:58:5b:7e:06:5f:ac:ab:bc:29:b5:2a:ba:8f:5d:b8:3d: 93:a5:0e:11:f4:02:af:45:21:c3:aa:dc:67:57:01:f7:68:89: af:0b:ad:b7:a1:66:1e:da:17:14:b7:d9:01:2c:bd:6a:74:15: 65:d6:4f:0a:6a:e2:a3:c5:24:6d:64:fd:94:b3:86:c1:0c:13: 6f:6e:d6:37:e4:59:38:fe:7f:a2:e4:cc:0d:7b:de:17:e8:83: 48:d9:11:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6QcVZUO2Ls5PVoCMUPOEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzhlZDZiOTUyZDk0MjllMzUzNGYxNGQ5MzI2NTk5MGYx Y2E3Y2UwHhcNMjYwMTI2MTIyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzdiYjhiMmIxZmMwMDJhNTNiMTRmNzlkNTU1ZjIyMTljM2ZhN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYfg8Ey/hCCJxSdjZy3Sx1KA1PKb mVuGAFj/AhduKTSVPlM+3Iwnf3L6LNL73NtKkcN65qr2v5bl62ZJdbfN7nOlkAZc 60b/Pt6sVIh2ry7mwArQcmOD66W6R7QCdUKrk1LAIeLS/yzXWALAfEDufF9noL7Q qNP2iJNqk9hN84X0e8KGs1vL4dn6CVY21XqBmIbvmWxLM6nEuKvRwA19KKikIwBi 0+FAwdbWSHr2omF66hvxjjKG5eq+xsGUm3N1igpiRI6mu7mZL4fHFAOEClBQXKXK Dr+2jpAoQMH6tfUWh1TDjEHViLGmH6mdLC+uBD/1vfXCxCgFR9vXT00pEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPN7uLKx/AAqU7FPedVV8iGcP6fNMB8GA1UdIwQY MBaAFBDI7WuVLZQp41NPFNkyZZkPHKfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1qdGE1VXRsQ25qVTA4VTJUSmxtUThjcDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MGExMTAtOTk0OC00M2IzLWEzY2Mt OGQ4OTdkOGE5ZjljLzEvODN1NHNySDhBQ3BUc1U5NTFWWHlJWndfcDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85MGExMTAtOTk0OC00M2IzLWEzY2MtOGQ4OTdkOGE5Zjlj LzEvRU1qdGE1VXRsQ25qVTA4VTJUSmxtUThjcDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRcCMA0G CSqGSIb3DQEBCwUAA4IBAQAu5fChibt4jiOEmk+mKt9N60MQoNYp5bn2rKMMsvEw N3uHP1FHxfHinngoFCLA/KyUGCcSNwI3kSfLN4ZpWOPL950/HDxP0FaPwmWgcrXL YAcV7cjZAYSR/46Is8veHMDl4mHJBpf/sztkUgTHJCkO/QwN6+5vOX4iw7He1S1c mqyh46/c4JdAIu49GYuizVfhlL33Y3I3d2ooewg6Pvwyl7hflVhbfgZfrKu8KbUq uo9duD2TpQ4R9AKvRSHDqtxnVwH3aImvC623oWYe2hcUt9kBLL1qdBVl1k8KauKj xSRtZP2Us4bBDBNvbtY35Fk4/n+i5MwNe94X6INI2REq -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:13 2026 by rpki-client