This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/_DUQvzCHi4TjgwrtIlsWotmeAkk.roa File: _DUQvzCHi4TjgwrtIlsWotmeAkk.roa (raw, json) Hash identifier: ANEvAKdTGhIs8TP4Hdyx04j79Xu2tvxw7I5FqurjlJA= Subject key identifier: FC:35:10:BF:30:87:8B:84:E3:83:0A:ED:22:5B:16:A2:D9:9E:02:49 Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Certificate serial: 019B7B35E8474FEA3A2EE062A37F59BAAE77 Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/_DUQvzCHi4TjgwrtIlsWotmeAkk.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 193.222.50.0/24 maxlen: 24 193.222.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e8:47:4f:ea:3a:2e:e0:62:a3:7f:59:ba:ae:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc3510bf30878b84e3830aed225b16a2d99e0249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:e4:25:ba:f3:be:03:a5:1d:ff:96:10:fb: 3d:74:ba:fa:b9:6e:70:8a:ca:5a:b7:41:8d:50:8c: 18:05:35:f1:2a:73:55:9d:df:d6:be:6e:e4:ed:8c: 8d:27:51:e9:b0:37:3a:5e:8c:af:4c:7d:6f:96:5f: 59:14:75:30:b4:df:2e:7c:34:1e:65:0d:f7:20:85: cd:cc:ac:57:2e:d9:07:92:3d:18:e8:e7:f3:3c:74: e4:f0:2f:41:3a:44:5c:db:2a:a3:4b:a0:68:33:8b: 90:4c:34:f1:7b:1c:20:e8:19:ef:58:b8:c2:dd:86: f6:d6:76:e3:42:a3:3e:53:c6:07:c7:3a:3e:09:eb: 92:70:06:dc:24:e1:21:53:80:46:50:e6:d9:0a:1d: 23:3e:6b:80:84:ec:ed:15:a4:89:62:f2:16:d6:90: b2:0f:03:26:55:be:d8:98:a6:89:b5:c4:aa:77:6a: a6:ce:7f:3d:73:31:fb:75:ff:66:38:88:5e:e9:26: 58:3c:c0:8e:50:b6:ff:89:a6:fe:4f:f4:ed:21:eb: b7:4d:80:e3:d1:de:63:f6:6c:a3:90:e3:6e:0e:8a: 73:d5:e9:44:8a:a4:03:77:57:69:59:84:cf:38:4e: 6c:4b:28:53:52:03:8e:f3:2e:9c:6b:1a:f0:ab:7e: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:35:10:BF:30:87:8B:84:E3:83:0A:ED:22:5B:16:A2:D9:9E:02:49 X509v3 Authority Key Identifier: keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/_DUQvzCHi4TjgwrtIlsWotmeAkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.50.0/24 193.222.60.0/24 Signature Algorithm: sha256WithRSAEncryption 86:99:68:16:7a:c9:25:b7:11:16:33:0b:ec:b9:ec:bd:11:1b: 02:10:4a:78:36:96:11:24:24:82:82:07:b7:43:a3:11:65:3e: 81:38:43:cd:8e:78:87:b4:22:7a:50:6d:08:29:8c:7a:58:e7: 85:89:40:ad:0b:f5:33:46:76:33:12:b9:d1:eb:23:ee:fc:20: 2a:6d:32:c6:7b:ae:d7:e3:70:f1:4c:1b:e0:69:9d:1f:30:8b: 53:75:d6:f4:38:96:69:17:6c:98:c7:10:5d:b2:8b:f8:f5:21: 79:68:f4:d3:da:5e:85:ce:81:18:da:41:e3:5f:22:9a:a9:af: 55:6f:2e:22:43:d4:e9:fb:63:57:49:bd:1d:88:03:a0:90:f1: 00:d6:7a:f0:19:c0:0f:2a:33:d3:f6:50:ea:89:b0:75:7b:07: 90:d8:7a:b9:f3:97:6e:bf:17:43:ae:99:64:e6:c6:8b:ad:e4: 3f:c4:35:98:ce:c7:44:48:e6:82:21:79:09:6c:c6:5d:b3:d9: 84:4c:b3:d5:7e:01:f6:f8:5b:68:85:4a:c3:c0:4e:d2:88:2c: fa:95:8c:19:d8:a5:15:67:a9:b4:7f:3a:32:dc:c5:b6:30:2c: 25:4a:79:1d:a5:47:d2:57:18:d8:e2:9a:53:07:d0:d0:e0:fd: ef:a9:76:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NehHT+o6LuBio39Zuq53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz NjViNjAwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzM1MTBiZjMwODc4Yjg0ZTM4MzBhZWQyMjViMTZhMmQ5OWUwMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VrkJbrzvgOlHf+WEPs9dLr6uW5w ispat0GNUIwYBTXxKnNVnd/Wvm7k7YyNJ1HpsDc6XoyvTH1vll9ZFHUwtN8ufDQe ZQ33IIXNzKxXLtkHkj0Y6OfzPHTk8C9BOkRc2yqjS6BoM4uQTDTxexwg6BnvWLjC 3Yb21nbjQqM+U8YHxzo+CeuScAbcJOEhU4BGUObZCh0jPmuAhOztFaSJYvIW1pCy DwMmVb7YmKaJtcSqd2qmzn89czH7df9mOIhe6SZYPMCOULb/iab+T/TtIeu3TYDj 0d5j9myjkONuDopz1elEiqQDd1dpWYTPOE5sSyhTUgOO8y6caxrwq36PdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPw1EL8wh4uE44MK7SJbFqLZngJJMB8GA1UdIwQY MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvX0RVUXZ6Q0hpNFRqZ3dydElsc1dvdG1lQWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwd4yAwQA wd48MA0GCSqGSIb3DQEBCwUAA4IBAQCGmWgWeskltxEWMwvsuey9ERsCEEp4NpYR JCSCgge3Q6MRZT6BOEPNjniHtCJ6UG0IKYx6WOeFiUCtC/UzRnYzErnR6yPu/CAq bTLGe67X43DxTBvgaZ0fMItTddb0OJZpF2yYxxBdsov49SF5aPTT2l6FzoEY2kHj XyKaqa9Vby4iQ9Tp+2NXSb0diAOgkPEA1nrwGcAPKjPT9lDqibB1eweQ2Hq585du vxdDrplk5saLreQ/xDWYzsdESOaCIXkJbMZds9mETLPVfgH2+FtohUrDwE7SiCz6 lYwZ2KUVZ6m0fzoy3MW2MCwlSnkdpUfSVxjY4ppTB9DQ4P3vqXYe -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:20 2026 by rpki-client