This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/1-DbHlApWvHSbpBcMnUYSNB33bx0.roa File: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (raw, json) Hash identifier: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM= Subject key identifier: F8:36:C7:94:0A:56:BC:74:9B:A4:17:0C:9D:46:12:34:1D:F7:6F:1D Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Certificate serial: 019B7AC8E3FFD08FB6D59D59F9CF6D21EFB7 Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/1-DbHlApWvHSbpBcMnUYSNB33bx0.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29229 IP address blocks: 193.93.164.0/22 maxlen: 22 2001:67c:2cd4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e3:ff:d0:8f:b6:d5:9d:59:f9:cf:6d:21:ef:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f836c7940a56bc749ba4170c9d4612341df76f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:1a:31:e3:f2:01:4e:40:e4:e0:97:2d:ec: 0a:65:e1:56:81:53:41:08:65:95:82:c2:f9:1c:bb: c5:f9:18:00:77:5d:31:ce:fa:35:d9:cc:00:21:b1: c0:98:b8:15:81:9b:db:b9:ae:a0:12:66:bc:9f:5d: fa:c3:e9:53:96:64:75:32:fe:4b:2d:75:aa:5a:ef: 95:1f:c6:7f:d2:75:f3:c3:b8:b6:c8:6a:d1:4f:d3: 24:b6:8e:dd:b5:e0:24:e8:a2:e7:fd:2f:5e:5a:24: 90:be:43:1a:50:af:23:2d:6d:12:19:b4:60:99:22: 62:f3:76:50:1b:97:b2:59:d5:a3:23:90:b7:8a:f8: b3:c1:cc:83:52:e0:df:93:2d:ef:98:e5:c1:bf:46: 90:74:1d:79:7a:d3:50:fa:4a:23:25:4b:ca:ec:90: 4c:92:5e:3c:17:e9:e6:71:6b:0c:19:3b:11:fc:c9: 10:da:98:86:b0:1e:5b:d7:87:a0:f0:1c:32:16:51: 2f:11:0d:93:fd:65:0e:80:aa:a2:9d:89:db:8f:05: 4e:94:19:c8:0e:6f:12:7b:fa:00:b3:6a:b1:a7:4d: 17:05:87:82:85:3d:4b:0d:0f:83:79:dc:f5:bf:ae: a0:c7:cc:6a:fc:52:77:c1:35:9e:a3:a3:c0:d6:cb: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:36:C7:94:0A:56:BC:74:9B:A4:17:0C:9D:46:12:34:1D:F7:6F:1D X509v3 Authority Key Identifier: keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/1-DbHlApWvHSbpBcMnUYSNB33bx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.164.0/22 IPv6: 2001:67c:2cd4::/48 Signature Algorithm: sha256WithRSAEncryption 8f:ca:f5:d1:72:9b:54:a5:e6:ce:e7:71:29:9a:6b:22:9e:3b: 22:69:3a:a1:73:4b:3e:6a:9a:a8:5f:6d:fd:86:1a:b7:2d:a3: 09:ce:c5:cc:91:e7:4a:27:6c:e7:ef:68:84:02:22:d7:e0:3f: 5f:fd:30:cc:39:f2:7a:19:c2:e3:3e:88:d1:bc:d9:7a:d6:31: e6:43:75:22:ce:d6:e7:73:a9:2c:6a:fe:66:e0:d9:0e:c4:57: b6:6c:43:ab:a9:24:e9:81:51:25:87:b1:a8:08:4d:0c:ad:5c: b2:1b:3f:02:e6:b7:b1:82:4f:da:ee:ad:ca:99:8e:8b:79:e0: c5:bd:b8:85:14:21:91:d5:72:9e:44:7c:b1:d5:b8:4c:12:e2: 2a:8a:54:8d:bc:52:1e:b1:ba:af:52:a6:29:d3:bb:29:ec:d0: 95:bb:51:47:dc:aa:d5:80:87:a5:23:0a:1c:8b:e9:52:52:c6: db:68:db:ea:4f:52:23:4f:c3:ab:85:aa:11:b8:c3:5d:3b:2f: ea:bb:6c:cb:d0:40:37:13:a6:d1:b0:2e:5c:23:d5:b8:46:d2: b3:84:8f:c1:75:53:7c:4e:00:3d:24:40:07:db:9f:f4:45:dd: b6:68:64:22:90:ec:06:87:88:90:db:eb:a7:05:c1:1c:a9:8d: 4c:60:e7:01 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yOP/0I+21Z1Z+c9tIe+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OTgyYjAwZGM2MDAzZGNjNWNmZDdkMjdiNTU5NWQwY2Fj YTVkYTEwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODM2Yzc5NDBhNTZiYzc0OWJhNDE3MGM5ZDQ2MTIzNDFkZjc2ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DkaMePyAU5A5OCXLewKZeFWgVNB CGWVgsL5HLvF+RgAd10xzvo12cwAIbHAmLgVgZvbua6gEma8n136w+lTlmR1Mv5L LXWqWu+VH8Z/0nXzw7i2yGrRT9Mkto7dteAk6KLn/S9eWiSQvkMaUK8jLW0SGbRg mSJi83ZQG5eyWdWjI5C3ivizwcyDUuDfky3vmOXBv0aQdB15etNQ+kojJUvK7JBM kl48F+nmcWsMGTsR/MkQ2piGsB5b14eg8BwyFlEvEQ2T/WUOgKqinYnbjwVOlBnI Dm8Se/oAs2qxp00XBYeChT1LDQ+Dedz1v66gx8xq/FJ3wTWeo6PA1stE4QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPg2x5QKVrx0m6QXDJ1GEjQd928dMB8GA1UdIwQY MBaAFMiYKwDcYAPcxc/X0ntVldDKyl2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTkt MTY1M2UwZGU0MDUwLzEvMS1EYkhsQXBXdkhTYnBCY01uVVlTTkIzM2J4MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDEvMjE2OGJhLTFjNGMtNDIwNi05Mjk5LTE2NTNlMGRlNDA1 MC8xL3lKZ3JBTnhnQTl6Rno5ZlNlMVdWME1yS1hhRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAsFdpDAP BAIAAjAJAwcAIAEGfCzUMA0GCSqGSIb3DQEBCwUAA4IBAQCPyvXRcptUpebO53Ep mmsinjsiaTqhc0s+apqoX239hhq3LaMJzsXMkedKJ2zn72iEAiLX4D9f/TDMOfJ6 GcLjPojRvNl61jHmQ3Uiztbnc6ksav5m4NkOxFe2bEOrqSTpgVElh7GoCE0MrVyy Gz8C5rexgk/a7q3KmY6LeeDFvbiFFCGR1XKeRHyx1bhMEuIqilSNvFIesbqvUqYp 07sp7NCVu1FH3KrVgIelIwoci+lSUsbbaNvqT1IjT8OrhaoRuMNdOy/qu2zL0EA3 E6bRsC5cI9W4RtKzhI/BdVN8TgA9JEAH25/0Rd22aGQikOwGh4iQ2+unBcEcqY1M YOcB -----END CERTIFICATE-----Generated at Mon Jan 12 11:01:51 2026 by rpki-client