This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa File: v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa (raw, json) Hash identifier: QMYJkrHaL3LBI/CVAcdwz2saxueqHf/IvlmxIHaRqm8= Subject key identifier: BF:A4:40:84:88:82:15:73:9E:69:08:60:B2:6C:E8:5A:03:0D:7C:09 Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97 Certificate serial: 019B7759333E8C0FC324AEA701BE636BA3A8 Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50876 IP address blocks: 193.202.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:3e:8c:0f:c3:24:ae:a7:01:be:63:6b:a3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfa44084888215739e690860b26ce85a030d7c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:ce:b1:72:11:08:6c:5b:10:33:5b:a2:5f: 52:8c:48:95:2d:c2:e2:18:2b:ce:02:de:ee:ab:57: 60:7d:7a:2d:03:33:68:b9:4c:85:22:dc:e7:ab:b3: 7a:26:e1:ff:eb:79:ef:45:c6:9e:96:01:10:9c:22: 5c:47:07:c4:3b:77:2b:24:10:f5:51:3e:b4:61:ab: f1:20:de:a2:92:f4:6e:69:61:63:a6:34:05:60:14: 08:59:64:46:e0:70:5b:17:b8:75:f0:1e:58:e7:f0: 55:29:b6:be:09:ef:3a:37:4d:a4:68:9e:29:52:4d: 18:82:37:47:fb:2c:71:35:bb:b1:c0:b1:a8:1f:46: 86:bc:05:c6:f0:a6:7c:dd:a0:9c:57:e4:ef:41:a6: 9b:35:d7:a5:6c:8a:bb:95:6c:e2:70:71:89:10:ca: 00:32:ca:0b:7d:c0:71:e6:5f:f5:01:e4:d8:3b:80: 2f:af:f5:ca:db:da:54:7e:63:f0:34:7c:cf:3e:76: 95:f3:e3:3d:64:28:4f:39:e1:7f:c5:0c:2d:56:11: af:bb:f8:51:2a:f9:60:4a:ab:ee:81:9e:0b:ee:56: d5:d8:af:e6:dd:5b:13:37:ce:5a:91:f6:f8:1c:4c: 41:d8:6d:d9:c0:46:50:5e:14:48:19:6f:a1:5a:37: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:40:84:88:82:15:73:9E:69:08:60:B2:6C:E8:5A:03:0D:7C:09 X509v3 Authority Key Identifier: keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/v6RAhIiCFXOeaQhgsmzoWgMNfAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.123.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e0:da:5e:80:16:eb:a4:06:b0:f1:ed:48:15:20:00:34:d4: 31:12:16:b4:bc:ea:e0:29:c6:ac:d9:fd:bc:25:ea:16:36:17: 3f:97:24:14:e4:3d:1f:f0:f1:bc:43:df:8c:09:80:0b:53:8b: ad:0e:f0:1e:1c:ac:5b:5b:e9:19:22:56:e4:f9:bd:11:35:94: ab:4e:66:66:ee:08:66:22:a9:67:80:1e:94:39:55:33:d0:f7: 1c:b2:e3:2e:d1:65:57:1d:01:fc:64:65:0a:47:90:06:6b:96: 9f:6e:3f:6c:3c:19:22:7b:85:65:73:bb:91:df:2f:6b:8b:ea: 72:71:02:57:9e:d1:8f:af:ed:3c:ce:8e:7c:73:d4:cb:31:7a: 95:e8:dc:0d:e8:7a:01:17:21:b4:b3:9d:73:70:c0:89:3f:90: a7:70:2c:27:ee:82:e0:1c:4f:fa:cb:94:17:eb:3f:7c:d7:9e: 93:50:56:37:64:46:77:8a:03:a6:c6:38:57:7e:56:7c:50:f5: f5:c8:7b:af:d7:9b:4a:31:40:df:3a:fd:c0:86:41:62:ec:92: 92:c6:16:0c:b0:42:c3:fa:55:07:53:2e:b5:cf:cd:dc:04:ff: 60:4a:ff:5b:27:b8:d6:b9:14:af:dd:12:4a:02:d1:c1:de:5a: b2:a8:0e:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTM+jA/DJK6nAb5ja6OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGQxNWVmMmY1OWFiYjk1ZjJkOWJlNWNlZTMzMDM4ODg2 MjNiOTcwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmE0NDA4NDg4ODIxNTczOWU2OTA4NjBiMjZjZTg1YTAzMGQ3YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7nOsXIRCGxbEDNbol9SjEiVLcLi GCvOAt7uq1dgfXotAzNouUyFItznq7N6JuH/63nvRcaelgEQnCJcRwfEO3crJBD1 UT60YavxIN6ikvRuaWFjpjQFYBQIWWRG4HBbF7h18B5Y5/BVKba+Ce86N02kaJ4p Uk0YgjdH+yxxNbuxwLGoH0aGvAXG8KZ83aCcV+TvQaabNdelbIq7lWzicHGJEMoA MsoLfcBx5l/1AeTYO4Avr/XK29pUfmPwNHzPPnaV8+M9ZChPOeF/xQwtVhGvu/hR KvlgSqvugZ4L7lbV2K/m3VsTN85akfb4HExB2G3ZwEZQXhRIGW+hWjc1bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+kQISIghVznmkIYLJs6FoDDXwJMB8GA1UdIwQY MBaAFB3dFe8vWau5Xy2b5c7jMDiIYjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1Mjgt OGI2MGU0Yjk0YmNmLzEvdjZSQWhJaUNGWE9lYVFoZ3Ntem9XZ01OZkFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1MjgtOGI2MGU0Yjk0YmNm LzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp7MA0G CSqGSIb3DQEBCwUAA4IBAQCa4NpegBbrpAaw8e1IFSAANNQxEha0vOrgKcas2f28 JeoWNhc/lyQU5D0f8PG8Q9+MCYALU4utDvAeHKxbW+kZIlbk+b0RNZSrTmZm7ghm IqlngB6UOVUz0PccsuMu0WVXHQH8ZGUKR5AGa5afbj9sPBkie4Vlc7uR3y9ri+py cQJXntGPr+08zo58c9TLMXqV6NwN6HoBFyG0s51zcMCJP5CncCwn7oLgHE/6y5QX 6z98156TUFY3ZEZ3igOmxjhXflZ8UPX1yHuv15tKMUDfOv3AhkFi7JKSxhYMsELD +lUHUy61z83cBP9gSv9bJ7jWuRSv3RJKAtHB3lqyqA6L -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:15 2026 by rpki-client