This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/jrZT53oxW00HHkJ4oi73dIqORkg.roa File: jrZT53oxW00HHkJ4oi73dIqORkg.roa (raw, json) Hash identifier: 0LWcgLkEI6cZvSHHdQ30LundEYwXTRzRbBPsvdUh4fc= Subject key identifier: 8E:B6:53:E7:7A:31:5B:4D:07:1E:42:78:A2:2E:F7:74:8A:8E:46:48 Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566 Certificate serial: 019B42AAD25723FA6F4458AD13A761F56D44 Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/jrZT53oxW00HHkJ4oi73dIqORkg.roa Signing time: Sun 21 Dec 2025 20:47:29 +0000 ROA not before: Sun 21 Dec 2025 20:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49801 IP address blocks: 193.29.26.0/24 maxlen: 24 2a10:f980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:aa:d2:57:23:fa:6f:44:58:ad:13:a7:61:f5:6d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566 Validity Not Before: Dec 21 20:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8eb653e77a315b4d071e4278a22ef7748a8e4648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:be:c5:f6:f3:cb:ca:78:08:b5:d8:2a:77: 16:ae:8b:93:ea:90:af:8b:c6:0b:cf:01:2d:59:a5: 3d:45:e8:77:9d:b2:d9:4b:65:48:88:af:94:88:e8: 90:a4:24:96:98:d0:25:06:75:bc:ff:7b:5f:e8:85: 8f:8c:2d:27:5f:15:fc:d2:9b:95:4e:bc:d0:36:07: ee:4f:dd:6a:62:95:4e:d4:9d:a7:25:65:15:16:1d: 09:2e:d2:3a:05:58:1a:e2:63:7a:b3:a8:5b:64:ba: 39:12:bf:69:ec:dd:ff:7d:cc:d8:f6:d3:74:5a:f0: a2:6d:29:d1:6b:93:15:f4:c5:43:09:4e:b5:cc:ac: e8:24:12:ef:49:da:6c:b0:b5:ad:98:1b:bf:81:97: 29:5a:cf:0f:48:20:df:16:e8:16:e6:95:83:20:ba: ab:40:71:74:51:99:9b:0e:17:09:1c:c4:d0:9c:c1: 97:30:09:db:57:af:0c:49:e9:44:8b:82:7e:1a:be: f7:2f:02:b8:7e:7d:21:cc:64:66:3d:d5:3c:11:0f: 23:d6:1e:31:ab:a3:14:5d:05:27:14:e2:d7:59:49: 92:e3:70:c0:0c:90:93:2f:8b:f5:2b:70:52:7d:92: 84:9b:de:45:e7:f3:08:08:c3:2e:85:45:c5:ab:7b: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:53:E7:7A:31:5B:4D:07:1E:42:78:A2:2E:F7:74:8A:8E:46:48 X509v3 Authority Key Identifier: keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/jrZT53oxW00HHkJ4oi73dIqORkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.26.0/24 IPv6: 2a10:f980::/29 Signature Algorithm: sha256WithRSAEncryption 92:21:df:c8:1d:dd:82:a1:da:8d:fa:a1:74:99:16:5b:69:b1: 2c:30:aa:fc:9c:c9:dd:84:e4:7a:94:07:fd:f1:db:c3:7a:c5: 4b:9d:39:97:d8:9f:13:d6:79:87:cc:66:ad:ea:f8:2a:4d:02: 50:16:4c:01:1a:32:11:a7:c7:ec:1c:02:c7:f4:1e:96:16:53: bc:de:a2:d8:40:3b:05:b8:15:2f:e9:89:5d:fb:74:93:be:dc: a2:71:a2:15:b3:8e:09:7f:a8:c9:1b:ea:b9:38:22:7b:c7:97: 07:89:69:a3:65:53:0a:f6:65:8c:ad:78:fe:8a:62:b2:a1:62: ab:2b:db:bb:34:e1:d5:ec:85:ef:cd:4e:8b:bb:40:0a:18:6f: 49:40:40:b8:a2:4b:7b:25:21:7a:28:77:43:14:1a:22:fd:c4: 57:d9:f2:d4:61:76:4b:47:92:09:2a:78:90:ec:a8:3d:d0:d2: f8:7b:1e:54:11:4a:01:b6:f4:c1:54:02:ac:7b:4c:1b:4a:a6: 33:79:84:cd:56:73:00:71:81:80:7a:13:30:eb:6e:db:80:ab: 3f:8e:2f:9e:81:07:f7:bf:bb:f5:d6:a1:62:6c:fd:9a:27:22: 30:87:98:be:a5:47:98:48:aa:36:c9:93:74:6d:49:6c:4f:33: 83:11:aa:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZtCqtJXI/pvRFitE6dh9W1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OTBjMTU1Mzc2MmFjOWFmNTdkZjliNThkOWRjNTBhZjQw OWM1NjYwHhcNMjUxMjIxMjA0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWI2NTNlNzdhMzE1YjRkMDcxZTQyNzhhMjJlZjc3NDhhOGU0NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudW+xfbzy8p4CLXYKncWrouT6pCv i8YLzwEtWaU9Reh3nbLZS2VIiK+UiOiQpCSWmNAlBnW8/3tf6IWPjC0nXxX80puV TrzQNgfuT91qYpVO1J2nJWUVFh0JLtI6BVga4mN6s6hbZLo5Er9p7N3/fczY9tN0 WvCibSnRa5MV9MVDCU61zKzoJBLvSdpssLWtmBu/gZcpWs8PSCDfFugW5pWDILqr QHF0UZmbDhcJHMTQnMGXMAnbV68MSelEi4J+Gr73LwK4fn0hzGRmPdU8EQ8j1h4x q6MUXQUnFOLXWUmS43DADJCTL4v1K3BSfZKEm95F5/MICMMuhUXFq3uisQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI62U+d6MVtNBx5CeKIu93SKjkZIMB8GA1UdIwQY MBaAFFmQwVU3Yqya9X35tY2dxQr0CcVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUt YmVmMTAzNGVkYmU1LzEvanJaVDUzb3hXMDBISGtKNG9pNzNkSXFPUmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hOGY4ZTEtZGNlMi00N2VmLTgyNGUtYmVmMTAzNGVkYmU1 LzEvV1pEQlZUZGlySnIxZmZtMWpaM0ZDdlFKeFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwR0aMA0E AgACMAcDBQMqEPmAMA0GCSqGSIb3DQEBCwUAA4IBAQCSId/IHd2CodqN+qF0mRZb abEsMKr8nMndhOR6lAf98dvDesVLnTmX2J8T1nmHzGat6vgqTQJQFkwBGjIRp8fs HALH9B6WFlO83qLYQDsFuBUv6Yld+3STvtyicaIVs44Jf6jJG+q5OCJ7x5cHiWmj ZVMK9mWMrXj+imKyoWKrK9u7NOHV7IXvzU6Lu0AKGG9JQEC4okt7JSF6KHdDFBoi /cRX2fLUYXZLR5IJKniQ7Kg90NL4ex5UEUoBtvTBVAKse0wbSqYzeYTNVnMAcYGA ehMw627bgKs/ji+egQf3v7v11qFibP2aJyIwh5i+pUeYSKo2yZN0bUlsTzODEapr -----END CERTIFICATE-----Generated at Thu Dec 25 11:01:59 2025 by rpki-client