This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/8AFAw8J8BylZNxkuCYZxLwFMDu4.roa File: 8AFAw8J8BylZNxkuCYZxLwFMDu4.roa (raw, json) Hash identifier: rqqV4vNuT7ox7Umt3jz1Rj0aoR+gnpbzztReONXP05Y= Subject key identifier: F0:01:40:C3:C2:7C:07:29:59:37:19:2E:09:86:71:2F:01:4C:0E:EE Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394 Certificate serial: 019B7C1349C63E6DE48CEEAC84D1E9912658 Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/8AFAw8J8BylZNxkuCYZxLwFMDu4.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24806 IP address blocks: 193.105.157.0/24 maxlen: 32 193.105.158.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:49:c6:3e:6d:e4:8c:ee:ac:84:d1:e9:91:26:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f00140c3c27c07295937192e0986712f014c0eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:d3:1d:21:36:fb:c9:91:48:51:ef:74:ad: 8a:df:46:58:d5:9b:86:dc:18:8a:14:2f:72:1d:98: 32:e4:9f:ad:46:6d:fc:82:07:21:e1:44:52:dc:06: 69:2a:a7:5b:47:eb:0e:6c:ef:3c:da:86:7f:f8:97: 7a:0b:01:ea:1c:f7:22:2b:9d:bf:04:6a:b9:d8:82: c8:fc:47:47:ba:e6:ec:c3:0c:20:a3:d8:26:18:bf: bc:87:3d:69:82:51:08:bd:cc:a4:d0:3b:76:5e:3b: b6:0f:8c:20:02:5d:6e:43:bc:3e:b7:94:c9:b7:be: 31:9b:8a:2f:e2:dc:0a:e0:59:23:54:46:32:25:01: 43:a2:27:16:8c:4f:35:e8:cb:14:18:0a:b0:69:94: a0:fe:7a:09:7a:78:f7:a5:c1:2d:f1:02:86:8b:fb: 7a:5d:ac:75:36:ec:65:5c:f7:94:a3:fc:82:97:a8: 3d:cb:b8:fa:87:a6:8a:6c:46:61:93:f9:38:67:f9: 75:90:48:e1:96:55:12:6b:e7:bc:f8:9f:36:f0:44: 8c:9c:83:6f:38:3b:01:8f:a3:5f:9f:0d:e5:6d:95: 03:a4:14:67:c7:7a:3e:5d:24:f5:76:0f:90:b5:1c: eb:92:c2:42:2a:fc:61:25:a8:36:00:9c:d3:51:12: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:01:40:C3:C2:7C:07:29:59:37:19:2E:09:86:71:2F:01:4C:0E:EE X509v3 Authority Key Identifier: keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/8AFAw8J8BylZNxkuCYZxLwFMDu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.157.0-193.105.159.255 Signature Algorithm: sha256WithRSAEncryption a6:f4:6f:3c:46:00:b0:7b:c8:ed:2c:ec:54:d5:81:bf:57:02: 73:39:f6:d9:5a:4f:b4:4d:44:ea:6c:af:be:2c:a4:ff:da:be: 2b:8a:d4:62:69:68:f3:cc:12:86:b6:e4:a3:2e:da:0f:72:3c: a0:b0:2b:19:a0:fa:0a:81:6d:82:d8:4a:4a:2f:b0:b3:ff:08: 35:fb:bc:f0:7d:b8:c2:8e:36:45:c0:2f:e8:bf:9c:af:33:35: d5:f7:4f:95:e2:76:e6:1f:37:ef:23:ff:2c:30:10:0c:6a:95: 65:20:bb:f0:99:2a:f1:dc:dc:a0:f4:68:c4:16:46:5d:98:fe: 40:b7:33:7d:64:fe:04:f4:90:2e:56:34:17:0a:38:da:a0:77: da:c8:d0:e7:25:14:38:25:9a:1a:be:60:f5:f4:e2:1b:2d:dc: 96:c8:a7:e2:44:76:b2:3c:8d:f3:e4:93:f8:2b:bc:8b:ae:da: ff:ba:a8:68:4c:16:2c:8b:ab:51:17:4d:ff:98:56:2f:c9:ce: ca:b1:92:81:f2:02:61:24:0b:5f:b9:12:cd:cc:e4:bb:3a:b2: c3:5f:7a:ba:2e:a1:1f:0d:8e:83:d6:8c:01:c7:e4:56:f7:11: a8:06:c8:78:00:3b:2e:40:d0:28:9d:3a:72:fe:e6:8d:0e:61: 68:3a:cd:a5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8E0nGPm3kjO6shNHpkSZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDI2Nzg2MGQzYTQwM2IwMGUxYTYxYzU0MzRhY2ZmNmVi OTczOTQwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDAxNDBjM2MyN2MwNzI5NTkzNzE5MmUwOTg2NzEyZjAxNGMwZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG3THSE2+8mRSFHvdK2K30ZY1ZuG 3BiKFC9yHZgy5J+tRm38ggch4URS3AZpKqdbR+sObO882oZ/+Jd6CwHqHPciK52/ BGq52ILI/EdHuubswwwgo9gmGL+8hz1pglEIvcyk0Dt2Xju2D4wgAl1uQ7w+t5TJ t74xm4ov4twK4FkjVEYyJQFDoicWjE816MsUGAqwaZSg/noJenj3pcEt8QKGi/t6 Xax1NuxlXPeUo/yCl6g9y7j6h6aKbEZhk/k4Z/l1kEjhllUSa+e8+J828ESMnINv ODsBj6Nfnw3lbZUDpBRnx3o+XST1dg+QtRzrksJCKvxhJag2AJzTURInrQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPABQMPCfAcpWTcZLgmGcS8BTA7uMB8GA1UdIwQY MBaAFBDSZ4YNOkA7AOGmHFQ0rP9uuXOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEt MDM0YmNmNGViZGNiLzEvOEFGQXc4SjhCeWxaTnhrdUNZWnhMd0ZNRHU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEtMDM0YmNmNGViZGNi LzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBaZ0D BAXBaYAwDQYJKoZIhvcNAQELBQADggEBAKb0bzxGALB7yO0s7FTVgb9XAnM59tla T7RNROpsr74spP/aviuK1GJpaPPMEoa25KMu2g9yPKCwKxmg+gqBbYLYSkovsLP/ CDX7vPB9uMKONkXAL+i/nK8zNdX3T5XiduYfN+8j/ywwEAxqlWUgu/CZKvHc3KD0 aMQWRl2Y/kC3M31k/gT0kC5WNBcKONqgd9rI0OclFDglmhq+YPX04hst3JbIp+JE drI8jfPkk/grvIuu2v+6qGhMFiyLq1EXTf+YVi/JzsqxkoHyAmEkC1+5Es3M5Ls6 ssNferouoR8NjoPWjAHH5Fb3EagGyHgAOy5A0CidOnL+5o0OYWg6zaU= -----END CERTIFICATE-----Generated at Sat Jan 3 06:50:21 2026 by rpki-client