This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa File: aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa (raw, json) Hash identifier: ynx5tfnKZJH99nxW03XgpU3cYgXZihD5CZxo4tNLmhI= Subject key identifier: 68:24:44:DE:02:F2:A8:A7:67:BC:0F:A3:FB:66:8B:72:E0:A3:47:03 Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4 Certificate serial: 019B77591078878A9AA73022E768DD193AB2 Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212373 IP address blocks: 193.163.168.0/24 maxlen: 24 2a10:8ac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:10:78:87:8a:9a:a7:30:22:e7:68:dd:19:3a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=682444de02f2a8a767bc0fa3fb668b72e0a34703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:5d:fb:46:d4:3e:8d:d5:26:80:79:1f:68: 22:34:e0:8d:d1:c6:5c:a3:89:0f:a4:f0:72:24:f9: 61:0e:79:0f:c6:38:37:48:af:5a:50:a1:60:f1:a3: 7c:72:14:54:be:92:71:b9:cb:29:d7:99:29:9b:de: ac:33:9c:4d:71:9d:84:8e:46:61:f0:bf:7d:2a:94: 69:50:f8:29:57:41:9b:c1:c3:b7:52:9c:ff:5d:4b: 34:41:be:7a:1e:92:f5:08:f5:a1:f9:75:21:98:ab: 2d:9f:37:e2:c0:5a:93:dd:ad:c6:b9:f0:dd:f3:14: c5:7c:1a:fa:2d:ce:d4:61:e1:d5:d2:36:79:b9:7a: 7e:5a:1c:6a:75:74:5e:54:fc:f2:28:ed:dd:45:05: c2:d9:b9:ea:e4:9a:71:9f:1e:9c:87:59:c0:32:5f: 06:51:e1:1a:f2:82:9e:0f:76:56:d3:f4:ca:d3:e7: 26:54:66:0a:2f:d1:83:35:09:54:e4:04:79:b2:54: 23:9c:bd:2d:4d:84:56:15:72:9d:b7:37:32:2c:e6: 72:55:d1:d5:6b:ef:23:8f:8d:4e:29:fb:67:57:70: 23:7d:03:fe:11:ae:da:5a:b2:fa:ad:75:ee:98:ec: 44:1d:5b:ae:c0:70:e7:c7:1e:55:cc:98:1e:f5:65: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:24:44:DE:02:F2:A8:A7:67:BC:0F:A3:FB:66:8B:72:E0:A3:47:03 X509v3 Authority Key Identifier: keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.168.0/24 IPv6: 2a10:8ac0::/29 Signature Algorithm: sha256WithRSAEncryption aa:07:30:b4:1e:28:50:f2:49:1b:a6:87:d1:cb:ca:f6:bf:4a: 4f:33:5b:59:21:c4:d2:91:1b:9e:dd:4f:a1:64:52:03:5f:a6: 11:4b:3c:6b:09:ae:71:3a:20:af:a5:0a:da:97:21:e5:ab:6a: ab:e1:3b:55:56:cb:f3:51:a1:00:29:a9:bf:ee:fc:f4:93:db: b5:36:d6:ba:d5:f2:8f:ae:9b:10:fd:14:27:a1:f9:fe:bb:06: 01:98:9d:79:b5:65:be:b8:94:bf:0a:33:d0:d1:ee:b0:27:ca: f6:9a:da:96:00:88:d2:63:e7:e3:20:4a:bd:f4:ae:29:6a:56: 69:aa:2a:5f:86:98:98:6b:14:fc:8f:0a:1a:87:fd:d4:b8:17: 37:ae:19:e1:51:dc:7c:4c:d2:0f:ba:7c:1b:7f:b8:7c:1f:3c: b0:66:39:1a:79:a6:ba:b8:9f:3f:a9:89:0d:9f:3f:23:46:55: 56:fc:90:0d:cc:f7:e1:6b:7a:28:9d:29:e5:79:5c:e6:c5:e2: b3:a8:d0:c2:c5:39:4a:27:ca:e5:e8:3b:31:3a:5d:77:44:87: 24:e1:4a:18:97:bb:6f:15:ec:a5:d2:8f:1e:f8:c9:ad:53:9c: a5:1d:43:75:1e:c1:e2:65:71:3f:da:65:32:9c:e2:db:3a:a5: a9:b8:27:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WRB4h4qapzAi52jdGTqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNmY2MzkxMTM5NjM4Y2VmODMxODExNDEzMmNjZjI2ZTE2 N2QzYTQwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODI0NDRkZTAyZjJhOGE3NjdiYzBmYTNmYjY2OGI3MmUwYTM0NzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhVd+0bUPo3VJoB5H2giNOCN0cZc o4kPpPByJPlhDnkPxjg3SK9aUKFg8aN8chRUvpJxucsp15kpm96sM5xNcZ2EjkZh 8L99KpRpUPgpV0GbwcO3Upz/XUs0Qb56HpL1CPWh+XUhmKstnzfiwFqT3a3GufDd 8xTFfBr6Lc7UYeHV0jZ5uXp+WhxqdXReVPzyKO3dRQXC2bnq5Jpxnx6ch1nAMl8G UeEa8oKeD3ZW0/TK0+cmVGYKL9GDNQlU5AR5slQjnL0tTYRWFXKdtzcyLOZyVdHV a+8jj41OKftnV3AjfQP+Ea7aWrL6rXXumOxEHVuuwHDnxx5VzJge9WXRcQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGgkRN4C8qinZ7wPo/tmi3Lgo0cDMB8GA1UdIwQY MBaAFGxvY5ETljjO+DGBFBMszybhZ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgt MzRhZDFjODUzNTk5LzEvYUNSRTNnTHlxS2RudkEtai0yYUxjdUNqUndNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgtMzRhZDFjODUzNTk5 LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaOoMA0E AgACMAcDBQMqEIrAMA0GCSqGSIb3DQEBCwUAA4IBAQCqBzC0HihQ8kkbpofRy8r2 v0pPM1tZIcTSkRue3U+hZFIDX6YRSzxrCa5xOiCvpQralyHlq2qr4TtVVsvzUaEA Kam/7vz0k9u1Nta61fKPrpsQ/RQnofn+uwYBmJ15tWW+uJS/CjPQ0e6wJ8r2mtqW AIjSY+fjIEq99K4palZpqipfhpiYaxT8jwoah/3UuBc3rhnhUdx8TNIPunwbf7h8 HzywZjkaeaa6uJ8/qYkNnz8jRlVW/JANzPfha3oonSnleVzmxeKzqNDCxTlKJ8rl 6DsxOl13RIck4UoYl7tvFeyl0o8e+MmtU5ylHUN1HsHiZXE/2mUynOLbOqWpuCc3 -----END CERTIFICATE-----Generated at Thu Jan 1 07:33:23 2026 by rpki-client