This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/5IDTAUNYBa9GaRCcF0vtCC18VIA.roa File: 5IDTAUNYBa9GaRCcF0vtCC18VIA.roa (raw, json) Hash identifier: QzvywvqILM8YjAB+vkAqO5QMbphjJfyMQHKh8+KGuQA= Subject key identifier: E4:80:D3:01:43:58:05:AF:46:69:10:9C:17:4B:ED:08:2D:7C:54:80 Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48 Certificate serial: 019B7E382F73BD97E52997EF96FC8CF06FFD Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/5IDTAUNYBa9GaRCcF0vtCC18VIA.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34516 IP address blocks: 193.239.214.0/23 maxlen: 23 2001:678:3c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 22:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2f:73:bd:97:e5:29:97:ef:96:fc:8c:f0:6f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e480d301435805af4669109c174bed082d7c5480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:cc:d3:66:c7:f4:b7:94:cd:eb:fe:10:39: b8:41:45:ba:15:1c:de:df:9d:b3:d3:a0:ff:cf:6e: 12:e4:5f:c7:0d:f8:e2:97:54:b1:3a:a1:ef:8f:56: a1:87:1e:ac:b6:50:b6:d5:88:9e:fd:01:70:b8:0d: a0:69:a9:36:9a:f4:eb:85:8d:84:8b:5f:8e:7f:ab: 9c:68:51:c9:5e:dc:aa:d8:c3:11:8f:b7:6f:70:18: 43:4b:1a:1f:3e:a0:f0:e0:5e:bf:29:46:c5:5b:9d: 34:1d:ae:28:a2:33:f6:e0:d9:8e:ea:18:6b:c7:6c: d5:4a:bc:94:24:2a:d1:d2:22:c4:fd:4f:cd:10:2d: 1e:9d:90:c6:0b:1d:1a:b0:2a:fc:49:05:e0:ef:26: 59:2e:e0:d4:27:2d:2e:9b:9d:32:a0:7f:d1:85:19: 25:c7:e7:18:5c:44:4b:34:30:2b:4e:70:4b:77:f3: 4e:3f:04:53:d6:52:6a:73:5f:77:de:b4:d6:4f:b1: 9d:7e:68:62:a3:f6:8b:15:c2:33:14:10:3b:d9:99: 12:52:aa:ed:74:cf:f8:70:f3:84:04:46:21:75:5b: 92:e2:f6:17:11:e0:d1:c3:28:6e:a4:b4:02:3f:5f: 18:af:68:51:cb:c5:66:b6:81:c5:e5:37:d1:b7:50: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:D3:01:43:58:05:AF:46:69:10:9C:17:4B:ED:08:2D:7C:54:80 X509v3 Authority Key Identifier: keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/5IDTAUNYBa9GaRCcF0vtCC18VIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.214.0/23 IPv6: 2001:678:3c8::/48 Signature Algorithm: sha256WithRSAEncryption 80:7d:7e:32:70:da:a1:cd:5a:f7:b0:1a:e9:35:f4:2a:20:c6: 78:b3:b5:58:4c:82:4d:72:0b:b0:11:2d:53:34:cd:78:95:65: 70:24:60:c2:14:3a:31:5e:6e:26:20:52:9c:ed:92:d9:0a:c3: 2b:45:b4:1f:bf:a4:90:9d:0c:40:85:ef:8f:b6:ba:f3:f4:a0: 17:fd:75:e8:4d:af:a7:a2:f6:eb:9f:b1:4a:b0:c5:d3:83:6c: 29:ba:3f:cf:34:2b:84:0b:53:67:18:57:91:3d:24:0c:db:2a: 0e:cc:c5:75:bd:24:aa:fa:ca:5a:88:32:d6:5c:3f:51:48:3a: 3b:b5:74:2a:f1:b8:45:72:c6:10:b7:f0:46:33:ef:d0:68:c4: e7:64:5f:cb:79:fc:ab:59:f0:15:8f:39:e2:05:16:af:10:23: 9d:4e:04:c9:a8:aa:a6:9d:fe:b4:5f:35:f2:af:22:f6:e5:f0: b3:82:a5:1f:37:cf:91:8c:27:39:71:22:aa:41:50:d0:3e:e0: 86:2c:a8:c6:3a:b2:7f:63:36:26:36:3e:c8:16:bb:92:00:ff: bd:5e:70:6c:48:43:30:e0:8f:da:21:e2:53:85:09:b5:fa:b6: 21:19:1a:80:37:62:db:f9:4a:fd:02:2b:16:72:30:85:64:95: 5a:17:be:5c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OC9zvZflKZfvlvyM8G/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2E3NDQwNWViZjdiMjUxY2NmYmJhN2MyYjIwZWMxNWY5 ZDhlNDgwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDgwZDMwMTQzNTgwNWFmNDY2OTEwOWMxNzRiZWQwODJkN2M1NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBvM02bH9LeUzev+EDm4QUW6FRze 352z06D/z24S5F/HDfjil1SxOqHvj1ahhx6stlC21Yie/QFwuA2gaak2mvTrhY2E i1+Of6ucaFHJXtyq2MMRj7dvcBhDSxofPqDw4F6/KUbFW500Ha4oojP24NmO6hhr x2zVSryUJCrR0iLE/U/NEC0enZDGCx0asCr8SQXg7yZZLuDUJy0um50yoH/RhRkl x+cYXERLNDArTnBLd/NOPwRT1lJqc1933rTWT7Gdfmhio/aLFcIzFBA72ZkSUqrt dM/4cPOEBEYhdVuS4vYXEeDRwyhupLQCP18Yr2hRy8VmtoHF5TfRt1B6YQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOSA0wFDWAWvRmkQnBdL7QgtfFSAMB8GA1UdIwQY MBaAFLk6dEBev3slHM+7p8KyDsFfnY5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQt MGExMzRiNjUzNWM0LzEvNUlEVEFVTllCYTlHYVJDY0YwdnRDQzE4VklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82ODJkYTAtZDNlZi00OWYwLWJlYTQtMGExMzRiNjUzNWM0 LzEvdVRwMFFGNl9leVVjejd1bndySU93Vi1kamtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwe/WMA8E AgACMAkDBwAgAQZ4A8gwDQYJKoZIhvcNAQELBQADggEBAIB9fjJw2qHNWvewGuk1 9CogxniztVhMgk1yC7ARLVM0zXiVZXAkYMIUOjFebiYgUpztktkKwytFtB+/pJCd DECF74+2uvP0oBf9dehNr6ei9uufsUqwxdODbCm6P880K4QLU2cYV5E9JAzbKg7M xXW9JKr6ylqIMtZcP1FIOju1dCrxuEVyxhC38EYz79BoxOdkX8t5/KtZ8BWPOeIF Fq8QI51OBMmoqqad/rRfNfKvIvbl8LOCpR83z5GMJzlxIqpBUNA+4IYsqMY6sn9j NiY2PsgWu5IA/71ecGxIQzDgj9oh4lOFCbX6tiEZGoA3Ytv5Sv0CKxZyMIVklVoX vlw= -----END CERTIFICATE-----Generated at Tue Jan 13 06:19:44 2026 by rpki-client