This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa File: p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa (raw, json) Hash identifier: oRePnKuJGEJuRAGyqz3spXqznhrS2YOXLr+XXfpc3VY= Subject key identifier: A7:93:AD:06:E2:7F:1F:B0:2F:7D:49:98:A7:43:5B:CB:9C:3A:05:27 Certificate issuer: /CN=2880474a96161dde2942cfb9f1856c2ffc880904 Certificate serial: 019B78354D37AD3A8A7D49B406D5DA7CD1D9 Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206389 IP address blocks: 193.3.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4d:37:ad:3a:8a:7d:49:b4:06:d5:da:7c:d1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a793ad06e27f1fb02f7d4998a7435bcb9c3a0527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:fc:e1:cc:8e:fa:ec:db:8a:5f:ad:1f:ff: 60:cc:5e:9d:d6:2c:d7:4d:bc:78:28:91:1c:ad:8c: dd:2e:a2:33:49:49:60:61:c5:fa:b6:28:72:ef:ac: 14:c0:e3:f9:cf:67:c4:52:28:20:00:7f:5d:05:f8: b9:2b:df:7a:41:3c:40:ef:84:b4:6f:7e:33:9c:b7: a7:f8:4f:e3:2e:39:00:0a:2f:54:5d:f7:13:63:80: a3:34:58:41:74:b8:e9:74:fa:8e:38:f1:7d:b3:81: 99:1b:8e:01:f4:da:1e:00:04:17:37:61:6c:f1:92: fa:a2:82:35:0e:b7:2f:a7:c8:76:f2:c3:93:9c:05: f0:fb:b3:92:64:0c:ca:5f:9d:ec:b1:f1:62:cb:a0: e0:18:68:b2:5a:40:de:1b:9e:80:ff:c0:c5:57:26: c9:76:1e:13:b5:a6:fe:d9:8a:79:86:8f:3a:79:2a: 90:e0:91:f4:35:26:ca:cf:74:4e:14:45:83:0a:64: da:d2:da:13:70:97:51:b5:3e:1a:1d:10:f4:d3:7a: fe:55:e7:e4:d4:71:17:34:8d:68:ce:37:3c:0a:c1: 3a:45:10:97:4c:25:c9:72:94:e9:0a:ea:dd:07:3b: c6:08:c4:4f:89:ac:9a:62:2b:da:45:54:22:77:8d: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:93:AD:06:E2:7F:1F:B0:2F:7D:49:98:A7:43:5B:CB:9C:3A:05:27 X509v3 Authority Key Identifier: keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.27.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:26:34:44:6c:42:1a:c7:9d:3d:0f:4d:e7:27:b7:5f:b1:02: 36:c9:08:c0:ca:05:2e:4a:2e:ad:87:74:66:04:4d:7d:e0:e4: 6d:d6:7a:d2:15:86:5f:bd:c3:c6:f0:1a:61:7f:8c:7f:f6:ac: 94:71:2e:7a:cf:70:e2:5a:aa:e1:4d:25:84:48:cd:d9:93:78: 41:7e:eb:08:50:2e:a4:06:49:63:e9:00:d9:0c:91:4d:d4:0c: 25:df:90:40:bf:97:82:07:83:e5:21:d4:e0:21:5c:db:8b:c1: 36:1d:4d:0d:cb:7f:e2:13:04:ab:b9:c8:33:0b:f7:80:32:b9: 0d:17:c6:bb:7a:8e:e3:66:bd:00:5a:a1:f2:a5:c9:9a:7f:4a: 23:c4:26:47:5b:7d:c5:b0:d1:f6:97:f3:e5:51:ff:9f:eb:38: 6a:96:96:46:b3:1e:9a:77:dd:cc:5e:43:9f:72:82:d6:47:06: dd:c0:ec:12:e6:e7:ca:27:c6:a5:c4:a7:d3:4b:55:1c:eb:4e: f7:51:54:99:4c:70:e2:68:a8:f6:f0:f1:09:27:15:7b:ca:40: d3:ec:5c:2e:f7:cf:c0:84:f7:f9:90:ba:0a:8a:42:c0:fb:04: 1f:68:ee:21:7d:43:45:0f:7b:a6:a0:1d:ad:a3:ad:82:63:8e: a0:16:c6:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU03rTqKfUm0BtXafNHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODA0NzRhOTYxNjFkZGUyOTQyY2ZiOWYxODU2YzJmZmM4 ODA5MDQwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzkzYWQwNmUyN2YxZmIwMmY3ZDQ5OThhNzQzNWJjYjljM2EwNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxP84cyO+uzbil+tH/9gzF6d1izX Tbx4KJEcrYzdLqIzSUlgYcX6tihy76wUwOP5z2fEUiggAH9dBfi5K996QTxA74S0 b34znLen+E/jLjkACi9UXfcTY4CjNFhBdLjpdPqOOPF9s4GZG44B9NoeAAQXN2Fs 8ZL6ooI1Drcvp8h28sOTnAXw+7OSZAzKX53ssfFiy6DgGGiyWkDeG56A/8DFVybJ dh4Ttab+2Yp5ho86eSqQ4JH0NSbKz3ROFEWDCmTa0toTcJdRtT4aHRD003r+Vefk 1HEXNI1ozjc8CsE6RRCXTCXJcpTpCurdBzvGCMRPiayaYivaRVQid40bQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKeTrQbifx+wL31JmKdDW8ucOgUnMB8GA1UdIwQY MBaAFCiAR0qWFh3eKULPufGFbC/8iAkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lCSFNwWVdIZDRwUXMtNThZVnNMX3lJQ1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82OTNjYzMtYWI3NS00NGM2LWE3NDAt NzQ2MWE1NmNlOTVlLzEvcDVPdEJ1Sl9IN0F2ZlVtWXAwTmJ5NXc2QlNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82OTNjYzMtYWI3NS00NGM2LWE3NDAtNzQ2MWE1NmNlOTVl LzEvS0lCSFNwWVdIZDRwUXMtNThZVnNMX3lJQ1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMbMA0G CSqGSIb3DQEBCwUAA4IBAQB/JjREbEIax509D03nJ7dfsQI2yQjAygUuSi6th3Rm BE194ORt1nrSFYZfvcPG8Bphf4x/9qyUcS56z3DiWqrhTSWESM3Zk3hBfusIUC6k Bklj6QDZDJFN1Awl35BAv5eCB4PlIdTgIVzbi8E2HU0Ny3/iEwSrucgzC/eAMrkN F8a7eo7jZr0AWqHypcmaf0ojxCZHW33FsNH2l/PlUf+f6zhqlpZGsx6ad93MXkOf coLWRwbdwOwS5ufKJ8alxKfTS1Uc6073UVSZTHDiaKj28PEJJxV7ykDT7Fwu98/A hPf5kLoKikLA+wQfaO4hfUNFD3umoB2to62CY46gFsZk -----END CERTIFICATE-----Generated at Fri Jan 2 01:50:59 2026 by rpki-client