This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/imTf8No1ZINbCYJNVjvMbyKdYDc.roa File: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (raw, json) Hash identifier: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ= Subject key identifier: 8A:64:DF:F0:DA:35:64:83:5B:09:82:4D:56:3B:CC:6F:22:9D:60:37 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135AD73D73D3249A617C62D140BBD5 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/imTf8No1ZINbCYJNVjvMbyKdYDc.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 93.113.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5a:d7:3d:73:d3:24:9a:61:7c:62:d1:40:bb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a64dff0da3564835b09824d563bcc6f229d6037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:31:b3:ab:27:14:2c:3c:4f:a4:8c:3e:99: 32:43:3e:d9:0c:68:4d:bd:37:17:75:b7:2e:3a:44: 26:21:7d:16:c5:ca:4f:d0:52:b6:a7:5e:a2:64:d8: e8:0f:fe:5b:1c:8b:b7:80:2c:33:ca:b0:11:d0:0b: 02:6c:9b:6b:e7:74:4a:6f:f4:ee:de:d8:c8:05:72: 54:90:50:8c:15:cb:47:d1:75:72:8e:52:27:09:29: 3f:97:35:19:d3:f1:1d:a6:1a:38:2e:7d:1a:38:f3: 80:99:ff:f6:8c:26:a9:3a:1f:e4:19:89:41:82:12: 54:9a:2c:53:07:e9:11:b2:e1:79:c8:00:63:c0:80: 1f:f1:17:24:21:2b:7c:a6:d9:00:19:07:d6:92:8d: 1e:dc:be:5a:04:4b:54:fd:45:ce:00:5f:ed:23:90: 5b:f5:21:e4:8f:47:08:67:9e:df:33:b0:2a:04:b0: bd:93:e5:5a:ab:1d:c1:cd:ee:12:f7:57:61:ef:38: 44:3c:3d:ea:bb:d3:8b:8a:38:7e:f2:7a:03:83:76: 59:ad:6e:f6:1e:31:46:0a:8c:e6:a7:4c:c7:67:11: 39:97:3c:fa:43:b3:75:f2:08:08:98:5f:f3:50:06: 1d:69:7a:2f:fd:9a:f0:0b:9f:29:6a:47:1f:e9:5d: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:64:DF:F0:DA:35:64:83:5B:09:82:4D:56:3B:CC:6F:22:9D:60:37 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/imTf8No1ZINbCYJNVjvMbyKdYDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.113.128.0/24 Signature Algorithm: sha256WithRSAEncryption 01:d7:ab:ae:29:dd:41:8c:83:26:7d:f3:90:87:6f:e0:65:03: 7d:77:1a:c0:f9:a8:53:48:2c:ef:7b:97:5e:86:f9:f0:d8:ac: 11:11:b0:43:59:47:1e:9d:6d:9a:58:d6:44:5c:5d:9b:fa:7f: af:23:86:0f:4b:95:35:d3:44:1f:9e:06:db:09:cb:62:68:36: 25:18:a8:4a:8a:12:ab:45:c3:af:9d:64:15:82:08:9b:34:c3: 40:df:18:18:41:0c:88:e1:81:7f:25:55:73:f6:d7:7e:79:d9: 95:75:03:93:dc:c3:ae:a5:cd:24:f0:3d:58:41:55:3a:24:5f: 78:07:c4:da:b2:43:5c:03:21:55:ab:fb:38:1d:ae:b6:bb:d9: 6d:d9:7f:4a:f7:29:9b:37:0e:d3:35:ee:ab:c5:26:43:2a:17: 76:a8:b8:d7:a1:3b:e8:d0:19:be:b9:7c:0f:92:83:97:c9:2e: c6:b9:16:69:1c:85:3a:a7:2c:f5:4a:1b:89:a0:db:06:11:dc: fa:08:c4:9f:c0:41:64:59:8e:a1:30:5a:86:39:15:19:c0:46: 5f:70:fc:bb:2a:b2:cb:1e:5c:45:11:20:ac:0b:7a:b6:6d:7c: 20:95:cc:42:5d:dc:6e:9a:de:8e:7a:0a:e0:1e:4e:4c:96:85: 0c:93:fc:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1rXPXPTJJphfGLRQLvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTY0ZGZmMGRhMzU2NDgzNWIwOTgyNGQ1NjNiY2M2ZjIyOWQ2MDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzwxs6snFCw8T6SMPpkyQz7ZDGhN vTcXdbcuOkQmIX0WxcpP0FK2p16iZNjoD/5bHIu3gCwzyrAR0AsCbJtr53RKb/Tu 3tjIBXJUkFCMFctH0XVyjlInCSk/lzUZ0/Edpho4Ln0aOPOAmf/2jCapOh/kGYlB ghJUmixTB+kRsuF5yABjwIAf8RckISt8ptkAGQfWko0e3L5aBEtU/UXOAF/tI5Bb 9SHkj0cIZ57fM7AqBLC9k+Vaqx3Bze4S91dh7zhEPD3qu9OLijh+8noDg3ZZrW72 HjFGCozmp0zHZxE5lzz6Q7N18ggImF/zUAYdaXov/ZrwC58pakcf6V20EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpk3/DaNWSDWwmCTVY7zG8inWA3MB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvaW1UZjhObzFaSU5iQ1lKTlZqdk1ieUtkWURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXGAMA0G CSqGSIb3DQEBCwUAA4IBAQAB16uuKd1BjIMmffOQh2/gZQN9dxrA+ahTSCzve5de hvnw2KwREbBDWUcenW2aWNZEXF2b+n+vI4YPS5U100QfngbbCctiaDYlGKhKihKr RcOvnWQVggibNMNA3xgYQQyI4YF/JVVz9td+edmVdQOT3MOupc0k8D1YQVU6JF94 B8TaskNcAyFVq/s4Ha62u9lt2X9K9ymbNw7TNe6rxSZDKhd2qLjXoTvo0Bm+uXwP koOXyS7GuRZpHIU6pyz1ShuJoNsGEdz6CMSfwEFkWY6hMFqGORUZwEZfcPy7KrLL HlxFESCsC3q2bXwglcxCXdxumt6OegrgHk5MloUMk/wf -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:27 2026 by rpki-client