This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/Stc8aIR2oBQoHtcw_xrfLAmAUGk.roa File: Stc8aIR2oBQoHtcw_xrfLAmAUGk.roa (raw, json) Hash identifier: 8ZpNKKbRIaY+CLBS4atbnWfFsbmXLX5CBoQCPoi8WBk= Subject key identifier: 4A:D7:3C:68:84:76:A0:14:28:1E:D7:30:FF:1A:DF:2C:09:80:50:69 Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Certificate serial: 019B7A5B56DDB4B231FED037ECC7ABFCE40E Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/Stc8aIR2oBQoHtcw_xrfLAmAUGk.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44947 IP address blocks: 185.93.89.0/24 maxlen: 24 2a13:9dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:56:dd:b4:b2:31:fe:d0:37:ec:c7:ab:fc:e4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ad73c688476a014281ed730ff1adf2c09805069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:83:d5:c7:d4:1f:9d:28:a7:12:26:0e:69: 27:de:bf:3f:0e:d4:b9:45:4e:82:3d:fb:af:77:b6: 83:f7:68:d8:d6:02:4c:72:74:73:20:20:09:40:85: d4:28:74:93:c7:42:3a:a7:94:d4:b0:ea:bc:ff:f2: 4a:cb:e7:fa:23:9e:0d:b7:a6:e3:09:dc:da:4a:25: f5:ab:66:cc:9e:be:14:34:ea:61:75:fa:72:66:28: 77:4f:a3:9f:2b:ec:f7:4a:8e:b9:d1:ce:48:ac:b7: 62:88:f7:eb:6a:a2:c8:9d:1c:90:c7:18:28:3a:83: 36:ef:9f:82:83:1b:a4:90:45:90:54:93:1c:86:ca: f7:40:c4:79:06:60:1a:f6:7f:65:4e:06:5f:28:12: 5f:63:16:8d:d4:64:27:2c:6c:cd:ba:d4:6e:69:63: 99:32:dc:af:40:e0:1b:40:b4:8d:c0:d2:08:5f:4e: 18:fd:36:3f:0e:dd:b5:c9:fb:17:86:be:c6:de:fa: 7d:3e:f0:37:63:1b:e9:68:d0:ff:4d:9a:d7:3a:41: 3d:6b:6d:6b:b9:81:2b:49:e8:76:92:9f:0d:f7:8f: b7:3a:ee:87:07:8f:37:13:57:d9:77:99:a3:e8:b8: 5c:0c:9d:1c:08:84:43:e1:91:19:0f:28:d6:9e:12: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:3C:68:84:76:A0:14:28:1E:D7:30:FF:1A:DF:2C:09:80:50:69 X509v3 Authority Key Identifier: keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/Stc8aIR2oBQoHtcw_xrfLAmAUGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.89.0/24 IPv6: 2a13:9dc0::/29 Signature Algorithm: sha256WithRSAEncryption 67:ef:f7:ce:f9:8f:c2:69:97:2f:a2:2f:e1:27:98:31:fd:9c: 8a:74:75:2f:c8:4b:c3:05:2e:21:f5:1a:10:87:fb:45:e5:da: 9e:a2:8a:b0:8e:51:0d:12:1c:41:5b:bf:84:88:89:2b:73:33: 49:0d:3a:fe:46:37:f3:ca:e3:dc:9c:61:61:3a:df:ca:e7:d8: c1:af:65:3d:68:17:43:23:97:38:0a:e3:0d:51:14:57:4b:25: 0f:49:b1:6b:d3:82:e9:f5:5e:13:e0:d5:59:24:34:0b:53:8e: 4f:4f:b9:cc:bc:24:e5:51:4b:23:1f:90:d2:40:b1:24:06:52: cd:2c:b3:f7:7f:59:69:e8:ea:06:75:48:03:8a:0c:cc:ff:50: f2:40:20:a6:d0:e4:dc:fa:7e:ae:ad:2c:b7:da:f1:95:0f:54: f3:05:b0:d3:38:e8:bc:27:a5:2e:69:6a:37:10:36:85:21:d2: 72:b1:1e:dd:0c:fe:7a:46:c5:01:dd:c1:73:08:ae:be:c4:1e: 7b:72:f3:9e:c7:16:7f:8f:92:fb:78:d4:20:9d:e6:de:0f:c4: c8:ac:aa:99:ed:31:13:a3:dc:23:82:6c:0a:c8:52:98:16:ba: ce:46:41:b5:36:96:9e:96:e0:c2:9b:c4:06:6e:97:1b:e4:e2: 27:57:5e:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W1bdtLIx/tA37Mer/OQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDczZmZjM2YzN2M0ZmVjNGJkMzVhZDFjNTk1Y2QwNTZi YWVjZmQwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQ3M2M2ODg0NzZhMDE0MjgxZWQ3MzBmZjFhZGYyYzA5ODA1MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpuD1cfUH50opxImDmkn3r8/DtS5 RU6CPfuvd7aD92jY1gJMcnRzICAJQIXUKHSTx0I6p5TUsOq8//JKy+f6I54Nt6bj CdzaSiX1q2bMnr4UNOphdfpyZih3T6OfK+z3So650c5IrLdiiPfraqLInRyQxxgo OoM275+CgxukkEWQVJMchsr3QMR5BmAa9n9lTgZfKBJfYxaN1GQnLGzNutRuaWOZ MtyvQOAbQLSNwNIIX04Y/TY/Dt21yfsXhr7G3vp9PvA3YxvpaND/TZrXOkE9a21r uYErSeh2kp8N94+3Ou6HB483E1fZd5mj6LhcDJ0cCIRD4ZEZDyjWnhKmDwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFErXPGiEdqAUKB7XMP8a3ywJgFBpMB8GA1UdIwQY MBaAFOLXP/w/N8T+xL01rRxZXNBWuuz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUt YWEwYzRkYzAzMjIyLzEvU3RjOGFJUjJvQlFvSHRjd194cmZMQW1BVUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUtYWEwYzRkYzAzMjIy LzEvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuV1ZMA0E AgACMAcDBQMqE53AMA0GCSqGSIb3DQEBCwUAA4IBAQBn7/fO+Y/CaZcvoi/hJ5gx /ZyKdHUvyEvDBS4h9RoQh/tF5dqeooqwjlENEhxBW7+EiIkrczNJDTr+RjfzyuPc nGFhOt/K59jBr2U9aBdDI5c4CuMNURRXSyUPSbFr04Lp9V4T4NVZJDQLU45PT7nM vCTlUUsjH5DSQLEkBlLNLLP3f1lp6OoGdUgDigzM/1DyQCCm0OTc+n6urSy32vGV D1TzBbDTOOi8J6UuaWo3EDaFIdJysR7dDP56RsUB3cFzCK6+xB57cvOexxZ/j5L7 eNQgnebeD8TIrKqZ7TETo9wjgmwKyFKYFrrORkG1NpaeluDCm8QGbpcb5OInV15K -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:01 2026 by rpki-client