This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa File: YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa (raw, json) Hash identifier: Czpsw7Ht+JmwRHsAFUGdIdcpmViWugcfHRbmpORJDMk= Subject key identifier: 60:0C:F0:E2:DE:33:17:81:EB:2B:A0:D0:33:41:E2:E8:E2:67:BF:F7 Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417 Certificate serial: 019B7C802B85352C0D41C8BAC525CE57BF0B Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139659 IP address blocks: 193.134.208.0/22 maxlen: 22 193.134.208.0/24 maxlen: 24 193.134.209.0/24 maxlen: 24 193.134.210.0/24 maxlen: 24 193.134.211.0/24 maxlen: 24 2a0e:df80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:85:35:2c:0d:41:c8:ba:c5:25:ce:57:bf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=600cf0e2de331781eb2ba0d03341e2e8e267bff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:40:16:bb:73:54:2e:f0:ca:da:7c:86:50:84: 55:2f:03:bf:cf:34:5a:22:05:44:1c:43:25:ad:99: 54:ab:65:30:b3:df:5f:b5:e9:43:9e:fc:75:d1:55: 45:d3:ce:be:84:94:81:5b:16:ad:59:65:4e:98:27: 27:d5:e0:32:0b:7b:0f:9b:91:6a:81:1d:de:59:21: ff:30:19:10:c3:82:da:5c:d7:93:ce:1d:f8:ea:e0: 50:9f:5f:28:3f:8d:35:c4:28:b4:91:88:41:a8:3f: 88:ea:31:e1:57:29:3a:1b:5e:be:b2:90:21:8c:4b: c3:7e:6b:bc:bc:10:38:88:1e:16:a9:14:f9:77:04: 29:c3:ce:f2:54:da:1f:48:ea:6a:f4:25:aa:5a:25: ca:61:0c:a6:a4:64:b3:e0:23:79:1c:4e:2a:bd:04: cd:2b:84:56:33:3f:df:e4:0d:22:05:10:25:6a:39: 14:b7:d7:0f:82:b2:ee:01:ed:12:18:97:02:9f:01: 4a:1c:12:cb:d8:79:f3:53:02:d4:14:3b:46:23:08: 56:5c:9d:11:21:56:04:82:90:59:51:f6:30:40:69: fd:2b:c0:33:98:6a:24:27:9d:93:95:b5:46:34:4e: 24:0a:da:c3:40:47:8d:34:6c:2f:44:1b:35:89:8b: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0C:F0:E2:DE:33:17:81:EB:2B:A0:D0:33:41:E2:E8:E2:67:BF:F7 X509v3 Authority Key Identifier: keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/YAzw4t4zF4HrK6DQM0Hi6OJnv_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.208.0/22 IPv6: 2a0e:df80::/29 Signature Algorithm: sha256WithRSAEncryption 42:45:6e:63:8a:ab:9f:ec:55:81:0d:b1:d5:09:87:d7:78:1a: 97:65:71:d8:4d:94:d3:e0:6e:f9:6e:47:d0:01:00:4f:9e:c2: 79:bc:e1:95:14:60:b7:57:31:ed:39:45:53:ae:23:97:44:5b: b8:e4:e3:1f:e1:09:b2:07:86:8d:4b:0a:1d:ba:2b:d6:73:26: 9f:8b:c6:3a:bb:17:ce:85:31:f2:61:17:fa:04:17:ee:ec:f0: 3f:8a:af:61:24:9e:6d:2e:38:f5:12:02:1c:da:5f:36:1f:d0: 8e:11:89:6f:59:19:92:a3:e5:bc:03:62:e4:6e:02:53:31:af: 71:ce:b0:11:e1:58:d4:42:d1:54:87:d6:8c:8f:88:69:69:cf: 1f:ac:03:3b:8b:af:e1:68:ec:e4:d0:3d:9c:5e:d7:37:a2:53: 3d:56:5d:40:95:2c:0f:5a:69:a2:d8:df:92:39:cd:3e:f9:cb: 31:44:cd:27:21:3c:cd:d0:96:f1:58:9d:90:7b:2f:17:46:d4: 62:15:79:57:60:0f:44:da:5d:f7:6b:38:bf:cc:12:7e:60:82: be:18:cb:90:ff:2a:2a:79:06:7d:da:0e:37:13:d3:a3:c6:b0: fa:d5:17:12:c5:54:d5:8d:95:32:9e:89:06:68:48:3b:0d:d6: 8b:b3:fe:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gCuFNSwNQci6xSXOV78LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx YmM0MTcwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDBjZjBlMmRlMzMxNzgxZWIyYmEwZDAzMzQxZTJlOGUyNjdiZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EAWu3NULvDK2nyGUIRVLwO/zzRa IgVEHEMlrZlUq2Uws99ftelDnvx10VVF086+hJSBWxatWWVOmCcn1eAyC3sPm5Fq gR3eWSH/MBkQw4LaXNeTzh346uBQn18oP401xCi0kYhBqD+I6jHhVyk6G16+spAh jEvDfmu8vBA4iB4WqRT5dwQpw87yVNofSOpq9CWqWiXKYQympGSz4CN5HE4qvQTN K4RWMz/f5A0iBRAlajkUt9cPgrLuAe0SGJcCnwFKHBLL2HnzUwLUFDtGIwhWXJ0R IVYEgpBZUfYwQGn9K8AzmGokJ52TlbVGNE4kCtrDQEeNNGwvRBs1iYuguwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGAM8OLeMxeB6yug0DNB4ujiZ7/3MB8GA1UdIwQY MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt YzQ0MmExOGYxZWZjLzEvWUF6dzR0NHpGNEhySzZEUU0wSGk2T0pudl9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwYbQMA0E AgACMAcDBQMqDt+AMA0GCSqGSIb3DQEBCwUAA4IBAQBCRW5jiquf7FWBDbHVCYfX eBqXZXHYTZTT4G75bkfQAQBPnsJ5vOGVFGC3VzHtOUVTriOXRFu45OMf4QmyB4aN SwoduivWcyafi8Y6uxfOhTHyYRf6BBfu7PA/iq9hJJ5tLjj1EgIc2l82H9COEYlv WRmSo+W8A2LkbgJTMa9xzrAR4VjUQtFUh9aMj4hpac8frAM7i6/haOzk0D2cXtc3 olM9Vl1AlSwPWmmi2N+SOc0++csxRM0nITzN0JbxWJ2Qey8XRtRiFXlXYA9E2l33 azi/zBJ+YIK+GMuQ/yoqeQZ92g43E9OjxrD61RcSxVTVjZUynokGaEg7DdaLs/68 -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:19 2026 by rpki-client