This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/19shtj0_KCo_k58mEzL-Sk6mRGQ.roa File: 19shtj0_KCo_k58mEzL-Sk6mRGQ.roa (raw, json) Hash identifier: xuOwikXImEC2pDedtY4wQuROMk53ZN/s/drSCprgutE= Subject key identifier: D7:DB:21:B6:3D:3F:28:2A:3F:93:9F:26:13:32:FE:4A:4E:A6:44:64 Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf Certificate serial: 019B8D16C2ED1428482C68D12727EF8A54E8 Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/19shtj0_KCo_k58mEzL-Sk6mRGQ.roa Signing time: Mon 05 Jan 2026 07:37:17 +0000 ROA not before: Mon 05 Jan 2026 07:37:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213200 IP address blocks: 176.120.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:16:c2:ed:14:28:48:2c:68:d1:27:27:ef:8a:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf Validity Not Before: Jan 5 07:37:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7db21b63d3f282a3f939f261332fe4a4ea64464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:21:40:fa:f4:a8:98:a8:ea:f5:a0:60:3d: 05:14:0c:5e:3c:69:30:aa:65:80:03:8e:9c:7d:d8: 72:02:7d:c2:2f:fb:2e:75:77:78:9d:54:a5:76:ed: e7:7e:60:79:98:16:68:5f:66:81:b3:ae:26:60:e0: 21:2a:11:04:02:bb:1c:06:eb:51:8d:7d:5b:3b:e5: c7:63:9f:b6:40:28:61:f6:9e:f6:59:be:eb:56:73: 41:f0:0f:36:df:a6:71:d4:55:ba:dc:2a:a1:2d:b7: c4:dc:56:bf:ac:1e:1d:d7:59:9e:c6:cd:cf:29:92: 18:6d:e6:63:dc:99:33:08:35:1a:67:80:4e:c4:dd: 68:40:14:58:cf:24:60:e1:c2:09:6d:8f:04:3d:b8: e4:91:15:96:32:1f:ad:4a:ac:e7:2e:90:92:1f:18: b9:c8:71:ca:9c:dc:72:cf:00:e0:15:43:26:a1:8b: 3a:22:b1:0f:61:01:9b:46:83:ae:20:82:5f:8a:2d: 7c:30:58:f8:7e:05:51:c8:65:3a:2a:5f:db:f5:08: a5:80:44:ff:71:e1:3d:bf:3b:b6:a6:51:56:9f:a9: 8c:db:f2:20:3f:fe:f8:2c:6f:1a:13:ff:36:ab:7f: 81:72:fe:dd:c9:5e:68:95:a2:d6:cd:e7:9e:a5:63: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DB:21:B6:3D:3F:28:2A:3F:93:9F:26:13:32:FE:4A:4E:A6:44:64 X509v3 Authority Key Identifier: keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/19shtj0_KCo_k58mEzL-Sk6mRGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.17.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c3:4a:05:ab:e7:23:25:86:c5:c5:fd:d8:b9:67:b8:f5:03: 8d:4a:4d:2c:f7:17:00:7b:8b:67:39:31:ac:61:c7:53:0d:25: 4c:f9:c2:d3:0d:63:fc:c1:8c:b0:8c:2f:45:26:3f:a4:b7:68: 4e:44:5c:8d:91:fb:e4:a5:a0:43:ef:68:24:4a:a1:61:02:d1: 3a:aa:f8:9a:8e:22:70:29:15:fe:b2:99:84:1a:bd:e8:04:81: c0:0d:f6:80:8b:84:96:5a:76:38:26:b8:1b:4e:f4:8f:8d:ce: fc:97:8b:3d:57:8d:34:ac:1c:0a:07:db:24:c0:bd:c1:09:63: fb:a5:48:ef:e8:37:ae:eb:b2:0a:08:51:55:5a:1d:0c:e5:e6: 69:00:47:f4:c7:12:cb:79:7d:fb:cd:85:f0:f0:f6:35:7f:f6: a1:09:ba:4c:d8:88:a5:58:77:f2:9a:64:d9:13:0d:0d:34:76: ca:c6:f6:e6:20:e8:d6:81:ab:10:63:3a:bd:96:fe:1d:53:09: fd:ca:f9:32:79:a3:ab:a4:4c:10:f1:70:9c:cd:db:a5:e5:dd: fe:4c:ff:4b:76:ab:85:7e:21:b7:26:d6:0f:23:cf:c1:72:a8: 5e:21:31:e8:60:cd:c3:e5:77:93:61:af:20:ae:c2:ef:86:94: 2f:d9:7f:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNFsLtFChILGjRJyfvilToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5Mzk1NDBmZDE2YjYzMzUwMWZiZjc0NDFhNzQ2ZmM1NmY5 ZjU5YmYwHhcNMjYwMTA1MDczNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2RiMjFiNjNkM2YyODJhM2Y5MzlmMjYxMzMyZmU0YTRlYTY0NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaUhQPr0qJio6vWgYD0FFAxePGkw qmWAA46cfdhyAn3CL/sudXd4nVSldu3nfmB5mBZoX2aBs64mYOAhKhEEArscButR jX1bO+XHY5+2QChh9p72Wb7rVnNB8A8236Zx1FW63CqhLbfE3Fa/rB4d11mexs3P KZIYbeZj3JkzCDUaZ4BOxN1oQBRYzyRg4cIJbY8EPbjkkRWWMh+tSqznLpCSHxi5 yHHKnNxyzwDgFUMmoYs6IrEPYQGbRoOuIIJfii18MFj4fgVRyGU6Kl/b9QilgET/ ceE9vzu2plFWn6mM2/IgP/74LG8aE/82q3+Bcv7dyV5olaLWzeeepWNTdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfbIbY9PygqP5OfJhMy/kpOpkRkMB8GA1UdIwQY MBaAFOk5VA/Ra2M1Afv3RBp0b8Vvn1m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQt OWY1MmM3MzBhY2RmLzEvMTlzaHRqMF9LQ29fazU4bUV6TC1TazZtUkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81YWY0Y2UtMGVlZS00MTgyLTkwOTQtOWY1MmM3MzBhY2Rm LzEvNlRsVUQ5RnJZelVCLV9kRUduUnZ4Vy1mV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHgRMA0G CSqGSIb3DQEBCwUAA4IBAQAXw0oFq+cjJYbFxf3YuWe49QONSk0s9xcAe4tnOTGs YcdTDSVM+cLTDWP8wYywjC9FJj+kt2hORFyNkfvkpaBD72gkSqFhAtE6qviajiJw KRX+spmEGr3oBIHADfaAi4SWWnY4JrgbTvSPjc78l4s9V400rBwKB9skwL3BCWP7 pUjv6Deu67IKCFFVWh0M5eZpAEf0xxLLeX37zYXw8PY1f/ahCbpM2IilWHfymmTZ Ew0NNHbKxvbmIOjWgasQYzq9lv4dUwn9yvkyeaOrpEwQ8XCczdul5d3+TP9LdquF fiG3JtYPI8/BcqheITHoYM3D5XeTYa8grsLvhpQv2X8X -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:04 2026 by rpki-client